last executing test programs: 586.19123ms ago: executing program 4 (id=6010): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="f656e85fccd121d89845ecac5bfb14553fbf02ab34a64a66e2360a375fece5d24bf81ed5d666b761b4a0ffc02395e61cfd03e0390a4e8d87e498a69db7a1925dcda86345114f39362ddc5afb314c2e5e50a7367a51001e160368e81f750b0361f5c67255796f5372335c682c065f6cdda7714bdf443d6a05f37238c6ed01518c31a5208afb8a93d4d952d49d6e9872cd7c93c034698fdc4e6cdedb91f3ff8a6b63143fd55411d37c334bf07069a15b2fe49cc84a8b0d8d0b6b9670796c0829f30129528d416ca19cc8e273ecb6fcc3032b76e5a81af51174a98aab5bc43bab30b03a4e1c0c55419109c8d490c6"], 0x1, 0x1c9, &(0x7f0000000780)="$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") 491.885709ms ago: executing program 3 (id=6021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000080)={0x11, 0xc, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @generic={0x8, 0x57, "4ff0527af0acf8a993bb23ad51ea6f0b472ad2ca12108db75675f75b9056d3d6972782f8ff3962ec6009345ba4674d958132528e6595019fd4ee88ed0a27f116476e303fb19b0fec01ab0da3f65d80c48a03253841d07e"}]}, 0x68) 476.157671ms ago: executing program 3 (id=6023): r0 = syz_mount_image$ext4(&(0x7f0000005900)='ext4\x00', &(0x7f0000005880)='./file1\x00', 0x1400c, &(0x7f00000058c0), 0x3, 0x494, &(0x7f0000005940)="$eJzs3M9rHFUcAPDvTLKJMdXEWn+1/ohWsYgmTVu1iAcVBQ8VBD3ocUliqU2rNBFsCZh6qCcRwbt49F/wpBcRT4JXvUuhSC+2IrgyuzPJbjLZJM1utnY/H9j2vZ03+9533rzdN/N2E0Dfmsj+SSL2RMRvETHWyLYWmGj8d+3q0sz1q0szSdRqb/2Z1Mv9dXVppiha7DfanIkkDpTUu3D+wunq/PzcuTw/tXjmw6mF8xeeOXWmenLu5NzZI8ePHzs6/fxzR57tSJyjkeap19/98o0Tn7fEvyaODplot/GJWq3D1fXWHU3pwR62g+0ZyPurUh//YzHQ1Htj8dqnK5lPetRAoGtqtVptdOPNyzXgFpZEa96Qh35RfNAX179l18EvNaUrHZ+B9NaVlxsXQFnc1/JHY8vgv8XBqay5vu2kiYh4Z/nvr7NHdOc+BABAi++z+c/T2RRoaSabe6zOP9K4t6ncnfna0HhE3BUReyPi7jgb+yLinoh62fsi4v5t1t+0SFKfZq6f/6SXbzi4Lcjmfy/ma1ut879ivSjGB+q5841MVJL3Ts3PHc6PyaGoDGf56TZ1/PDqr19stK15/pc9svqLuWDejsuDw637zFYXqzcecasrFyP2D5bFn6ysBCQR8UBE7C97gXTzOk499e2DG23bPP42OrDQVPsm4slG/y/HmvgLSfv1yanbYn7u8FRxVqz38y+X3tyo/h3F3wFZ/99eev6vxD+eNK/XLmy/jku/f7bhNc1EcUG5jfN/ubpYHUrerqeH8uc+ri4unpuOGEpOXKvl71Mrzx9Z3bfIF+Wz+A8dLB//e2P1SByIiOwkfigiHo6IR/K+ezQiHouIg23i/+mVx99f+9xIEf9N0P+z2+r/1cRQtD6TlpTJEgOnf/yupdLx1WQe//Xy+Ifz/j9Wzx3K99nK+9/6VpQnOnEMAQAA4GaX1r8DmKSTeXpPpOnkZOM7/PtWl/s/Ojvb+I3AeFTS4k7XWNP90On8sr6Rv5i9an3HYvvRSOv3jb8aGKnnJ2c+mJ/taeTAaH3Mrx//mT8Get06oOvK19H8jAv6gZEOfSttO/5vtW/8Ay3Wjf+2Y364q20BdlfJ5/9IL9oB7L6y+b+/9wP9Yc34b7vs98+t9XfroO+5/w/9y/iH/mX8Q19aGInNfyTfNlG80g3uvlliLGKnLexNIio3RTO6loh0K4Vf2EkVQzs4tdKI2JWjUXx4Nm1Kujccdi+xhTcP3wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4LAAD///PD0MA=") quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0x0, 0x0) 405.819528ms ago: executing program 0 (id=6032): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3}}}, 0x11cb40c454c80c15) 385.12881ms ago: executing program 4 (id=6033): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBLED(r0, 0x4b65, 0x2) 370.807222ms ago: executing program 0 (id=6034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setneightbl={0x28, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x4}]}, 0x28}}, 0x0) 369.968912ms ago: executing program 0 (id=6036): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x2001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000440)=@usbdevfs_driver={0x2, 0xfffffffa, 0x0}) 326.103046ms ago: executing program 2 (id=6037): pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x4000) 325.980326ms ago: executing program 4 (id=6038): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000640)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000006c0)='\b\x00', 0x2}, {&(0x7f0000000700)="3c9c485bedd7", 0x6}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f00000100000000001c000000000000000000000008"], 0x40}, 0x40054) 325.913786ms ago: executing program 2 (id=6039): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000640)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001840)=""/222, 0x0, 0x8}, 0x78) 283.300261ms ago: executing program 0 (id=6040): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) inotify_init() 283.198641ms ago: executing program 4 (id=6041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000611810000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000001040)=0x9) 261.979203ms ago: executing program 3 (id=6042): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1a8, 0x111, 0x4b4, 0x1a8, 0x700, 0x2a8, 0x278, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xffffff00], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 255.022193ms ago: executing program 4 (id=6043): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000011b000/0x1000)=nil, 0x1000, 0x4) 254.524833ms ago: executing program 2 (id=6053): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 229.730946ms ago: executing program 0 (id=6044): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:1', 0x9) 229.612436ms ago: executing program 1 (id=6045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000100001082cbd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="21310000048a00001c002b8008000100", @ANYRES32, @ANYBLOB="080004000000e40bb805c600", @ANYRES32, @ANYBLOB="1400030076657468305f766972745f776966690008000d"], 0x58}}, 0x400c040) 229.229826ms ago: executing program 0 (id=6046): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xfd, 0x553e, &(0x7f0000000680)="$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") ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 148.807035ms ago: executing program 3 (id=6047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 148.288064ms ago: executing program 2 (id=6058): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000038c0)={0x3, 0xd, &(0x7f0000003980)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000008500000008000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000003a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a40)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000003ac0)="b9ff03316844268cb89914f088a84b4586dde92f2735d10f000000d0981fbe31d2a9e6f91147b305", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 126.022447ms ago: executing program 1 (id=6048): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @empty=0x7f000001}}) 111.695698ms ago: executing program 2 (id=6049): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x8, 0x5, 0x508, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 107.874999ms ago: executing program 4 (id=6050): syz_mount_image$f2fs(&(0x7f00000057c0), &(0x7f0000005800)='./bus\x00', 0x2008410, &(0x7f0000005840)=ANY=[], 0x1, 0x5577, &(0x7f0000005d80)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000005840)='./bus\x00', 0x0, 0x100) 96.19183ms ago: executing program 3 (id=6051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x330, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 78.715481ms ago: executing program 1 (id=6052): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}, {&(0x7f00000000c0)={0x10, 0x12, 0xa01, 0x70bd25, 0x25dfdbfa}, 0x10}], 0x2}, 0x0) 70.953752ms ago: executing program 2 (id=6064): r0 = syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f55437072413010001000905830308000800000905810240000000000905020240"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) 70.621542ms ago: executing program 3 (id=6054): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r0, &(0x7f0000000380)='0', 0x1) 20.687497ms ago: executing program 1 (id=6055): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 20.600637ms ago: executing program 1 (id=6056): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000180)=0x4, 0x4) 0s ago: executing program 1 (id=6057): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') pread64(r0, &(0x7f0000000000)=""/74, 0x4a, 0x8e) kernel console output (not intermixed with test programs): comm syz.2.4422: bg 0: block 7: invalid block bitmap [ 249.357974][ T9761] EXT4-fs (loop2): Remounting filesystem read-only [ 249.361825][ T543] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 249.364701][ T449] usb 4-1: not running at top speed; connect to a high speed hub [ 249.373059][ T9761] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 249.390724][ T9761] EXT4-fs (loop2): Remounting filesystem read-only [ 249.398288][ T9761] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2928: inode #11: comm syz.2.4422: corrupted xattr block 95 [ 249.412275][ T9761] EXT4-fs (loop2): Remounting filesystem read-only [ 249.419588][ T9761] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -117) [ 249.430886][ T9761] EXT4-fs (loop2): 1 orphan inode deleted [ 249.437722][ T9761] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,. Quota mode: none. [ 249.457980][ T449] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.472010][ T449] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.483022][ T449] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 249.492333][ T449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.534084][ T9780] X.509: Couldn't decode AuthKeyIdentifier [ 249.544037][ T449] usb 4-1: Found UVC 1.00 device (0000:0000) [ 249.551637][ T449] usb 4-1: No valid video chain found. [ 249.616444][ T9792] loop2: detected capacity change from 0 to 512 [ 249.686472][ T9792] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 249.700775][ T9792] EXT4-fs (loop2): 1 truncate cleaned up [ 249.707321][ T9792] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.746550][ T543] usb 5-1: not running at top speed; connect to a high speed hub [ 249.763475][ T9494] usb 4-1: USB disconnect, device number 103 [ 249.795158][ T9800] loop0: detected capacity change from 0 to 40427 [ 249.806482][ T9800] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 249.815097][ T6] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 249.823283][ T9800] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 249.831904][ T9800] F2FS-fs (loop0): Not support 8192, larger than 256 [ 249.842813][ T543] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.853306][ T543] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 249.862640][ T543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.897484][ T30] audit: type=1326 audit(1795344505.944:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.2.4450" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd5d6ff19 code=0x0 [ 249.929754][ T543] usb 5-1: Found UVC 1.00 device (0000:0000) [ 249.937867][ T543] usb 5-1: No streaming interface found for terminal 2. [ 250.051118][ T9831] loop0: detected capacity change from 0 to 8192 [ 250.091732][ T9831] FAT-fs (loop0): bogus sectors per cluster 254 [ 250.098393][ T9831] FAT-fs (loop0): Can't find a valid FAT filesystem [ 250.105158][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 250.150193][ T9494] usb 5-1: USB disconnect, device number 105 [ 250.193021][ T9833] IPv6: addrconf: prefix option has invalid lifetime [ 250.259713][ T6] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 250.268405][ T6] usb 2-1: config 0 has no interface number 0 [ 250.274776][ T543] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 250.452218][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 250.461391][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.469666][ T6] usb 2-1: Product: syz [ 250.473861][ T6] usb 2-1: Manufacturer: syz [ 250.478546][ T6] usb 2-1: SerialNumber: syz [ 250.484184][ T6] usb 2-1: config 0 descriptor?? [ 250.548476][ T20] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 250.676640][ T543] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.687678][ T543] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.698343][ T9494] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 250.804936][ T6] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 250.811704][ T6] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 250.820839][ T6] usb 2-1: Failed to create links for entity 5 [ 250.827257][ T6] usb 2-1: Failed to register entities (-22). [ 250.844073][ T6] usb 2-1: USB disconnect, device number 107 [ 250.858515][ T543] usb 3-1: New USB device found, idVendor=4c82, idProduct=09d3, bcdDevice= 0.e7 [ 250.867675][ T543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.876278][ T543] usb 3-1: Product: syz [ 250.881139][ T543] usb 3-1: Manufacturer: syz [ 250.885762][ T543] usb 3-1: SerialNumber: syz [ 250.954618][ T20] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 250.963758][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.974539][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.983833][ T20] usb 1-1: config 1 has no interface number 0 [ 250.990158][ T20] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 251.001269][ T20] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 251.179094][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.188202][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.198032][ T20] usb 1-1: Product: syz [ 251.202413][ T20] usb 1-1: Manufacturer: syz [ 251.207293][ T20] usb 1-1: SerialNumber: syz [ 251.254108][ T9494] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 251.264625][ T9494] usb 4-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 251.273168][ T9494] usb 4-1: Product: syz [ 251.275345][ T543] usb 3-1: 0:1 : does not exist [ 251.277651][ T9494] usb 4-1: Manufacturer: syz [ 251.293163][ T543] usb 3-1: USB disconnect, device number 106 [ 251.297003][ T9494] usb 4-1: config 0 descriptor?? [ 251.350915][ T9494] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 251.358885][ T9494] usb 4-1: Detected FT-X [ 251.403102][ T9891] loop4: detected capacity change from 0 to 262144 [ 251.451628][ T9891] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.478439][ T20] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 251.486032][ T20] usb 1-1: USB disconnect, device number 106 [ 251.494292][ T9891] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.596154][ T9494] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 251.617436][ T9494] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 251.638729][ T6] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 251.638787][ T9494] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 251.665654][ T9494] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 251.675666][ T9494] usb 4-1: USB disconnect, device number 104 [ 251.697030][ T9494] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 251.709331][ T9494] ftdi_sio 4-1:0.0: device disconnected [ 251.780731][ T9907] loop2: detected capacity change from 0 to 1024 [ 251.792070][ T4141] udevd[4141]: incorrect ext4 checksum on /dev/loop2 [ 251.802962][ T9907] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 251.876822][ T9915] loop2: detected capacity change from 0 to 128 [ 251.909035][ T9915] FAT-fs (loop2): bogus logical sector size 65535 [ 251.918046][ T9915] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 251.930875][ T9915] FAT-fs (loop2): Can't find a valid FAT filesystem [ 252.066444][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.077319][ T6] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 252.086811][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.096156][ T6] usb 2-1: config 0 descriptor?? [ 252.121429][ T20] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 252.142021][ T6] usb 2-1: bad CDC descriptors [ 252.267630][ T30] audit: type=1326 audit(1795344508.151:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.0.4512" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f935e4f19 code=0x0 [ 252.322980][ T543] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 252.362469][ T328] usb 2-1: USB disconnect, device number 108 [ 252.461988][ T20] usb 5-1: not running at top speed; connect to a high speed hub [ 252.558239][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.579505][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.600464][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 252.622125][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.687359][ T20] usb 5-1: Found UVC 0.00 device (046d:0825) [ 252.718596][ T543] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7 [ 252.875088][ T9949] F2FS-fs (loop3): invalid crc value [ 252.894159][ T9949] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 252.911119][ T20] usb 5-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 252.926732][ T543] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 252.946833][ T543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.955436][ T543] usb 3-1: Product: syz [ 252.959765][ T543] usb 3-1: Manufacturer: syz [ 252.964870][ T20] usb 5-1: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 252.974049][ T543] usb 3-1: SerialNumber: syz [ 252.996466][ T20] usb 5-1: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 253.005367][ T20] usb 5-1: No streaming interface found for terminal 2. [ 253.020054][ T20] usb 5-1: USB disconnect, device number 106 [ 253.213231][ T9967] fuseblk: Bad value for 'source' [ 253.253036][ T9494] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 253.264924][ T9969] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffc [ 253.392216][ T543] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 253.402304][ T9961] set_capacity_and_notify: 5 callbacks suppressed [ 253.402330][ T9961] loop0: detected capacity change from 0 to 262144 [ 253.405124][ T9971] loop3: detected capacity change from 0 to 1024 [ 253.431135][ T543] usb 3-1: USB disconnect, device number 107 [ 253.457431][ T9971] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 253.466094][ T9971] EXT4-fs (loop3): write access will be enabled during recovery [ 253.474964][ T9971] JBD2: no valid journal superblock found [ 253.481780][ T9971] EXT4-fs (loop3): error loading journal [ 253.506403][ T9961] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:48, type:0, next_blkoff:0, blkofs:1 [ 253.527148][ T9961] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 253.537496][ T9980] loop4: detected capacity change from 0 to 2048 [ 253.558064][ T9980] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 253.567616][ T9980] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 253.584704][ T9980] EXT4-fs (loop4): mount failed [ 253.670080][ T9494] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.694815][ T9494] usb 2-1: New USB device found, idVendor=04b8, idProduct=0000, bcdDevice= 0.00 [ 253.708848][ T9494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.826623][T10000] loop2: detected capacity change from 0 to 256 [ 253.849444][T10002] loop0: detected capacity change from 0 to 256 [ 253.875861][T10002] exFAT-fs (loop0): failed to load upcase table [ 253.888217][T10002] exFAT-fs (loop0): failed to recognize exfat type [ 253.926543][ T542] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 254.012118][ T543] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 254.022985][ T9494] usb 2-1: string descriptor 0 read error: -71 [ 254.030524][ T9494] usb 2-1: USB disconnect, device number 109 [ 254.205072][ T542] usb 4-1: Using ep0 maxpacket: 8 [ 254.236584][ T6] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 254.258071][ T20] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 254.332967][ T542] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 17, changing to 7 [ 254.429067][ T543] usb 5-1: config 1 has an invalid interface number: 103 but max is 0 [ 254.437537][ T543] usb 5-1: config 1 has no interface number 0 [ 254.443746][ T543] usb 5-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 254.455358][ T543] usb 5-1: config 1 interface 103 has no altsetting 0 [ 254.493236][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 254.514638][ T542] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 254.524894][ T542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.533354][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 254.539517][ T542] usb 4-1: Product: syz [ 254.543704][ T542] usb 4-1: Manufacturer: syz [ 254.543825][T10024] loop1: detected capacity change from 0 to 2048 [ 254.548874][ T542] usb 4-1: SerialNumber: syz [ 254.600709][ T4141] loop1: p2 < > p4 [ 254.605531][ T4141] loop1: p4 size 8192 extends beyond EOD, truncated [ 254.615329][T10024] loop1: p2 < > p4 [ 254.620114][T10024] loop1: p4 size 8192 extends beyond EOD, truncated [ 254.627089][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.640813][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 254.651101][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 254.661628][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 254.675353][ T20] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 254.682719][ T20] usb 1-1: config 0 has no interfaces? [ 254.688490][ T20] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 254.698941][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.707250][ T456] udevd[456]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 254.712423][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 254.729404][ T20] usb 1-1: config 0 descriptor?? [ 254.734503][ T543] usb 5-1: string descriptor 0 read error: -22 [ 254.738951][T10030] loop1: detected capacity change from 0 to 512 [ 254.745019][ T543] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 254.760703][ T543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.763181][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 254.770118][ T3718] udevd[3718]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 254.783045][T10030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4551: bg 0: block 184: padding at end of block bitmap is not set [ 254.789508][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.823066][T10030] EXT4-fs (loop1): Remounting filesystem read-only [ 254.830188][T10030] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 254.831518][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.841579][T10030] EXT4-fs (loop1): Remounting filesystem read-only [ 254.852177][ T6] usb 3-1: SerialNumber: syz [ 254.859119][T10030] EXT4-fs (loop1): 1 truncate cleaned up [ 254.867449][ T9994] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 254.868801][T10030] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 254.878307][T10018] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 254.890232][T10030] ext4 filesystem being mounted at /821/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.898176][ T543] ftdi_sio 5-1:1.103: FTDI USB Serial Device converter detected [ 254.917524][ T543] usb 5-1: Detected FT-X [ 254.922439][T10018] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 254.942544][ T6] hub 3-1:1.0: bad descriptor, ignoring hub [ 254.948707][ T6] hub: probe of 3-1:1.0 failed with error -5 [ 254.960305][ T542] usb 4-1: USB disconnect, device number 105 [ 254.969796][ T6] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 254.997916][ T9494] usb 1-1: USB disconnect, device number 107 [ 255.134792][ T543] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 255.156021][ T543] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 255.177421][ T543] ftdi_sio 5-1:1.103: GPIO initialisation failed: -71 [ 255.185725][ T543] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 255.197519][ T6] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 255.206903][ T543] usb 5-1: USB disconnect, device number 107 [ 255.224704][ T543] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 255.238472][ T543] ftdi_sio 5-1:1.103: device disconnected [ 255.245998][ T6] usb 3-1: USB disconnect, device number 108 [ 255.284374][ T20] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 255.408672][T10045] loop3: detected capacity change from 0 to 1024 [ 255.445532][T10045] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 255.472544][T10045] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 255.679983][ T20] usb 2-1: config 12 has an invalid interface number: 199 but max is 0 [ 255.689432][ T20] usb 2-1: config 12 has no interface number 0 [ 255.696495][ T20] usb 2-1: config 12 interface 199 altsetting 2 endpoint 0x5 has invalid maxpacket 991, setting to 64 [ 255.718918][ T20] usb 2-1: config 12 interface 199 altsetting 2 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 255.733676][ T20] usb 2-1: config 12 interface 199 has no altsetting 0 [ 255.760817][ T20] usb 2-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=94.b3 [ 255.771582][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.841287][ T20] snd-usb-audio: probe of 2-1:12.199 failed with error -2 [ 255.904610][T10124] 9pnet: Insufficient options for proto=fd [ 256.056440][ T9494] usb 2-1: USB disconnect, device number 110 [ 256.075730][ T694] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 256.187913][T10147] loop3: detected capacity change from 0 to 512 [ 256.225415][ T449] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 256.310917][ T6] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 256.332413][ T694] usb 3-1: Using ep0 maxpacket: 8 [ 256.461182][ T694] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 256.472632][ T694] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.654509][ T449] usb 1-1: unable to get BOS descriptor or descriptor too short [ 256.663049][ T694] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 256.674928][ T694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.683932][ T694] usb 3-1: Product: syz [ 256.688442][ T694] usb 3-1: Manufacturer: syz [ 256.693552][ T694] usb 3-1: SerialNumber: syz [ 256.740578][ T20] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 256.751104][ T449] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 256.794062][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.847884][ T6] usb 5-1: not running at top speed; connect to a high speed hub [ 256.933723][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.944588][ T449] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 256.945201][ T6] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.954344][ T449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.971575][ T449] usb 1-1: Product: syz [ 256.975999][ T449] usb 1-1: Manufacturer: syz [ 256.980739][ T449] usb 1-1: SerialNumber: syz [ 256.998152][T10128] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 257.019641][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 257.084745][ T694] usb 3-1: USB disconnect, device number 109 [ 257.105558][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.116550][ T60] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 257.127346][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.136980][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.145241][ T6] usb 5-1: Product: syz [ 257.150750][ T6] usb 5-1: Manufacturer: syz [ 257.155961][ T6] usb 5-1: SerialNumber: syz [ 257.191506][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.201885][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.211620][ T20] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 113, using maximum allowed: 30 [ 257.223018][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.233090][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 257.374184][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 257.417033][ T60] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 257.417061][ T449] usb 1-1: MIDIStreaming interface descriptor not found [ 257.425886][ T20] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.441082][ T449] usb 1-1: USB disconnect, device number 108 [ 257.450405][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.460736][ T20] usb 4-1: Product: syz [ 257.465568][ T20] usb 4-1: Manufacturer: syz [ 257.470490][ T20] usb 4-1: SerialNumber: syz [ 257.503069][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.545953][ T6] usb 5-1: MIDIStreaming interface descriptor not found [ 257.553895][ T6] usb 5-1: 0:2 : does not exist [ 257.583998][ T6] usb 5-1: USB disconnect, device number 108 [ 257.599619][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.681073][T10195] loop2: detected capacity change from 0 to 40427 [ 257.696329][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.742520][T10195] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 257.750925][T10195] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 257.762443][T10195] F2FS-fs (loop2): invalid crc value [ 257.774052][T10195] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.792936][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.811148][T10195] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 257.828838][T10195] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 257.868228][ T20] usb 4-1: 0:2 : does not exist [ 257.876592][ T20] usb 4-1: USB disconnect, device number 106 [ 257.889612][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.986287][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 258.072185][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 258.094245][ T4141] udevd[4141]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 258.115178][ T449] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 258.158372][ T60] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 258.297744][ T694] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 258.297806][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 258.320863][ T60] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 258.330947][ T60] usb 2-1: Product: syz [ 258.336873][ T60] usb 2-1: Manufacturer: syz [ 258.383711][ T449] usb 1-1: Using ep0 maxpacket: 8 [ 258.384494][ T60] hub 2-1:4.0: Invalid hub with more than one config or interface [ 258.399321][ T60] hub: probe of 2-1:4.0 failed with error -22 [ 258.405111][ T9494] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 258.566351][ T449] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.587708][ T20] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 258.618562][ T314] usb 2-1: USB disconnect, device number 111 [ 258.652317][ T449] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.663192][ T449] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.695213][ T694] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.802657][ T9494] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 258.814266][ T9494] usb 3-1: config 179 has no interface number 0 [ 258.821103][ T9494] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 258.834961][ T9494] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 258.846537][ T449] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 258.857615][ T9494] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 258.870164][ T449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.877724][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 258.880857][ T694] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 258.897523][ T9494] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 258.913248][ T449] usb 1-1: Product: syz [ 258.920316][ T449] usb 1-1: Manufacturer: syz [ 258.928736][ T694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.942606][ T9494] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 258.962251][ T449] usb 1-1: SerialNumber: syz [ 258.968413][ T694] usb 5-1: Product: syz [ 258.973315][ T694] usb 5-1: Manufacturer: syz [ 258.980118][ T9494] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 258.990355][ T694] usb 5-1: SerialNumber: syz [ 258.996085][ T9494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.039619][ T694] ftdi_sio 5-1:1.0: FTDI USB Serial Device converter detected [ 259.049898][ T20] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.050221][ T9494] xpad: probe of 3-1:179.65 failed with error -5 [ 259.063410][ T20] usb 4-1: config 179 has no interface number 0 [ 259.071372][ T694] usb 5-1: Detected FT232BM [ 259.078736][ T20] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 259.100771][ T20] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 259.120852][ T20] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.134958][ T20] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.150237][ T20] usb 4-1: config 179 interface 65 has no altsetting 0 [ 259.159519][ T20] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 259.176835][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.269856][ T9494] usb 3-1: USB disconnect, device number 110 [ 259.277911][ T694] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 259.296703][ T694] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 259.309454][ T694] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.327967][ T694] usb 5-1: USB disconnect, device number 109 [ 259.337375][ T694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.350655][ T694] ftdi_sio 5-1:1.0: device disconnected [ 259.371864][ T449] usb 1-1: 0:1 : does not exist [ 259.378104][ T449] usb 1-1: 0:2 : does not exist [ 259.429096][ T449] usb 1-1: USB disconnect, device number 109 [ 259.460525][ T20] usb 4-1: USB disconnect, device number 107 [ 259.855483][T10243] loop2: detected capacity change from 0 to 256 [ 259.898963][T10243] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 260.123691][ T449] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 260.198766][ T9494] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 260.241744][ T694] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 260.263188][ T20] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 260.392101][ T6] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 260.510327][ T449] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.523470][ T449] usb 1-1: config 1 interface 1 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 260.585461][ T9494] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 260.597316][ T9494] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.610734][ T9494] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.621347][ T9494] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 260.639296][ T694] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 260.651897][ T694] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 260.671377][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.682313][ T20] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.692178][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.703648][ T449] usb 1-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 260.713547][ T449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.722051][ T9494] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.732745][ T449] usb 1-1: Product: syz [ 260.738256][ T449] usb 1-1: Manufacturer: syz [ 260.744644][ T449] usb 1-1: SerialNumber: syz [ 260.751316][ T9494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.764916][ T9494] usb 2-1: SerialNumber: syz [ 260.832511][ T694] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 260.841862][ T694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.850720][ T694] usb 5-1: Product: syz [ 260.855059][ T694] usb 5-1: Manufacturer: syz [ 260.859920][ T694] usb 5-1: SerialNumber: syz [ 260.875420][ T20] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 260.886345][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.895993][ T20] usb 3-1: Product: syz [ 260.902931][ T20] usb 3-1: Manufacturer: syz [ 260.908661][ T694] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 260.908887][ T20] usb 3-1: SerialNumber: syz [ 260.920002][ T694] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 260.920002][ T694] Please send a copy of this message to and [ 261.025792][ T6] usb 4-1: config 7 has an invalid interface number: 112 but max is 1 [ 261.039729][ T6] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 261.048133][ T314] usb 2-1: USB disconnect, device number 112 [ 261.052642][ T6] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 261.071918][ T6] usb 4-1: config 7 has no interface number 0 [ 261.078272][ T6] usb 4-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.092706][ T6] usb 4-1: config 7 interface 112 has no altsetting 0 [ 261.154811][ T449] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 261.164244][ T449] usb 1-1: 1:2 : no or invalid class specific endpoint descriptor [ 261.174340][ T694] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 261.184917][ T694] usb 5-1: USB disconnect, device number 110 [ 261.253427][ T449] usb 1-1: USB disconnect, device number 110 [ 261.347954][ T6] usb 4-1: string descriptor 0 read error: -22 [ 261.354709][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 261.365645][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.376206][ T20] usb 3-1: USB disconnect, device number 111 [ 261.424020][ T6] usb 4-1: Found UVC 0.00 device (046d:089b) [ 261.432317][ T6] usb 4-1: No valid video chain found. [ 261.617220][ T3718] udevd[3718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 261.640410][ T30] audit: type=1326 audit(1795345284.898:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.1.4674" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748c6adf19 code=0x0 [ 261.658948][ T694] usb 4-1: USB disconnect, device number 108 [ 261.704892][T10293] loop1: detected capacity change from 0 to 512 [ 261.740816][T10293] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 261.753184][T10299] loop4: detected capacity change from 0 to 512 [ 261.758267][T10293] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 261.779633][T10293] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 261.790020][T10293] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 261.800854][T10293] EXT4-fs (loop1): failed to initialize system zone (-117) [ 261.813945][T10299] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 261.819003][T10293] EXT4-fs (loop1): mount failed [ 261.826723][T10299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 261.843696][T10299] System zones: 0-1, 15-15, 18-18, 34-34 [ 261.850328][T10299] EXT4-fs (loop4): orphan cleanup on readonly fs [ 261.857912][T10299] EXT4-fs error (device loop4): ext4_quota_enable:6431: comm syz.4.4679: Bad quota inum: 768, type: 0 [ 261.874001][T10299] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 261.890860][T10299] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 261.898575][T10299] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 261.927955][ T449] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 261.994355][T10315] loop1: detected capacity change from 0 to 16 [ 262.026345][T10315] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 262.048603][T10323] incfs: Error accessing: ./file0. [ 262.055896][T10323] incfs: mount failed -2 [ 262.067470][ T20] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 262.072197][T10325] overlayfs: bad mount option "redirect_dir=on\" [ 262.134174][T10337] loop1: detected capacity change from 0 to 512 [ 262.154829][T10337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.170526][T10337] EXT4-fs (loop1): orphan cleanup on readonly fs [ 262.177891][T10337] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.4697: inode #15: comm syz.1.4697: iget: illegal inode # [ 262.191598][T10337] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.4697: couldn't read orphan inode 15 (err -117) [ 262.196537][ T449] usb 1-1: Using ep0 maxpacket: 16 [ 262.207923][T10337] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 262.252291][ T30] audit: type=1400 audit(1795345285.466:293): avc: denied { create } for pid=10343 comm="syz.3.4700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 262.335963][ T449] usb 1-1: config 3 has an invalid interface number: 127 but max is 0 [ 262.337815][T10364] loop3: detected capacity change from 0 to 512 [ 262.345925][ T449] usb 1-1: config 3 has no interface number 0 [ 262.362515][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 262.368995][ T449] usb 1-1: config 3 interface 127 altsetting 42 endpoint 0x83 has invalid wMaxPacketSize 0 [ 262.384664][ T449] usb 1-1: config 3 interface 127 has no altsetting 0 [ 262.404146][T10364] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 262.421099][T10364] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 262.439211][T10364] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.4710: Failed to acquire dquot type 1 [ 262.456696][T10364] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 262.470448][T10364] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 262.483088][T10364] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.4710: Failed to acquire dquot type 1 [ 262.498215][T10364] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4710: bg 0: block 248: padding at end of block bitmap is not set [ 262.499793][T10371] loop4: detected capacity change from 0 to 1024 [ 262.516483][T10364] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 262.541627][T10364] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 262.561508][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.566274][T10364] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 262.582222][T10371] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 262.596644][T10364] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.4710: Failed to acquire dquot type 1 [ 262.609490][ T543] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 262.623249][T10371] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 262.627466][ T449] usb 1-1: New USB device found, idVendor=0582, idProduct=f1a4, bcdDevice=77.d8 [ 262.639817][T10371] EXT4-fs (loop4): orphan cleanup on readonly fs [ 262.649094][ T449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.664667][T10371] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.4712: Freeing blocks not in datazone - block = 0, count = 4096 [ 262.674316][T10364] EXT4-fs (loop3): 1 orphan inode deleted [ 262.686881][T10371] EXT4-fs (loop4): Remounting filesystem read-only [ 262.704477][ T449] usb 1-1: Product: syz [ 262.712322][T10364] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.719941][ T449] usb 1-1: Manufacturer: syz [ 262.740968][ T449] usb 1-1: SerialNumber: syz [ 262.741299][T10364] ext4 filesystem being mounted at /1082/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.747523][T10371] EXT4-fs (loop4): 1 orphan inode deleted [ 262.763451][T10371] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,i_version,barrier=0x0000000000000009,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 262.845707][T10376] loop3: detected capacity change from 0 to 2048 [ 262.869579][T10376] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 262.879882][T10376] FAT-fs (loop3): Filesystem has been set read-only [ 262.936129][T10374] loop4: detected capacity change from 0 to 40427 [ 262.959112][ T20] usb 3-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 262.969545][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.978058][ T20] usb 3-1: Product: syz [ 262.981726][T10374] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 262.989626][ T20] usb 3-1: Manufacturer: syz [ 262.990727][T10374] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 262.994873][ T20] usb 3-1: SerialNumber: syz [ 263.054975][T10382] loop4: detected capacity change from 0 to 512 [ 263.077269][ T543] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.078833][T10382] EXT4-fs (loop4): Ignoring removed orlov option [ 263.092394][T10382] EXT4-fs (loop4): Invalid want_extra_isize 52714 [ 263.184386][ T543] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.186715][ T449] usb 1-1: USB disconnect, device number 111 [ 263.199387][ T543] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12552, setting to 1024 [ 263.210508][T10384] EXT4-fs (loop4): Test dummy encryption mode enabled [ 263.221601][ T543] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 263.234499][ T543] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.251308][T10384] EXT4-fs (loop4): 1 orphan inode deleted [ 263.257381][T10384] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,data_err=ignore,debug_want_extra_isize=0x000000000000005c,noquota,test_dummy_encryption,inlinecrypt,errors=remount-ro,init_itable,errors=continue,quota,. Quota mode: writeback. [ 263.287030][ T694] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 263.431480][ T20] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 263.452879][ T20] usb 3-1: unit 1 not found! [ 263.467836][ T20] usb 3-1: USB disconnect, device number 112 [ 263.474534][ T543] usb 2-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 263.486130][ T543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.495404][ T543] usb 2-1: Product: syz [ 263.516501][ T543] usb 2-1: Manufacturer: syz [ 263.526289][ T543] usb 2-1: SerialNumber: syz [ 263.549817][T10355] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 263.678494][ T694] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 263.690772][ T694] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 263.699867][ T60] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 263.873530][ T30] audit: type=1400 audit(1795345286.984:294): avc: denied { mount } for pid=10395 comm="syz.2.4723" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 263.896987][ T694] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 263.898343][ T30] audit: type=1400 audit(1795345287.003:295): avc: denied { unmount } for pid=307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 263.907046][ T694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.941743][ T449] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 263.952222][ T694] usb 4-1: Product: syz [ 263.958005][ T694] usb 4-1: Manufacturer: syz [ 263.963168][ T694] usb 4-1: SerialNumber: syz [ 263.968484][ T543] usb 2-1: MIDIStreaming interface descriptor not found [ 263.981014][ T543] usb 2-1: USB disconnect, device number 113 [ 263.989796][T10378] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 263.996945][T10378] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 264.150914][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.226949][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.244442][ T6] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 264.247627][ T694] zaurus: probe of 4-1:1.0 failed with error -71 [ 264.252483][ T60] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 264.264322][ T694] usb 4-1: USB disconnect, device number 109 [ 264.376379][ T449] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.386709][ T449] usb 1-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 264.397906][ T449] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 264.440839][ T60] usb 5-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 264.450023][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.458687][ T60] usb 5-1: Product: syz [ 264.462679][T10402] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 264.463393][ T60] usb 5-1: Manufacturer: syz [ 264.471921][T10402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 264.476268][ T60] usb 5-1: SerialNumber: syz [ 264.485403][T10402] F2FS-fs (loop1): invalid crc value [ 264.496123][T10402] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 264.508421][T10390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 264.521269][T10402] F2FS-fs (loop1): Inconsistent error blkaddr:4096, sit bitmap:0 [ 264.529677][T10402] CPU: 0 PID: 10402 Comm: syz.1.4726 Tainted: G W syzkaller #0 [ 264.538786][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 264.549399][T10402] Call Trace: [ 264.552800][T10402] [ 264.555741][T10402] __dump_stack+0x21/0x30 [ 264.560168][T10402] dump_stack_lvl+0x110/0x170 [ 264.564864][T10402] ? show_regs_print_info+0x20/0x20 [ 264.570064][T10402] ? f2fs_down_read+0x9d/0x1a0 [ 264.575014][T10402] ? f2fs_need_dentry_mark+0xe0/0xe0 [ 264.580435][T10402] dump_stack+0x15/0x20 [ 264.584602][T10402] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 264.590003][T10402] f2fs_get_node_info+0x6a1/0x1020 [ 264.595133][T10402] read_node_page+0x334/0x550 [ 264.599815][T10402] ? add_to_page_cache_lru+0x18e/0x210 [ 264.605273][T10402] ? f2fs_ra_node_page+0x270/0x270 [ 264.610410][T10402] ? pagecache_get_page+0xc18/0xdd0 [ 264.615931][T10402] ? _raw_spin_lock+0x94/0xf0 [ 264.620618][T10402] ? _raw_spin_trylock_bh+0x150/0x150 [ 264.625992][T10402] __get_node_page+0x147/0xad0 [ 264.630766][T10402] ? _raw_spin_unlock+0x4d/0x70 [ 264.635613][T10402] f2fs_get_node_page+0x21/0x30 [ 264.640458][T10402] f2fs_iget+0x783/0x5000 [ 264.644805][T10402] ? f2fs_build_stats+0x71/0xb40 [ 264.649740][T10402] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 264.655966][T10402] ? f2fs_build_stats+0x6ef/0xb40 [ 264.661221][T10402] f2fs_fill_super+0x4af9/0x6dd0 [ 264.666294][T10402] ? kill_f2fs_super+0x3d0/0x3d0 [ 264.671401][T10402] ? vscnprintf+0x80/0x80 [ 264.675861][T10402] ? mutex_unlock+0x8f/0x230 [ 264.680710][T10402] ? set_blocksize+0x1e9/0x360 [ 264.685479][T10402] ? sb_set_blocksize+0xaa/0xf0 [ 264.690533][T10402] ? kill_f2fs_super+0x3d0/0x3d0 [ 264.695610][T10402] mount_bdev+0x28d/0x3c0 [ 264.699972][T10402] ? kill_f2fs_super+0x3d0/0x3d0 [ 264.705209][T10402] f2fs_mount+0x34/0x40 [ 264.709433][T10402] legacy_get_tree+0xed/0x190 [ 264.714385][T10402] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 264.720249][ T449] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 264.720836][T10402] vfs_get_tree+0x89/0x260 [ 264.730005][ T449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.734267][T10402] do_new_mount+0x251/0xb40 [ 264.734292][T10402] ? security_capable+0x87/0xb0 [ 264.744187][ T449] usb 1-1: Product: syz [ 264.747085][T10402] path_mount+0x640/0xff0 [ 264.747117][T10402] __se_sys_mount+0x320/0x390 [ 264.753761][ T449] usb 1-1: Manufacturer: syz [ 264.756239][T10402] ? __x64_sys_mount+0xd0/0xd0 [ 264.760588][ T449] usb 1-1: SerialNumber: syz [ 264.779475][T10402] __x64_sys_mount+0xbf/0xd0 [ 264.784192][T10402] x64_sys_call+0x6bf/0x9a0 [ 264.789432][T10402] do_syscall_64+0x4c/0xa0 [ 264.793952][T10402] ? clear_bhb_loop+0x50/0xa0 [ 264.798854][T10402] ? clear_bhb_loop+0x50/0xa0 [ 264.804938][T10402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.810952][T10402] RIP: 0033:0x7f748c6af18a [ 264.815479][T10402] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.835773][T10402] RSP: 002b:00007f748b0fbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.844409][T10402] RAX: ffffffffffffffda RBX: 00007f748b0fbee0 RCX: 00007f748c6af18a [ 264.852788][T10402] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007f748b0fbea0 [ 264.861410][T10402] RBP: 00002000000000c0 R08: 00007f748b0fbee0 R09: 0000000001800004 [ 264.869482][T10402] R10: 0000000001800004 R11: 0000000000000246 R12: 0000200000000100 [ 264.877480][T10402] R13: 00007f748b0fbea0 R14: 000000000000554e R15: 0000200000000140 [ 264.885751][T10402] [ 264.889651][ T449] usb-storage 1-1:1.0: USB Mass Storage device detected [ 264.897056][T10402] F2FS-fs (loop1): Failed to read root inode [ 264.922878][ T449] scsi host1: usb-storage 1-1:1.0 [ 265.031490][ T60] usb 5-1: MIDIStreaming interface descriptor not found [ 265.039022][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.058786][ T60] usb 5-1: USB disconnect, device number 111 [ 265.085109][ T6] usb 3-1: not running at top speed; connect to a high speed hub [ 265.125939][ T9494] usb 1-1: USB disconnect, device number 112 [ 265.150652][T10419] FAT-fs (loop1): bogus number of reserved sectors [ 265.157381][T10419] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 265.167693][T10419] FAT-fs (loop1): Can't find a valid FAT filesystem [ 265.174895][ T6] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 4 [ 265.235448][ T449] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 265.364380][ T6] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 265.373962][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.382793][ T6] usb 3-1: Product: syz [ 265.387509][ T6] usb 3-1: Manufacturer: syz [ 265.392361][ T6] usb 3-1: SerialNumber: syz [ 265.503920][ T449] usb 4-1: Using ep0 maxpacket: 8 [ 265.589826][ T60] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 265.643504][ T542] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 265.692856][T10429] set_capacity_and_notify: 3 callbacks suppressed [ 265.692870][T10429] loop0: detected capacity change from 0 to 128 [ 265.721975][T10429] FAT-fs (loop0): FAT read failed (blocknr 65312) [ 265.725186][ T6] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 265.751409][ T6] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 265.772591][ T6] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 265.794008][ T6] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 265.815377][ T6] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 265.836875][ T6] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 265.837026][ T449] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 265.853101][ T6] usb 3-1: USB disconnect, device number 113 [ 265.854893][ T449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.871684][T10433] loop0: detected capacity change from 0 to 512 [ 265.878056][ T449] usb 4-1: Product: syz [ 265.882346][ T449] usb 4-1: Manufacturer: syz [ 265.887187][ T449] usb 4-1: SerialNumber: syz [ 265.947593][T10433] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.956988][T10433] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 1024 [ 266.019402][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.030244][ T542] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 266.038871][ T542] usb 5-1: config 0 has no interface number 0 [ 266.052298][ T542] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 266.058984][T10435] loop0: detected capacity change from 0 to 512 [ 266.063927][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 266.078235][ T542] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 266.089627][ T542] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 266.100665][ T542] usb 5-1: config 0 interface 2 has no altsetting 0 [ 266.140827][T10435] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 266.152538][T10435] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 266.163937][T10435] EXT4-fs (loop0): Test dummy encryption mode enabled [ 266.172230][ T60] usb 2-1: config 3 has an invalid interface number: 185 but max is 0 [ 266.172242][T10435] EXT4-fs (loop0): Ignoring removed bh option [ 266.173064][T10435] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 266.173064][T10435] [ 266.180572][ T60] usb 2-1: config 3 has no interface number 0 [ 266.180603][ T60] usb 2-1: config 3 interface 185 has no altsetting 0 [ 266.212858][T10435] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 266.221900][T10435] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,test_dummy_encryption,bh,noload,,,errors=continue. Quota mode: writeback. [ 266.277074][ T542] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 266.286389][ T542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.294890][ T542] usb 5-1: Product: syz [ 266.309328][ T542] usb 5-1: Manufacturer: syz [ 266.309408][ T449] usb 4-1: Unsupported UAC3 BADD profile [ 266.314326][ T542] usb 5-1: SerialNumber: syz [ 266.326519][ T449] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 266.328979][ T542] usb 5-1: config 0 descriptor?? [ 266.348947][T10451] loop0: detected capacity change from 0 to 1024 [ 266.356422][ T60] usb 2-1: New USB device found, idVendor=0403, idProduct=d9a9, bcdDevice=3d.2a [ 266.365099][ T449] usb 4-1: USB disconnect, device number 110 [ 266.366439][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.383567][ T60] usb 2-1: Product: syz [ 266.388397][T10425] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 266.388564][ T60] usb 2-1: Manufacturer: syz [ 266.401875][ T60] usb 2-1: SerialNumber: syz [ 266.408502][T10425] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 266.421489][T10451] EXT4-fs (loop0): invalid inodes per group: 150994976 [ 266.421489][T10451] [ 266.706949][ T60] hub 2-1:3.185: bad descriptor, ignoring hub [ 266.715346][ T60] hub: probe of 2-1:3.185 failed with error -5 [ 266.723142][ T60] ftdi_sio 2-1:3.185: FTDI USB Serial Device converter detected [ 266.731786][ T60] usb 2-1: Detected FT-X [ 266.749635][ T20] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 266.760319][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 266.769623][ T542] usb 5-1: USB disconnect, device number 112 [ 266.782238][ T694] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 266.813979][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 266.846293][ T60] ftdi_sio 2-1:3.185: GPIO initialisation failed: -71 [ 266.856594][ T60] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 266.900994][ T60] usb 2-1: USB disconnect, device number 114 [ 266.910357][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 266.923837][ T60] ftdi_sio 2-1:3.185: device disconnected [ 267.114662][ T543] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 267.179173][ T20] usb 3-1: config 127 has an invalid interface number: 2 but max is 0 [ 267.189144][ T20] usb 3-1: config 127 has no interface number 0 [ 267.277950][T10466] loop1: detected capacity change from 0 to 8192 [ 267.307940][ T694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 267.329790][ T4141] loop1: p1 p2 p3 p4 [ 267.334012][ T4141] loop1: p1 start 16777216 is beyond EOD, truncated [ 267.341439][ T4141] loop1: p2 start 151126016 is beyond EOD, truncated [ 267.348602][ T4141] loop1: p3 start 655105 is beyond EOD, truncated [ 267.355292][ T4141] loop1: p4 size 33554432 extends beyond EOD, truncated [ 267.361714][ T694] usb 1-1: not running at top speed; connect to a high speed hub [ 267.364103][ T20] usb 3-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=4b.5f [ 267.381784][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.391042][ T20] usb 3-1: Product: syz [ 267.395576][ T20] usb 3-1: Manufacturer: syz [ 267.401100][ T20] usb 3-1: SerialNumber: syz [ 267.407759][T10466] loop1: p1 p2 p3 p4 [ 267.413992][T10466] loop1: p1 start 16777216 is beyond EOD, truncated [ 267.421581][T10466] loop1: p2 start 151126016 is beyond EOD, truncated [ 267.428528][T10466] loop1: p3 start 655105 is beyond EOD, truncated [ 267.436045][T10466] loop1: p4 size 33554432 extends beyond EOD, truncated [ 267.447582][ T694] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 267.465251][ T694] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 267.509965][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 267.524304][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 267.544185][ T543] usb 4-1: unable to get BOS descriptor or descriptor too short [ 267.554986][ T449] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 267.630074][ T543] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 267.638457][ T543] usb 4-1: config 8 has no interface number 0 [ 267.644866][ T543] usb 4-1: config 8 interface 177 has no altsetting 0 [ 267.662698][ T694] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.673882][ T694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.683304][ T694] usb 1-1: Product: syz [ 267.688123][ T694] usb 1-1: Manufacturer: syz [ 267.692976][ T694] usb 1-1: SerialNumber: syz [ 267.705773][ T20] ftdi_sio 3-1:127.2: FTDI USB Serial Device converter detected [ 267.714631][ T20] usb 3-1: Detected FT-X [ 267.726728][T10457] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 267.733890][T10457] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 267.741173][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 267.748127][ T542] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 267.769674][ T20] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 267.791265][ T20] ftdi_sio 3-1:127.2: GPIO initialisation failed: -71 [ 267.799329][ T20] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.811321][ T20] usb 3-1: USB disconnect, device number 114 [ 267.818818][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 267.829038][ T543] usb 4-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=50.c7 [ 267.838600][ T20] ftdi_sio 3-1:127.2: device disconnected [ 267.844759][ T543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.852770][ T543] usb 4-1: Product: syz [ 267.858152][ T543] usb 4-1: Manufacturer: syz [ 267.862999][ T543] usb 4-1: SerialNumber: syz [ 267.995280][ T449] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 268.003942][ T449] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 162 [ 268.005887][ T542] usb 2-1: Using ep0 maxpacket: 32 [ 268.017203][ T449] usb 5-1: config 0 has no interface number 1 [ 268.028774][ T449] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.042543][ T449] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 268.059927][ T694] usb 1-1: bad CDC descriptors [ 268.069029][ T694] usb 1-1: USB disconnect, device number 113 [ 268.145581][ T542] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 268.156576][ T542] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 268.169246][ T543] usb 4-1: USB disconnect, device number 111 [ 268.263590][ T449] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 268.272884][ T449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.281474][ T449] usb 5-1: Product: syz [ 268.286594][ T449] usb 5-1: Manufacturer: syz [ 268.291223][ T449] usb 5-1: SerialNumber: syz [ 268.303685][ T449] usb 5-1: config 0 descriptor?? [ 268.338790][ T542] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 268.346452][T10493] loop2: detected capacity change from 0 to 1024 [ 268.347940][ T542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.354812][ T449] usb-storage 5-1:0.127: USB Mass Storage device detected [ 268.362800][ T542] usb 2-1: Product: syz [ 268.373940][ T542] usb 2-1: Manufacturer: syz [ 268.378565][ T542] usb 2-1: SerialNumber: syz [ 268.379496][T10493] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 268.393351][ T449] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 268.402637][T10493] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 268.411570][T10493] EXT4-fs (loop2): orphan cleanup on readonly fs [ 268.418329][T10493] EXT4-fs error (device loop2): ext4_quota_enable:6431: comm syz.2.4768: Bad quota inum: 9, type: 2 [ 268.429597][T10493] EXT4-fs (loop2): Remounting filesystem read-only [ 268.436513][T10493] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 268.437684][ T449] usb-storage 5-1:0.0: USB Mass Storage device detected [ 268.452086][T10493] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 268.459286][ T449] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 268.465930][T10493] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,errors=remount-ro,nobarrier,stripe=0x0000000000000007,. Quota mode: writeback. [ 268.590056][T10510] loop2: detected capacity change from 0 to 2048 [ 268.620671][T10510] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 268.630261][T10510] FAT-fs (loop2): Filesystem has been set read-only [ 268.631671][ T694] usb 5-1: USB disconnect, device number 113 [ 268.725280][ T542] usb 2-1: cannot setup if 1: error -71 [ 268.730901][ T542] snd-usb-audio: probe of 2-1:1.1 failed with error -71 [ 268.741281][ T542] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 268.779236][ T542] usb 2-1: USB disconnect, device number 115 [ 268.811162][ T543] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 268.851588][T10541] loop2: detected capacity change from 0 to 512 [ 268.891756][T10541] FAT-fs (loop2): bogus number of FAT sectors [ 268.899395][T10541] FAT-fs (loop2): Can't find a valid FAT filesystem [ 269.262140][ T543] usb 1-1: unable to get BOS descriptor or descriptor too short [ 269.303912][T10567] loop1: detected capacity change from 0 to 512 [ 269.315888][ T542] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 269.348101][ T543] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 63, changing to 7 [ 269.360500][T10567] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 269.373648][ T30] audit: type=1400 audit(1795345292.097:296): avc: denied { unmount } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 269.502821][T10580] loop1: detected capacity change from 0 to 512 [ 269.574155][T10580] EXT4-fs: Invalid sb specification: sb=0x000000000000ffffJdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue [ 269.594702][T10580] EXT4-fs (loop1): Unrecognized mount option "sb=0x000000000000ffffJdebug" or missing value [ 269.605185][ T543] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 269.615745][ T543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.624355][ T543] usb 1-1: Product: syz [ 269.628970][T10544] F2FS-fs (loop3): invalid crc value [ 269.630829][ T543] usb 1-1: Manufacturer: syz [ 269.639329][ T543] usb 1-1: SerialNumber: syz [ 269.645298][T10544] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.659507][ T314] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 269.674413][T10544] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 269.713103][ T542] usb 3-1: not running at top speed; connect to a high speed hub [ 269.732968][ T30] audit: type=1400 audit(1795345292.432:297): avc: denied { create } for pid=10587 comm="syz.1.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.841938][ T542] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.854232][ T542] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.863488][ T542] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 269.873526][ T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.928803][ T542] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 270.028100][T10606] jbd2_journal_init_inode: Cannot locate journal superblock [ 270.036331][T10606] EXT4-fs (loop3): Could not load journal inode [ 270.046022][ T314] usb 5-1: config 120 has an invalid interface number: 125 but max is 0 [ 270.046160][ T543] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 270.054498][ T314] usb 5-1: config 120 has no interface number 0 [ 270.054537][ T314] usb 5-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 270.079257][ T314] usb 5-1: config 120 interface 125 has no altsetting 0 [ 270.089454][ T543] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 270.110441][ T543] usb 1-1: unit 4 not found! [ 270.131931][ T20] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 270.141125][ T543] usb 1-1: USB disconnect, device number 114 [ 270.174782][ T542] usb 3-1: string descriptor 0 read error: -71 [ 270.181223][ T542] uvcvideo 3-1:1.0: Found Unit with invalid ID 0 [ 270.195607][ T542] usb 3-1: Found UVC 71.01 device (0000:0000) [ 270.202690][ T542] usb 3-1: No streaming interface found for terminal 2. [ 270.211396][ T542] usb 3-1: USB disconnect, device number 115 [ 270.238219][T10618] tmpfs: Bad value for 'size' [ 270.250034][ T314] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 270.269227][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.278722][ T314] usb 5-1: Product: syz [ 270.284311][ T314] usb 5-1: Manufacturer: syz [ 270.289645][ T314] usb 5-1: SerialNumber: syz [ 270.314500][T10576] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 270.529100][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.541096][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.572195][ T6] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 270.573141][T10634] exfat: Deprecated parameter 'namecase' [ 270.586662][T10634] exfat: Deprecated parameter 'codepage' [ 270.592535][T10634] exfat: Bad value for 'codepage' [ 270.636758][ T314] ums-usbat 5-1:120.125: USB Mass Storage device detected [ 270.673326][ T314] ums-usbat: probe of 5-1:120.125 failed with error 3 [ 270.688630][ T314] usb 5-1: USB disconnect, device number 114 [ 270.722416][ T20] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 270.731877][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.741398][ T20] usb 2-1: Product: syz [ 270.746108][ T20] usb 2-1: Manufacturer: syz [ 270.749468][T10646] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 270.751048][ T20] usb 2-1: SerialNumber: syz [ 270.766229][T10646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 270.775028][T10646] EXT4-fs (loop2): orphan cleanup on readonly fs [ 270.782265][T10646] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.4839: attempt to clear invalid blocks 1024 len 1 [ 270.796297][T10646] EXT4-fs (loop2): Remounting filesystem read-only [ 270.803432][T10648] FAT-fs (loop0): bogus sectors per cluster 0 [ 270.810448][ T20] ipheth 2-1:1.0: Unable to find alternate settings interface [ 270.813573][T10646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4839: bg 0: block 361: padding at end of block bitmap is not set [ 270.819160][T10648] FAT-fs (loop0): Can't find a valid FAT filesystem [ 270.838684][T10646] EXT4-fs (loop2): Remounting filesystem read-only [ 270.845698][T10646] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 270.855162][T10646] EXT4-fs (loop2): Remounting filesystem read-only [ 270.862955][T10646] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4839: invalid indirect mapped block 1811939328 (level 0) [ 270.877637][T10646] EXT4-fs (loop2): Remounting filesystem read-only [ 270.884540][T10646] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4839: invalid indirect mapped block 2185560079 (level 1) [ 270.900039][T10646] EXT4-fs (loop2): Remounting filesystem read-only [ 270.907403][T10646] EXT4-fs (loop2): 1 truncate cleaned up [ 270.914706][T10646] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,journal_ioprio=0x0000000000000003. Quota mode: none. [ 270.981972][T10653] overlayfs: missing 'lowerdir' [ 271.002250][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.038636][ T314] usb 2-1: USB disconnect, device number 116 [ 271.098190][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 271.127109][T10665] set_capacity_and_notify: 5 callbacks suppressed [ 271.127122][T10665] loop4: detected capacity change from 0 to 128 [ 271.163422][T10665] FAT-fs (loop4): bogus sectors per cluster 7 [ 271.169638][T10665] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 271.179097][T10665] FAT-fs (loop4): Can't find a valid FAT filesystem [ 271.280739][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 271.290084][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.298634][ T6] usb 4-1: Product: syz [ 271.303331][ T542] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 271.311246][ T20] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 271.319591][ T6] usb 4-1: Manufacturer: syz [ 271.324612][ T6] usb 4-1: SerialNumber: syz [ 271.559919][ T314] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 271.590840][T10669] loop1: detected capacity change from 0 to 512 [ 271.658565][T10669] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.710173][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.721428][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.734946][ T542] usb 3-1: unable to get BOS descriptor or descriptor too short [ 271.764006][ T6] usb 4-1: MIDIStreaming interface descriptor not found [ 271.774149][ T6] usb 4-1: USB disconnect, device number 112 [ 271.784545][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 271.839147][ T542] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 271.847758][ T542] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 271.856589][ T542] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 271.866429][ T542] usb 3-1: config 129 has no interface number 0 [ 271.872718][ T542] usb 3-1: config 129 has no interface number 1 [ 271.878981][ T542] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 271.892420][ T542] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 271.903913][ T542] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 271.917308][ T542] usb 3-1: config 129 interface 135 has no altsetting 0 [ 271.925337][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.934749][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.942951][ T542] usb 3-1: config 129 interface 5 has no altsetting 0 [ 271.950077][ T20] usb 1-1: Product: syz [ 271.954287][ T20] usb 1-1: Manufacturer: syz [ 271.959023][ T20] usb 1-1: SerialNumber: syz [ 271.978618][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 271.989654][ T449] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 271.997491][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 272.204010][ T542] usb 3-1: string descriptor 0 read error: -22 [ 272.210390][ T542] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 272.222339][ T542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.224653][T10676] loop3: detected capacity change from 0 to 40427 [ 272.237026][ T314] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 272.246053][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.254384][ T314] usb 5-1: Product: syz [ 272.258102][ T20] cdc_ether 1-1:1.0: skipping garbage [ 272.258619][ T314] usb 5-1: Manufacturer: syz [ 272.264048][ T20] usb 1-1: bad CDC descriptors [ 272.268579][ T314] usb 5-1: SerialNumber: syz [ 272.269722][ T314] usb 5-1: config 0 descriptor?? [ 272.275000][ T542] usb 3-1: MIDIStreaming interface descriptor not found [ 272.279236][ T449] usb 2-1: Using ep0 maxpacket: 16 [ 272.288429][ T20] usb 1-1: USB disconnect, device number 115 [ 272.298000][T10676] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 272.309361][T10676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 272.318795][ T314] hub 5-1:0.0: bad descriptor, ignoring hub [ 272.326602][ T314] hub: probe of 5-1:0.0 failed with error -5 [ 272.333239][ T449] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 272.343143][ T314] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 272.418780][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 272.451625][T10678] loop3: detected capacity change from 0 to 512 [ 272.499150][ T314] usb 3-1: USB disconnect, device number 116 [ 272.505693][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 272.526891][T10678] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 272.612836][T10680] loop3: detected capacity change from 0 to 512 [ 272.622755][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 272.648417][T10680] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.676632][ T543] usb 5-1: USB disconnect, device number 115 [ 272.696465][T10683] loop3: detected capacity change from 0 to 1024 [ 272.708713][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 272.741830][T10683] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 272.794355][T10685] loop0: detected capacity change from 0 to 1024 [ 272.794631][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 272.812086][T10687] loop3: detected capacity change from 0 to 1024 [ 272.849674][T10685] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 272.863351][T10687] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.880418][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 272.922168][T10693] loop0: detected capacity change from 0 to 2048 [ 272.937467][T10693] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.943479][T10695] loop3: detected capacity change from 0 to 4096 [ 272.949493][T10693] ext4 filesystem being mounted at /956/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.966354][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 272.979054][T10695] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.055362][T10700] erofs: (device loop0): mounted with root inode @ nid 36. [ 273.062929][ T449] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 273.119526][T10707] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 273.138164][ T449] usb 2-1: string descriptor 0 read error: -71 [ 273.144622][ T449] usb 2-1: New USB device found, idVendor=04e8, idProduct=8e01, bcdDevice= 4.48 [ 273.155130][ T449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.171944][ T449] usb 2-1: rejected 8 configurations due to insufficient available bus power [ 273.181105][ T449] usb 2-1: no configuration chosen from 8 choices [ 273.188522][ T449] usb 2-1: USB disconnect, device number 117 [ 273.321531][T10714] erofs: (device loop4): mounted with root inode @ nid 36. [ 273.365912][T10718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.376992][ T543] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 273.387955][T10718] ext4 filesystem being mounted at /903/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.468293][T10723] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.483386][T10723] ext4 filesystem being mounted at /904/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.513823][ T694] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 273.685528][ T543] usb 1-1: Using ep0 maxpacket: 16 [ 273.857359][ T543] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.900285][ T694] usb 4-1: config 192 has an invalid interface number: 180 but max is 0 [ 273.930359][ T694] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 273.952134][ T694] usb 4-1: config 192 has no interface number 0 [ 273.962935][ T694] usb 4-1: config 192 interface 180 has no altsetting 0 [ 273.975482][ T543] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 213, changing to 7 [ 274.147246][ T694] usb 4-1: New USB device found, idVendor=1d0e, idProduct=9584, bcdDevice=61.ef [ 274.157381][ T694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.179413][ T694] usb 4-1: Product: syz [ 274.183781][ T694] usb 4-1: Manufacturer: syz [ 274.188698][ T694] usb 4-1: SerialNumber: syz [ 274.308230][ T543] usb 1-1: string descriptor 0 read error: -22 [ 274.314739][ T543] usb 1-1: New USB device found, idVendor=0e41, idProduct=414a, bcdDevice= 0.40 [ 274.336395][ T543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.384134][ T543] usb 1-1: 1:1 : bogus bTerminalLink 6 [ 274.512681][ T694] usb-storage 4-1:192.180: USB Mass Storage device detected [ 274.558956][ T694] usb 4-1: USB disconnect, device number 113 [ 274.633417][ T543] usb 1-1: USB disconnect, device number 116 [ 275.280920][T10726] F2FS-fs (loop2): Found nat_bits in checkpoint [ 275.332004][T10726] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 275.445397][T10728] F2FS-fs (loop4): Found nat_bits in checkpoint [ 275.564333][T10728] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.434808][T10738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 276.504841][T10738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 276.793947][T10782] set_capacity_and_notify: 26 callbacks suppressed [ 276.793967][T10782] loop1: detected capacity change from 0 to 32768 [ 276.809573][ T694] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 277.146824][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4910'. [ 277.184724][T10818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.239037][ T694] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.281958][ T694] usb 5-1: not running at top speed; connect to a high speed hub [ 277.354010][T10838] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.367951][ T694] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 277.397877][ T30] audit: type=1400 audit(1795345299.567:298): avc: denied { append } for pid=10841 comm="syz.1.4924" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.492553][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4931'. [ 277.567713][T10862] netlink: 'syz.3.4934': attribute type 3 has an invalid length. [ 277.571811][ T694] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 277.591527][T10784] loop2: detected capacity change from 0 to 131072 [ 277.596444][ T694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.619633][ T694] usb 5-1: Product: syz [ 277.629676][ T694] usb 5-1: Manufacturer: syz [ 277.635595][ T694] usb 5-1: SerialNumber: syz [ 277.648818][T10784] F2FS-fs (loop2): Found nat_bits in checkpoint [ 277.712871][T10784] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955 [ 277.733711][T10874] netlink: 'syz.3.4938': attribute type 1 has an invalid length. [ 277.739046][T10756] loop0: detected capacity change from 0 to 262144 [ 277.794303][ T30] audit: type=1400 audit(1795345299.940:299): avc: denied { write } for pid=10880 comm="syz.3.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.819063][ T542] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 277.847834][T10883] loop3: detected capacity change from 0 to 128 [ 277.913340][T10885] loop3: detected capacity change from 0 to 512 [ 278.011366][ T30] audit: type=1400 audit(1795345300.135:300): avc: denied { create } for pid=10888 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.070162][ T30] audit: type=1400 audit(1795345300.154:301): avc: denied { write } for pid=10888 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.076330][ T449] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 278.091123][ T30] audit: type=1400 audit(1795345300.154:302): avc: denied { nlmsg_write } for pid=10888 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.120065][ T542] usb 2-1: Using ep0 maxpacket: 32 [ 278.126659][ T694] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 278.161856][ T694] usb 5-1: USB disconnect, device number 116 [ 278.258781][ T542] usb 2-1: unable to get BOS descriptor set [ 278.291454][T10920] loop3: detected capacity change from 0 to 2048 [ 278.344707][ T542] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 278.355064][T10930] device xfrm0 entered promiscuous mode [ 278.369958][T10930] syz.2.4964 (10930) used greatest stack depth: 20512 bytes left [ 278.384553][T10932] ip_tables: iptables: counters copy to user failed while replacing table [ 278.403719][ T30] audit: type=1400 audit(1795345300.508:303): avc: denied { getopt } for pid=10933 comm="syz.2.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.426153][ T449] usb 1-1: Using ep0 maxpacket: 16 [ 278.442489][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4966'. [ 278.488393][T10949] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 278.537930][ T542] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 278.556599][ T542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.565871][ T542] usb 2-1: Product: syz [ 278.572163][ T542] usb 2-1: Manufacturer: syz [ 278.577294][ T542] usb 2-1: SerialNumber: syz [ 278.613102][T10858] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 278.688157][ T449] usb 1-1: string descriptor 0 read error: -22 [ 278.694673][ T449] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 278.704864][ T449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.753621][ T449] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 278.994147][ T543] usb 1-1: USB disconnect, device number 117 [ 279.050580][ T542] usb 2-1: USB disconnect, device number 118 [ 279.107756][T10972] loop3: detected capacity change from 0 to 512 [ 279.128941][T10972] EXT4-fs (loop3): Test dummy encryption mode enabled [ 279.143383][T10972] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,min_batch_time=0x0000000000000006,errors=remount-ro,debug_want_extra_isize=0x0000000000000200,. Quota mode: writeback. [ 279.172308][ T30] audit: type=1400 audit(1795345301.225:304): avc: denied { write } for pid=10971 comm="syz.3.4985" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.196787][ T30] audit: type=1400 audit(1795345301.225:305): avc: denied { add_name } for pid=10971 comm="syz.3.4985" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.221234][ T30] audit: type=1400 audit(1795345301.225:306): avc: denied { link } for pid=10971 comm="syz.3.4985" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.232378][T10956] loop2: detected capacity change from 0 to 262144 [ 279.256759][T10956] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.297944][T10956] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 279.306079][T10981] device sit0 entered promiscuous mode [ 279.315196][T10981] netlink: 'syz.3.4986': attribute type 1 has an invalid length. [ 279.323504][T10981] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4986'. [ 279.350883][ T30] audit: type=1400 audit(1795345301.393:307): avc: denied { setopt } for pid=10982 comm="syz.3.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.404552][T10989] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 279.800949][T11050] netlink: 'syz.0.5020': attribute type 2 has an invalid length. [ 279.820354][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5020'. [ 279.832178][T11050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.968926][T11086] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5036'. [ 280.032820][T11103] usb usb8: usbfs: process 11103 (syz.4.5044) did not claim interface 0 before use [ 280.048773][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.059641][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.066771][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.130356][T11122] loop0: detected capacity change from 0 to 256 [ 280.154513][T11130] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 280.162511][T11134] loop3: detected capacity change from 0 to 256 [ 280.190729][T11122] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 280.208201][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5063'. [ 280.218444][T11134] exfat: Deprecated parameter 'namecase' [ 280.236247][T11134] exfat: Deprecated parameter 'namecase' [ 280.247174][T11144] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 280.269423][T11134] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 280.313059][T11158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.361355][T11168] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5079'. [ 280.489610][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.508305][T11203] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 280.558074][T11198] EXT4-fs (loop0): Ignoring removed nobh option [ 280.594970][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.604269][T11198] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #3: comm syz.0.5091: corrupted inode contents [ 280.631250][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 280.637806][T11198] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #3: comm syz.0.5091: mark_inode_dirty error [ 280.656937][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.664237][T11234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.693410][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 280.723849][T11198] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #3: comm syz.0.5091: corrupted inode contents [ 280.737722][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 280.753868][T11198] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.5091: mark_inode_dirty error [ 280.765803][T11246] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 280.774996][T11246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 280.783622][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 280.790371][T11246] System zones: 0-1, 15-15, 18-18, 34-34 [ 280.792725][T11198] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.5091: Failed to acquire dquot type 0 [ 280.797555][T11246] EXT4-fs (loop4): orphan cleanup on readonly fs [ 280.815045][T11246] EXT4-fs error (device loop4): ext4_quota_enable:6431: comm syz.4.5115: Bad quota inum: 768, type: 0 [ 280.831313][T11246] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 280.855755][T11246] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 280.862640][T11246] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 280.874823][T11223] F2FS-fs (loop1): fault_injection options not supported [ 280.877132][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 280.883580][T11223] F2FS-fs (loop1): fault_type options not supported [ 280.900599][T11198] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.5091: corrupted inode contents [ 280.907733][T11246] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 280.920172][T11223] F2FS-fs (loop1): invalid crc value [ 280.932710][T11223] F2FS-fs (loop1): Found nat_bits in checkpoint [ 280.936837][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 280.947922][T11198] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #16: comm syz.0.5091: mark_inode_dirty error [ 280.959926][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 280.967887][T11198] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.5091: corrupted inode contents [ 280.977273][T11223] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 280.980510][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.002454][T11198] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.5091: mark_inode_dirty error [ 281.024663][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.031458][T11198] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.5091: corrupted inode contents [ 281.033079][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5126'. [ 281.044212][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.058776][T11269] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5126'. [ 281.084366][T11198] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 281.097814][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.104786][T11198] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.5091: corrupted inode contents [ 281.117064][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.123602][T11198] EXT4-fs error (device loop0): ext4_truncate:4317: inode #16: comm syz.0.5091: mark_inode_dirty error [ 281.139626][ T449] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 281.152602][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.166500][T11198] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 281.176067][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.184304][T11198] EXT4-fs (loop0): 1 truncate cleaned up [ 281.195519][T11198] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 281.208279][T11198] ext4 filesystem being mounted at /983/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.263071][T11198] EXT4-fs error (device loop0): ext4_search_dir:1551: inode #12: block 13: comm syz.0.5091: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 281.283082][T11198] EXT4-fs (loop0): Remounting filesystem read-only [ 281.489778][ T449] usb 3-1: not running at top speed; connect to a high speed hub [ 281.490000][T11360] exfat: Deprecated parameter 'namecase' [ 281.502167][T11367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=11367 comm=syz.1.5170 [ 281.525812][T11367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=11367 comm=syz.1.5170 [ 281.528072][T11360] exfat: Deprecated parameter 'namecase' [ 281.559837][T11372] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 281.577865][T11360] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 281.592472][ T449] usb 3-1: config 1 has an invalid interface number: 246 but max is 1 [ 281.607238][ T449] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.617576][ T449] usb 3-1: config 1 has no interface number 0 [ 281.624229][ T449] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 281.634113][ T449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.695060][ T449] usb 3-1: Found UVC 1.00 device (046d:0825) [ 281.704898][ T449] usb 3-1: No valid video chain found. [ 281.748711][T11409] binder: 11408:11409 ioctl c018620c 200000000000 returned -22 [ 281.798153][T11419] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 281.834089][T11413] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 281.893797][T11441] x_tables: unsorted entry at hook 3 [ 281.925091][ T694] usb 3-1: USB disconnect, device number 117 [ 282.064350][T11471] netlink: 'syz.1.5230': attribute type 16 has an invalid length. [ 282.072573][T11471] netlink: 'syz.1.5230': attribute type 17 has an invalid length. [ 282.100577][T11471] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.108002][T11471] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.249308][T11499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.347157][T11523] set_capacity_and_notify: 7 callbacks suppressed [ 282.347178][T11523] loop0: detected capacity change from 0 to 512 [ 282.405171][T11523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.417168][T11523] ext4 filesystem being mounted at /1019/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.510471][T11564] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 282.709827][T11601] __nla_validate_parse: 35 callbacks suppressed [ 282.709845][T11601] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5285'. [ 282.745852][T11605] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 282.913833][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5292'. [ 283.840262][ C1] sched: RT throttling activated [ 283.899555][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 283.899571][ T30] audit: type=1326 audit(1795345305.632:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11627 comm="syz.1.5299" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748c6adf19 code=0x7ffc0000 [ 283.932138][ T30] audit: type=1326 audit(1795345305.632:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11627 comm="syz.1.5299" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748c6adf19 code=0x7ffc0000 [ 283.959365][ T30] audit: type=1326 audit(1795345305.641:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11627 comm="syz.1.5299" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f748c6adf19 code=0x7ffc0000 [ 284.002830][T11648] loop0: detected capacity change from 0 to 128 [ 284.023368][T11650] loop1: detected capacity change from 0 to 256 [ 284.039214][ T30] audit: type=1326 audit(1795345305.641:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11627 comm="syz.1.5299" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748c6adf19 code=0x7ffc0000 [ 284.080787][ T30] audit: type=1400 audit(1795345305.744:351): avc: denied { read } for pid=11639 comm="syz.4.5305" path="socket:[49245]" dev="sockfs" ino=49245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.087950][T11648] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.138179][T11650] FAT-fs (loop1): Directory bread(block 64) failed [ 284.150678][T11660] loop2: detected capacity change from 0 to 256 [ 284.158092][T11650] FAT-fs (loop1): Directory bread(block 65) failed [ 284.165021][T11650] FAT-fs (loop1): Directory bread(block 66) failed [ 284.172374][T11650] FAT-fs (loop1): Directory bread(block 67) failed [ 284.179585][T11650] FAT-fs (loop1): Directory bread(block 68) failed [ 284.192261][T11660] exfat: Deprecated parameter 'namecase' [ 284.200634][T11650] FAT-fs (loop1): Directory bread(block 69) failed [ 284.216056][T11660] exfat: Deprecated parameter 'namecase' [ 284.224446][T11650] FAT-fs (loop1): Directory bread(block 70) failed [ 284.231439][T11650] FAT-fs (loop1): Directory bread(block 71) failed [ 284.246061][T11660] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 284.255227][T11650] FAT-fs (loop1): Directory bread(block 72) failed [ 284.278826][T11650] FAT-fs (loop1): Directory bread(block 73) failed [ 284.294156][T11678] loop0: detected capacity change from 0 to 256 [ 284.383252][T11689] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 284.391855][ T30] audit: type=1400 audit(1795345306.079:352): avc: denied { load_policy } for pid=11686 comm="syz.3.5327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 284.391884][T11691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5324'. [ 284.415872][T11689] SELinux: failed to load policy [ 284.424009][T11693] netlink: 'syz.4.5330': attribute type 1 has an invalid length. [ 284.467706][T11697] netlink: 'syz.1.5329': attribute type 3 has an invalid length. [ 284.496172][T11691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5324'. [ 284.497630][T11703] loop3: detected capacity change from 0 to 512 [ 284.595113][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5344'. [ 284.602519][T11703] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 284.614852][T11729] loop1: detected capacity change from 0 to 256 [ 284.624627][ T30] audit: type=1400 audit(1795345306.303:353): avc: denied { getopt } for pid=11727 comm="syz.2.5347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 284.628277][T11729] exfat: Deprecated parameter 'namecase' [ 284.655073][T11729] exfat: Deprecated parameter 'namecase' [ 284.664568][T11703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 284.676492][T11729] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 284.710241][T11703] System zones: 1-12 [ 284.714733][T11703] EXT4-fs (loop3): orphan cleanup on readonly fs [ 284.764315][T11703] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.5334: attempt to clear invalid blocks 1024 len 1 [ 284.848385][ T30] audit: type=1400 audit(1795345306.508:354): avc: denied { write } for pid=11758 comm="syz.2.5362" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 284.853850][T11703] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5334: bg 0: block 361: padding at end of block bitmap is not set [ 284.888046][ T30] audit: type=1400 audit(1795345306.545:355): avc: denied { ioctl } for pid=11758 comm="syz.2.5362" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 284.930164][T11703] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 284.967486][T11703] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5334: invalid indirect mapped block 1811939328 (level 0) [ 284.985190][T11778] loop0: detected capacity change from 0 to 256 [ 284.997194][T11781] loop1: detected capacity change from 0 to 256 [ 285.011103][T11703] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5334: invalid indirect mapped block 2 (level 2) [ 285.038168][T11703] EXT4-fs (loop3): 1 truncate cleaned up [ 285.048864][T11703] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 285.077946][T11789] loop4: detected capacity change from 0 to 256 [ 285.129043][T11789] exfat: Deprecated parameter 'namecase' [ 285.134774][T11789] exfat: Deprecated parameter 'namecase' [ 285.178419][T11797] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.203835][T11789] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 285.238379][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5382'. [ 285.259082][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5382'. [ 285.358338][T11825] xt_bpf: check failed: parse error [ 285.368625][ T30] audit: type=1400 audit(1795345307.002:356): avc: denied { read } for pid=11828 comm="syz.1.5396" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 285.412470][T11831] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 285.451994][T11843] mmap: syz.2.5403 (11843): VmData 29089792 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 285.481690][T11847] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 285.501736][T11847] device bridge1 entered promiscuous mode [ 285.570329][T11837] EXT4-fs (loop1): 1 orphan inode deleted [ 285.576160][T11837] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 285.589887][T11837] ext4 filesystem being mounted at /1018/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.601456][T11870] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5414'. [ 285.610776][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5414'. [ 285.633452][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5414'. [ 285.754718][T11888] EXT4-fs (loop3): 1 orphan inode deleted [ 285.765253][T11888] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 285.777601][T11888] ext4 filesystem being mounted at /1257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.783537][T11914] netlink: 'syz.4.5436': attribute type 12 has an invalid length. [ 285.892883][T11938] x_tables: ip6_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 352 [ 286.033606][T11990] xt_hashlimit: max too large, truncated to 1048576 [ 286.067555][T12000] device gretap2 entered promiscuous mode [ 286.140476][T12016] device bridge2 entered promiscuous mode [ 286.148304][T12022] device ipip0 entered promiscuous mode [ 286.297292][T12061] netlink: 'syz.3.5509': attribute type 30 has an invalid length. [ 286.509795][T12094] netlink: 'syz.4.5526': attribute type 3 has an invalid length. [ 286.632773][T12133] xt_hashlimit: size too large, truncated to 1048576 [ 286.640320][T12133] xt_hashlimit: max too large, truncated to 1048576 [ 286.717452][T12152] FAT-fs (loop3): Directory bread(block 64) failed [ 286.734557][T12152] FAT-fs (loop3): Directory bread(block 65) failed [ 286.754101][T12152] FAT-fs (loop3): Directory bread(block 66) failed [ 286.764200][T12152] FAT-fs (loop3): Directory bread(block 67) failed [ 286.777111][T12152] FAT-fs (loop3): Directory bread(block 68) failed [ 286.785991][T12152] FAT-fs (loop3): Directory bread(block 69) failed [ 286.800275][T12152] FAT-fs (loop3): Directory bread(block 70) failed [ 286.809055][T12152] FAT-fs (loop3): Directory bread(block 71) failed [ 286.820792][T12152] FAT-fs (loop3): Directory bread(block 72) failed [ 286.830393][T12152] FAT-fs (loop3): Directory bread(block 73) failed [ 286.877639][ T694] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 287.008671][T12188] kernel read not supported for file /policy (pid: 12188 comm: syz.3.5574) [ 287.174301][T12221] futex_wake_op: syz.2.5589 tries to shift op by -1; fix this program [ 287.221127][ T694] usb 5-1: unable to get BOS descriptor or descriptor too short [ 287.307011][ T694] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.318279][ T694] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 287.329218][ T694] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 287.343446][T12148] F2FS-fs (loop0): invalid crc value [ 287.352170][ T694] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.362072][ T694] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 287.365925][T12148] F2FS-fs (loop0): Found nat_bits in checkpoint [ 287.372258][ T694] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 287.397762][T12148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 287.438633][T12223] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 287.446612][T12223] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 287.465822][T12223] F2FS-fs (loop2): invalid crc value [ 287.484238][T12223] F2FS-fs (loop2): Found nat_bits in checkpoint [ 287.530422][T12223] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 287.537906][T12223] F2FS-fs (loop2): Start checkpoint disabled! [ 287.564847][T12223] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 287.574349][T12223] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 287.639692][ T694] usb 5-1: string descriptor 0 read error: -22 [ 287.647156][ T694] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.666897][ T694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.704076][T12120] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 287.708759][T12258] xt_TCPMSS: Only works on TCP SYN packets [ 287.794975][T12276] xt_CT: No such helper "syz1" [ 287.829209][T12287] overlayfs: failed to resolve 'obj_user=-': -2 [ 287.954563][T12327] xt_CT: No such helper "snmp_trap" [ 287.983252][ T694] cdc_ncm 5-1:1.0: bind() failure [ 287.993308][ T694] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 288.000894][ T694] cdc_ncm 5-1:1.1: bind() failure [ 288.016559][ T694] usb 5-1: USB disconnect, device number 117 [ 288.111153][T12373] __nla_validate_parse: 2 callbacks suppressed [ 288.111172][T12373] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5658'. [ 288.137457][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5658'. [ 288.160593][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5658'. [ 288.174278][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5658'. [ 288.206066][ T9494] lg-g15 0003:046D:0A07.0001: item fetching failed at offset 0/2 [ 288.215209][T12393] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5669'. [ 288.224964][ T9494] lg-g15: probe of 0003:046D:0A07.0001 failed with error -22 [ 288.288160][T12415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.356467][T12432] usb usb2: check_ctrlrecip: process 12432 (syz.1.5691) requesting ep 01 but needs 81 [ 288.368920][T12432] usb usb2: usbfs: process 12432 (syz.1.5691) did not claim interface 0 before use [ 288.401850][T12441] netlink: 'syz.1.5695': attribute type 3 has an invalid length. [ 288.417495][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5699'. [ 288.475049][T12462] set_capacity_and_notify: 6 callbacks suppressed [ 288.475067][T12462] loop2: detected capacity change from 0 to 512 [ 288.502979][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5709'. [ 288.542143][T12481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.549411][T12481] IPv6: NLM_F_CREATE should be set when creating new route [ 288.556682][T12481] IPv6: NLM_F_CREATE should be set when creating new route [ 288.603307][T12462] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000d4d,grpquota,,errors=continue. Quota mode: writeback. [ 288.629374][T12462] ext4 filesystem being mounted at /1071/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.641977][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5724'. [ 288.727263][T12530] loop4: detected capacity change from 0 to 256 [ 288.774316][T12540] xt_bpf: check failed: parse error [ 288.786054][T12530] FAT-fs (loop4): Directory bread(block 64) failed [ 288.797753][T12530] FAT-fs (loop4): Directory bread(block 65) failed [ 288.815339][T12530] FAT-fs (loop4): Directory bread(block 66) failed [ 288.826130][T12530] FAT-fs (loop4): Directory bread(block 67) failed [ 288.842405][T12530] FAT-fs (loop4): Directory bread(block 68) failed [ 288.862201][T12530] FAT-fs (loop4): Directory bread(block 69) failed [ 288.881481][T12530] FAT-fs (loop4): Directory bread(block 70) failed [ 288.893960][T12530] FAT-fs (loop4): Directory bread(block 71) failed [ 288.903074][T12530] FAT-fs (loop4): Directory bread(block 72) failed [ 288.923404][T12530] FAT-fs (loop4): Directory bread(block 73) failed [ 289.051695][T12523] loop1: detected capacity change from 0 to 40427 [ 289.099849][T12571] loop0: detected capacity change from 0 to 256 [ 289.154265][T12523] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(53) root(3) [ 289.197720][T12523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 289.219279][T12523] F2FS-fs (loop1): invalid crc value [ 289.232908][T12581] kernel read not supported for file /policy (pid: 12581 comm: syz.0.5761) [ 289.244566][T12523] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 289.261169][T12579] loop2: detected capacity change from 0 to 8192 [ 289.300569][T12523] F2FS-fs (loop1): recover fsync data on readonly fs [ 289.311788][T12598] loop0: detected capacity change from 0 to 256 [ 289.318888][T12523] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 289.327286][T12579] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 289.340308][T12579] FAT-fs (loop2): Filesystem has been set read-only [ 289.347696][T12523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.510677][T12620] netlink: 'syz.3.5783': attribute type 12 has an invalid length. [ 289.642825][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5797'. [ 289.682465][T12669] loop0: detected capacity change from 0 to 512 [ 289.733682][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 289.733701][ T30] audit: type=1400 audit(1795345311.073:392): avc: denied { create } for pid=12676 comm="syz.3.5809" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 289.760901][T12669] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 289.774752][T12679] loop2: detected capacity change from 0 to 512 [ 289.788647][T12668] kernel read not supported for file /policy (pid: 12668 comm: syz.4.5802) [ 289.803028][T12669] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 289.816445][ T30] audit: type=1400 audit(1795345311.092:393): avc: denied { unlink } for pid=309 comm="syz-executor" name="file0" dev="tmpfs" ino=6896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 289.848966][T12669] ext4 filesystem being mounted at /1142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.881290][T12692] netlink: 'syz.3.5816': attribute type 12 has an invalid length. [ 289.890855][ T30] audit: type=1400 audit(1795345311.213:394): avc: denied { remove_name } for pid=12667 comm="syz.0.5803" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.913836][ T30] audit: type=1400 audit(1795345311.213:395): avc: denied { unlink } for pid=12667 comm="syz.0.5803" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 289.936707][ T30] audit: type=1400 audit(1795345311.213:396): avc: denied { read append } for pid=12690 comm="syz.4.5815" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 289.962030][ T30] audit: type=1400 audit(1795345311.213:397): avc: denied { open } for pid=12690 comm="syz.4.5815" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 289.993334][ T30] audit: type=1400 audit(1795345311.232:398): avc: denied { ioctl } for pid=12690 comm="syz.4.5815" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 290.000382][T12699] loop3: detected capacity change from 0 to 2048 [ 290.044677][T12679] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,nombcache,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 290.063992][T12679] ext4 filesystem being mounted at /1094/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.096369][T12679] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 290.111901][T12679] EXT4-fs (loop2): Remounting filesystem read-only [ 290.122919][T12699] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: none. [ 290.141557][T12699] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz.3.5820: corrupted in-inode xattr [ 290.145287][ T30] audit: type=1400 audit(1795345311.446:399): avc: denied { create } for pid=12698 comm="syz.3.5820" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 290.155464][T12721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1007 sclass=netlink_audit_socket pid=12721 comm=syz.2.5828 [ 290.196055][ T30] audit: type=1400 audit(1795345311.493:400): avc: denied { audit_write } for pid=12720 comm="syz.2.5828" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 290.217485][ T30] audit: type=1107 audit(1795345311.493:401): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 290.328314][T12754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.344021][ T6] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 290.376213][ T542] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 290.436391][T12785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5861'. [ 290.474410][T12794] xt_socket: unknown flags 0x40 [ 290.526864][T12807] netlink: 'syz.3.5871': attribute type 2 has an invalid length. [ 290.584549][T12817] netlink: 'syz.3.5876': attribute type 11 has an invalid length. [ 290.729248][ T6] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 290.738450][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.804139][ T542] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.812446][ T6] usb-storage 5-1:1.0: USB Mass Storage device detected [ 290.836162][ T20] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 290.889908][ T542] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 291.050219][ T6] scsi host1: usb-storage 5-1:1.0 [ 291.057821][ T6] usb 5-1: USB disconnect, device number 118 [ 291.092918][ T542] usb 2-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 291.102028][ T542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.114220][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 291.146345][ T542] usb 2-1: Product: syz [ 291.150570][ T542] usb 2-1: Manufacturer: syz [ 291.155184][ T542] usb 2-1: SerialNumber: syz [ 291.242754][ T20] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 291.424523][ T20] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 291.433661][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.456499][ T20] usb 1-1: Product: syz [ 291.460715][ T20] usb 1-1: Manufacturer: syz [ 291.468554][ T20] usb 1-1: SerialNumber: syz [ 291.478523][ T20] r8152-cfgselector 1-1: config 0 descriptor?? [ 291.592170][T12841] loop4: detected capacity change from 0 to 16 [ 291.619939][ T542] usb 2-1: USB disconnect, device number 119 [ 291.699203][T12845] device vlan0 entered promiscuous mode [ 291.729891][T12841] erofs: (device loop4): mounted with root inode @ nid 36. [ 291.826422][T12851] FAT-fs (loop4): Directory bread(block 1048) failed [ 291.845385][T12851] FAT-fs (loop4): Directory bread(block 1049) failed [ 291.868481][T12851] FAT-fs (loop4): Directory bread(block 1050) failed [ 291.884909][T12851] FAT-fs (loop4): Directory bread(block 1051) failed [ 291.902491][T12851] FAT-fs (loop4): Directory bread(block 1052) failed [ 291.913788][T12851] FAT-fs (loop4): Directory bread(block 1053) failed [ 291.932015][T12851] FAT-fs (loop4): Directory bread(block 1054) failed [ 291.948565][T12851] FAT-fs (loop4): Directory bread(block 1055) failed [ 291.959671][T12851] attempt to access beyond end of device [ 291.959671][T12851] loop4: rw=2051, want=2056, limit=128 [ 291.980702][ T20] r8152-cfgselector 1-1: Unknown version 0x0000 [ 291.987044][ T20] r8152-cfgselector 1-1: bad CDC descriptors [ 292.034152][ T20] r8152-cfgselector 1-1: Unknown version 0x0000 [ 292.041384][ T20] r8152-cfgselector 1-1: USB disconnect, device number 118 [ 292.058381][T12838] syz.2.5883 (12838) used greatest stack depth: 20072 bytes left [ 292.427352][T12965] netlink: 'syz.1.5946': attribute type 4 has an invalid length. [ 292.476166][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.499796][T12985] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 292.675270][T13034] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.694589][T13034] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.5980: bg 0: block 5: invalid block bitmap [ 292.717850][T13034] EXT4-fs (loop4): Remounting filesystem read-only [ 292.721454][T13045] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 292.724481][T13034] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 292.741770][T13047] device vlan0 entered promiscuous mode [ 292.763012][T13034] EXT4-fs (loop4): Remounting filesystem read-only [ 292.778785][T13034] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5980: invalid indirect mapped block 3 (level 2) [ 292.805717][T13034] EXT4-fs (loop4): Remounting filesystem read-only [ 292.812431][T13034] EXT4-fs (loop4): 2 truncates cleaned up [ 292.818796][T13034] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,grpquota,. Quota mode: writeback. [ 292.972672][T13104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.982240][T13096] erofs: (device loop4): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block) [ 293.108790][T13122] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.128895][T13134] FAT-fs (loop1): Directory bread(block 64) failed [ 293.142357][T13134] FAT-fs (loop1): Directory bread(block 65) failed [ 293.142382][T13122] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.6023: bad orphan inode 131083 [ 293.163278][T13134] FAT-fs (loop1): Directory bread(block 66) failed [ 293.171770][T13134] FAT-fs (loop1): Directory bread(block 67) failed [ 293.178527][T13134] FAT-fs (loop1): Directory bread(block 68) failed [ 293.186133][T13134] FAT-fs (loop1): Directory bread(block 69) failed [ 293.194483][T13134] FAT-fs (loop1): Directory bread(block 70) failed [ 293.201185][T13134] FAT-fs (loop1): Directory bread(block 71) failed [ 293.207870][T13134] FAT-fs (loop1): Directory bread(block 72) failed [ 293.208801][T13122] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.214564][T13134] FAT-fs (loop1): Directory bread(block 73) failed [ 293.345738][T13173] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 293.458666][T13189] ================================================================== [ 293.466791][T13189] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 293.474991][T13189] Read of size 4 at addr ffff88811c686470 by task syz.3.6054/13189 [ 293.482911][T13189] [ 293.485261][T13189] CPU: 0 PID: 13189 Comm: syz.3.6054 Tainted: G W syzkaller #0 [ 293.494126][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 293.504222][T13189] Call Trace: [ 293.507612][T13189] [ 293.510566][T13189] __dump_stack+0x21/0x30 [ 293.514925][T13189] dump_stack_lvl+0x110/0x170 [ 293.519714][T13189] ? show_regs_print_info+0x20/0x20 [ 293.524939][T13189] ? load_image+0x3f0/0x3f0 [ 293.529463][T13189] print_address_description+0x7f/0x2c0 [ 293.535044][T13189] ? unaccount_page_cache_page+0x6f1/0x760 [ 293.541312][T13189] kasan_report+0x10f/0x150 [ 293.544944][T13167] F2FS-fs (loop0): invalid crc value [ 293.545843][T13189] ? unaccount_page_cache_page+0x6f1/0x760 [ 293.556939][T13189] __asan_report_load4_noabort+0x14/0x20 [ 293.562771][T13189] unaccount_page_cache_page+0x6f1/0x760 [ 293.568541][T13189] __delete_from_page_cache+0xbe/0x470 [ 293.574024][T13189] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 293.581064][T13189] ? __kasan_check_write+0x14/0x20 [ 293.586284][T13189] ? __kasan_check_read+0x11/0x20 [ 293.591335][T13189] ? workingset_eviction+0x402/0x9f0 [ 293.596644][T13189] __remove_mapping+0x601/0x990 [ 293.601518][T13189] ? page_remove_rmap+0xf40/0xf40 [ 293.606625][T13189] ? remove_mapping+0xa0/0xa0 [ 293.611616][T13189] ? __kasan_check_read+0x11/0x20 [ 293.616673][T13189] shrink_page_list+0x2a24/0x5800 [ 293.621731][T13189] ? shrink_page_list+0x8e1/0x5800 [ 293.627486][T13189] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 293.633758][T13189] ? __this_cpu_preempt_check+0x13/0x20 [ 293.639345][T13189] ? __mod_zone_page_state+0x8e/0xd0 [ 293.644664][T13189] ? isolate_lru_pages+0xff1/0x11f0 [ 293.649999][T13189] ? should_run_aging+0x410/0x410 [ 293.655053][T13189] ? cgroup_rstat_updated+0x80/0x360 [ 293.660756][T13189] ? __this_cpu_preempt_check+0x13/0x20 [ 293.667092][T13189] ? __count_memcg_events+0xec/0x120 [ 293.672860][T13189] shrink_lruvec+0x11eb/0x3b00 [ 293.674156][T13183] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 293.677661][T13189] ? down_read_trylock+0x317/0x630 [ 293.677688][T13189] ? mem_cgroup_shrink_node+0x550/0x550 [ 293.689908][T13183] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 293.690512][T13189] ? __kasan_check_write+0x14/0x20 [ 293.697932][T13183] F2FS-fs (loop4): invalid crc value [ 293.704228][T13189] ? _raw_spin_lock+0x94/0xf0 [ 293.704257][T13189] ? _raw_spin_trylock_bh+0x150/0x150 [ 293.704277][T13189] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 293.711269][T13167] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 293.714751][T13189] ? inactive_is_low+0x160/0x2f0 [ 293.714784][T13189] ? css_next_descendant_pre+0x1e1/0x210 [ 293.714806][T13189] ? mem_cgroup_iter+0x465/0x6c0 [ 293.724113][ T694] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 293.725186][T13189] shrink_node+0x11ee/0x2a40 [ 293.746795][T13183] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 293.747107][T13189] ? __kasan_check_write+0x14/0x20 [ 293.771931][T13167] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 293.780715][T13189] ? allow_direct_reclaim+0x370/0x370 [ 293.780749][T13189] ? _raw_spin_lock_irq+0x95/0xf0 [ 293.780768][T13189] ? _raw_spin_lock_irqsave+0x130/0x130 [ 293.780786][T13189] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 293.800324][T13183] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 293.804150][T13189] do_try_to_free_pages+0x5a7/0x1580 [ 293.810029][T13183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 293.815705][T13189] ? _raw_spin_lock_irqsave+0x130/0x130 [ 293.841435][T13189] ? try_to_free_pages+0x1010/0x1010 [ 293.846754][T13189] ? propagate_protected_usage+0x84/0x250 [ 293.852509][T13189] try_to_free_mem_cgroup_pages+0x261/0x610 [ 293.854724][T13183] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 293.858440][T13189] ? shrink_lruvec+0x3b00/0x3b00 [ 293.858470][T13189] ? mutex_unlock+0x8f/0x230 [ 293.875730][T13189] mem_cgroup_force_empty_write+0x130/0x170 [ 293.881664][T13189] ? memcg_stat_show+0x1360/0x1360 [ 293.886772][T13189] cgroup_file_write+0x294/0x560 [ 293.891717][T13189] ? cgroup_seqfile_stop+0xc0/0xc0 [ 293.896822][T13189] ? mutex_lock+0x9b/0x1c0 [ 293.901242][T13189] ? wait_for_completion_killable_timeout+0x10/0x10 [ 293.908183][T13189] ? __kasan_check_write+0x14/0x20 [ 293.913331][T13189] ? cgroup_seqfile_stop+0xc0/0xc0 [ 293.918642][T13189] kernfs_fop_write_iter+0x2bd/0x400 [ 293.924273][T13189] vfs_write+0x831/0xfd0 [ 293.928523][T13189] ? file_end_write+0x1b0/0x1b0 [ 293.933403][T13189] ? wait_for_completion_killable_timeout+0x10/0x10 [ 293.939995][T13189] ? __fget_files+0x2e1/0x340 [ 293.944673][T13189] ? __fdget_pos+0x2d2/0x380 [ 293.949285][T13189] ? ksys_write+0x70/0x260 [ 293.953915][T13189] ksys_write+0x14a/0x260 [ 293.958242][T13189] ? __ia32_sys_read+0x90/0x90 [ 293.963012][T13189] ? __kasan_check_write+0x14/0x20 [ 293.968118][T13189] ? switch_fpu_return+0x15d/0x2c0 [ 293.973234][T13189] __x64_sys_write+0x7b/0x90 [ 293.977833][T13189] x64_sys_call+0x8ef/0x9a0 [ 293.982433][T13189] do_syscall_64+0x4c/0xa0 [ 293.986857][T13189] ? clear_bhb_loop+0x50/0xa0 [ 293.991532][T13189] ? clear_bhb_loop+0x50/0xa0 [ 293.996212][T13189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.002099][T13189] RIP: 0033:0x7f2201728f19 [ 294.006598][T13189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.026209][T13189] RSP: 002b:00007f2200177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.034643][T13189] RAX: ffffffffffffffda RBX: 00007f22019a5fa0 RCX: 00007f2201728f19 [ 294.042627][T13189] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 294.050921][T13189] RBP: 00007f22017b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 294.058986][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.067346][T13189] R13: 00007f22019a6038 R14: 00007f22019a5fa0 R15: 00007ffe5d9082c8 [ 294.075342][T13189] [ 294.078444][T13189] [ 294.080905][T13189] Allocated by task 306: [ 294.085149][T13189] __kasan_kmalloc+0xd4/0x100 [ 294.089828][T13189] __kmalloc+0x13d/0x2c0 [ 294.094064][T13189] kvmalloc_node+0x211/0x320 [ 294.098754][T13189] alloc_fdtable+0x10b/0x2e0 [ 294.103369][T13189] dup_fd+0x896/0xad0 [ 294.107448][T13189] copy_files+0x76/0xe0 [ 294.109234][ T694] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 294.111687][T13189] copy_process+0x1080/0x3230 [ 294.121732][ T694] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 294.126151][T13189] kernel_clone+0x233/0x960 [ 294.126176][T13189] __x64_sys_clone+0x198/0x210 [ 294.145120][T13189] x64_sys_call+0x41f/0x9a0 [ 294.149766][T13189] do_syscall_64+0x4c/0xa0 [ 294.154261][T13189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.160163][T13189] [ 294.162640][T13189] Freed by task 13152: [ 294.166710][T13189] kasan_set_track+0x4a/0x70 [ 294.171304][T13189] kasan_set_free_info+0x23/0x40 [ 294.176688][T13189] ____kasan_slab_free+0x125/0x160 [ 294.181819][T13189] __kasan_slab_free+0x11/0x20 [ 294.186714][T13189] slab_free_freelist_hook+0xc2/0x190 [ 294.192107][T13189] kfree+0xc4/0x270 [ 294.195938][T13189] kvfree+0x35/0x40 [ 294.199740][T13189] put_files_struct+0x27a/0x320 [ 294.204584][T13189] exit_files+0x80/0xa0 [ 294.208747][T13189] do_exit+0xb39/0x29a0 [ 294.213109][T13189] do_group_exit+0x149/0x310 [ 294.217699][T13189] __x64_sys_exit_group+0x3f/0x40 [ 294.222781][T13189] x64_sys_call+0x832/0x9a0 [ 294.227367][T13189] do_syscall_64+0x4c/0xa0 [ 294.231803][T13189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.237817][T13189] [ 294.240152][T13189] Last potentially related work creation: [ 294.245878][T13189] kasan_save_stack+0x3a/0x60 [ 294.250551][T13189] __kasan_record_aux_stack+0xd2/0x100 [ 294.256025][T13189] kasan_record_aux_stack_noalloc+0xb/0x10 [ 294.261947][T13189] kvfree_call_rcu+0xb6/0x860 [ 294.266624][T13189] drop_sysctl_table+0x2f5/0x430 [ 294.271558][T13189] unregister_sysctl_table+0x7a/0x120 [ 294.276938][T13189] unregister_net_sysctl_table+0x15/0x20 [ 294.282565][T13189] addrconf_ifdown+0x15bf/0x1910 [ 294.287558][T13189] addrconf_notify+0x3bd/0xe00 [ 294.292398][T13189] raw_notifier_call_chain+0x90/0x100 [ 294.297778][T13189] unregister_netdevice_many+0x103d/0x1a00 [ 294.301812][ T694] usb 3-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 294.303620][T13189] unregister_netdevice_queue+0x2e1/0x320 [ 294.303647][T13189] br_dev_delete+0xfc/0x110 [ 294.312830][ T694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.318406][T13189] br_dev_newlink+0xef/0x110 [ 294.318435][T13189] rtnl_newlink+0x137f/0x1900 [ 294.323020][ T694] usb 3-1: Product: syz [ 294.331077][T13189] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 294.331105][T13189] netlink_rcv_skb+0x1e9/0x430 [ 294.335919][ T694] usb 3-1: Manufacturer: syz [ 294.340657][T13189] rtnetlink_rcv+0x1c/0x20 [ 294.340681][T13189] netlink_unicast+0x86c/0xa30 [ 294.345170][ T694] usb 3-1: SerialNumber: syz [ 294.349762][T13189] netlink_sendmsg+0x879/0xb80 [ 294.349785][T13189] ____sys_sendmsg+0x5be/0x8f0 [ 294.376665][T13185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.377726][T13189] ___sys_sendmsg+0x236/0x2e0 [ 294.382582][T13185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.390043][T13189] __x64_sys_sendmsg+0x201/0x2d0 [ 294.406886][T13189] x64_sys_call+0x4b/0x9a0 [ 294.411351][T13189] do_syscall_64+0x4c/0xa0 [ 294.415791][T13189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.421721][T13189] [ 294.424040][T13189] Second to last potentially related work creation: [ 294.430610][T13189] kasan_save_stack+0x3a/0x60 [ 294.435348][T13189] __kasan_record_aux_stack+0xd2/0x100 [ 294.440812][T13189] kasan_record_aux_stack_noalloc+0xb/0x10 [ 294.446635][T13189] insert_work+0x51/0x310 [ 294.450976][T13189] __queue_work+0x8e1/0xc60 [ 294.455470][T13189] queue_work_on+0xde/0x150 [ 294.460329][T13189] destroy_super_rcu+0xd1/0xe0 [ 294.465125][T13189] rcu_do_batch+0x4c1/0xbf0 [ 294.469628][T13189] rcu_core+0x4a3/0xef0 [ 294.473804][T13189] rcu_core_si+0x9/0x10 [ 294.478084][T13189] handle_softirqs+0x250/0x560 [ 294.482891][T13189] __irq_exit_rcu+0x52/0xf0 [ 294.487413][T13189] irq_exit_rcu+0x9/0x10 [ 294.491652][T13189] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 294.497297][T13189] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 294.503271][T13189] [ 294.505587][T13189] The buggy address belongs to the object at ffff88811c686000 [ 294.505587][T13189] which belongs to the cache kmalloc-2k of size 2048 [ 294.519630][T13189] The buggy address is located 1136 bytes inside of [ 294.519630][T13189] 2048-byte region [ffff88811c686000, ffff88811c686800) [ 294.533071][T13189] The buggy address belongs to the page: [ 294.538692][T13189] page:ffffea000471a000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c680 [ 294.549735][T13189] head:ffffea000471a000 order:3 compound_mapcount:0 compound_pincount:0 [ 294.558182][T13189] flags: 0x4000000000010200(slab|head|zone=1) [ 294.564280][T13189] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043200 [ 294.572988][T13189] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 294.581686][T13189] page dumped because: kasan: bad access detected [ 294.588097][T13189] page_owner tracks the page as allocated [ 294.593800][T13189] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 195, ts 7902099912, free_ts 0 [ 294.612195][T13189] post_alloc_hook+0x192/0x1b0 [ 294.616976][T13189] prep_new_page+0x1c/0x110 [ 294.621508][T13189] get_page_from_freelist+0x2d42/0x2dd0 [ 294.624301][T13185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.627073][T13189] __alloc_pages+0x1a2/0x460 [ 294.636924][T13185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.638713][T13189] new_slab+0xa0/0x4d0 [ 294.649746][T13189] ___slab_alloc+0x3ac/0x840 [ 294.654360][T13189] __slab_alloc+0x49/0x90 [ 294.657399][ T694] zaurus 3-1:1.0 usb0: register 'zaurus' at usb-dummy_hcd.2-1, pseudo-MDLM (BLAN) device, da:06:45:1f:6c:2f [ 294.658688][T13189] __kmalloc_track_caller+0x169/0x2c0 [ 294.658714][T13189] kmemdup+0x26/0x60 [ 294.679596][T13189] bpf_prog_create_from_user+0x284/0x420 [ 294.685257][T13189] do_seccomp+0x803/0x1480 [ 294.689708][T13189] prctl_set_seccomp+0x4c/0x60 [ 294.694501][T13189] __se_sys_prctl+0x543/0x1210 [ 294.699404][T13189] __x64_sys_prctl+0xbf/0xd0 [ 294.704022][T13189] x64_sys_call+0x633/0x9a0 [ 294.708734][T13189] do_syscall_64+0x4c/0xa0 [ 294.713269][T13189] page_owner free stack trace missing [ 294.718744][T13189] [ 294.721198][T13189] Memory state around the buggy address: [ 294.726846][T13189] ffff88811c686300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.734951][T13189] ffff88811c686380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.743043][T13189] >ffff88811c686400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.751124][T13189] ^ [ 294.758870][T13189] ffff88811c686480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.766967][T13189] ffff88811c686500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.775242][T13189] ================================================================== [ 294.783323][T13189] Disabling lock debugging due to kernel taint [ 294.981183][ T543] usb 3-1: USB disconnect, device number 118 [ 294.987634][ T543] zaurus 3-1:1.0 usb0: unregister 'zaurus' usb-dummy_hcd.2-1, pseudo-MDLM (BLAN) device