last executing test programs: 2.425032742s ago: executing program 4 (id=5220): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000600)={[{@shortname_mixed}, {@shortname_lower}, {@rodir}, {@utf8}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}]}, 0x6, 0x2cb, &(0x7f0000001040)="$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") link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)='./file0\x00') 2.261654635s ago: executing program 4 (id=5227): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x601c01, 0x0) 2.149458396s ago: executing program 4 (id=5232): r0 = socket(0x28, 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 2.112260417s ago: executing program 4 (id=5236): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) 1.673570414s ago: executing program 3 (id=5258): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000040)) 1.646058924s ago: executing program 3 (id=5259): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') read$FUSE(r0, 0x0, 0x0) 1.612257885s ago: executing program 3 (id=5261): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x2, &(0x7f0000000300)=[{0x54, 0xfe}, {0x6, 0x0, 0x0, 0xfff}]}) 1.526410316s ago: executing program 3 (id=5263): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2a, 0x1}, 0x14}}, 0x0) 1.498922886s ago: executing program 3 (id=5264): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x1, 0x105ac, &(0x7f00000105c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x4) 813.362307ms ago: executing program 0 (id=5287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 544.620591ms ago: executing program 2 (id=5289): r0 = syz_clone(0x40106000, 0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001380)) sched_setaffinity(r0, 0x8, &(0x7f0000001400)=0x5) 544.566461ms ago: executing program 4 (id=5290): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setgid(0xee00) 543.697421ms ago: executing program 0 (id=5299): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) 543.325231ms ago: executing program 1 (id=5291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) 488.054632ms ago: executing program 4 (id=5292): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0}, 0x0) 471.072563ms ago: executing program 0 (id=5293): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77c, &(0x7f00000002c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) 422.666444ms ago: executing program 1 (id=5294): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000001540)=""/4098, 0x1002}], 0x1, 0x203, 0x0) 421.693594ms ago: executing program 3 (id=5295): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000b00)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000511ea0014000027000089fee1434f1e593e34d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b2a53ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf020201800015b2ccd243f295ed94e0ad91bd07349b6f57846f4fc2d63dd16b17e583df550c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 323.856115ms ago: executing program 1 (id=5296): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) 280.836255ms ago: executing program 1 (id=5297): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @loopback}}) 259.387526ms ago: executing program 1 (id=5298): mlockall(0x5) syz_clone(0x100000, 0x0, 0x0, &(0x7f000000d480), 0x0, &(0x7f000000d500)='\x00') 178.658627ms ago: executing program 2 (id=5300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtaction={0x8c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) 163.074578ms ago: executing program 0 (id=5301): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x2, 0x800, 0x100, 0x4, 0x2, 0x6, 0xffff, 0x1}}) 154.774828ms ago: executing program 2 (id=5302): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) 109.668178ms ago: executing program 2 (id=5303): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB="10000000150001"], 0x14}}, 0x0) 102.530398ms ago: executing program 0 (id=5304): unshare(0x22020400) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 78.227788ms ago: executing program 2 (id=5305): r0 = socket(0x10, 0x80002, 0x0) fcntl$setsig(r0, 0xa, 0xfdfffffffefffffd) 71.742609ms ago: executing program 0 (id=5306): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000180), 0x6, 0x5fc, &(0x7f0000000600)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 40.27618ms ago: executing program 2 (id=5307): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3, 0x0, 0x2000000}) 0s ago: executing program 1 (id=5308): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x3, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) kernel console output (not intermixed with test programs): op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.802846][ T1784] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 274.811669][ T365] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.830279][ T1782] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 274.838147][ T1782] blk_update_request: I/O error, dev loop3, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.840290][ T1784] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 274.850772][ T1782] Buffer I/O error on dev loop3p2, logical block 10, async page read [ 274.870786][ T365] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 274.876558][ T1782] Buffer I/O error on dev loop3p2, logical block 11, async page read [ 274.882970][ T74] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.901112][ T365] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 274.913400][ T74] usb 3-1: config 179 has no interface number 0 [ 274.923745][ T74] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 274.956937][ T74] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.980942][ T74] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.994085][ T74] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 275.003394][ T74] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.160922][ T9792] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 275.190778][ T9792] F2FS-fs (loop3): invalid crc value [ 275.199836][ T9792] F2FS-fs (loop3): invalid crc value [ 275.205905][ T9792] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 275.214285][ T1057] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 275.270789][ T399] usb 3-1: USB disconnect, device number 89 [ 275.437064][ T9809] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 275.469339][ T9809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.481858][ T74] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 275.506908][ T9809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.599065][ T1057] usb 5-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 275.608192][ T1057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.617771][ T1057] usb 5-1: config 0 descriptor?? [ 275.663922][ T1057] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 275.737920][ T74] usb 2-1: Using ep0 maxpacket: 16 [ 275.742938][ T693] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 275.876961][ T74] usb 2-1: config 0 has an invalid interface number: 126 but max is 3 [ 275.882143][ T399] usb 5-1: USB disconnect, device number 94 [ 275.890750][ T74] usb 2-1: config 0 has an invalid interface number: 255 but max is 3 [ 275.908940][ T74] usb 2-1: config 0 has an invalid interface number: 63 but max is 3 [ 275.928042][ T74] usb 2-1: config 0 has an invalid interface number: 238 but max is 3 [ 275.936263][ T74] usb 2-1: config 0 has an invalid interface number: 115 but max is 3 [ 275.951733][ T74] usb 2-1: config 0 has an invalid interface number: 114 but max is 3 [ 275.968252][ T74] usb 2-1: config 0 has 6 interfaces, different from the descriptor's value: 4 [ 275.977424][ T74] usb 2-1: config 0 has no interface number 0 [ 275.983459][ T74] usb 2-1: config 0 has no interface number 1 [ 275.989804][ T74] usb 2-1: config 0 has no interface number 2 [ 275.995916][ T74] usb 2-1: config 0 has no interface number 3 [ 276.001910][ T74] usb 2-1: config 0 has no interface number 4 [ 276.008049][ T74] usb 2-1: config 0 has no interface number 5 [ 276.014122][ T74] usb 2-1: config 0 interface 126 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.027330][ T74] usb 2-1: too many endpoints for config 0 interface 255 altsetting 45: 210, using maximum allowed: 30 [ 276.038505][ T74] usb 2-1: config 0 interface 255 altsetting 45 endpoint 0x6 has invalid wMaxPacketSize 0 [ 276.048892][ T74] usb 2-1: config 0 interface 255 altsetting 45 has 1 endpoint descriptor, different from the interface descriptor's value: 210 [ 276.062470][ T74] usb 2-1: too many endpoints for config 0 interface 115 altsetting 73: 247, using maximum allowed: 30 [ 276.064573][ T9829] EXT4-fs error (device loop2): mb_free_blocks:1458: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 276.073919][ T74] usb 2-1: config 0 interface 115 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 276.101130][ T74] usb 2-1: config 0 interface 126 has no altsetting 0 [ 276.108349][ T74] usb 2-1: config 0 interface 255 has no altsetting 0 [ 276.113522][ T9829] EXT4-fs (loop2): Remounting filesystem read-only [ 276.115466][ T74] usb 2-1: config 0 interface 238 has no altsetting 0 [ 276.121313][ T9829] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 45 vs 56 free clusters [ 276.128462][ T74] usb 2-1: config 0 interface 115 has no altsetting 0 [ 276.148729][ T693] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 276.157787][ T693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.165845][ T9829] EXT4-fs (loop2): 1 orphan inode deleted [ 276.166066][ T74] usb 2-1: config 0 interface 114 has no altsetting 0 [ 276.171399][ T9829] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,resgid=0x0000000000000000,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x0000000000000005,usrquota, [ 276.171564][ T9829] ext4 filesystem being mounted at /813/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 276.180222][ T693] usb 4-1: config 0 descriptor?? [ 276.251882][ T693] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 276.259884][ T693] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 276.379336][ T74] usb 2-1: New USB device found, idVendor=0572, idProduct=6831, bcdDevice= f.71 [ 276.388417][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.396586][ T74] usb 2-1: Product: syz [ 276.400917][ T74] usb 2-1: Manufacturer: syz [ 276.405385][ T74] usb 2-1: SerialNumber: syz [ 276.410817][ T74] usb 2-1: config 0 descriptor?? [ 276.418801][ T9840] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 276.446253][ T9840] EXT4-fs (loop2): can't mount with commit=3, fs mounted w/o journal [ 276.481142][ T9843] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 276.498440][ T399] usb 4-1: USB disconnect, device number 94 [ 276.505404][ T9843] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.516473][ T9843] EXT4-fs (loop4): orphan cleanup on readonly fs [ 276.523032][ T9843] EXT4-fs error (device loop4): ext4_quota_enable:6052: comm syz.4.4026: Bad quota inum: 64, type: 0 [ 276.534431][ T9843] EXT4-fs (loop4): Remounting filesystem read-only [ 276.541040][ T9843] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 276.556037][ T9843] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 276.562816][ T9843] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,usrjquota=./file0,journal_dev=0x00000000000000042 [ 276.906110][ T9874] IPv6: addrconf: prefix option has invalid lifetime [ 276.912727][ T9874] IPv6: addrconf: prefix option has invalid lifetime [ 276.946385][ T74] usb 2-1: USB disconnect, device number 91 [ 277.020719][ T693] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 277.132354][ T9882] EXT4-fs (loop0): Test dummy encryption mode enabled [ 277.182997][ T9882] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,test_dummy_encryption=v1,max_dir_size_kb=0x000000003f000000, [ 277.225027][ T9882] ext4 filesystem being mounted at /781/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 277.287829][ T693] usb 5-1: Using ep0 maxpacket: 16 [ 277.416244][ T693] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 277.424237][ T693] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.434304][ T693] usb 5-1: config 0 has no interface number 0 [ 277.467795][ T9849] F2FS-fs (loop2): Invalid log sectorsize (1801) [ 277.480376][ T9849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 277.515222][ T9849] F2FS-fs (loop2): invalid crc value [ 277.542516][ T9849] F2FS-fs (loop2): Found nat_bits in checkpoint [ 277.585532][ T9849] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 277.594082][ T9849] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 277.602077][ T9913] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 277.611655][ T693] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 277.627018][ T693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.645867][ T693] usb 5-1: Product: syz [ 277.649873][ T693] usb 5-1: Manufacturer: syz [ 277.654662][ T693] usb 5-1: SerialNumber: syz [ 277.660170][ T693] usb 5-1: config 0 descriptor?? [ 277.667791][ T9913] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 277.672799][ T386] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 277.677005][ T9913] EXT4-fs (loop1): orphan cleanup on readonly fs [ 277.690311][ T9913] EXT4-fs error (device loop1): ext4_read_inode_bitmap:162: comm syz.1.4056: Inode bitmap for bg 0 marked uninitialized [ 277.703247][ T9913] EXT4-fs (loop1): Remounting filesystem read-only [ 277.710013][ T9913] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,usrjquota=,lazytime, [ 277.727051][ T693] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 277.733308][ T693] uvcvideo: No valid video chain found. [ 277.929198][ T386] usb 4-1: Using ep0 maxpacket: 16 [ 277.942927][ T18] usb 5-1: USB disconnect, device number 95 [ 277.982662][ T399] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 278.110989][ T386] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.153809][ T693] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 278.196519][ T386] usb 4-1: config 8 has an invalid interface number: 11 but max is 0 [ 278.204463][ T386] usb 4-1: config 8 has no interface number 0 [ 278.210461][ T386] usb 4-1: config 8 interface 11 has no altsetting 0 [ 278.314094][ T1057] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 278.367565][ T399] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 278.375451][ T399] usb 1-1: config 0 has no interface number 0 [ 278.381531][ T386] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.a3 [ 278.390431][ T399] usb 1-1: config 0 interface 30 has no altsetting 0 [ 278.396936][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.404710][ T386] usb 4-1: Product: syz [ 278.408670][ T386] usb 4-1: Manufacturer: syz [ 278.413170][ T386] usb 4-1: SerialNumber: syz [ 278.421062][ T693] usb 2-1: Using ep0 maxpacket: 32 [ 278.542194][ T9941] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 278.549276][ T693] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 278.555243][ T9941] EXT4-fs error (device loop4): ext4_get_journal_inode:4880: inode #32: comm syz.4.4068: iget: special inode unallocated [ 278.559640][ T693] usb 2-1: config 0 has no interface number 0 [ 278.572081][ T399] usb 1-1: New USB device found, idVendor=1b3d, idProduct=011e, bcdDevice= 2.f9 [ 278.578583][ T693] usb 2-1: config 0 interface 17 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.589861][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.597901][ T693] usb 2-1: config 0 interface 17 has no altsetting 0 [ 278.605502][ T9941] EXT4-fs (loop4): no journal found [ 278.617025][ T399] usb 1-1: Product: syz [ 278.620919][ T399] usb 1-1: Manufacturer: syz [ 278.622768][ T9941] EXT4-fs (loop4): can't get journal size [ 278.625999][ T399] usb 1-1: SerialNumber: syz [ 278.633230][ T9941] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,noblock_validity,sysvgroups,,errors=continue [ 278.642323][ T399] usb 1-1: config 0 descriptor?? [ 278.689259][ T399] ftdi_sio 1-1:0.30: FTDI USB Serial Device converter detected [ 278.697140][ T399] usb 1-1: Detected FT8U232AM [ 278.703116][ T399] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.711679][ T386] usb-storage 4-1:8.11: USB Mass Storage device detected [ 278.718658][ T1057] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 278.731388][ T1057] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 278.742331][ T23] audit: type=1326 audit(1742778355.450:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.4.4069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff93676b169 code=0x0 [ 278.770821][ T386] usb-storage 4-1:8.11: Quirks match for vid 057b pid 0000: 1 [ 278.778512][ T386] usb-storage 4-1:8.11: This device (057b,0000,00a3 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.4.290-syzkaller-00002-g41adfeb3d639) [ 278.778512][ T386] Please send a copy of this message to and [ 278.806463][ T1057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.816814][ T693] usb 2-1: New USB device found, idVendor=0403, idProduct=e808, bcdDevice=92.90 [ 278.817403][ T1057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 278.825975][ T693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.825986][ T693] usb 2-1: Product: syz [ 278.825996][ T693] usb 2-1: Manufacturer: syz [ 278.826013][ T693] usb 2-1: SerialNumber: syz [ 278.868029][ T693] usb 2-1: config 0 descriptor?? [ 278.896475][ T386] usb 4-1: USB disconnect, device number 95 [ 278.907721][ T399] usb 1-1: USB disconnect, device number 99 [ 278.914747][ T399] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.924726][ T693] ftdi_sio 2-1:0.17: FTDI USB Serial Device converter detected [ 278.932612][ T693] usb 2-1: Detected FT-X [ 278.934870][ T399] ftdi_sio 1-1:0.30: device disconnected [ 279.008988][ T1057] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 279.018009][ T1057] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 279.025963][ T1057] usb 3-1: Product: syz [ 279.029902][ T1057] usb 3-1: Manufacturer: syz [ 279.034497][ T1057] usb 3-1: SerialNumber: syz [ 279.039727][ T1057] usb 3-1: config 0 descriptor?? [ 279.158530][ T693] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 279.179890][ T693] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 279.201461][ T693] ftdi_sio 2-1:0.17: GPIO initialisation failed: -71 [ 279.208744][ T693] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 279.259891][ T693] usb 2-1: USB disconnect, device number 92 [ 279.287373][ T693] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 279.303393][ T693] ftdi_sio 2-1:0.17: device disconnected [ 279.308838][ T1057] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 279.318080][ T1057] usb 3-1: USB disconnect, device number 90 [ 279.338864][ T23] audit: type=1326 audit(1742778356.002:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.3.4080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2cf5e169 code=0x0 [ 279.362015][ T18] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 279.714377][ T74] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 279.810555][ T18] usb 5-1: unable to get BOS descriptor or descriptor too short [ 279.867004][ T18] usb 5-1: not running at top speed; connect to a high speed hub [ 279.928123][ T1057] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 279.970925][ T18] usb 5-1: config 1 has an invalid interface number: 4 but max is 0 [ 279.978908][ T18] usb 5-1: config 1 has no interface number 0 [ 279.984796][ T74] usb 4-1: Using ep0 maxpacket: 16 [ 279.989796][ T18] usb 5-1: config 1 interface 4 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 280.000523][ T18] usb 5-1: config 1 interface 4 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.025090][ T9998] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 280.040746][ T9998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 280.049584][ T9998] F2FS-fs (loop1): fault_injection options not supported [ 280.062294][ T9998] F2FS-fs (loop1): invalid crc value [ 280.069645][ T9998] F2FS-fs (loop1): Found nat_bits in checkpoint [ 280.109936][ T74] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 280.125468][ T74] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 280.136720][ T74] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.146918][ T74] usb 4-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 280.158326][ T74] usb 4-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 280.171742][ T74] usb 4-1: config 1 interface 2 has no altsetting 0 [ 280.178522][ T18] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=fd.63 [ 280.187587][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.195847][ T18] usb 5-1: Product: syz [ 280.199885][ T18] usb 5-1: Manufacturer: syz [ 280.204250][ T18] usb 5-1: SerialNumber: syz [ 280.209175][ T9998] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 280.217457][ T9998] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 280.334390][ T1057] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 280.342416][ T1057] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.353734][ T1057] usb 1-1: config 0 has no interface number 0 [ 280.366399][ T74] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.375252][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.383374][ T74] usb 4-1: Product: syz [ 280.387344][ T74] usb 4-1: Manufacturer: syz [ 280.392296][ T74] usb 4-1: SerialNumber: syz [ 280.537403][ T1057] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 280.546269][ T1057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.548799][ T18] snd-usb-audio: probe of 5-1:1.4 failed with error -90 [ 280.554490][ T1057] usb 1-1: Product: syz [ 280.562303][ T18] usb 5-1: USB disconnect, device number 96 [ 280.573942][ T1057] usb 1-1: Manufacturer: syz [ 280.578454][ T1057] usb 1-1: SerialNumber: syz [ 280.584372][ T1057] usb 1-1: config 0 descriptor?? [ 280.587404][T10025] FAT-fs (loop1): bogus logical sector size 2176 [ 280.601973][T10025] FAT-fs (loop1): Can't find a valid FAT filesystem [ 280.634243][ T1057] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 280.640494][ T1057] uvcvideo: No valid video chain found. [ 280.763081][ T74] usb 4-1: USB disconnect, device number 96 [ 280.776618][T10019] F2FS-fs (loop2): invalid crc value [ 280.793569][T10019] F2FS-fs (loop2): invalid crc value [ 280.804242][T10019] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 280.850627][ T18] usb 1-1: USB disconnect, device number 100 [ 280.976109][ T1782] udevd[1782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 281.058291][T10032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.109302][T10032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 281.223737][ T365] print_req_error: 458 callbacks suppressed [ 281.223753][ T365] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 281.244870][ T365] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.244897][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 281.264552][ T365] buffer_io_error: 409 callbacks suppressed [ 281.264563][ T365] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 281.270064][ T1782] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 281.275864][ T365] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.281827][ T1782] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.313616][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.324582][ T1784] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 281.324849][ T365] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 281.332433][ T1784] blk_update_request: I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.340437][ T1057] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 281.351127][ T1782] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 281.351209][ T1782] blk_update_request: I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.361788][ T365] blk_update_request: I/O error, dev loop3, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.366376][ T1782] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 281.377773][ T365] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 281.387934][ T1784] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 281.397664][ T365] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 281.404041][ T1784] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 281.419446][ T365] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 281.506438][T10047] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 281.520818][T10047] EXT4-fs (loop0): write access will be enabled during recovery [ 281.532372][T10047] EXT4-fs (loop0): barriers disabled [ 281.537513][T10047] JBD2: no valid journal superblock found [ 281.543443][T10047] EXT4-fs (loop0): error loading journal [ 281.563617][ T74] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 281.637602][ T23] audit: type=1400 audit(1742778358.154:215): avc: denied { module_load } for pid=10055 comm="syz.1.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 281.637644][T10056] Module has invalid ELF structures [ 281.745321][ T1057] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 281.753299][ T1057] usb 5-1: config 0 has no interface number 0 [ 281.820107][ T74] usb 4-1: Using ep0 maxpacket: 16 [ 281.858742][T10071] tmpfs: Bad value for 'nr_blocks' [ 281.937810][ T1057] usb 5-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 281.946677][ T1057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.948500][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 281.969259][ T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.988649][ T1057] usb 5-1: Product: syz [ 281.993829][ T1057] usb 5-1: Manufacturer: syz [ 281.998238][ T1057] usb 5-1: SerialNumber: syz [ 282.028665][ T1057] usb 5-1: config 0 descriptor?? [ 282.140027][T10069] F2FS-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 282.162319][ T74] usb 4-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 282.171163][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.179196][ T74] usb 4-1: Product: syz [ 282.183177][ T74] usb 4-1: Manufacturer: syz [ 282.187647][ T74] usb 4-1: SerialNumber: syz [ 282.192870][ T74] usb 4-1: config 0 descriptor?? [ 282.293913][ T2098] usb 5-1: USB disconnect, device number 97 [ 282.302766][T10083] F2FS-fs (loop1): fault_injection options not supported [ 282.311923][ T693] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 282.326513][T10083] F2FS-fs (loop1): invalid crc value [ 282.337264][T10083] F2FS-fs (loop1): Found nat_bits in checkpoint [ 282.384980][T10083] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.529412][ T74] usb 4-1: USB disconnect, device number 97 [ 282.568347][ T693] usb 1-1: Using ep0 maxpacket: 8 [ 282.631828][ T23] audit: type=1326 audit(1742778359.080:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10117 comm="syz.2.4141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b23507169 code=0x0 [ 282.697627][ T693] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 282.705880][ T693] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 282.717623][ T693] usb 1-1: config 135 has no interface number 0 [ 282.738833][ T693] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.852662][T10124] loop2: unable to read partition table [ 282.858530][T10124] loop2: partition table beyond EOD, truncated [ 282.864597][T10124] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 282.913726][T10127] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 282.921178][ T693] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 282.928329][T10127] EXT4-fs (loop4): Remounting filesystem read-only [ 282.943552][T10127] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #11: comm syz.4.4145: invalid indirect mapped block 4278190080 (level 0) [ 282.953287][ T693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.965184][ T693] usb 1-1: Product: syz [ 282.969147][ T693] usb 1-1: Manufacturer: syz [ 282.973578][ T693] usb 1-1: SerialNumber: syz [ 282.978320][T10127] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #11: comm syz.4.4145: invalid indirect mapped block 1 (level 1) [ 282.993797][T10127] EXT4-fs (loop4): 1 truncate cleaned up [ 283.004967][T10127] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000 [ 283.257447][ T2098] usb 1-1: USB disconnect, device number 101 [ 283.423526][ T693] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 283.434140][ T386] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 283.819035][ T693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.829154][ T693] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.829752][ T386] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 283.853671][ T386] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 283.906217][T10116] F2FS-fs (loop1): Found nat_bits in checkpoint [ 283.936632][ T693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.947643][ T386] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 283.962044][ T693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.976297][ T693] usb 3-1: SerialNumber: syz [ 283.979709][ T386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 284.008031][T10116] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.010253][ T386] usb 4-1: SerialNumber: syz [ 284.033420][ T693] usb 3-1: bad CDC descriptors [ 284.076247][ T386] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 284.086304][ T386] usb-storage 4-1:1.0: USB Mass Storage device detected [ 284.115142][ T386] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 284.251894][ T693] usb 3-1: USB disconnect, device number 91 [ 284.285198][T10160] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 284.305928][T10160] F2FS-fs (loop0): invalid crc value [ 284.311559][T10160] F2FS-fs (loop0): invalid crc value [ 284.316886][T10160] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 284.318535][ T386] usb 4-1: USB disconnect, device number 98 [ 284.743325][T10173] SELinux: security_context_str_to_sid(system_u) failed for (dev loop0, type vfat) errno=-22 [ 284.969970][T10169] F2FS-fs (loop4): Value of option "test_dummy_encryption=¡8ï?" is unrecognized [ 285.112036][T10183] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2227: inode #15: comm syz.2.4165: corrupted in-inode xattr [ 285.144880][T10183] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.4165: couldn't read orphan inode 15 (err -117) [ 285.165787][T10183] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 285.240696][ T386] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 285.419689][T10207] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue [ 285.455871][T10207] SELinux: security_context_str_to_sid(user_u) failed for (dev loop2, type ext4) errno=-22 [ 285.518613][ T74] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 285.579099][T10222] FAT-fs (loop0): bogus sectors per cluster 255 [ 285.597084][T10222] FAT-fs (loop0): Can't find a valid FAT filesystem [ 285.625551][ T386] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 285.633977][ T386] usb 4-1: config 0 has no interface number 0 [ 285.807230][ T386] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 285.816085][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.824021][ T386] usb 4-1: Product: syz [ 285.828363][ T386] usb 4-1: Manufacturer: syz [ 285.832818][ T386] usb 4-1: SerialNumber: syz [ 285.838359][ T386] usb 4-1: config 0 descriptor?? [ 285.914105][ T74] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 285.922606][ T74] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 285.931354][ T74] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 285.941287][ T74] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.950104][ T74] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 285.979559][T10239] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 285.983560][T10245] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 285.987867][T10239] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 286.004919][ T399] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 286.012489][T10239] F2FS-fs (loop0): Invalid gid value -1 [ 286.128062][ T74] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.146995][T10255] overlayfs: empty lowerdir [ 286.147726][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.170859][ T74] usb 2-1: Product: syz [ 286.191446][ T74] usb 2-1: Manufacturer: syz [ 286.196294][ T74] usb 2-1: SerialNumber: syz [ 286.266912][ T399] usb 3-1: Using ep0 maxpacket: 8 [ 286.288287][ T386] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 286.294768][ T386] uvcvideo: No valid video chain found. [ 286.304802][ T386] usb 4-1: USB disconnect, device number 99 [ 286.395160][ T1057] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 286.437917][ T399] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.523374][ T399] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 286.531756][ T399] usb 3-1: config 0 has no interface number 0 [ 286.537978][ T399] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 286.548978][ T399] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 286.555566][ T74] usb 2-1: 0:2 : does not exist [ 286.558917][ T399] usb 3-1: config 0 interface 88 has no altsetting 0 [ 286.576928][ T74] usb 2-1: USB disconnect, device number 93 [ 286.586219][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 286.673243][T10259] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 286.689884][ T1782] print_req_error: 71 callbacks suppressed [ 286.689900][ T1782] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.690759][T10259] F2FS-fs (loop0): invalid crc value [ 286.698980][ T569] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.709417][ T1784] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.713936][ T1782] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.724559][ T1784] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.737486][ T569] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.746066][ T1784] buffer_io_error: 62 callbacks suppressed [ 286.746078][ T1784] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 286.780598][ T569] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 286.781294][ T1784] blk_update_request: I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.789131][ T1782] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 286.799724][ T1784] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 286.807941][ T1057] usb 5-1: config 1 interface 1 has no altsetting 0 [ 286.815439][ T1784] blk_update_request: I/O error, dev loop3, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.821923][ T569] blk_update_request: I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.832611][ T1784] Buffer I/O error on dev loop3p2, logical block 10, async page read [ 286.844856][ T1782] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.851995][ T1784] Buffer I/O error on dev loop3p2, logical block 11, async page read [ 286.870479][ T1784] Buffer I/O error on dev loop3p2, logical block 12, async page read [ 286.870686][ T569] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 286.878678][ T1784] Buffer I/O error on dev loop3p2, logical block 13, async page read [ 286.893907][ T569] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 286.955176][T10259] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 286.993726][ T399] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 287.002688][ T399] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 287.010706][ T1057] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.032868][ T399] usb 3-1: Product: syz [ 287.039931][ T1057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.049513][ T399] usb 3-1: SerialNumber: syz [ 287.054455][ T1057] usb 5-1: Product: syz [ 287.058507][ T1057] usb 5-1: Manufacturer: syz [ 287.067281][ T399] usb 3-1: config 0 descriptor?? [ 287.072221][ T1057] usb 5-1: SerialNumber: syz [ 287.207477][ T74] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 287.238885][T10271] F2FS-fs (loop1): invalid crc value [ 287.257714][T10271] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 7 [ 287.264452][T10271] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 287.412071][ T399] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input19 [ 287.424260][ T399] usb 3-1: USB disconnect, device number 92 [ 287.464183][ T1057] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 287.472438][ T1057] usb 5-1: 2:1 : sample bitwidth 232 in over sample bytes 4 [ 287.480395][ T1057] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 287.511090][ T1057] usb 5-1: USB disconnect, device number 98 [ 287.530558][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 287.593339][ T74] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 287.601850][ T74] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.613371][ T74] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 287.622238][ T74] usb 4-1: config 1 has no interface number 1 [ 287.628204][ T74] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 287.641189][ T74] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.774017][ T125] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 287.785459][T10298] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 287.795092][T10298] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 287.816861][ T74] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.825703][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.833668][ T74] usb 4-1: Product: syz [ 287.837635][ T74] usb 4-1: Manufacturer: syz [ 287.842092][ T74] usb 4-1: SerialNumber: syz [ 287.956990][T10301] EXT4-fs (loop4): journaled quota format not specified [ 288.169564][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.192312][ T125] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.208341][ T74] usb 4-1: USB disconnect, device number 100 [ 288.223475][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 288.245373][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.263700][T10313] loop4: unable to read partition table [ 288.270763][T10322] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.277382][ T125] usb 1-1: config 0 descriptor?? [ 288.284617][T10313] loop4: partition table beyond EOD, truncated [ 288.290655][T10322] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 288.313461][T10313] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 288.319835][T10322] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 288.331694][T10322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 288.341405][ T125] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 288.348665][T10322] System zones: 0-2, 18-18, 34-34 [ 288.355377][T10322] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 288.394858][T10322] EXT4-fs (loop1): 1 truncate cleaned up [ 288.402692][ T164] loop4: unable to read partition table [ 288.408294][T10322] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000004,,errors=continue [ 288.420517][ T164] loop4: partition table beyond EOD, truncated [ 288.563496][ T693] usb 1-1: USB disconnect, device number 102 [ 289.302534][ T74] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 289.505629][ T693] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 289.687429][ T74] usb 4-1: No LPM exit latency info found, disabling LPM. [ 289.717355][T10343] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 289.729240][T10343] F2FS-fs (loop4): invalid crc value [ 289.762290][ T693] usb 1-1: Using ep0 maxpacket: 16 [ 289.763162][T10373] loop1: unable to read partition table [ 289.772955][ T74] usb 4-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.773298][T10373] loop1: partition table beyond EOD, truncated [ 289.792388][ T74] usb 4-1: config 1 interface 0 has no altsetting 0 [ 289.796010][T10373] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 289.806938][T10343] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 289.844838][ T164] loop1: unable to read partition table [ 289.850838][ T164] loop1: partition table beyond EOD, truncated [ 289.901244][ T693] usb 1-1: descriptor type invalid, skip [ 289.906723][ T693] usb 1-1: descriptor type invalid, skip [ 289.997352][ T125] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 290.003362][ T693] usb 1-1: config 0 has no interfaces? [ 290.051211][ T74] usb 4-1: string descriptor 0 read error: -22 [ 290.057307][ T74] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 290.072719][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.189839][ T693] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.206800][ T693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.219372][ T693] usb 1-1: Product: syz [ 290.223836][ T693] usb 1-1: Manufacturer: syz [ 290.228290][ T693] usb 1-1: SerialNumber: syz [ 290.243514][ T693] usb 1-1: config 0 descriptor?? [ 290.285934][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 290.311454][T10414] EXT4-fs (loop4): #blocks per group too big: 65536 [ 290.414273][ T125] usb 3-1: config 3 has too many interfaces: 219, using maximum allowed: 32 [ 290.422849][ T125] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 290.433818][ T125] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 219 [ 290.449983][ T74] usbhid 4-1:1.0: can't add hid device: -71 [ 290.455850][ T74] usbhid: probe of 4-1:1.0 failed with error -71 [ 290.466735][ T74] usb 4-1: USB disconnect, device number 101 [ 290.515304][ T386] usb 1-1: USB disconnect, device number 103 [ 290.606720][ T125] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.615626][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.624106][ T125] usb 3-1: Product: syz [ 290.628313][ T125] usb 3-1: Manufacturer: syz [ 290.632764][ T125] usb 3-1: SerialNumber: syz [ 290.639596][T10435] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 290.647057][T10435] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 290.655242][ T1057] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 290.662690][T10435] F2FS-fs (loop4): quotafile must be on filesystem root [ 290.916689][ T1057] usb 2-1: Using ep0 maxpacket: 8 [ 290.928735][ T125] usb 3-1: USB disconnect, device number 93 [ 290.965704][ T23] audit: type=1326 audit(1742778366.882:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.3.4283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2cf5e169 code=0x0 [ 291.044946][ T1057] usb 2-1: config 0 has an invalid interface number: 178 but max is 0 [ 291.060573][ T1057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.070998][ T1057] usb 2-1: config 0 has no interface number 0 [ 291.076942][ T1057] usb 2-1: config 0 interface 178 altsetting 0 endpoint 0x4 has invalid maxpacket 1289, setting to 64 [ 291.088674][ T1057] usb 2-1: config 0 interface 178 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.269461][ T1057] usb 2-1: New USB device found, idVendor=f755, idProduct=92f0, bcdDevice=ec.60 [ 291.278348][ T1057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.286158][ T1057] usb 2-1: Product: syz [ 291.290206][ T1057] usb 2-1: Manufacturer: syz [ 291.294667][ T1057] usb 2-1: SerialNumber: syz [ 291.299872][ T1057] usb 2-1: config 0 descriptor?? [ 291.322858][ T386] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 291.344200][ T74] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 291.386981][ T2098] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 291.437262][T10469] IPv6: addrconf: prefix option has invalid lifetime [ 291.552290][T10481] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 291.579346][ T386] usb 5-1: Using ep0 maxpacket: 16 [ 291.635589][ T1057] usb 2-1: USB disconnect, device number 94 [ 291.643676][ T2098] usb 1-1: Using ep0 maxpacket: 16 [ 291.660485][T10488] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.4299: invalid block [ 291.672171][T10488] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.4299: invalid indirect mapped block 1024 (level 0) [ 291.686717][T10488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.4299: bg 0: block 35: padding at end of block bitmap is not set [ 291.700891][T10488] EXT4-fs error (device loop2) in ext4_free_blocks:5016: Corrupt filesystem [ 291.709554][ T386] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 291.717742][ T386] usb 5-1: config 0 has no interface number 0 [ 291.717852][T10488] EXT4-fs (loop2): 1 truncate cleaned up [ 291.724091][ T386] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 291.729490][T10488] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000200,dioread_lock,bsddf,,errors=continue [ 291.739113][ T386] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.752482][ T74] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.771903][ T23] audit: type=1400 audit(1742778367.631:218): avc: denied { mount } for pid=10487 comm="syz.2.4299" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 291.793343][ T2098] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 291.801229][ T2098] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 291.809772][ T2098] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 291.810280][ T23] audit: type=1400 audit(1742778367.640:219): avc: denied { unmount } for pid=367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 291.819682][ T74] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.819699][ T74] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.819792][ T2098] usb 1-1: config 8 has no interface number 0 [ 291.868537][ T2098] usb 1-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 291.878417][ T2098] usb 1-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 291.889920][ T2098] usb 1-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.903226][ T2098] usb 1-1: config 8 interface 223 has no altsetting 0 [ 291.907255][ T1782] udevd[1782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.178/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.910992][ T74] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 291.941372][ T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.949604][ T74] usb 4-1: SerialNumber: syz [ 291.985589][ T386] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 291.994437][ T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.997098][ T74] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 292.002540][ T386] usb 5-1: Product: syz [ 292.012669][ T386] usb 5-1: Manufacturer: syz [ 292.017097][ T386] usb 5-1: SerialNumber: syz [ 292.020124][ T74] usb-storage 4-1:1.0: USB Mass Storage device detected [ 292.029038][ T386] usb 5-1: config 0 descriptor?? [ 292.034777][ T74] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 292.049732][T10461] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 292.056721][T10461] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 292.071115][ T2098] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 292.080302][ T2098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.098394][ T2098] usb 1-1: Product: syz [ 292.102391][ T2098] usb 1-1: Manufacturer: syz [ 292.107203][ T2098] usb 1-1: SerialNumber: syz [ 292.135900][T10467] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 292.148660][T10498] F2FS-fs (loop2): invalid crc value [ 292.154449][T10503] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 292.155469][T10498] F2FS-fs (loop2): SIT is corrupted node# 5 vs 7 [ 292.174227][T10498] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 292.237971][ T74] usb 4-1: USB disconnect, device number 102 [ 292.295630][ T386] asix: probe of 5-1:0.251 failed with error -71 [ 292.306435][ T386] usb 5-1: USB disconnect, device number 99 [ 292.426446][ T2098] usb 1-1: USB disconnect, device number 104 [ 292.520055][ T399] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 292.776515][ T399] usb 2-1: Using ep0 maxpacket: 32 [ 292.800176][ T365] print_req_error: 341 callbacks suppressed [ 292.800193][ T365] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 292.819653][ T1782] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 292.831556][ T1782] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.834405][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 292.844201][ T365] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.863124][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.876095][ T1784] buffer_io_error: 302 callbacks suppressed [ 292.876104][ T1784] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 292.876901][ T1782] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 292.881871][ T1784] blk_update_request: I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.894287][ T1782] blk_update_request: I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.898553][ T1784] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 292.908934][ T1782] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 292.919575][ T399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 292.927300][ T1782] blk_update_request: I/O error, dev loop3, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.935207][ T365] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 292.945237][ T1782] Buffer I/O error on dev loop3p2, logical block 10, async page read [ 292.961896][ T1784] blk_update_request: I/O error, dev loop3, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.981841][ T1782] Buffer I/O error on dev loop3p2, logical block 11, async page read [ 292.981876][ T1782] Buffer I/O error on dev loop3p2, logical block 12, async page read [ 292.990137][ T365] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 293.005550][ T1782] Buffer I/O error on dev loop3p2, logical block 13, async page read [ 293.015821][T10513] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 293.033459][T10513] F2FS-fs (loop2): invalid crc value [ 293.045046][T10520] EXT4-fs (loop3): Ignoring removed orlov option [ 293.051305][T10520] EXT4-fs (loop3): first meta block group too large: 1280 (group descriptor block count 1) [ 293.099744][T10513] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 293.129405][ T399] usb 2-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice=78.12 [ 293.138387][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.146231][ T399] usb 2-1: Product: syz [ 293.150161][ T399] usb 2-1: Manufacturer: syz [ 293.154643][ T399] usb 2-1: SerialNumber: syz [ 293.160004][ T399] usb 2-1: config 0 descriptor?? [ 293.205474][ T399] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 293.420032][ T399] usb 2-1: USB disconnect, device number 95 [ 293.473255][T10534] EXT4-fs (loop3): orphan cleanup on readonly fs [ 293.479528][T10534] EXT4-fs (loop3): 1 truncate cleaned up [ 293.492723][T10534] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue [ 293.845549][ T2098] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 293.877538][ T1057] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 293.930967][ T399] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 294.134067][ T1057] usb 4-1: Using ep0 maxpacket: 32 [ 294.241070][ T2098] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 294.249150][ T2098] usb 5-1: config 179 has no interface number 0 [ 294.255439][ T74] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 294.263025][ T2098] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 294.274246][ T2098] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 294.283958][ T1057] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 294.285396][ T2098] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 294.303832][ T1057] usb 4-1: config 0 has no interface number 0 [ 294.304373][ T2098] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 294.309974][ T1057] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 294.321285][ T2098] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.330808][ T399] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 294.343948][ T2098] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.364918][ T2098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.377568][ T1057] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 294.387277][ T399] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.390715][T10547] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.397346][ T399] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.414883][T10547] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.416654][ T399] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 294.431891][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.444840][ T399] usb 1-1: config 0 descriptor?? [ 294.487407][ T399] usb-storage 1-1:0.0: USB Mass Storage device detected [ 294.494974][ T399] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 294.540316][ T74] usb 3-1: Using ep0 maxpacket: 32 [ 294.553891][T10567] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 294.561726][ T1057] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 294.574306][ T1057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.582295][ T1057] usb 4-1: Product: syz [ 294.586810][ T1057] usb 4-1: Manufacturer: syz [ 294.591238][T10567] F2FS-fs (loop1): invalid crc value [ 294.596557][ T1057] usb 4-1: SerialNumber: syz [ 294.602231][ T1057] usb 4-1: config 0 descriptor?? [ 294.625925][T10551] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.632645][T10551] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.640866][T10567] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 294.658561][ T1057] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 294.668626][ T74] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 294.698757][ T399] usb 5-1: USB disconnect, device number 100 [ 294.700631][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 294.713034][ T1057] ums-sddr09: probe of 4-1:0.20 failed with error -22 [ 294.734354][ T1057] usb 1-1: USB disconnect, device number 105 [ 294.871688][ T74] usb 3-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 294.880550][ T74] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.884313][ T125] usb 4-1: USB disconnect, device number 103 [ 294.897142][ T74] usb 3-1: Product: syz [ 294.901130][ T74] usb 3-1: Manufacturer: syz [ 294.906013][ T74] usb 3-1: SerialNumber: syz [ 294.911517][ T74] usb 3-1: config 0 descriptor?? [ 294.957781][ T74] usb 3-1: bad CDC descriptors [ 295.174452][ T74] usb 3-1: USB disconnect, device number 94 [ 295.305438][T10582] FAT-fs (loop4): bogus sectors per cluster 69 [ 295.311726][ T399] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 295.319666][T10582] FAT-fs (loop4): Can't find a valid FAT filesystem [ 295.432718][ T23] audit: type=1400 audit(1742778371.064:220): avc: denied { create } for pid=10592 comm="syz.0.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 295.577120][ T399] usb 2-1: Using ep0 maxpacket: 8 [ 295.662712][ T399] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.672917][T10615] EXT4-fs (loop0): unsupported inode size: 64000 [ 295.684018][ T125] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 295.697991][T10615] EXT4-fs (loop0): blocksize: 1024 [ 295.780287][ T399] usb 2-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 295.790468][ T399] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.941050][T10620] loop0: unable to read partition table [ 295.951406][T10620] loop0: partition table beyond EOD, truncated [ 295.962083][T10620] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 295.983392][ T399] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.998093][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.014153][ T399] usb 2-1: Product: syz [ 296.022945][ T399] usb 2-1: Manufacturer: syz [ 296.027394][ T399] usb 2-1: SerialNumber: syz [ 296.097371][ T164] loop0: unable to read partition table [ 296.111623][ T164] loop0: partition table beyond EOD, truncated [ 296.133109][ T125] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.229319][ T125] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 296.244442][ T125] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 296.265484][ T125] usb 5-1: config 63 has no interface number 0 [ 296.276249][ T125] usb 5-1: config 63 interface 66 has no altsetting 0 [ 296.370374][T10626] loop0: p1 < > p3[EZD] [ 296.378273][T10626] loop0: p3 start 3238002688 is beyond EOD, truncated [ 296.411057][ T399] usb 2-1: 0:2 : does not exist [ 296.432034][ T399] usb 2-1: USB disconnect, device number 96 [ 296.453738][ T125] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 296.468738][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.484677][ T125] usb 5-1: Product: syz [ 296.492573][ T125] usb 5-1: Manufacturer: syz [ 296.499387][ T1782] udevd[1782]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 296.499879][ T125] usb 5-1: SerialNumber: syz [ 296.814088][T10601] F2FS-fs (loop3): invalid crc value [ 296.827760][ T2098] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 296.846426][T10601] F2FS-fs (loop3): Found nat_bits in checkpoint [ 296.914971][T10640] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 296.929746][T10640] EXT4-fs (loop1): mount failed [ 296.932576][T10601] F2FS-fs (loop3): Start checkpoint disabled! [ 296.941308][T10601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.956063][ T125] uvcvideo: Found UVC 0.07 device syz (174f:8a31) [ 296.971348][T10643] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 296.977493][ T125] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 296.979497][T10643] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 296.997541][T10643] EXT4-fs (loop2): 1 truncate cleaned up [ 297.003622][T10643] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 297.021711][ T125] uvcvideo: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 297.041847][ T125] uvcvideo: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 297.072130][ T125] uvcvideo: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 297.105714][ T125] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 297.114680][ T125] uvcvideo: No valid video chain found. [ 297.121843][ T125] usb 5-1: USB disconnect, device number 101 [ 297.223312][ T2098] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 297.231299][ T2098] usb 1-1: config 0 has no interface number 0 [ 297.281954][T10658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 297.288594][T10658] EXT4-fs (loop2): 1 truncate cleaned up [ 297.298626][T10658] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue [ 297.407090][ T2098] usb 1-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 297.426347][ T2098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.434171][ T2098] usb 1-1: Product: syz [ 297.448108][ T2098] usb 1-1: Manufacturer: syz [ 297.455804][ T2098] usb 1-1: SerialNumber: syz [ 297.467999][ T2098] usb 1-1: config 0 descriptor?? [ 297.469192][ T1057] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 297.693563][ T125] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 297.730106][ T386] usb 1-1: USB disconnect, device number 106 [ 297.907465][ T1057] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.928214][ T1057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 297.949740][ T1057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 297.970091][ T1057] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.992893][ T1057] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 298.012961][ T1057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.031974][ T1057] usb 4-1: config 0 descriptor?? [ 298.079481][ T1057] usb 4-1: MIDIStreaming interface descriptor not found [ 298.110574][ T125] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.131368][ T125] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.148909][T10669] incfs: Error accessing: ./file0. [ 298.154194][T10669] incfs: mount failed -2 [ 298.307384][ T386] usb 4-1: USB disconnect, device number 104 [ 298.313839][ T125] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 298.328266][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.367522][ T125] usb 5-1: Product: syz [ 298.372214][ T125] usb 5-1: Manufacturer: syz [ 298.376624][ T125] usb 5-1: SerialNumber: syz [ 298.394110][ T125] usb 5-1: config 0 descriptor?? [ 298.450115][ T125] usb 5-1: selecting invalid altsetting 0 [ 298.457040][T10682] EXT4-fs (loop0): Test dummy encryption mode enabled [ 298.460631][ T125] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 298.473248][T10682] EXT4-fs (loop0): Test dummy encryption mode enabled [ 298.483585][T10682] EXT4-fs (loop0): fragment/cluster size (65536) != block size (1024) [ 298.570102][ T1057] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 298.662954][ T125] usb 5-1: USB disconnect, device number 102 [ 298.826636][ T1057] usb 2-1: Using ep0 maxpacket: 16 [ 298.884325][T10703] cgroup1: release_agent respecified [ 298.886324][ T365] print_req_error: 206 callbacks suppressed [ 298.886343][ T365] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 298.910691][ T1782] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 298.924010][ T1782] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.924395][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 298.936037][ T365] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.962355][ T1057] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.976340][ T386] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 298.987077][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.987165][ T1782] buffer_io_error: 182 callbacks suppressed [ 298.987175][ T1782] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 299.008348][ T1784] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 299.015081][ T1057] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.033109][ T1784] blk_update_request: I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.040362][ T1057] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 299.051107][ T365] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 299.063059][T10707] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 4402341478404)! [ 299.068314][ T1784] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 299.074190][ T1057] usb 2-1: config 1 interface 1 has no altsetting 0 [ 299.088434][T10707] EXT4-fs (loop3): group descriptors corrupted! [ 299.154728][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 299.154837][ T1782] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.177014][ T1784] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.181304][ T365] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 299.200738][ T1784] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 299.212406][ T365] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 299.225023][ T1784] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 299.228079][ T1782] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 299.243715][ T386] usb 3-1: Using ep0 maxpacket: 32 [ 299.254436][ T1784] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 299.287908][ T1057] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.299524][ T1057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.308608][T10714] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 299.329604][T10714] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 299.329650][ T1057] usb 2-1: Product: syz [ 299.341645][ T1057] usb 2-1: Manufacturer: syz [ 299.346052][ T1057] usb 2-1: SerialNumber: syz [ 299.348871][T10714] EXT4-fs (loop4): 1 truncate cleaned up [ 299.356105][T10714] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,lazytime,grpjquota="nodiscard,quota,minixdf,sysvgroups,norecovery,,errors=continue [ 299.402740][T10691] F2FS-fs (loop0): invalid crc value [ 299.433351][T10691] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 4 [ 299.439678][T10691] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 299.448330][ T386] usb 3-1: unable to get BOS descriptor or descriptor too short [ 299.532330][ T386] usb 3-1: config 1 interface 0 altsetting 206 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 299.545145][ T386] usb 3-1: config 1 interface 0 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.558174][ T386] usb 3-1: config 1 interface 0 has no altsetting 0 [ 299.628548][ T1057] usb 2-1: selecting invalid altsetting 0 [ 299.634651][ T1057] usb 2-1: selecting invalid altsetting 0 [ 299.640967][ T1057] cdc_ncm 2-1:1.0: bind() failure [ 299.656644][ T1057] usb 2-1: selecting invalid altsetting 0 [ 299.673141][ T1057] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 299.679489][ T1057] usb 2-1: selecting invalid altsetting 0 [ 299.692648][ T1057] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 299.715634][ T1057] usb 2-1: USB disconnect, device number 97 [ 299.735463][ T386] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 299.745899][ T74] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 299.752046][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.769350][T10744] EXT4-fs (loop4): invalid inodes per group: 0 [ 299.769350][T10744] [ 299.777566][ T386] usb 3-1: Product: syz [ 299.781916][ T386] usb 3-1: Manufacturer: syz [ 299.786318][ T386] usb 3-1: SerialNumber: syz [ 299.937111][T10754] syz.0.4401[10754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.939359][T10751] EXT4-fs (loop4): invalid inodes per group: 67108896 [ 299.939359][T10751] [ 300.141446][ T74] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 300.151529][ T74] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 300.160334][ T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.206668][ T74] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 300.280606][ T386] usbhid 3-1:1.0: can't add hid device: -71 [ 300.286560][ T386] usbhid: probe of 3-1:1.0 failed with error -71 [ 300.293961][ T386] usb 3-1: USB disconnect, device number 95 [ 300.355229][ T399] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 300.422412][ T125] usb 4-1: USB disconnect, device number 105 [ 300.611781][ T399] usb 1-1: Using ep0 maxpacket: 32 [ 300.740101][ T399] usb 1-1: config 0 has an invalid interface number: 16 but max is 1 [ 300.748008][ T399] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 300.756721][ T399] usb 1-1: config 0 has no interface number 1 [ 300.762656][ T399] usb 1-1: config 0 interface 16 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 300.943210][ T399] usb 1-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=f4.41 [ 300.952164][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.960021][ T399] usb 1-1: Product: syz [ 300.963953][ T399] usb 1-1: Manufacturer: syz [ 300.968944][ T399] usb 1-1: SerialNumber: syz [ 301.012783][ T23] audit: type=1326 audit(1742778376.284:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10772 comm="syz.2.4410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b23507169 code=0x0 [ 301.015481][ T399] usb 1-1: config 0 descriptor?? [ 301.091323][ T23] audit: type=1400 audit(1742778376.350:222): avc: denied { mount } for pid=10780 comm="syz.4.4412" name="/" dev="ramfs" ino=102041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 301.154031][ T23] audit: type=1400 audit(1742778376.406:223): avc: denied { unmount } for pid=368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 301.188633][T10771] loop3: unable to read partition table [ 301.200928][T10771] loop3: partition table beyond EOD, truncated [ 301.223947][T10771] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 301.316054][ T74] usb 1-1: USB disconnect, device number 107 [ 301.370371][ T164] loop3: unable to read partition table [ 301.376724][ T164] loop3: partition table beyond EOD, truncated [ 301.488273][ T399] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 301.499031][ T125] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 301.561170][T10806] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 301.639113][T10813] EXT4-fs (loop2): failed to initialize system zone (-117) [ 301.646916][T10813] EXT4-fs (loop2): mount failed [ 301.873130][ T399] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 301.881125][ T399] usb 5-1: config 0 has no interface number 0 [ 301.894495][ T399] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 301.905212][ T125] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 301.913202][ T125] usb 2-1: config 0 has no interface number 0 [ 301.987814][T10827] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (-1 log_block_size) [ 302.001467][ T74] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 302.086965][ T125] usb 2-1: New USB device found, idVendor=19d2, idProduct=5755, bcdDevice=df.b8 [ 302.095991][ T399] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 302.104969][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.112944][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.120893][ T125] usb 2-1: Product: syz [ 302.124962][ T399] usb 5-1: Product: syz [ 302.134312][ T399] usb 5-1: Manufacturer: syz [ 302.138834][ T125] usb 2-1: Manufacturer: syz [ 302.143441][ T399] usb 5-1: SerialNumber: syz [ 302.148012][ T125] usb 2-1: SerialNumber: syz [ 302.160395][ T399] usb 5-1: config 0 descriptor?? [ 302.165605][ T125] usb 2-1: config 0 descriptor?? [ 302.195209][T10792] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 302.216039][ T125] rndis_host 2-1:0.194: skipping garbage [ 302.221515][ T125] usb 2-1: bad CDC descriptors [ 302.263392][ T74] usb 3-1: Using ep0 maxpacket: 8 [ 302.428932][ T74] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.431473][ T125] usb 2-1: USB disconnect, device number 98 [ 302.514466][ T74] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 302.522291][ T74] usb 3-1: config 1 has no interface number 1 [ 302.528564][ T74] usb 3-1: config 1 interface 3 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 302.536028][ T399] usb 5-1: MIDIStreaming interface descriptor not found [ 302.542125][ T74] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 80, changing to 7 [ 302.559640][ T74] usb 3-1: config 1 interface 3 has no altsetting 0 [ 302.582743][ T399] usb 5-1: USB disconnect, device number 103 [ 302.592348][T10854] loop0: p1 p2 p3 p4 < > [ 302.596522][T10854] loop0: partition table partially beyond EOD, truncated [ 302.604965][T10854] loop0: p1 size 8388608 extends beyond EOD, truncated [ 302.612774][T10854] loop0: p2 size 589824 extends beyond EOD, truncated [ 302.620266][T10854] loop0: p3 start 150994944 is beyond EOD, truncated [ 302.626828][T10854] loop0: p4 start 1526857729 is beyond EOD, truncated [ 302.728267][ T74] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.737175][ T74] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.745260][ T74] usb 3-1: Product: syz [ 302.749430][ T74] usb 3-1: Manufacturer: syz [ 302.754059][ T74] usb 3-1: SerialNumber: syz [ 302.760159][ T1782] udevd[1782]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 302.797833][T10858] EXT4-fs (loop0): Invalid log block size: 89128961 [ 302.824827][ T1784] udevd[1784]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.091707][ T125] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 303.134005][T10881] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 303.142021][ T74] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 303.232594][ T74] usb 3-1: USB disconnect, device number 96 [ 303.301421][T10888] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 303.312423][T10888] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 303.322505][T10888] EXT4-fs (loop0): group descriptors corrupted! [ 303.339300][T10879] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 303.346541][T10879] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 303.476544][ T125] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 303.485153][ T125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.495149][ T125] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 303.505808][ T125] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 303.562028][ T693] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 303.648480][T10896] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 303.679625][ T125] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.699309][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.708037][ T125] usb 4-1: Product: syz [ 303.712266][ T125] usb 4-1: Manufacturer: syz [ 303.716669][ T125] usb 4-1: SerialNumber: syz [ 303.772375][T10899] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 303.829186][ T693] usb 2-1: Using ep0 maxpacket: 8 [ 303.884346][T10894] F2FS-fs (loop2): Invalid segment count (1) [ 303.890238][T10894] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 303.902478][T10894] F2FS-fs (loop2): invalid crc value [ 303.909123][T10894] F2FS-fs (loop2): Found nat_bits in checkpoint [ 303.941487][T10894] F2FS-fs (loop2): recover fsync data on readonly fs [ 303.949032][T10894] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 303.956046][T10894] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 303.963489][ T693] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 304.002225][T10904] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 304.021878][T10906] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 304.053858][ T693] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.063076][ T693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 304.075236][ T125] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 304.087443][ T693] usb 2-1: SerialNumber: syz [ 304.092126][ T125] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 304.101063][ T125] usb 4-1: found format II with max.bitrate = 128, frame size=0 [ 304.134143][T10913] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 304.149881][ T125] usb 4-1: USB disconnect, device number 106 [ 304.340979][T10918] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 304.350187][T10918] ext4 filesystem being mounted at /890/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 304.367607][ T1057] usb 2-1: USB disconnect, device number 99 [ 304.386816][ T1782] udevd[1782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 304.460006][ T399] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 304.518631][T10923] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 304.554679][T10923] F2FS-fs (loop2): invalid crc value [ 304.564505][T10923] F2FS-fs (loop2): invalid crc value [ 304.574801][T10923] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 304.593269][T10930] EXT4-fs (loop3): Test dummy encryption mode enabled [ 304.601559][T10930] EXT4-fs (loop3): Can't change test_dummy_encryption on remount [ 304.716410][ T399] usb 5-1: Using ep0 maxpacket: 8 [ 304.844882][ T399] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 304.865853][ T399] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.905606][ T399] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 304.951216][ T399] usb 5-1: config 128 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.964509][ T399] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 304.973369][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.985635][T10928] F2FS-fs (loop0): QUOTA feature is enabled, so ignore jquota_fmt [ 304.993280][T10928] F2FS-fs (loop0): inline_xattr_size option should be set with inline_xattr option [ 305.005066][T10916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 305.229589][ T693] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 305.251374][ T74] usb 5-1: USB disconnect, device number 104 [ 305.272358][ T1057] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 305.434026][T10949] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 305.518155][ T399] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 305.573869][T10954] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 305.582721][T10954] ext4 filesystem being mounted at /893/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 305.667828][ T1057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.677790][ T1057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 305.688411][ T1057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.697829][ T1057] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.711002][ T1057] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 305.721026][ T1057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.729782][ T1057] usb 2-1: config 0 descriptor?? [ 305.734443][T10959] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 305.743860][T10959] ext4 filesystem being mounted at /894/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 305.774723][ T399] usb 3-1: Using ep0 maxpacket: 8 [ 305.780689][ T1057] usb 2-1: MIDIStreaming interface descriptor not found [ 305.828185][ T693] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 305.840457][T10964] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 305.845361][ T693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.856695][T10964] ext4 filesystem being mounted at /895/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 305.859532][ T693] usb 4-1: Product: syz [ 305.876199][ T693] usb 4-1: Manufacturer: syz [ 305.880960][ T693] usb 4-1: SerialNumber: syz [ 305.886946][ T693] usb 4-1: config 0 descriptor?? [ 305.903038][ T399] usb 3-1: config 64 has an invalid interface number: 80 but max is 1 [ 305.911692][ T399] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 305.921867][ T399] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 305.931873][ T399] usb 3-1: config 64 has no interface number 0 [ 305.951994][T10971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 305.961109][T10971] ext4 filesystem being mounted at /799/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 305.992369][ T1057] usb 2-1: USB disconnect, device number 100 [ 306.017929][T10977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 306.106102][ T399] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 306.114986][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.123110][ T399] usb 3-1: Product: syz [ 306.127079][ T399] usb 3-1: Manufacturer: syz [ 306.131545][ T399] usb 3-1: SerialNumber: syz [ 306.156489][ T386] usb 4-1: USB disconnect, device number 107 [ 306.194224][T10982] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 306.204675][T10985] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 306.212519][T10985] EXT4-fs (loop0): write access will be enabled during recovery [ 306.220102][T10985] JBD2: no valid journal superblock found [ 306.225724][T10985] EXT4-fs (loop0): error loading journal [ 306.395064][T10988] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 306.438392][ T399] usb-storage 3-1:64.80: USB Mass Storage device detected [ 306.446355][ T399] usb-storage 3-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 306.503723][T10991] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 306.511481][ T399] usb 3-1: USB disconnect, device number 97 [ 306.742892][T11003] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 307.464698][T11020] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 307.473498][T11020] ext4 filesystem being mounted at /922/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 308.175640][T11001] F2FS-fs (loop0): Found nat_bits in checkpoint [ 308.244175][T10999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 308.265340][T11001] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 308.314496][T10999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 308.463572][T11058] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 308.628741][ T399] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 309.013540][ T399] usb 4-1: config index 0 descriptor too short (expected 65426, got 146) [ 309.032649][ T399] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 309.043425][ T399] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.064902][ T399] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 309.163287][ T399] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.173677][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.183176][T11025] F2FS-fs (loop4): Found nat_bits in checkpoint [ 309.192437][ T399] usb 4-1: SerialNumber: syz [ 309.218360][ T399] usb 4-1: config 0 descriptor?? [ 309.289479][T11025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 309.476831][ T693] usb 4-1: USB disconnect, device number 108 [ 309.588598][T11083] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 309.599023][T11081] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 309.612156][T11083] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 309.624787][T11083] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off [ 310.340055][T11107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 311.735045][T11145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 311.762713][T11145] ext4 filesystem being mounted at /813/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 312.316486][ T1057] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 312.488202][ T23] audit: type=1400 audit(1742778387.024:224): avc: denied { create } for pid=11169 comm="syz.2.4546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.547764][ T23] audit: type=1400 audit(1742778387.043:225): avc: denied { write } for pid=11169 comm="syz.2.4546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.572967][ T1057] usb 5-1: Using ep0 maxpacket: 8 [ 312.701400][ T1057] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 312.709408][ T1057] usb 5-1: config 0 has no interface number 0 [ 312.736345][ T1057] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 312.757625][ T1057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.778437][ T1057] usb 5-1: config 0 descriptor?? [ 312.932899][ T23] audit: type=1400 audit(1742778387.436:226): avc: denied { setopt } for pid=11182 comm="syz.2.4551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 313.018443][T11124] F2FS-fs (loop3): Found nat_bits in checkpoint [ 313.035632][ T1057] usb 5-1: USB disconnect, device number 105 [ 313.103383][T11124] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 313.246392][ T693] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 313.293640][ T23] audit: type=1400 audit(1742778387.773:227): avc: denied { create } for pid=11201 comm="syz.2.4557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 313.314321][ T23] audit: type=1400 audit(1742778387.773:228): avc: denied { write } for pid=11201 comm="syz.2.4557" path="socket:[105579]" dev="sockfs" ino=105579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 313.339151][ T23] audit: type=1400 audit(1742778387.773:229): avc: denied { nlmsg_write } for pid=11201 comm="syz.2.4557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 313.531666][T11204] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 313.549598][T11204] FAT-fs (loop2): Filesystem has been set read-only [ 313.652699][ T693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 313.671966][ T693] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 313.877159][ T693] usb 2-1: New USB device found, idVendor=10b5, idProduct=ac70, bcdDevice=9c.3c [ 313.896990][ T693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.906819][ T23] audit: type=1400 audit(1742778388.343:230): avc: denied { create } for pid=11223 comm="syz.0.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.917394][ T693] usb 2-1: Product: syz [ 313.933965][ T693] usb 2-1: Manufacturer: syz [ 313.938389][ T693] usb 2-1: SerialNumber: syz [ 313.967646][ T693] usb 2-1: config 0 descriptor?? [ 313.972838][ T23] audit: type=1400 audit(1742778388.343:231): avc: denied { write } for pid=11223 comm="syz.0.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.018726][T11231] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4569'. [ 314.027664][ T693] pl2303 2-1:0.0: required endpoints missing [ 314.036655][ T23] audit: type=1400 audit(1742778388.343:232): avc: denied { nlmsg_write } for pid=11223 comm="syz.0.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.112637][ T23] audit: type=1400 audit(1742778388.390:233): avc: denied { write } for pid=11225 comm="syz.4.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.250324][ T1057] usb 2-1: USB disconnect, device number 101 [ 315.394935][ T1057] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 315.587383][T11236] F2FS-fs (loop2): QUOTA feature is enabled, so ignore jquota_fmt [ 315.595029][T11236] F2FS-fs (loop2): inline_xattr_size option should be set with inline_xattr option [ 315.790540][ T1057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 315.840069][ T1057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 315.872200][ T1057] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.962171][T11312] FAT-fs (loop1): Directory bread(block 64) failed [ 315.981920][T11312] FAT-fs (loop1): Directory bread(block 65) failed [ 316.004297][T11312] FAT-fs (loop1): Directory bread(block 66) failed [ 316.010646][T11312] FAT-fs (loop1): Directory bread(block 67) failed [ 316.020902][T11312] FAT-fs (loop1): Directory bread(block 68) failed [ 316.028171][T11312] FAT-fs (loop1): Directory bread(block 69) failed [ 316.034630][T11312] FAT-fs (loop1): Directory bread(block 70) failed [ 316.041581][T11312] FAT-fs (loop1): Directory bread(block 71) failed [ 316.048032][T11312] FAT-fs (loop1): Directory bread(block 72) failed [ 316.054395][T11312] FAT-fs (loop1): Directory bread(block 73) failed [ 316.127411][T11319] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 316.153164][T11319] EXT4-fs (loop2): invalid journal inode [ 316.163961][T11319] EXT4-fs (loop2): can't get journal size [ 316.169880][ T1057] usb 5-1: string descriptor 0 read error: -22 [ 316.181140][ T1057] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.186296][T11319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002] [ 316.199842][ T1057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.204640][T11319] System zones: 1-13 [ 316.212897][T11319] EXT4-fs (loop2): 1 truncate cleaned up [ 316.218470][T11319] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,debug,nombcache,,errors=continue [ 316.239483][T11270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.249401][T11270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.261446][ T1057] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 316.308345][T11319] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 316.452218][T11333] netlink: 'syz.1.4614': attribute type 3 has an invalid length. [ 316.479065][ T693] usb 5-1: USB disconnect, device number 106 [ 316.560900][T11343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4619'. [ 317.176381][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4644'. [ 317.391769][T11424] netlink: 'syz.4.4657': attribute type 3 has an invalid length. [ 317.402474][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4658'. [ 317.485854][T11433] tc_dump_action: action bad kind [ 317.795276][T11469] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 317.795276][T11469] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 317.795276][T11469] [ 317.813156][T11469] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 317.823618][T11469] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 317.867008][T11474] FAT-fs (loop4): Directory bread(block 64) failed [ 317.874881][T11474] FAT-fs (loop4): Directory bread(block 65) failed [ 317.881272][T11474] FAT-fs (loop4): Directory bread(block 66) failed [ 317.888235][T11474] FAT-fs (loop4): Directory bread(block 67) failed [ 317.894861][T11474] FAT-fs (loop4): Directory bread(block 68) failed [ 317.901499][T11474] FAT-fs (loop4): Directory bread(block 69) failed [ 317.908126][T11474] FAT-fs (loop4): Directory bread(block 70) failed [ 317.914545][T11474] FAT-fs (loop4): Directory bread(block 71) failed [ 317.921312][T11474] FAT-fs (loop4): Directory bread(block 72) failed [ 317.927641][T11474] FAT-fs (loop4): Directory bread(block 73) failed [ 317.960677][ T23] kauditd_printk_skb: 45 callbacks suppressed [ 317.960689][ T23] audit: type=1400 audit(1742778392.141:279): avc: denied { mount } for pid=11473 comm="syz.4.4681" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 318.025697][ T23] audit: type=1400 audit(1742778392.179:280): avc: denied { prog_run } for pid=11485 comm="syz.3.4685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 318.060610][ T23] audit: type=1400 audit(1742778392.235:281): avc: denied { unmount } for pid=368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 318.213083][ T23] audit: type=1400 audit(1742778392.375:282): avc: denied { create } for pid=11494 comm="syz.4.4689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.240612][ T23] audit: type=1400 audit(1742778392.394:283): avc: denied { connect } for pid=11494 comm="syz.4.4689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.326510][ T23] audit: type=1400 audit(1742778392.469:284): avc: denied { create } for pid=11500 comm="syz.3.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.417362][ T23] audit: type=1400 audit(1742778392.469:285): avc: denied { ioctl } for pid=11500 comm="syz.3.4692" path="socket:[107384]" dev="sockfs" ino=107384 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.473712][T11329] F2FS-fs (loop2): Found nat_bits in checkpoint [ 318.508907][T11329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 318.531587][ T23] audit: type=1400 audit(1742778392.675:286): avc: denied { mount } for pid=11328 comm="syz.2.4612" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.577318][ T23] audit: type=1400 audit(1742778392.675:287): avc: denied { write } for pid=11520 comm="syz.0.4700" name="usbmon9" dev="devtmpfs" ino=10679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 318.632653][T11511] loop4: unable to read partition table [ 318.644685][T11511] loop4: partition table beyond EOD, truncated [ 318.654589][T11511] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 318.673486][ T23] audit: type=1400 audit(1742778392.675:288): avc: denied { open } for pid=11520 comm="syz.0.4700" path="/dev/usbmon9" dev="devtmpfs" ino=10679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 318.793926][ T164] loop4: unable to read partition table [ 318.799828][ T164] loop4: partition table beyond EOD, truncated [ 318.983933][T11562] xt_SECMARK: invalid mode: 2 [ 319.096199][T11568] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 319.125014][T11568] ext4 filesystem being mounted at /844/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 319.366162][T11583] FAT-fs (loop1): Directory bread(block 64) failed [ 319.387168][T11583] FAT-fs (loop1): Directory bread(block 65) failed [ 319.415961][T11583] FAT-fs (loop1): Directory bread(block 66) failed [ 319.433383][T11583] FAT-fs (loop1): Directory bread(block 67) failed [ 319.454704][T11583] FAT-fs (loop1): Directory bread(block 68) failed [ 319.461280][T11583] FAT-fs (loop1): Directory bread(block 69) failed [ 319.482593][T11583] FAT-fs (loop1): Directory bread(block 70) failed [ 319.499635][T11583] FAT-fs (loop1): Directory bread(block 71) failed [ 319.506064][T11583] FAT-fs (loop1): Directory bread(block 72) failed [ 319.542383][T11583] FAT-fs (loop1): Directory bread(block 73) failed [ 319.593066][T11598] device veth3 entered promiscuous mode [ 319.778638][T11602] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 319.809905][T11602] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 319.841330][T11602] EXT4-fs error (device loop0): ext4_ext_check_inode:543: inode #3: comm syz.0.4737: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 319.891238][T11615] sock: process `syz.1.4743' is using obsolete setsockopt SO_BSDCOMPAT [ 319.899699][T11602] EXT4-fs (loop0): no journal found [ 319.904708][T11602] EXT4-fs (loop0): can't get journal size [ 319.936945][T11602] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue [ 320.199943][T11638] erofs: (device loop4): mounted with opts: acl, root inode @ nid 36. [ 320.803858][T11694] FAT-fs (loop4): Directory bread(block 64) failed [ 320.811531][T11694] FAT-fs (loop4): Directory bread(block 65) failed [ 320.852571][T11694] FAT-fs (loop4): Directory bread(block 66) failed [ 320.861439][T11694] FAT-fs (loop4): Directory bread(block 67) failed [ 320.870302][T11694] FAT-fs (loop4): Directory bread(block 68) failed [ 320.877216][T11694] FAT-fs (loop4): Directory bread(block 69) failed [ 320.885085][T11694] FAT-fs (loop4): Directory bread(block 70) failed [ 320.891734][T11694] FAT-fs (loop4): Directory bread(block 71) failed [ 320.898086][T11694] FAT-fs (loop4): Directory bread(block 72) failed [ 320.904457][T11694] FAT-fs (loop4): Directory bread(block 73) failed [ 321.015127][T11551] F2FS-fs (loop3): Found nat_bits in checkpoint [ 321.030550][T11728] xt_TCPMSS: Only works on TCP SYN packets [ 321.068131][T11551] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 321.105288][T11719] loop0: unable to read partition table [ 321.135139][T11719] loop0: partition table beyond EOD, truncated [ 321.141140][T11719] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 321.171670][T11736] xt_CT: No such helper "syz0" [ 321.230303][T11744] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 321.278756][ T164] loop0: unable to read partition table [ 321.286612][ T164] loop0: partition table beyond EOD, truncated [ 321.579932][T11756] FAT-fs (loop1): Directory bread(block 64) failed [ 321.588096][T11756] FAT-fs (loop1): Directory bread(block 65) failed [ 321.615338][T11756] FAT-fs (loop1): Directory bread(block 66) failed [ 321.624094][T11756] FAT-fs (loop1): Directory bread(block 67) failed [ 321.649262][T11756] FAT-fs (loop1): Directory bread(block 68) failed [ 321.655619][T11756] FAT-fs (loop1): Directory bread(block 69) failed [ 321.677515][T11756] FAT-fs (loop1): Directory bread(block 70) failed [ 321.705945][T11756] FAT-fs (loop1): Directory bread(block 71) failed [ 321.715856][T11756] FAT-fs (loop1): Directory bread(block 72) failed [ 321.722700][T11756] FAT-fs (loop1): Directory bread(block 73) failed [ 321.806344][T11783] FAT-fs (loop0): Directory bread(block 64) failed [ 321.833372][T11789] device veth3 entered promiscuous mode [ 321.845383][T11783] FAT-fs (loop0): Directory bread(block 65) failed [ 321.860214][T11780] loop2: unable to read partition table [ 321.866131][T11783] FAT-fs (loop0): Directory bread(block 66) failed [ 321.883388][T11783] FAT-fs (loop0): Directory bread(block 67) failed [ 321.889798][T11783] FAT-fs (loop0): Directory bread(block 68) failed [ 321.896215][T11780] loop2: partition table beyond EOD, truncated [ 321.904239][T11780] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 321.916900][T11783] FAT-fs (loop0): Directory bread(block 69) failed [ 321.926488][T11783] FAT-fs (loop0): Directory bread(block 70) failed [ 321.933151][T11783] FAT-fs (loop0): Directory bread(block 71) failed [ 321.945313][T11783] FAT-fs (loop0): Directory bread(block 72) failed [ 321.952173][T11783] FAT-fs (loop0): Directory bread(block 73) failed [ 321.970885][T11795] netlink: 'syz.4.4826': attribute type 9 has an invalid length. [ 322.242866][T11809] cgroup1: none used incorrectly [ 322.414830][T11835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.511812][T11855] binder: 11854:11855 ioctl c018620c 200000000380 returned -22 [ 322.652181][T11881] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.730146][T11889] EXT4-fs error (device loop4): ext4_orphan_get:1238: inode #15: comm syz.4.4869: casefold flag without casefold feature [ 322.745392][T11889] EXT4-fs (loop4): Remounting filesystem read-only [ 322.754738][T11889] EXT4-fs error (device loop4): ext4_orphan_get:1262: comm syz.4.4869: bad orphan inode 15 [ 322.765456][T11889] ext4_test_bit(bit=14, block=18) = 1 [ 322.770861][T11889] is_bad_inode(inode)=0 [ 322.774860][T11889] NEXT_ORPHAN(inode)=1023 [ 322.779364][T11889] max_ino=32 [ 322.784692][T11889] i_nlink=0 [ 322.787776][T11889] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro, [ 322.797032][T11889] ext4 filesystem being mounted at /886/bus supports timestamps until (%ptR?) (0x7fffffff) [ 322.821812][T11889] EXT4-fs error (device loop4): ext4_add_entry:2427: inode #12: comm syz.4.4869: Directory hole found for htree leaf block 0 [ 322.836655][T11889] EXT4-fs (loop4): Remounting filesystem read-only [ 322.844291][T11889] EXT4-fs error (device loop4) in ext4_evict_inode:276: Readonly filesystem [ 322.853445][T11889] incfs: Can't find or create .index dir in ./file0 [ 322.860459][T11889] incfs: mount failed -117 [ 323.145494][T11940] x_tables: unsorted underflow at hook 3 [ 323.178692][T11938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 323.345064][ T23] kauditd_printk_skb: 52 callbacks suppressed [ 323.345077][ T23] audit: type=1400 audit(1742778397.175:341): avc: denied { read } for pid=11971 comm="syz.4.4906" name="event0" dev="devtmpfs" ino=10753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 323.447861][ T23] audit: type=1400 audit(1742778397.175:342): avc: denied { open } for pid=11971 comm="syz.4.4906" path="/dev/input/event0" dev="devtmpfs" ino=10753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 323.489761][ T23] audit: type=1400 audit(1742778397.203:343): avc: denied { ioctl } for pid=11971 comm="syz.4.4906" path="/dev/input/event0" dev="devtmpfs" ino=10753 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 323.549851][ T23] audit: type=1400 audit(1742778397.240:344): avc: denied { nlmsg_read } for pid=11979 comm="syz.4.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.589850][ T23] audit: type=1400 audit(1742778397.343:345): avc: denied { getopt } for pid=11989 comm="syz.0.4916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.612842][ T23] audit: type=1400 audit(1742778397.352:346): avc: denied { write } for pid=11995 comm="syz.0.4920" name="event0" dev="devtmpfs" ino=10753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 323.637002][ T23] audit: type=1400 audit(1742778397.390:347): avc: denied { connect } for pid=11997 comm="syz.0.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.753366][ T23] audit: type=1400 audit(1742778397.549:348): avc: denied { write } for pid=12022 comm="syz.0.4934" name="raw-gadget" dev="devtmpfs" ino=10751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.789465][T12028] netlink: 'syz.4.4935': attribute type 3 has an invalid length. [ 323.813044][ T23] audit: type=1400 audit(1742778397.614:349): avc: denied { mount } for pid=12032 comm="syz.3.4938" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 323.856486][ T23] audit: type=1400 audit(1742778397.642:350): avc: denied { unmount } for pid=369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 323.879035][T12044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4940'. [ 324.042610][ T693] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 324.112678][T12080] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 324.326497][T12089] EXT4-fs (loop3): Ignoring removed oldalloc option [ 324.351427][T12089] EXT4-fs (loop3): Ignoring removed nobh option [ 324.376110][T12089] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,resgid=0x0000000000000000,errors=remount-ro,nobh,delalloc, [ 324.390221][T12089] ext4 filesystem being mounted at /979/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 324.448817][ T693] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 324.474932][ T693] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 324.495851][T12095] FAT-fs (loop4): Directory bread(block 64) failed [ 324.502298][ T693] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.517995][T12095] FAT-fs (loop4): Directory bread(block 65) failed [ 324.532840][T12095] FAT-fs (loop4): Directory bread(block 66) failed [ 324.545214][T12095] FAT-fs (loop4): Directory bread(block 67) failed [ 324.552397][T12095] FAT-fs (loop4): Directory bread(block 68) failed [ 324.565783][T12095] FAT-fs (loop4): Directory bread(block 69) failed [ 324.572589][T12095] FAT-fs (loop4): Directory bread(block 70) failed [ 324.587033][T12095] FAT-fs (loop4): Directory bread(block 71) failed [ 324.605362][T12095] FAT-fs (loop4): Directory bread(block 72) failed [ 324.614351][T12095] FAT-fs (loop4): Directory bread(block 73) failed [ 324.703650][T12118] EXT4-fs error (device loop1): ext4_orphan_get:1262: comm syz.1.4975: bad orphan inode 15 [ 324.714297][T12118] ext4_test_bit(bit=14, block=5) = 0 [ 324.719756][T12118] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,usrquota,journal_ioprio=0x0000000000000004,discard,nolazytime,noload,,errors=continue [ 324.790831][ T693] usb 1-1: string descriptor 0 read error: -22 [ 324.796908][ T693] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.806227][T12118] EXT4-fs error (device loop1): __ext4_new_inode:928: comm syz.1.4975: reserved inode found cleared - inode=1 [ 324.816563][ T693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.845922][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4980'. [ 324.857015][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4980'. [ 324.865994][T12026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 324.866671][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4980'. [ 324.873835][T12026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 324.909041][ T693] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 325.064510][T12148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4990'. [ 325.120945][T12159] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 325.141536][ T399] usb 1-1: USB disconnect, device number 108 [ 325.153931][T12161] xt_limit: Overflow, try lower: 0/0 [ 325.197674][T12169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4998'. [ 325.206591][T12169] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4998'. [ 325.217855][T12169] netlink: 'syz.2.4998': attribute type 5 has an invalid length. [ 325.225865][T12169] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4998'. [ 325.243360][T12171] xt_TCPMSS: Only works on TCP SYN packets [ 325.273321][T12177] ipt_REJECT: TCP_RESET invalid for non-tcp [ 325.359260][T12187] xt_TCPMSS: Only works on TCP SYN packets [ 325.453600][T12202] x_tables: unsorted underflow at hook 1 [ 325.483370][T12206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12206 comm=syz.1.5017 [ 325.515886][T12206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12206 comm=syz.1.5017 [ 325.603938][T12216] Alternate GPT is invalid, using primary GPT. [ 325.617774][T12216] loop4: p1 p2 p3 [ 325.740474][ T1784] udevd[1784]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 325.755908][ T1782] udevd[1782]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 325.767183][ T365] udevd[365]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 326.150961][T12282] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 326.234177][T12295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5058'. [ 326.244175][T12289] FAT-fs (loop3): Directory bread(block 64) failed [ 326.250616][T12289] FAT-fs (loop3): Directory bread(block 65) failed [ 326.277386][T12289] FAT-fs (loop3): Directory bread(block 66) failed [ 326.292746][T12289] FAT-fs (loop3): Directory bread(block 67) failed [ 326.315592][T12289] FAT-fs (loop3): Directory bread(block 68) failed [ 326.339450][T12289] FAT-fs (loop3): Directory bread(block 69) failed [ 326.339511][T12289] FAT-fs (loop3): Directory bread(block 70) failed [ 326.339527][T12289] FAT-fs (loop3): Directory bread(block 71) failed [ 326.347937][ T693] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 326.348097][T12289] FAT-fs (loop3): Directory bread(block 72) failed [ 326.348117][T12289] FAT-fs (loop3): Directory bread(block 73) failed [ 326.573602][T12322] SELinux: policydb string length 0 does not match expected length 8 [ 326.597600][T12322] SELinux: failed to load policy [ 326.606323][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'. [ 326.732770][ T693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 326.762396][ T693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.960882][ T693] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 326.989406][ T693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.008267][ T693] usb 2-1: Product: syz [ 327.012370][ T693] usb 2-1: Manufacturer: syz [ 327.031811][ T693] usb 2-1: SerialNumber: syz [ 327.056493][ T693] usb 2-1: config 0 descriptor?? [ 327.100510][ T693] snd-usb-audio: probe of 2-1:0.0 failed with error -90 [ 327.322208][ T399] usb 2-1: USB disconnect, device number 102 [ 327.461051][T12413] loop3: unable to read partition table [ 327.495244][T12413] loop3: partition table beyond EOD, truncated [ 327.501378][T12413] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 327.543167][T12431] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 327.670270][T12365] F2FS-fs (loop2): invalid crc value [ 327.675532][T12365] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 327.699941][T12365] F2FS-fs (loop2): Found nat_bits in checkpoint [ 327.722603][ T164] loop3: unable to read partition table [ 327.728185][ T164] loop3: partition table beyond EOD, truncated [ 327.821270][T12365] F2FS-fs (loop2): recover fsync data on readonly fs [ 327.829185][T12365] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 327.835534][T12365] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 327.907944][T12365] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 328.278000][T12489] FAT-fs (loop0): Directory bread(block 64) failed [ 328.284765][T12489] FAT-fs (loop0): Directory bread(block 65) failed [ 328.302143][T12489] FAT-fs (loop0): Directory bread(block 66) failed [ 328.324282][T12489] FAT-fs (loop0): Directory bread(block 67) failed [ 328.331312][T12489] FAT-fs (loop0): Directory bread(block 68) failed [ 328.331475][T12276] syz.2.5043 (12276) used greatest stack depth: 18872 bytes left [ 328.337693][T12489] FAT-fs (loop0): Directory bread(block 69) failed [ 328.351861][T12489] FAT-fs (loop0): Directory bread(block 70) failed [ 328.358221][T12489] FAT-fs (loop0): Directory bread(block 71) failed [ 328.370877][T12489] FAT-fs (loop0): Directory bread(block 72) failed [ 328.381301][T12510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.390077][T12489] FAT-fs (loop0): Directory bread(block 73) failed [ 328.435221][T12512] xt_bpf: check failed: parse error [ 328.636244][T12536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.639827][T12530] FAT-fs (loop1): Directory bread(block 64) failed [ 328.653864][T12530] FAT-fs (loop1): Directory bread(block 65) failed [ 328.660843][T12530] FAT-fs (loop1): Directory bread(block 66) failed [ 328.682830][T12530] FAT-fs (loop1): Directory bread(block 67) failed [ 328.689328][T12530] FAT-fs (loop1): Directory bread(block 68) failed [ 328.700629][T12530] FAT-fs (loop1): Directory bread(block 69) failed [ 328.711275][T12530] FAT-fs (loop1): Directory bread(block 70) failed [ 328.726804][T12530] FAT-fs (loop1): Directory bread(block 71) failed [ 328.736541][T12548] FAT-fs (loop3): Directory bread(block 64) failed [ 328.744998][T12530] FAT-fs (loop1): Directory bread(block 72) failed [ 328.752496][T12530] FAT-fs (loop1): Directory bread(block 73) failed [ 328.758900][ T23] kauditd_printk_skb: 27 callbacks suppressed [ 328.758910][ T23] audit: type=1400 audit(1742778402.236:378): avc: denied { setopt } for pid=12550 comm="syz.4.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.786141][T12548] FAT-fs (loop3): Directory bread(block 65) failed [ 328.805206][T12548] FAT-fs (loop3): Directory bread(block 66) failed [ 328.822598][T12548] FAT-fs (loop3): Directory bread(block 67) failed [ 328.839248][T12548] FAT-fs (loop3): Directory bread(block 68) failed [ 328.857036][T12548] FAT-fs (loop3): Directory bread(block 69) failed [ 328.870839][T12548] FAT-fs (loop3): Directory bread(block 70) failed [ 328.885063][T12548] FAT-fs (loop3): Directory bread(block 71) failed [ 328.895639][T12548] FAT-fs (loop3): Directory bread(block 72) failed [ 328.902044][T12548] FAT-fs (loop3): Directory bread(block 73) failed [ 329.019236][ T23] audit: type=1400 audit(1742778402.479:379): avc: denied { read } for pid=12577 comm="syz.1.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 329.125510][T12576] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 329.134526][T12576] ext4 filesystem being mounted at /1041/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 329.163586][T12587] device gretap1 entered promiscuous mode [ 329.277902][T12600] __nla_validate_parse: 4 callbacks suppressed [ 329.277911][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5199'. [ 329.298845][ T23] audit: type=1400 audit(1742778402.741:380): avc: denied { mount } for pid=12601 comm="syz.4.5204" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 329.343202][T12600] netlink: 'syz.2.5199': attribute type 3 has an invalid length. [ 329.362129][ T23] audit: type=1400 audit(1742778402.806:381): avc: denied { unmount } for pid=368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 329.446676][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5211'. [ 329.485752][T12617] device gretap1 entered promiscuous mode [ 329.498151][T12628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5215'. [ 329.536830][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5215'. [ 329.556420][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5215'. [ 329.649489][ T23] audit: type=1400 audit(1742778403.078:382): avc: denied { setopt } for pid=12642 comm="syz.1.5222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 329.678231][ T23] audit: type=1400 audit(1742778403.106:383): avc: denied { write } for pid=12644 comm="syz.0.5223" name="kvm" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.748645][ T23] audit: type=1400 audit(1742778403.143:384): avc: denied { append } for pid=12651 comm="syz.1.5225" name="kvm" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.793330][ T125] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 329.837984][T12664] xt_l2tp: invalid flags combination: 8 [ 329.860741][ T23] audit: type=1400 audit(1742778403.274:385): avc: denied { setopt } for pid=12667 comm="syz.4.5232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.997595][ T23] audit: type=1400 audit(1742778403.405:386): avc: denied { ioctl } for pid=12692 comm="syz.3.5243" path="socket:[116673]" dev="sockfs" ino=116673 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.186882][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5253'. [ 330.221011][ T125] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 330.231612][ T125] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 330.240421][T12725] xt_hashlimit: size too large, truncated to 1048576 [ 330.253028][T12725] xt_hashlimit: max too large, truncated to 1048576 [ 330.255120][ T125] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 330.284557][ T125] usb 3-1: config 220 has no interface number 2 [ 330.300412][ T125] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 330.332333][ T125] usb 3-1: config 220 interface 0 has no altsetting 0 [ 330.364200][ T125] usb 3-1: config 220 interface 76 has no altsetting 0 [ 330.373730][ T125] usb 3-1: config 220 interface 1 has no altsetting 0 [ 330.414120][ T23] audit: type=1326 audit(1742778403.789:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.3.5261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2cf5e169 code=0x0 [ 330.563495][ T125] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 330.582931][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.608551][ T125] usb 3-1: Product: syz [ 330.616103][ T125] usb 3-1: Manufacturer: syz [ 330.625272][ T125] usb 3-1: SerialNumber: syz [ 331.022963][ T125] usb 3-1: selecting invalid altsetting 0 [ 331.028573][ T125] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 331.054026][ T125] uvcvideo: No valid video chain found. [ 331.157912][ T125] usb 3-1: USB disconnect, device number 98 [ 331.362806][T12744] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 331.375381][T12744] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.398482][T12744] F2FS-fs (loop3): invalid crc value [ 331.406511][T12744] F2FS-fs (loop3): Found nat_bits in checkpoint [ 331.451122][T12744] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 331.461484][T12744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 331.538512][T12744] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix. [ 331.664535][T12811] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 331.678708][T12811] ext4 filesystem being mounted at /1052/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 331.698948][T12811] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.5293: corrupted xattr block 128 [ 331.721176][T12811] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 331.734535][T12811] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.5293: corrupted xattr block 128 [ 331.747092][T12811] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 331.771394][T12811] EXT4-fs error (device loop0): ext4_xattr_block_find:1867: inode #15: comm syz.0.5293: corrupted xattr block 128 [ 331.813789][ T2098] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 332.017381][T12843] binder: 12842:12843 ioctl c018620c 200000000000 returned -22 [ 332.060369][T12838] ================================================================== [ 332.068275][T12838] BUG: KASAN: use-after-free in __ext4_iget+0x384/0x4330 [ 332.075123][T12838] Read of size 8 at addr ffff8881dd148a30 by task syz.0.5306/12838 [ 332.082833][T12838] [ 332.085011][T12838] CPU: 0 PID: 12838 Comm: syz.0.5306 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 332.094732][T12838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.104625][T12838] Call Trace: [ 332.107762][T12838] dump_stack+0x1d8/0x241 [ 332.111925][T12838] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 332.117571][T12838] ? printk+0xd1/0x111 [ 332.121477][T12838] ? __ext4_iget+0x384/0x4330 [ 332.125982][T12838] print_address_description+0x8c/0x600 [ 332.131366][T12838] ? _raw_spin_lock+0xa4/0x1b0 [ 332.135965][T12838] ? _raw_spin_trylock_bh+0x190/0x190 [ 332.141173][T12838] ? __ext4_iget+0x384/0x4330 [ 332.145684][T12838] __kasan_report+0xf3/0x120 [ 332.150109][T12838] ? __ext4_iget+0x384/0x4330 [ 332.154617][T12838] kasan_report+0x30/0x60 [ 332.158793][T12838] __ext4_iget+0x384/0x4330 [ 332.163138][T12838] ? idr_replace+0x230/0x230 [ 332.167557][T12838] ? ext4_get_projid+0x140/0x140 [ 332.172329][T12838] ? _raw_write_lock+0xa4/0x170 [ 332.177020][T12838] ? __proc_create+0x65a/0xa00 [ 332.181622][T12838] ext4_enable_quotas+0x528/0x940 [ 332.186484][T12838] ? ext4_fill_flex_info+0x5e0/0x5e0 [ 332.191596][T12838] ? proc_create+0x230/0x230 [ 332.196044][T12838] ? ext4_fill_flex_info+0x53b/0x5e0 [ 332.201149][T12838] ? ext4_register_sysfs+0x1d9/0x210 [ 332.206272][T12838] ext4_fill_super+0x84f0/0x8d90 [ 332.211071][T12838] ? ext4_mount+0x40/0x40 [ 332.215210][T12838] ? vscnprintf+0x80/0x80 [ 332.219366][T12838] mount_bdev+0x267/0x370 [ 332.223537][T12838] ? ext4_mount+0x40/0x40 [ 332.227704][T12838] legacy_get_tree+0xdf/0x170 [ 332.232214][T12838] ? ext4_lazyinit_thread+0xc60/0xc60 [ 332.237429][T12838] vfs_get_tree+0x85/0x260 [ 332.241677][T12838] do_new_mount+0x292/0x570 [ 332.246019][T12838] ? do_move_mount_old+0x160/0x160 [ 332.250967][T12838] ? security_capable+0x86/0xb0 [ 332.255649][T12838] do_mount+0x688/0xe10 [ 332.259642][T12838] ? copy_mount_string+0x30/0x30 [ 332.264413][T12838] ? copy_mount_options+0x29a/0x300 [ 332.269467][T12838] ksys_mount+0xc2/0xf0 [ 332.273443][T12838] __x64_sys_mount+0xb1/0xc0 [ 332.277872][T12838] do_syscall_64+0xca/0x1c0 [ 332.282209][T12838] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 332.287934][T12838] RIP: 0033:0x7feb3ec7d90a [ 332.292185][T12838] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.311628][T12838] RSP: 002b:00007feb3d2e5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 332.319876][T12838] RAX: ffffffffffffffda RBX: 00007feb3d2e5ef0 RCX: 00007feb3ec7d90a [ 332.327685][T12838] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 00007feb3d2e5eb0 [ 332.335497][T12838] RBP: 0000200000000140 R08: 00007feb3d2e5ef0 R09: 0000000001018e58 [ 332.343299][T12838] R10: 0000000001018e58 R11: 0000000000000246 R12: 0000200000000040 [ 332.351119][T12838] R13: 00007feb3d2e5eb0 R14: 00000000000005fc R15: 0000200000000180 [ 332.358927][T12838] [ 332.361096][T12838] Allocated by task 11124: [ 332.365352][T12838] __kasan_kmalloc+0x171/0x210 [ 332.369956][T12838] kmem_cache_alloc+0xd9/0x250 [ 332.374567][T12838] f2fs_alloc_inode+0x22/0x3c0 [ 332.379156][T12838] iget_locked+0x143/0x790 [ 332.383410][T12838] f2fs_iget+0x52/0x4cf0 [ 332.387494][T12838] f2fs_fill_super+0x6a4a/0x8330 [ 332.392260][T12838] mount_bdev+0x267/0x370 [ 332.396427][T12838] legacy_get_tree+0xdf/0x170 [ 332.400938][T12838] vfs_get_tree+0x85/0x260 [ 332.405186][T12838] do_new_mount+0x292/0x570 [ 332.409522][T12838] do_mount+0x688/0xe10 [ 332.413524][T12838] ksys_mount+0xc2/0xf0 [ 332.417512][T12838] __x64_sys_mount+0xb1/0xc0 [ 332.421940][T12838] do_syscall_64+0xca/0x1c0 [ 332.426283][T12838] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 332.432002][T12838] [ 332.434173][T12838] Freed by task 11163: [ 332.438086][T12838] __kasan_slab_free+0x1b5/0x270 [ 332.442854][T12838] kmem_cache_free+0x10b/0x2c0 [ 332.447461][T12838] rcu_do_batch+0x492/0xa00 [ 332.451790][T12838] rcu_core+0x4c8/0xcb0 [ 332.455781][T12838] __do_softirq+0x23b/0x6b7 [ 332.460114][T12838] [ 332.462290][T12838] The buggy address belongs to the object at ffff8881dd148570 [ 332.462290][T12838] which belongs to the cache f2fs_inode_cache of size 1264 [ 332.476705][T12838] The buggy address is located 1216 bytes inside of [ 332.476705][T12838] 1264-byte region [ffff8881dd148570, ffff8881dd148a60) [ 332.489978][T12838] The buggy address belongs to the page: [ 332.495464][T12838] page:ffffea0007745200 refcount:1 mapcount:0 mapping:ffff8881f0fb8500 index:0xffff8881dd14d700 compound_mapcount: 0 [ 332.507515][T12838] flags: 0x8000000000010200(slab|head) [ 332.512811][T12838] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f0fb8500 [ 332.521228][T12838] raw: ffff8881dd14d700 000000008017000b 00000001ffffffff 0000000000000000 [ 332.529645][T12838] page dumped because: kasan: bad access detected [ 332.535899][T12838] page_owner tracks the page as allocated [ 332.541452][T12838] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 332.558642][T12838] prep_new_page+0x18f/0x370 [ 332.563057][T12838] get_page_from_freelist+0x2d13/0x2d90 [ 332.568443][T12838] __alloc_pages_nodemask+0x393/0x840 [ 332.573648][T12838] alloc_slab_page+0x39/0x3c0 [ 332.578158][T12838] new_slab+0x97/0x440 [ 332.582063][T12838] ___slab_alloc+0x2fe/0x490 [ 332.586492][T12838] __slab_alloc+0x62/0xa0 [ 332.590658][T12838] kmem_cache_alloc+0x109/0x250 [ 332.595344][T12838] f2fs_alloc_inode+0x22/0x3c0 [ 332.599946][T12838] iget_locked+0x143/0x790 [ 332.604196][T12838] f2fs_iget+0x52/0x4cf0 [ 332.608275][T12838] f2fs_fill_super+0x4d1b/0x8330 [ 332.613048][T12838] mount_bdev+0x267/0x370 [ 332.617220][T12838] legacy_get_tree+0xdf/0x170 [ 332.621739][T12838] vfs_get_tree+0x85/0x260 [ 332.625981][T12838] do_new_mount+0x292/0x570 [ 332.630313][T12838] page last free stack trace: [ 332.634834][T12838] __free_pages_ok+0x847/0x950 [ 332.639435][T12838] __free_pages+0x91/0x140 [ 332.643691][T12838] __free_slab+0x221/0x2e0 [ 332.647942][T12838] unfreeze_partials+0x14e/0x180 [ 332.652716][T12838] put_cpu_partial+0x44/0x180 [ 332.657226][T12838] __slab_free+0x297/0x360 [ 332.661480][T12838] qlist_free_all+0x43/0xb0 [ 332.665822][T12838] quarantine_reduce+0x1d9/0x210 [ 332.670595][T12838] __kasan_kmalloc+0x41/0x210 [ 332.675106][T12838] kmem_cache_alloc+0xd9/0x250 [ 332.679706][T12838] getname_flags+0xb8/0x4e0 [ 332.684046][T12838] do_sys_open+0x357/0x810 [ 332.688301][T12838] do_syscall_64+0xca/0x1c0 [ 332.692642][T12838] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 332.698370][T12838] [ 332.700531][T12838] Memory state around the buggy address: [ 332.706099][T12838] ffff8881dd148900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.713991][T12838] ffff8881dd148980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.721895][T12838] >ffff8881dd148a00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 332.729780][T12838] ^ [ 332.735252][T12838] ffff8881dd148a80: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 332.743236][T12838] ffff8881dd148b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.751130][T12838] ================================================================== [ 332.759028][T12838] Disabling lock debugging due to kernel taint [ 332.775979][ T2098] usb 5-1: Using ep0 maxpacket: 8 [ 332.781013][T12838] EXT4-fs error (device loop0): ext4_quota_enable:6056: inode #3: comm syz.0.5306: unexpected EA_INODE flag [ 332.822719][T12838] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz.0.5306: Bad quota inode: 3, type: 0 [ 332.834594][T12838] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 332.849296][T12838] EXT4-fs (loop0): mount failed [ 332.861561][T12862] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 332.874247][T12867] netlink: 'syz.3.5295': attribute type 3 has an invalid length. [ 332.914662][ T2098] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 332.922759][ T2098] usb 5-1: config 0 has no interface number 0 [ 332.983861][ T7] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 333.096358][ T2098] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 333.105218][ T2098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.113100][ T2098] usb 5-1: Product: syz [ 333.117025][ T2098] usb 5-1: Manufacturer: syz [ 333.121471][ T2098] usb 5-1: SerialNumber: syz [ 333.126696][ T2098] usb 5-1: config 0 descriptor?? [ 333.406428][ T2098] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 333.412724][ T2098] uvcvideo: No valid video chain found. [ 333.621598][ T125] usb 5-1: USB disconnect, device number 107