last executing test programs: 1m16.331482744s ago: executing program 4 (id=481): syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1m16.330322164s ago: executing program 4 (id=485): ftruncate(0xffffffffffffffff, 0x0) 1m16.310622935s ago: executing program 4 (id=490): io_destroy(0x0) 1m16.308695665s ago: executing program 4 (id=497): rt_sigreturn() 1m16.007317625s ago: executing program 0 (id=618): syz_open_dev$ublk_bdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ublk_bdev(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$ublk_bdev(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$ublk_bdev(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$ublk_bdev(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$ublk_bdev(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$ublk_bdev(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$ublk_bdev(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$ublk_bdev(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$ublk_bdev(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$ublk_bdev(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$ublk_bdev(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$ublk_bdev(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$ublk_bdev(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$ublk_bdev(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$ublk_bdev(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$ublk_bdev(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$ublk_bdev(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$ublk_bdev(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$ublk_bdev(&(0x7f0000000500), 0x4, 0x800) 1m16.006736785s ago: executing program 0 (id=622): mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1m15.954544476s ago: executing program 0 (id=623): socket$inet6_udplite(0xa, 0x2, 0x88) 1m15.673064566s ago: executing program 0 (id=625): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1m15.325460527s ago: executing program 0 (id=629): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1m15.139502023s ago: executing program 4 (id=630): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1m15.101215964s ago: executing program 0 (id=632): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1m15.060855985s ago: executing program 4 (id=636): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3.034695443s ago: executing program 6 (id=1999): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100151f30940cb040001bb000000000109021200090000000009042a00008004"], 0x0) 2.133444972s ago: executing program 3 (id=2010): syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302", @ANYRESOCT], 0x0) 2.105313312s ago: executing program 2 (id=2011): syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x42, &(0x7f0000000b00)=ANY=[], 0x1, 0x10635, &(0x7f0000010640)="$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") 1.975784957s ago: executing program 5 (id=2016): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @enum={0x400}]}}, &(0x7f0000000080)=""/159, 0x3e, 0x9f, 0x1}, 0x28) 1.964846097s ago: executing program 5 (id=2017): syz_clone(0x481000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.935712808s ago: executing program 5 (id=2019): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x20, 0x0, 0x6, 0x2}]}}, 0x0, 0x26}, 0x28) 1.935418498s ago: executing program 5 (id=2021): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000f00)={[{@init_itable_val={'init_itable', 0x3d, 0x9}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") 1.757072984s ago: executing program 5 (id=2026): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/237, 0x3b, 0xed, 0x1}, 0x20) 1.725662975s ago: executing program 5 (id=2028): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e2f06de90f6007009021200010000000009040000000202"], 0x0) 1.678556947s ago: executing program 1 (id=2032): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x4f, 0x4b, 0xb3, 0x10, 0xdf6, 0x69, 0x8ef3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xec, 0x7f, 0xa0, 0x2, "", [{{0x9, 0x4, 0x9a, 0x3, 0x0, 0x8, 0x4, 0x1}}]}}]}}, 0x0) 1.56159575s ago: executing program 6 (id=2033): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x96, &(0x7f0000000140)={[{@inline_xattr}, {@inlinecrypt}, {@lfs_mode}, {@alloc_mode_reuse}, {@gc_merge}, {@disable_roll_forward}, {@memory_low}, {@data_flush}, {@checkpoint_enable}, {@user_xattr}, {@block_mode}, {@noinline_data}, {@background_gc_off}, {@noinline_dentry}]}, 0x1, 0x5517, &(0x7f00000079c0)="$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") 1.535289321s ago: executing program 2 (id=2034): mknodat(0xffffffffffffffff, 0x0, 0x4231, 0xa6f4) 1.525094521s ago: executing program 2 (id=2035): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301580000000000950000000000000033b9f06ff0f976980fcdc922968e07b7d626d6b23a43400f0b71b425c18500718356c10e86592c15e5fe80f3c53bfba8df4fc1d11db014908353ddb0d4445696755635390b3fc032102cf52944b99f2d40b7fc17b5ed792fc786f5537ec136412420e05b55684f6d85d61a9bbd7279acfa1b6ca1a28d229177720c889ced09f696d657a845de7d408a0d108697fbcb7c7c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.460542053s ago: executing program 2 (id=2036): syz_emit_ethernet(0x16, &(0x7f0000000000)={@multicast, @random="b5a82c1e1b62", @void, {@llc={0x4, {@snap={0xaa, 0x1fe, 'c', "f2a1eb", 0x3}}}}}, 0x0) 1.443998174s ago: executing program 2 (id=2037): keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB='enc=pkcs1 h'], 0x0, 0x0) 1.358671906s ago: executing program 2 (id=2038): syz_usb_connect$uac2(0x0, 0x97, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x5050, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xdb, 0x60, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xc, 0x15, 0x7f}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x303, 0x8, 0xf9, 0x2, 0x6, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xd, 0x2, 0x1c238c4323f2efae, 0x5, 0x8, 0x7ff, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x5, 0x37, {0x8, 0x25, 0x1, 0x1, 0xf, 0x40, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0x81, 0x40, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x6f, 0x6}}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 1.330238278s ago: executing program 6 (id=2039): rt_sigprocmask(0x2, 0x0, 0x0, 0x8) 1.24907522s ago: executing program 6 (id=2040): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0xff, 0x4, 0x3}, 0x50) 1.194679752s ago: executing program 6 (id=2041): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x210002, &(0x7f0000000040), 0x6, 0x4c2, &(0x7f0000001100)="$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") 1.142190254s ago: executing program 6 (id=2042): syz_usb_connect(0x5, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 537.283133ms ago: executing program 3 (id=2043): syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '0b`', 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xfffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0xe}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x3, 0x9}, 0x2, {0x5, 0x2, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 530.769833ms ago: executing program 3 (id=2044): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x5, 0x400, 0x6, 0x1}, 0x50) 512.766514ms ago: executing program 3 (id=2045): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 512.483734ms ago: executing program 3 (id=2046): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000711190ff000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) 462.756775ms ago: executing program 3 (id=2047): syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c0040000102030109028e000301053009080b00010107208c0904000000010120000924010040071500070c2403020703000401070081090401000001022000090401010101022000090501091000030b04080f010000400400090402000001022000090402010101022000092402030600cc1c051024010201000400000008b8000000030905820908"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 48.960769ms ago: executing program 1 (id=2048): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.198339ms ago: executing program 1 (id=2049): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 24.093829ms ago: executing program 1 (id=2050): timer_create(0x7, 0x0, 0xfffffffffffffffe) 285.12µs ago: executing program 1 (id=2051): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61104b00000000006113740000000000bfa00000000000000700000008ffffffd50301001774004095001800000000006916320000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 0s ago: executing program 1 (id=2052): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x5a4, &(0x7f0000000640)="$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") kernel console output (not intermixed with test programs): 'lowerdir' [ 64.107898][ T2520] cgroup: Bad value for 'name' [ 64.118228][ T1018] usb 6-1: New USB device found, idVendor=1ae7, idProduct=2001, bcdDevice=50.1c [ 64.127277][ T1018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.128232][ T1037] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 64.135525][ T1018] usb 6-1: Product: syz [ 64.142939][ T1038] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 64.147367][ T1018] usb 6-1: Manufacturer: ó´ž› [ 64.159432][ T1018] usb 6-1: SerialNumber: syz [ 64.249229][ T2530] EXT4-fs (loop2): Ignoring removed orlov option [ 64.255684][ T2530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.266546][ T2530] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1314: inode #1: comm syz.2.1314: iget: illegal inode # [ 64.279769][ T2530] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1314: error while reading EA inode 1 err=-117 [ 64.292321][ T2530] EXT4-fs (loop2): 1 orphan inode deleted [ 64.298026][ T2530] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue [ 64.348204][ T1025] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 64.398187][ T1037] usb 4-1: Using ep0 maxpacket: 32 [ 64.403364][ T1038] usb 7-1: Using ep0 maxpacket: 32 [ 64.500093][ T1018] usb 6-1: USB disconnect, device number 14 [ 64.528250][ T1038] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 222, changing to 7 [ 64.578206][ T1037] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.598176][ T1025] usb 2-1: Using ep0 maxpacket: 8 [ 64.648212][ T1017] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 64.698263][ T1038] usb 7-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 64.707378][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.715361][ T1038] usb 7-1: Product: syz [ 64.719579][ T1038] usb 7-1: Manufacturer: syz [ 64.724174][ T1038] usb 7-1: SerialNumber: syz [ 64.768211][ T1025] usb 2-1: unable to get BOS descriptor or descriptor too short [ 64.818273][ T1037] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 64.827351][ T1037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.835340][ T1037] usb 4-1: Product: syz [ 64.839517][ T1037] usb 4-1: Manufacturer: syz [ 64.844087][ T1037] usb 4-1: SerialNumber: syz [ 64.868235][ T1025] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 64.876291][ T1025] usb 2-1: config 1 has no interface number 0 [ 64.940721][ T2540] overlayfs: missing 'lowerdir' [ 64.964604][ T2544] tmpfs: Bad value for 'fscontext' [ 65.038268][ T1025] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 65.047354][ T1025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.055381][ T1025] usb 2-1: Product: syz [ 65.059599][ T1017] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.067305][ T1025] usb 2-1: Manufacturer: syz [ 65.071958][ T1025] usb 2-1: SerialNumber: syz [ 65.098224][ T1017] usb 3-1: not running at top speed; connect to a high speed hub [ 65.098262][ T1038] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 65.128217][ T1038] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 65.152378][ T1038] usb 7-1: USB disconnect, device number 12 [ 65.178457][ T1017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.188745][ T1017] usb 3-1: config 1 interface 0 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.201816][ T1017] usb 3-1: config 1 interface 0 has no altsetting 0 [ 65.238204][ T1037] usb 4-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 65.246653][ T1037] usb 4-1: found format II with max.bitrate = 8, frame size=20186 [ 65.254477][ T1037] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 65.263944][ T1037] usb 4-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 65.272412][ T1041] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 65.279977][ T1037] usb 4-1: found format II with max.bitrate = 8, frame size=20186 [ 65.287789][ T1037] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 65.328303][ T1037] usb 4-1: unit 37 not found! [ 65.333055][ T1037] usb 4-1: unit 0 not found! [ 65.373215][ T1037] usb 4-1: USB disconnect, device number 13 [ 65.419097][ T1017] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.428521][ T1017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.437373][ T1025] usb 2-1: USB disconnect, device number 14 [ 65.443615][ T1017] usb 3-1: Product: syz [ 65.447979][ T1017] usb 3-1: Manufacturer: syz [ 65.453348][ T1017] usb 3-1: SerialNumber: syz [ 65.520291][ T24] audit: type=1326 audit(1781606460.743:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2559 comm="syz.6.1328" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94120fe59 code=0x0 [ 65.544563][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 65.599004][ T1320] udevd[1320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 65.616334][ T2566] exfat: Deprecated parameter 'namecase' [ 65.640416][ T2566] exfat: Deprecated parameter 'utf8' [ 65.670658][ T2566] exFAT-fs (loop6): failed to read boot sector [ 65.676932][ T2566] exFAT-fs (loop6): failed to recognize exfat type [ 65.684177][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.718205][ T1041] usb 6-1: unable to get BOS descriptor or descriptor too short [ 65.788479][ T1017] usb 3-1: bad CDC descriptors [ 65.798345][ T1041] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 65.802617][ T1017] usb 3-1: USB disconnect, device number 15 [ 65.806430][ T1041] usb 6-1: config 0 has no interface number 0 [ 65.841520][ T1041] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 65.852696][ T1041] usb 6-1: config 0 interface 88 has no altsetting 0 [ 65.873834][ T24] audit: type=1326 audit(1781606461.093:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2594 comm="syz.3.1344" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a67c2e59 code=0x0 [ 65.956014][ T2598] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2799: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 65.969632][ T2598] EXT4-fs (loop6): 1 truncate cleaned up [ 65.975453][ T2598] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 66.048281][ T1041] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 66.057358][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 66.065459][ T1041] usb 6-1: Product: syz [ 66.069631][ T1041] usb 6-1: Manufacturer: syz [ 66.074198][ T1041] usb 6-1: SerialNumber: syz [ 66.079376][ T1041] usb 6-1: config 0 descriptor?? [ 66.103974][ T24] audit: type=1400 audit(1781606461.323:217): avc: denied { create } for pid=2616 comm="syz.6.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 66.128495][ T2612] EXT4-fs (loop1): unsupported inode size: 10 [ 66.143380][ T2612] EXT4-fs (loop1): blocksize: 1024 [ 66.198220][ T1025] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 66.350363][ T2649] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 66.360762][ T2649] exFAT-fs (loop2): failed to load upcase table [ 66.366992][ T2649] exFAT-fs (loop2): failed to recognize exfat type [ 66.398707][ T1041] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input7 [ 66.409608][ T1041] usb 6-1: USB disconnect, device number 15 [ 66.498191][ T1037] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 66.508212][ T1017] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 66.628202][ T1025] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.638451][ T1025] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.710406][ T2652] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(1539) [ 66.718410][ T2652] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.727300][ T2652] F2FS-fs (loop2): invalid crc value [ 66.732762][ T1025] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.734365][ T2652] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 65 [ 66.741918][ T1025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.750468][ T2652] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 66.756415][ T1025] usb 4-1: SerialNumber: syz [ 66.808572][ T1025] usb 4-1: bad CDC descriptors [ 66.888226][ T1037] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 66.888251][ T1017] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 66.898095][ T1037] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 66.919244][ T1037] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 66.928495][ T1017] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 66.934596][ T1037] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 66.948361][ T1017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.978312][ T2627] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 67.012507][ T1016] usb 4-1: USB disconnect, device number 14 [ 67.128205][ T1037] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 67.137285][ T1037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.145269][ T1037] usb 2-1: Product: syz [ 67.149465][ T1037] usb 2-1: Manufacturer: syz [ 67.154028][ T1037] usb 2-1: SerialNumber: syz [ 67.159104][ T1037] usb 2-1: config 0 descriptor?? [ 67.198767][ T1037] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 67.208213][ T1017] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 67.215812][ T1017] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input8 [ 67.227103][ T1017] usb 7-1: USB disconnect, device number 13 [ 67.238199][ T1041] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 67.238219][ T1025] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 67.428411][ T1037] scsi host1: usb-storage 2-1:0.0 [ 67.435986][ T1037] usb 2-1: USB disconnect, device number 15 [ 67.498244][ T1025] usb 3-1: Using ep0 maxpacket: 16 [ 67.578703][ T2673] EXT4-fs (loop3): filesystem is read-only [ 67.585269][ T2673] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 67.638254][ T1025] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 67.647463][ T1025] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.648198][ T1041] usb 6-1: not running at top speed; connect to a high speed hub [ 67.657937][ T1025] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.748251][ T1041] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 204, changing to 4 [ 67.751507][ T2689] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.776892][ T2689] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1385: bg 0: block 5: invalid block bitmap [ 67.789702][ T2689] EXT4-fs (loop3): Remounting filesystem read-only [ 67.796250][ T24] audit: type=1400 audit(1781606463.013:218): avc: denied { mounton } for pid=2698 comm="syz.6.1389" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.801045][ T2689] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 67.828038][ T2689] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.1385: invalid indirect mapped block 3 (level 2) [ 67.841503][ T2689] EXT4-fs (loop3): 2 truncates cleaned up [ 67.847243][ T2689] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,dioread_nolock,grpquota, [ 67.859257][ T1025] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 67.871844][ T1025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.879884][ T1025] usb 3-1: Product: syz [ 67.884131][ T1025] usb 3-1: Manufacturer: syz [ 67.888908][ T1025] usb 3-1: SerialNumber: syz [ 67.935436][ T2707] cgroup: No subsys list or none specified [ 68.018211][ T1041] usb 6-1: string descriptor 0 read error: -22 [ 68.024445][ T1041] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 68.033578][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.049090][ T2715] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.058609][ T2715] EXT4-fs error (device loop1): ext4_fill_super:4959: inode #2: comm syz.1.1397: iget: special inode unallocated [ 68.070814][ T2715] EXT4-fs (loop1): get root inode failed [ 68.076439][ T2715] EXT4-fs (loop1): mount failed [ 68.082246][ T1041] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 68.098210][ T1016] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 68.218239][ T1038] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 68.279213][ T2719] F2FS-fs (loop1): fault_type options not supported [ 68.288205][ T1041] usb 6-1: 2:1: invalid format type 0x1003 is detected, processed as PCM [ 68.289567][ T2719] F2FS-fs (loop1): invalid crc value [ 68.302217][ T2719] F2FS-fs (loop1): invalid crc value [ 68.305323][ T1041] usb 6-1: 2:1 : sample bitwidth 255 in over sample bytes 3 [ 68.307502][ T2719] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 68.321961][ T1041] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 68.338191][ T1016] usb 7-1: Using ep0 maxpacket: 32 [ 68.344196][ T1041] usb 6-1: USB disconnect, device number 16 [ 68.428242][ T1025] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 68.436611][ T1025] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 68.447584][ T1025] usb 3-1: USB disconnect, device number 16 [ 68.539299][ T2738] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 68.549369][ T2738] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 68.557543][ T2738] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.564288][ T2738] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1407: Inode bitmap for bg 0 marked uninitialized [ 68.577217][ T2738] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 68.587226][ T1038] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 68.668219][ T1016] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 68.677276][ T1016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.693067][ T1016] usb 7-1: Product: syz [ 68.697357][ T1016] usb 7-1: Manufacturer: syz [ 68.709377][ T1016] usb 7-1: SerialNumber: syz [ 68.758222][ T1038] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 68.767441][ T1038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.775611][ T1038] usb 4-1: Product: syz [ 68.779907][ T2750] EXT4-fs (loop2): Test dummy encryption mode enabled [ 68.782740][ T1038] usb 4-1: Manufacturer: syz [ 68.791430][ T2750] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 68.805172][ T1038] usb 4-1: SerialNumber: syz [ 68.808250][ T2750] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 68.968690][ T2759] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.978738][ T2759] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 68.986127][ T2743] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 68.987648][ T2759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 69.003378][ T2759] System zones: 0-2, 18-18, 34-34 [ 69.009246][ T2759] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.1416: bad orphan inode 15 [ 69.009317][ T2743] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 69.019577][ T2759] ext4_test_bit(bit=14, block=18) = 1 [ 69.028036][ T2743] F2FS-fs (loop1): invalid crc value [ 69.033256][ T2759] is_bad_inode(inode)=0 [ 69.039174][ T2743] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.042389][ T2759] NEXT_ORPHAN(inode)=2264924160 [ 69.053194][ T2759] max_ino=32 [ 69.056380][ T2759] i_nlink=0 [ 69.059866][ T2759] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 69.068256][ T2759] EXT4-fs error (device loop2): ext4_dirty_inode:6181: inode #15: comm syz.2.1416: mark_inode_dirty error [ 69.075663][ T2743] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 69.079747][ T2759] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 69.089526][ T2743] F2FS-fs (loop1): Failed to read root inode [ 69.097158][ T2759] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2943: inode #15: comm syz.2.1416: mark_inode_dirty error [ 69.115122][ T2759] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2946: inode #15: comm syz.2.1416: mark inode dirty (error -27) [ 69.127804][ T2759] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -27) [ 69.136876][ T2759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 69.158191][ T1025] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 69.168240][ T1016] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 69.191277][ T1016] usb 7-1: USB disconnect, device number 14 [ 69.299756][ T1038] usb 4-1: Can't get UAC3 power state for id 10 [ 69.315916][ T2770] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 69.357658][ T24] audit: type=1400 audit(1781606464.573:219): avc: denied { unmount } for pid=1051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 69.388878][ T1038] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 69.398633][ T1038] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 69.408211][ T1025] usb 6-1: Using ep0 maxpacket: 32 [ 69.420674][ T1038] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 69.431323][ T1038] usb 4-1: USB disconnect, device number 15 [ 69.528275][ T1025] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 69.538207][ T1025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 69.619296][ T1322] udevd[1322]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.658173][ T1018] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 69.708297][ T1025] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 69.717422][ T1025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.725904][ T1025] usb 6-1: Product: syz [ 69.730138][ T1025] usb 6-1: Manufacturer: syz [ 69.734716][ T1025] usb 6-1: SerialNumber: syz [ 69.748195][ T1040] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 69.758253][ T2757] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 70.008196][ T1040] usb 3-1: Using ep0 maxpacket: 16 [ 70.018214][ T1038] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 70.068209][ T1018] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.108231][ T1018] usb 2-1: not running at top speed; connect to a high speed hub [ 70.138271][ T1025] usb 6-1: MIDIStreaming interface descriptor not found [ 70.147406][ T1025] usb 6-1: USB disconnect, device number 17 [ 70.158771][ T1040] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 70.166899][ T1040] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.177082][ T1040] usb 3-1: config 0 has no interface number 0 [ 70.183394][ T1040] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 70.188236][ T1018] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 70.192464][ T1040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.212057][ T1040] usb 3-1: config 0 descriptor?? [ 70.258673][ T1040] uvcvideo: Found UVC 0.00 device (0bd3:0555) [ 70.265645][ T1040] uvcvideo: No valid video chain found. [ 70.348692][ T1323] udevd[1323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.364710][ T1018] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 70.378718][ T1018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.386996][ T1018] usb 2-1: Product: syz [ 70.391297][ T1018] usb 2-1: Manufacturer: syz [ 70.395878][ T1018] usb 2-1: SerialNumber: syz [ 70.404121][ T2834] print_req_error: 2676 callbacks suppressed [ 70.404131][ T2834] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.421292][ T2834] exFAT-fs (loop6): unable to read boot sector [ 70.427432][ T2834] exFAT-fs (loop6): failed to read boot sector [ 70.433824][ T2834] exFAT-fs (loop6): failed to recognize exfat type [ 70.458222][ T1038] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.464587][ T1025] usb 3-1: USB disconnect, device number 17 [ 70.476984][ T2836] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (36396!=24295) [ 70.486680][ T2836] EXT4-fs (loop6): group descriptors corrupted! [ 70.538217][ T1038] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.548439][ T1038] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.610792][ T2841] erofs: (device loop6): erofs_read_inode: unsupported chunk format 0 of nid 36 [ 70.718224][ T1038] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 70.727693][ T1038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.735864][ T1038] usb 4-1: Product: syz [ 70.740219][ T1038] usb 4-1: Manufacturer: syz [ 70.744805][ T1038] usb 4-1: SerialNumber: syz [ 70.778275][ T1018] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 70.786735][ T1018] usb 2-1: 1:1 : sample bitwidth 253 in over sample bytes 16 [ 70.794940][ T1018] usb 2-1: 1:1 : unsupported sample bitwidth 253 in 16 bytes [ 70.808749][ T1038] usb 4-1: selecting invalid altsetting 1 [ 70.830614][ T2854] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.840718][ T1018] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 70.840893][ T2854] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 70.855624][ T2854] EXT4-fs (loop6): orphan cleanup on readonly fs [ 70.862850][ T1038] usb 4-1: unit 0 not found! [ 70.864211][ T1018] usb 2-1: USB disconnect, device number 16 [ 70.873699][ T2854] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.1461: corrupted xattr entries [ 70.876187][ T1038] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 70.888636][ T2854] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.905124][ T2854] EXT4-fs (loop6): 1 orphan inode deleted [ 70.910865][ T2854] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,errors=continue, [ 71.004412][ T2860] FAT-fs (loop6): FAT read failed (blocknr 1312) [ 71.022128][ T1017] usb 4-1: USB disconnect, device number 16 [ 71.089083][ T929] udevd[929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.111983][ T2865] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.226082][ T2872] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 71.261611][ T2872] EXT4-fs (loop6): Test dummy encryption mode enabled [ 71.269516][ T1025] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 71.277542][ T2872] EXT4-fs (loop6): can't mount with commit=7, fs mounted w/o journal [ 71.278636][ T2887] tmpfs: Bad value for 'huge' [ 71.331267][ T24] audit: type=1400 audit(1781606466.553:220): avc: denied { write } for pid=2892 comm="syz.5.1478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.638225][ T1025] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.648827][ T1025] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.688180][ T1038] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 71.708955][ T2917] EXT4-fs error (device loop3): ext4_fill_super:4959: inode #2: comm syz.3.1489: inode has both inline data and extents flags [ 71.722062][ T1018] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 71.722287][ T2917] EXT4-fs (loop3): get root inode failed [ 71.735532][ T2917] EXT4-fs (loop3): mount failed [ 71.808241][ T1025] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 71.817368][ T1025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.827682][ T1025] usb 3-1: Product: syz [ 71.832003][ T1025] usb 3-1: Manufacturer: syz [ 71.836595][ T1025] usb 3-1: SerialNumber: syz [ 71.918192][ T1040] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 71.924873][ T2928] loop3: p1[EZD] p2 p4 [ 71.930517][ T2928] loop3: p2 start 269365764 is beyond EOD, truncated [ 71.937194][ T2928] loop3: p4 size 262144 extends beyond EOD, truncated [ 72.021682][ T929] udevd[929]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 72.032276][ T1322] udevd[1322]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 72.048218][ T1038] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.059419][ T1038] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.070123][ T1038] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.080646][ T1038] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.091636][ T1038] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.108232][ T1018] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 72.116798][ T1018] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.132688][ T1018] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.141990][ T1018] usb 2-1: config 1 has no interface number 0 [ 72.148448][ T1018] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.158192][ T1040] usb 7-1: Using ep0 maxpacket: 16 [ 72.188230][ T1025] usb 3-1: 0:1 : does not exist [ 72.193128][ T1025] usb 3-1: unit 6 not found! [ 72.197806][ T1025] usb 3-1: unit 0 not found! [ 72.206493][ T1025] usb 3-1: USB disconnect, device number 18 [ 72.218322][ T1038] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.227800][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.236117][ T1038] usb 6-1: Product: syz [ 72.240613][ T1038] usb 6-1: Manufacturer: syz [ 72.278686][ T1038] cdc_wdm 6-1:1.0: skipping garbage [ 72.283962][ T1038] cdc_wdm 6-1:1.0: skipping garbage [ 72.289972][ T1038] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 72.305790][ T2950] EXT4-fs (loop3): 1 truncate cleaned up [ 72.311500][ T2950] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000000006,,errors=continue [ 72.324059][ T1040] usb 7-1: unable to get BOS descriptor or descriptor too short [ 72.348406][ T1018] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.357548][ T1018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.369952][ T1018] usb 2-1: Product: syz [ 72.374119][ T1018] usb 2-1: Manufacturer: syz [ 72.378834][ T1018] usb 2-1: SerialNumber: syz [ 72.408269][ T1040] usb 7-1: config 1 has an invalid interface number: 233 but max is 2 [ 72.416611][ T1040] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.426694][ T1040] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.428731][ T1018] cdc_wdm 2-1:1.128: skipping garbage [ 72.435807][ T1040] usb 7-1: config 1 has no interface number 0 [ 72.442364][ T1018] cdc_wdm: probe of 2-1:1.128 failed with error -22 [ 72.447289][ T1040] usb 7-1: too many endpoints for config 1 interface 233 altsetting 255: 255, using maximum allowed: 30 [ 72.464774][ T1040] usb 7-1: config 1 interface 233 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 72.478183][ T1040] usb 7-1: config 1 interface 233 has no altsetting 0 [ 72.485452][ T1018] usb 6-1: USB disconnect, device number 18 [ 72.638261][ T1040] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 72.647441][ T1038] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 72.651413][ T1025] usb 2-1: USB disconnect, device number 17 [ 72.666321][ T1040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.678380][ T1040] usb 7-1: Product: syz [ 72.682551][ T1040] usb 7-1: Manufacturer: syz [ 72.687187][ T1040] usb 7-1: SerialNumber: syz [ 72.788696][ T2972] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 72.796409][ T2972] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 72.804881][ T2972] F2FS-fs (loop2): Invalid gid value -1 [ 72.929640][ T1038] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 72.978767][ T1040] usb 7-1: unknown sample rate [ 72.984118][ T1040] usb 7-1: unknown sample rate [ 72.990680][ T1040] usb 7-1: USB disconnect, device number 15 [ 73.208219][ T1018] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 73.358178][ T1025] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 73.458186][ T1018] usb 3-1: Using ep0 maxpacket: 32 [ 73.468198][ T1016] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 73.548583][ T3000] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.557748][ T3000] FAT-fs (loop6): IO charset uŽf8 not found [ 73.578198][ T1018] usb 3-1: config 4 has an invalid interface number: 169 but max is 0 [ 73.586355][ T1018] usb 3-1: config 4 has no interface number 0 [ 73.592736][ T1018] usb 3-1: config 4 interface 169 has no altsetting 0 [ 73.599531][ T1025] usb 6-1: Using ep0 maxpacket: 32 [ 73.718251][ T1025] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 73.768265][ T1018] usb 3-1: New USB device found, idVendor=0b57, idProduct=e6d7, bcdDevice=32.78 [ 73.777347][ T1018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.785408][ T1018] usb 3-1: Product: syz [ 73.789631][ T1018] usb 3-1: Manufacturer: syz [ 73.794207][ T1018] usb 3-1: SerialNumber: syz [ 73.808225][ T1038] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 73.817332][ T1038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 73.825622][ T1038] usb 4-1: Product: syz [ 73.829850][ T1038] usb 4-1: Manufacturer: syz [ 73.834428][ T1038] usb 4-1: SerialNumber: syz [ 73.839610][ T1038] usb 4-1: config 0 descriptor?? [ 73.868227][ T1016] usb 2-1: unable to get BOS descriptor or descriptor too short [ 73.898251][ T1025] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 73.907318][ T1025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 73.915383][ T1016] usb 2-1: not running at top speed; connect to a high speed hub [ 73.923218][ T1025] usb 6-1: Product: syz [ 73.927366][ T1025] usb 6-1: Manufacturer: syz [ 73.932004][ T1025] usb 6-1: SerialNumber: syz [ 73.948231][ T1017] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 73.968589][ T1025] asix: probe of 6-1:2.0 failed with error -22 [ 74.082342][ T1038] usb 4-1: USB disconnect, device number 17 [ 74.118540][ T1018] usbhid 3-1:4.169: couldn't find an input interrupt endpoint [ 74.128504][ T1018] usb 3-1: USB disconnect, device number 19 [ 74.168217][ T1016] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 74.174216][ T1039] usb 6-1: USB disconnect, device number 19 [ 74.177332][ T1016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.191272][ T1017] usb 7-1: Using ep0 maxpacket: 32 [ 74.196402][ T1016] usb 2-1: Product: syz [ 74.200568][ T1016] usb 2-1: Manufacturer: syz [ 74.205144][ T1016] usb 2-1: SerialNumber: syz [ 74.348209][ T1017] usb 7-1: unable to get BOS descriptor or descriptor too short [ 74.488655][ T1016] usb 2-1: invalid MIDI in EP 0 [ 74.493738][ T1016] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 74.503369][ T1016] usb 2-1: USB disconnect, device number 18 [ 74.588555][ T1017] usb 7-1: New USB device found, idVendor=534d, idProduct=2109, bcdDevice= 0.40 [ 74.597604][ T1017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.609845][ T1017] usb 7-1: Product: syz [ 74.613614][ T3019] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 74.614653][ T1017] usb 7-1: Manufacturer: syz [ 74.626537][ T1017] usb 7-1: SerialNumber: syz [ 74.741149][ T3024] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 74.748659][ T3024] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.757085][ T3024] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off [ 74.910299][ T1017] usb 7-1: USB disconnect, device number 16 [ 74.919995][ T3047] EXT4-fs (loop2): Value of option "test_dummy_encryption=discard" is unrecognized [ 74.978721][ T3050] IPv6: addrconf: prefix option has invalid lifetime [ 74.988249][ T1016] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 75.028769][ T3052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.049778][ T3052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1550: bg 0: block 384: padding at end of block bitmap is not set [ 75.064176][ T1038] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 75.073476][ T3052] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 75.082410][ T3052] EXT4-fs error (device loop1): ext4_clear_blocks:880: inode #11: comm syz.1.1550: attempt to clear invalid blocks 983260 len 1 [ 75.095994][ T3052] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.1550: Invalid inode table block 0 in block_group 0 [ 75.108961][ T3052] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 75.109797][ T1323] udevd[1323]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.128805][ T3052] EXT4-fs error (device loop1) in ext4_orphan_del:3292: Corrupt filesystem [ 75.142964][ T3052] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.1550: Invalid inode table block 0 in block_group 0 [ 75.143694][ T3062] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 75.156772][ T3052] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 75.163878][ T3062] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #13: comm syz.2.1554: iget: bad i_size value: 12154757448730 [ 75.185989][ T3052] EXT4-fs error (device loop1): ext4_truncate:4403: inode #11: comm syz.1.1550: mark_inode_dirty error [ 75.186048][ T3062] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1554: couldn't read orphan inode 13 (err -117) [ 75.199802][ T3052] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3106: Corrupt filesystem [ 75.209335][ T3062] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.,errors=continue [ 75.218105][ T3052] EXT4-fs (loop1): 1 truncate cleaned up [ 75.239031][ T3052] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,,errors=continue [ 75.328183][ T1038] usb 4-1: Using ep0 maxpacket: 16 [ 75.398203][ T1016] usb 6-1: unable to get BOS descriptor or descriptor too short [ 75.448295][ T1038] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 75.466604][ T1038] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.477382][ T1038] usb 4-1: config 0 has no interface number 0 [ 75.483637][ T1038] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 75.488205][ T1016] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.492877][ T1038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.511451][ T1038] usb 4-1: config 0 descriptor?? [ 75.512877][ T1016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.558671][ T1038] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 75.565636][ T1038] uvcvideo: No valid video chain found. [ 75.574862][ T3070] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 75.596565][ T3070] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 75.606563][ T3070] F2FS-fs (loop1): invalid crc value [ 75.612248][ T3070] F2FS-fs (loop1): invalid crc value [ 75.617624][ T3070] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 75.678255][ T1016] usb 6-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 75.687412][ T1025] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 75.695154][ T1016] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 75.713319][ T1016] usb 6-1: Product: syz [ 75.717521][ T1016] usb 6-1: Manufacturer: syz [ 75.722386][ T1016] usb 6-1: SerialNumber: syz [ 75.753914][ T3068] F2FS-fs (loop2): invalid crc value [ 75.782912][ T1038] usb 4-1: USB disconnect, device number 18 [ 75.797146][ T3068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.817025][ T3068] F2FS-fs (loop2): NAT is corrupt, run fsck to fix it [ 75.823956][ T3068] F2FS-fs (loop2): Failed to initialize F2FS node manager (-22) [ 75.833069][ T3079] erofs: (device loop1): erofs_init_devices: extra devices don't match (ondisk 9216, given 0) [ 76.048214][ T1025] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.058537][ T1025] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 76.098284][ T1016] usb 6-1: unit 4 not found! [ 76.102970][ T1016] usb 6-1: unit 255 not found! [ 76.111094][ T1016] usb 6-1: USB disconnect, device number 20 [ 76.218216][ T1025] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 76.227420][ T1025] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.235545][ T1025] usb 7-1: Product: syz [ 76.239742][ T1025] usb 7-1: Manufacturer: syz [ 76.244330][ T1025] usb 7-1: SerialNumber: syz [ 76.248945][ T1018] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 76.278182][ T1038] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 76.530675][ T3098] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2749: inode #11: comm syz.5.1568: corrupted xattr block 95 [ 76.543301][ T3098] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2799: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 76.556331][ T3098] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1568: bg 0: block 7: invalid block bitmap [ 76.568675][ T1040] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 76.568804][ T3098] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 76.585081][ T3098] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2914: inode #11: comm syz.5.1568: corrupted xattr block 95 [ 76.597380][ T3098] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117) [ 76.606530][ T3098] EXT4-fs (loop5): 1 orphan inode deleted [ 76.608262][ T1025] usb 7-1: 0:2 : does not exist [ 76.612345][ T3098] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 76.632328][ T1025] usb 7-1: USB disconnect, device number 17 [ 76.648237][ T1018] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.690993][ T1018] usb 2-1: not running at top speed; connect to a high speed hub [ 76.708325][ T1038] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.758701][ T3112] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 76.758701][ T3112] [ 76.769561][ T3112] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 76.778309][ T1018] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.788697][ T1018] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 76.808261][ T1038] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.818420][ T1038] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 76.908951][ T3117] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 76.919908][ T3117] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 76.930132][ T3117] EXT4-fs (loop5): group descriptors corrupted! [ 77.028268][ T1038] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 77.038214][ T1018] usb 2-1: string descriptor 0 read error: -22 [ 77.041254][ T1038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.052656][ T1040] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.052694][ T1018] usb 2-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 77.060975][ T1038] usb 3-1: Product: syz [ 77.073958][ T1038] usb 3-1: Manufacturer: syz [ 77.078580][ T1018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.078723][ T1038] usb 3-1: SerialNumber: syz [ 77.128831][ T1018] usb 2-1: MIDIStreaming interface descriptor not found [ 77.140723][ T1038] usb 3-1: selecting invalid altsetting 1 [ 77.146587][ T1038] usb 3-1: unit 6 not found! [ 77.151937][ T1038] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 77.159108][ T1040] usb 4-1: config 0 has no interfaces? [ 77.165001][ T1038] usb 3-1: selecting invalid altsetting 1 [ 77.170949][ T1038] usb 3-1: unit 6 not found! [ 77.175795][ T1038] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 77.183231][ T1038] usb 3-1: selecting invalid altsetting 1 [ 77.189024][ T1038] usb 3-1: unit 6 not found! [ 77.193808][ T1038] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 77.200821][ T1040] usb 4-1: language id specifier not provided by device, defaulting to English [ 77.270757][ T3129] EXT4-fs (loop6): Test dummy encryption mode enabled [ 77.277644][ T3129] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 77.277644][ T3129] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 77.277644][ T3129] [ 77.296057][ T3129] EXT4-fs (loop6): Encoding requested by superblock is unknown [ 77.339129][ T1018] usb 2-1: USB disconnect, device number 19 [ 77.358258][ T1040] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.367396][ T1040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.368222][ T1016] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 77.379539][ T1040] usb 4-1: Product: syz [ 77.387130][ T1040] usb 4-1: Manufacturer: ë§åŸè¶€ê¸µäª‡ç¶¡ìŸ¼é•¶ì‘—êŸî²³é‡—倿酦◇ïµè³¼è€«ã±¿é—¶ç“Œä¹Šã¸ƒë˜®í†™â—¬ê‚°é¸í‹Ÿë»é¸¡ç¹±ì½…ï ˜ [ 77.402518][ T1015] usb 3-1: USB disconnect, device number 20 [ 77.409309][ T1040] usb 4-1: SerialNumber: syz [ 77.415115][ T1040] usb 4-1: config 0 descriptor?? [ 77.638170][ T1016] usb 6-1: Using ep0 maxpacket: 16 [ 77.664629][ T1041] usb 4-1: USB disconnect, device number 19 [ 77.688180][ T1038] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 77.902571][ T3134] FAT-fs (loop1): Directory bread(block 64) failed [ 77.912955][ T3134] FAT-fs (loop1): Directory bread(block 65) failed [ 77.918227][ T1016] usb 6-1: New USB device found, idVendor=0499, idProduct=1022, bcdDevice= 0.40 [ 77.923354][ T3134] FAT-fs (loop1): Directory bread(block 66) failed [ 77.929521][ T1016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.935387][ T3134] FAT-fs (loop1): Directory bread(block 67) failed [ 77.943527][ T1016] usb 6-1: Product: syz [ 77.953864][ T1016] usb 6-1: Manufacturer: syz [ 77.954076][ T3134] FAT-fs (loop1): Directory bread(block 68) failed [ 77.958767][ T1016] usb 6-1: SerialNumber: syz [ 77.965052][ T3134] FAT-fs (loop1): Directory bread(block 69) failed [ 77.976112][ T3134] FAT-fs (loop1): Directory bread(block 70) failed [ 77.982650][ T3134] FAT-fs (loop1): Directory bread(block 71) failed [ 77.989212][ T3134] FAT-fs (loop1): Directory bread(block 72) failed [ 77.995698][ T3134] FAT-fs (loop1): Directory bread(block 73) failed [ 78.138214][ T1038] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 78.148752][ T1038] usb 7-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 78.249017][ T1015] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 78.281997][ T1016] usb 6-1: USB disconnect, device number 21 [ 78.308716][ T3158] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.328405][ T3158] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.335975][ T3158] EXT4-fs error (device loop1): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 78.358298][ T3158] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 78.367736][ T3158] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #12: comm syz.1.1594: mark_inode_dirty error [ 78.379850][ T3158] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 78.388483][ T3158] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #12: comm syz.1.1594: mark_inode_dirty error [ 78.399861][ T3158] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 78.408220][ T1038] usb 7-1: string descriptor 0 read error: -22 [ 78.414387][ T1038] usb 7-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 78.423839][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.423952][ T3158] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 78.439773][ T3158] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 78.449728][ T3158] EXT4-fs error (device loop1): ext4_truncate:4403: inode #12: comm syz.1.1594: mark_inode_dirty error [ 78.472568][ T3158] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3106: error 27 [ 78.485463][ T3169] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 78.493966][ T3158] EXT4-fs (loop1): 1 truncate cleaned up [ 78.495376][ T24] audit: type=1400 audit(1781606473.713:221): avc: denied { relabelto } for pid=3168 comm="syz.3.1598" name="239" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.501068][ T3158] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,inlinecrypt,auto_da_alloc=0x0000000000000005,minixdf,resgid=0x000000000000ee01,noinit_itable,noinit_itable,auto_da_alloc=0x00000000000000082,errors=continue [ 78.527096][ T1322] udevd[1322]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.566312][ T24] audit: type=1400 audit(1781606473.783:222): avc: denied { associate } for pid=3168 comm="syz.3.1598" name="239" dev="tmpfs" ino=1232 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.601010][ T24] audit: type=1400 audit(1781606473.823:223): avc: denied { write } for pid=1053 comm="syz-executor" name="239" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.641642][ T24] audit: type=1400 audit(1781606473.823:224): avc: denied { remove_name } for pid=1053 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.668919][ T24] audit: type=1400 audit(1781606473.823:225): avc: denied { rmdir } for pid=1053 comm="syz-executor" name="239" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 78.672928][ T1041] usb 7-1: USB disconnect, device number 18 [ 78.696666][ T1015] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 78.709982][ T1015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.720127][ T1015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.729257][ T1015] usb 3-1: config 1 has no interface number 0 [ 78.735403][ T1015] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 78.746147][ T1015] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 78.828985][ T3185] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 78.838227][ T3185] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.845209][ T3185] Quota error (device loop1): v2_read_file_info: Free block number too big (131072 >= 6). [ 78.855442][ T3185] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 78.870283][ T3185] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 78.877225][ T3185] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.1606: Freeing blocks not in datazone - block = 0, count = 4096 [ 78.891060][ T3185] EXT4-fs (loop1): Remounting filesystem read-only [ 78.901792][ T3185] EXT4-fs (loop1): 1 orphan inode deleted [ 78.908410][ T3185] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,nogrpid,errors=remount-ro,user_xattr,inlinecrypt, [ 78.926991][ T3201] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 78.938333][ T3201] EXT4-fs (loop5): unable to read superblock [ 78.958243][ T1015] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.980172][ T1015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.994383][ T1015] usb 3-1: Product: syz [ 78.998855][ T1015] usb 3-1: Manufacturer: syz [ 79.003512][ T1015] usb 3-1: SerialNumber: syz [ 79.038179][ T1016] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 79.062657][ T3207] EXT4-fs: Invalid sb specification: sb=0x000000000000000eJdebug,jqfmt=vfsold,nobh,barrier,usrjquota="block_validity,errors=remount-ro,, [ 79.076923][ T3207] EXT4-fs (loop5): Unrecognized mount option "sb=0x000000000000000eJdebug" or missing value [ 79.109896][ T3212] FAT-fs (loop1): bogus number of reserved sectors [ 79.116438][ T3212] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 79.125770][ T3212] FAT-fs (loop1): Can't find a valid FAT filesystem [ 79.268252][ T1015] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 79.291234][ T1015] usb 3-1: USB disconnect, device number 21 [ 79.398204][ T1016] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 79.406629][ T1016] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 79.416140][ T1016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.426244][ T1016] usb 4-1: config 0 descriptor?? [ 79.469065][ T1016] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 79.477914][ T3257] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.484592][ T3257] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1640: ea_inode with extended attributes [ 79.497379][ T3257] EXT4-fs (loop1): Remounting filesystem read-only [ 79.504242][ T3257] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1640: error while reading EA inode 11 err=-117 [ 79.516765][ T3257] EXT4-fs (loop1): 1 orphan inode deleted [ 79.522626][ T3257] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000006,nojournal_checksum,resgid=0x0000000000000000,noload,errors=remount-ro, [ 79.608197][ T1017] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 79.638234][ T1039] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 79.671888][ T1016] usb 4-1: USB disconnect, device number 20 [ 79.848197][ T1017] usb 6-1: Using ep0 maxpacket: 16 [ 79.858282][ T1015] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 79.968291][ T1017] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 80.018251][ T1039] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 80.026394][ T1039] usb 7-1: config 0 has no interface number 0 [ 80.032514][ T1039] usb 7-1: config 0 interface 41 has no altsetting 0 [ 80.038173][ T1018] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 80.128216][ T1017] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 80.137274][ T1017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.145387][ T1017] usb 6-1: Product: syz [ 80.149553][ T1017] usb 6-1: Manufacturer: syz [ 80.154117][ T1017] usb 6-1: SerialNumber: syz [ 80.159267][ T1017] usb 6-1: config 0 descriptor?? [ 80.198778][ T1017] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 80.207154][ T1017] usb 6-1: Detected FT232RL [ 80.218337][ T1039] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 80.227413][ T1039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.235493][ T1039] usb 7-1: Product: syz [ 80.239700][ T1039] usb 7-1: Manufacturer: syz [ 80.244286][ T1039] usb 7-1: SerialNumber: syz [ 80.249826][ T1039] usb 7-1: config 0 descriptor?? [ 80.258198][ T1015] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.298238][ T1015] usb 2-1: not running at top speed; connect to a high speed hub [ 80.378244][ T1015] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 103, changing to 4 [ 80.408231][ T1017] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 80.428234][ T1017] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 80.438221][ T1018] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.448231][ T1017] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 80.455180][ T1017] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.464157][ T1017] usb 6-1: USB disconnect, device number 22 [ 80.470780][ T1017] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.480126][ T1018] usb 3-1: not running at top speed; connect to a high speed hub [ 80.487876][ T1025] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 80.495637][ T1017] ftdi_sio 6-1:0.0: device disconnected [ 80.498276][ T1039] CoreChips: probe of 7-1:0.41 failed with error -71 [ 80.514371][ T1039] usb 7-1: USB disconnect, device number 19 [ 80.558330][ T1018] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 80.569230][ T1018] usb 3-1: config 1 interface 0 has no altsetting 0 [ 80.628209][ T1015] usb 2-1: language id specifier not provided by device, defaulting to English [ 80.728230][ T1018] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.737453][ T1018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.745520][ T1018] usb 3-1: Product: syz [ 80.749752][ T1015] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 80.758815][ T1018] usb 3-1: Manufacturer: syz [ 80.763395][ T1018] usb 3-1: SerialNumber: syz [ 80.768156][ T1015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.776124][ T1015] usb 2-1: Product: syz [ 80.780440][ T1015] usb 2-1: Manufacturer: syz [ 80.785241][ T1015] usb 2-1: SerialNumber: syz [ 80.798271][ T3263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.858243][ T1025] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.028237][ T1025] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 81.037397][ T1025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.045499][ T1025] usb 4-1: Product: syz [ 81.049943][ T1025] usb 4-1: Manufacturer: syz [ 81.054516][ T1025] usb 4-1: SerialNumber: syz [ 81.078880][ T3281] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 81.086844][ T3281] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 81.095019][ T3281] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.098627][ T1018] usb 3-1: bad CDC descriptors [ 81.101393][ T3281] EXT4-fs (loop6): orphan cleanup on readonly fs [ 81.107098][ T1018] usb 3-1: USB disconnect, device number 22 [ 81.111917][ T3281] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 81.127106][ T3281] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.141661][ T3281] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 81.148460][ T1015] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 81.148556][ T3281] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1651: bad orphan inode 16 [ 81.165285][ T3281] ext4_test_bit(bit=15, block=18) = 1 [ 81.168487][ T1015] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 81.170675][ T3281] is_bad_inode(inode)=0 [ 81.181465][ T3281] NEXT_ORPHAN(inode)=0 [ 81.185510][ T3281] max_ino=32 [ 81.188723][ T3281] i_nlink=2 [ 81.191862][ T3281] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,,errors=continue [ 81.208189][ T1039] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 81.210504][ T1015] usb 2-1: USB disconnect, device number 20 [ 81.418233][ T1025] usb 4-1: unit 8 not found! [ 81.422849][ T1025] usb 4-1: unit 6 not found! [ 81.429246][ T1025] usb 4-1: USB disconnect, device number 21 [ 81.458169][ T1039] usb 6-1: Using ep0 maxpacket: 8 [ 81.568185][ T1041] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 81.618222][ T1039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.628361][ T1039] usb 6-1: config 0 has no interfaces? [ 81.743637][ T3305] FAT-fs (loop2): bogus sectors per cluster 7 [ 81.749821][ T3305] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 81.759254][ T3305] FAT-fs (loop2): Can't find a valid FAT filesystem [ 81.788218][ T1039] usb 6-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 81.797411][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.805553][ T1039] usb 6-1: Product: syz [ 81.809804][ T1041] usb 7-1: Using ep0 maxpacket: 8 [ 81.814844][ T1039] usb 6-1: Manufacturer: syz [ 81.819478][ T1039] usb 6-1: SerialNumber: syz [ 81.824510][ T1039] usb 6-1: config 0 descriptor?? [ 81.848173][ T1015] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 81.883902][ T3312] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 81.968228][ T1041] usb 7-1: unable to get BOS descriptor or descriptor too short [ 82.071853][ T1039] usb 6-1: USB disconnect, device number 23 [ 82.158240][ T1018] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 82.218213][ T1041] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.227294][ T1041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.235338][ T1041] usb 7-1: Product: syz [ 82.239506][ T1041] usb 7-1: Manufacturer: syz [ 82.244082][ T1041] usb 7-1: SerialNumber: syz [ 82.248684][ T1037] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 82.288201][ T1015] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.368196][ T1015] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.378423][ T1015] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.528260][ T1018] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 82.537316][ T1018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.578612][ T1018] usb-storage 3-1:32.0: USB Mass Storage device detected [ 82.590694][ T3335] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.599133][ T1018] usb-storage 3-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 82.628247][ T1015] usb 2-1: string descriptor 0 read error: -22 [ 82.634433][ T1015] usb 2-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 82.638278][ T1041] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 82.643936][ T1015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.652058][ T1041] usb 7-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 82.668690][ T3339] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 82.679156][ T3339] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,init_itable,max_batch_time=0x000000000000186b,,errors=continue [ 82.701106][ T1041] usb 7-1: 1:1: cannot set enable PITCH [ 82.728294][ T1041] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 82.759590][ T1015] usb 2-1: MIDIStreaming interface descriptor not found [ 82.768734][ T1041] usb 7-1: USB disconnect, device number 20 [ 82.786912][ T1015] usb 3-1: USB disconnect, device number 23 [ 82.838294][ T1037] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 82.847352][ T1037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.855833][ T1037] usb 4-1: Product: syz [ 82.860135][ T1037] usb 4-1: Manufacturer: syz [ 82.865759][ T3344] F2FS-fs (loop5): project quota file already specified [ 82.865796][ T1037] usb 4-1: SerialNumber: syz [ 82.886137][ T1037] usb 4-1: config 0 descriptor?? [ 82.925557][ T1017] usb 2-1: USB disconnect, device number 21 [ 82.928858][ T1037] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 82.940700][ T24] audit: type=1326 audit(1781606478.163:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.5.1680" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af94fae59 code=0x0 [ 82.999032][ T1323] udevd[1323]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.080245][ T3369] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1687: casefold flag without casefold feature [ 83.093702][ T3369] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1687: couldn't read orphan inode 15 (err -117) [ 83.105739][ T3369] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,,errors=continue [ 83.131497][ T1025] usb 4-1: USB disconnect, device number 22 [ 83.188901][ T3381] EXT4-fs (loop5): invalid inodes per group: 4294967295 [ 83.188901][ T3381] [ 83.343179][ T3384] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe39e9277, utbl_chksum : 0x7319d30d) [ 83.355278][ T1015] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 83.455803][ T3397] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=2842c018, mo2=0000] [ 83.463638][ T3397] System zones: 0-1, 18-18, 34-34, 40-40 [ 83.469613][ T3397] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.476375][ T3397] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 83.485347][ T3397] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 83.495281][ T3397] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.1701: Failed to acquire dquot type 0 [ 83.506752][ T3397] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 83.515823][ T3397] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 83.525583][ T3397] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.1701: Failed to acquire dquot type 0 [ 83.537214][ T3397] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1701: bg 0: block 64: padding at end of block bitmap is not set [ 83.551615][ T3397] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 83.560482][ T3397] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 83.569481][ T3397] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 83.579213][ T3397] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.1701: Failed to acquire dquot type 0 [ 83.590695][ T3397] EXT4-fs (loop2): 1 orphan inode deleted [ 83.596520][ T3397] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,debug,nolazytime,,errors=continue [ 83.638205][ T1025] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 83.645830][ T1015] usb 7-1: Using ep0 maxpacket: 8 [ 83.709811][ T3409] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 83.718236][ T1017] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 83.778254][ T1015] usb 7-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 83.788530][ T1015] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 83.797737][ T1015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.806484][ T1015] usb 7-1: config 0 descriptor?? [ 83.841238][ T3412] EXT4-fs error (device loop2): ext4_fill_super:4959: inode #2: comm syz.2.1707: iget: bad extended attribute block 2037609061 [ 83.848750][ T1015] usb 7-1: bad CDC descriptors [ 83.854627][ T3412] EXT4-fs (loop2): get root inode failed [ 83.859379][ T1015] cdc_acm 7-1:0.0: Control and data interfaces are not separated! [ 83.865068][ T3412] EXT4-fs (loop2): mount failed [ 83.872641][ T1015] cdc_acm 7-1:0.0: This needs exactly 3 endpoints [ 83.884132][ T1015] cdc_acm: probe of 7-1:0.0 failed with error -22 [ 83.938221][ T1037] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 84.038207][ T1025] usb 6-1: unable to get BOS descriptor or descriptor too short [ 84.075714][ T1015] usb 7-1: USB disconnect, device number 21 [ 84.081813][ T1017] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 84.091291][ T1017] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 84.099615][ T1017] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.109883][ T1017] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 84.158263][ T1017] usb 2-1: string descriptor 0 read error: -22 [ 84.164619][ T1017] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 84.173768][ T1017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.185715][ T1017] usb 2-1: config 0 descriptor?? [ 84.229721][ T1017] hub 2-1:0.0: bad descriptor, ignoring hub [ 84.236072][ T1017] hub: probe of 2-1:0.0 failed with error -5 [ 84.278562][ T1025] usb 6-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 84.287855][ T1025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.296266][ T1025] usb 6-1: Product: syz [ 84.300686][ T1025] usb 6-1: Manufacturer: syz [ 84.305322][ T1025] usb 6-1: SerialNumber: syz [ 84.378202][ T1037] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.418200][ T1037] usb 4-1: not running at top speed; connect to a high speed hub [ 84.498206][ T1037] usb 4-1: config 8 has an invalid interface number: 190 but max is 0 [ 84.506396][ T1037] usb 4-1: config 8 has no interface number 0 [ 84.512669][ T1037] usb 4-1: config 8 interface 190 has no altsetting 0 [ 84.548253][ T1015] usb 2-1: USB disconnect, device number 22 [ 84.611737][ T3418] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.622720][ T3418] F2FS-fs (loop6): Unable to read 1th superblock [ 84.629310][ T3418] blk_update_request: I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.640301][ T3418] F2FS-fs (loop6): Unable to read 2th superblock [ 84.678237][ T1037] usb 4-1: New USB device found, idVendor=03f0, idProduct=4349, bcdDevice=1c.db [ 84.687296][ T1037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.698436][ T1037] usb 4-1: Product: syz [ 84.708479][ T1037] usb 4-1: Manufacturer: syz [ 84.711212][ T1025] usb 6-1: USB disconnect, device number 24 [ 84.723372][ T1037] usb 4-1: SerialNumber: syz [ 84.829795][ T3424] cgroup: syz.2.1712 (3424) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 84.846340][ T3424] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 84.985431][ T3432] 9pnet: Insufficient options for proto=fd [ 85.048390][ T1037] pl2303 4-1:8.190: required endpoints missing [ 85.055281][ T1037] usb 4-1: USB disconnect, device number 23 [ 85.068867][ T3422] F2FS-fs (loop6): Test dummy encryption mode enabled [ 85.087223][ T3422] F2FS-fs (loop6): invalid crc value [ 85.089847][ T3437] syz.5.1718 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.115495][ T3422] F2FS-fs (loop6): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:1 [ 85.130132][ T3422] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 85.140365][ T1015] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 85.208053][ T24] audit: type=1326 audit(1781606480.423:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.5.1723" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af94fae59 code=0x0 [ 85.298211][ T1039] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 85.428178][ T1015] usb 3-1: Using ep0 maxpacket: 16 [ 85.433673][ T3456] F2FS-fs (loop6): Wrong segment_count / block_count (64 > 16384) [ 85.441560][ T3456] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 85.451432][ T3456] F2FS-fs (loop6): Found nat_bits in checkpoint [ 85.471125][ T3456] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 85.478277][ T3456] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 85.538192][ T1039] usb 2-1: Using ep0 maxpacket: 16 [ 85.543384][ T1041] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 85.568304][ T1015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.588184][ T1015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.673333][ T24] audit: type=1400 audit(1781606480.883:228): avc: denied { create } for pid=3468 comm="syz.6.1730" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.694290][ T1039] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 85.698649][ T1015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.708152][ T1039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.713167][ T1015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.732016][ T24] audit: type=1400 audit(1781606480.893:229): avc: denied { unlink } for pid=1054 comm="syz-executor" name="file0" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.754853][ T1039] usb 2-1: config 0 has no interface number 0 [ 85.765700][ T3471] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 85.788952][ T3471] EXT4-fs error (device loop6): ext4_fill_super:4959: inode #2: comm syz.6.1731: iget: bogus i_mode (1) [ 85.800382][ T3471] EXT4-fs (loop6): get root inode failed [ 85.806022][ T3471] EXT4-fs (loop6): mount failed [ 85.818190][ T1015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.828362][ T1015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.903551][ T3463] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9) [ 85.915853][ T24] audit: type=1400 audit(1781606481.133:230): avc: denied { module_load } for pid=3476 comm="syz.6.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 85.935420][ T1039] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 85.944530][ T3463] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 85.944548][ T1039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.952879][ T1015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.960812][ T1041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.960836][ T1041] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 36, changing to 9 [ 85.960849][ T1041] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1977, setting to 1024 [ 85.960861][ T1041] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 85.960903][ T1039] usb 2-1: Product: syz [ 85.960911][ T1039] usb 2-1: Manufacturer: syz [ 85.960920][ T1039] usb 2-1: SerialNumber: syz [ 86.003481][ T3463] F2FS-fs (loop3): invalid crc value [ 86.027826][ T1015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.029442][ T1039] usb 2-1: config 0 descriptor?? [ 86.050051][ T3463] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 86.051593][ T3481] EXT4-fs warning (device loop6): ext4_xattr_inode_get:492: inode #11: comm syz.6.1734: ea_inode file size=100 entry size=4 [ 86.074628][ T3481] EXT4-fs error (device loop6) in ext4_do_update_inode:5362: error 27 [ 86.075436][ T3463] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=90000000, run fsck to fix. [ 86.083210][ T3481] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.1734: mark_inode_dirty error [ 86.093336][ T1039] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 86.104228][ T3481] EXT4-fs error (device loop6) in ext4_do_update_inode:5362: error 27 [ 86.110405][ T1039] uvcvideo: No valid video chain found. [ 86.118344][ T1015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.124162][ T3463] F2FS-fs (loop3): Bad quota inode 1:2415919104 [ 86.133993][ T3481] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2943: inode #15: comm syz.6.1734: mark_inode_dirty error [ 86.144919][ T3463] F2FS-fs (loop3): Failed to enable quota tracking (type=1, err=-22). Please run fsck to fix. [ 86.152090][ T1015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.165336][ T3463] F2FS-fs (loop3): Cannot turn on quotas: error -22 [ 86.171226][ T3481] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2946: inode #15: comm syz.6.1734: mark inode dirty (error -27) [ 86.190275][ T1041] usb 6-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 86.190294][ T3481] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -27) [ 86.199491][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.208281][ T3481] EXT4-fs (loop6): 1 orphan inode deleted [ 86.221985][ T3481] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,bsdgroups,,errors=continue [ 86.242410][ T1041] usb 6-1: Product: syz [ 86.250393][ T3463] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 86.258068][ T1041] usb 6-1: Manufacturer: syz [ 86.264936][ T1041] usb 6-1: SerialNumber: syz [ 86.268435][ T3463] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 86.288214][ T3452] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 86.331367][ T1025] usb 2-1: USB disconnect, device number 23 [ 86.358248][ T1015] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 86.367331][ T1015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.375758][ T1015] usb 3-1: Product: syz [ 86.379970][ T1015] usb 3-1: Manufacturer: syz [ 86.384554][ T1015] usb 3-1: SerialNumber: syz [ 86.500788][ T3499] EXT4-fs (loop3): first meta block group too large: 524288 (group descriptor block count 1) [ 86.618181][ T1016] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 86.641196][ T3504] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 86.651163][ T3504] EXT4-fs error (device loop3): __ext4_iget:5034: inode #8: block 1803188595: comm syz.3.1742: invalid block [ 86.662907][ T3504] EXT4-fs (loop3): no journal found [ 86.668116][ T3504] EXT4-fs (loop3): can't get journal size [ 86.670852][ T1041] usb 6-1: USB disconnect, device number 25 [ 86.674945][ T3504] EXT4-fs error (device loop3): __ext4_iget:5034: inode #8: block 1803188595: comm syz.3.1742: invalid block [ 86.691748][ T3504] EXT4-fs (loop3): failed to initialize system zone (-117) [ 86.699057][ T3504] EXT4-fs (loop3): mount failed [ 86.748227][ T1015] usb 3-1: cannot find UAC_HEADER [ 86.753322][ T1015] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 86.763803][ T1015] usb 3-1: USB disconnect, device number 24 [ 86.804874][ T3508] IPv6: addrconf: prefix option has invalid lifetime [ 86.847413][ T3515] fuse: Unknown parameter 'fscontext' [ 86.885250][ T3520] FAT-fs (loop1): bogus sectors per cluster 0 [ 86.892512][ T3520] FAT-fs (loop1): Can't find a valid FAT filesystem [ 86.898181][ T1016] usb 7-1: Using ep0 maxpacket: 16 [ 86.904458][ T3523] sit: non-ECT from 0.0.0.0 with TOS=0x11 [ 86.949099][ T1322] udevd[1322]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.028438][ T1016] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.038992][ T1016] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 157, changing to 11 [ 87.050251][ T1016] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 8448, setting to 1024 [ 87.062562][ T1016] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 87.126752][ T24] audit: type=1326 audit(1781606482.343:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.1.1759" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4c4d8e59 code=0x0 [ 87.229632][ T3552] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 87.229632][ T3552] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 87.229632][ T3552] [ 87.248207][ T1016] usb 7-1: New USB device found, idVendor=39c3, idProduct=8230, bcdDevice= 0.40 [ 87.257572][ T1016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.260331][ T3552] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1764: invalid indirect mapped block 11 (level 0) [ 87.265638][ T1016] usb 7-1: Product: syz [ 87.283138][ T3552] EXT4-fs (loop2): Remounting filesystem read-only [ 87.283194][ T1016] usb 7-1: Manufacturer: syz [ 87.289914][ T3552] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #13: comm syz.2.1764: attempt to clear invalid blocks 1024 len 1 [ 87.294789][ T1016] usb 7-1: SerialNumber: syz [ 87.307678][ T3552] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 87.326318][ T3552] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1764: invalid indirect mapped block 1819239214 (level 0) [ 87.340377][ T3552] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1764: invalid indirect mapped block 33554432 (level 2) [ 87.348236][ T1015] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 87.354439][ T3552] EXT4-fs (loop2): 1 truncate cleaned up [ 87.367331][ T3552] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,noacl,nodelalloc,abort,errors=remount-ro,nodiscard, [ 87.458196][ T1017] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 87.514871][ T24] audit: type=1326 audit(1781606482.733:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="syz.2.1778" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69eadc1e59 code=0x0 [ 87.548286][ T1038] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 87.598408][ T1015] usb 6-1: Using ep0 maxpacket: 8 [ 87.678639][ T3587] F2FS-fs (loop2): Mismatch start address, segment0(16) cp_blkaddr(0) [ 87.686826][ T3587] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.695701][ T3587] F2FS-fs (loop2): invalid crc value [ 87.701133][ T1016] usb 7-1: MIDIStreaming interface descriptor not found [ 87.702368][ T3587] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 87.708073][ T1017] usb 4-1: Using ep0 maxpacket: 8 [ 87.714042][ T1016] usb 7-1: USB disconnect, device number 22 [ 87.730431][ T1015] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.733904][ T3587] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 87.750201][ T3587] F2FS-fs (loop2): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 134217728, run fsck to fix. [ 87.755293][ T1015] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 87.768269][ T3587] F2FS-fs (loop2): Failed to read root inode [ 87.798205][ T1015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.809956][ T1015] usb 6-1: config 0 descriptor?? [ 87.828272][ T1017] usb 4-1: config 13 has an invalid interface number: 245 but max is 0 [ 87.836897][ T1017] usb 4-1: config 13 has no interface number 0 [ 87.843103][ T1017] usb 4-1: config 13 interface 245 has no altsetting 0 [ 87.938213][ T1038] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 87.949278][ T1038] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.949805][ T3597] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.968280][ T3597] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1783: inode #1: comm syz.2.1783: iget: illegal inode # [ 87.981479][ T3597] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1783: error while reading EA inode 1 err=-117 [ 87.994089][ T3597] EXT4-fs (loop2): 1 orphan inode deleted [ 87.999947][ T3597] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000002000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,noquota,,errors=continue [ 88.008239][ T1017] usb 4-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice=27.04 [ 88.041656][ T1017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.049883][ T1017] usb 4-1: Product: syz [ 88.054233][ T1017] usb 4-1: Manufacturer: syz [ 88.059029][ T1017] usb 4-1: SerialNumber: syz [ 88.070900][ T1041] usb 6-1: USB disconnect, device number 26 [ 88.148213][ T1038] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.157350][ T1038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.165541][ T1038] usb 2-1: Product: syz [ 88.169954][ T1038] usb 2-1: Manufacturer: syz [ 88.174551][ T1038] usb 2-1: SerialNumber: syz [ 88.218913][ T3613] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 88.228781][ T3613] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 88.238866][ T3613] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 88.249302][ T3613] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 88.257189][ T3613] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e018, mo2=0000] [ 88.265113][ T3613] EXT4-fs (loop6): failed to initialize system zone (-117) [ 88.272478][ T3613] EXT4-fs (loop6): mount failed [ 88.368177][ T1039] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 88.384352][ T3619] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 88.459800][ T1017] usb 4-1: USB disconnect, device number 24 [ 88.469750][ T3631] EXT4-fs (loop6): quotafile must be on filesystem root [ 88.558560][ T1038] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 88.578500][ T3642] loop6: p2 < > p4 [ 88.582686][ T1038] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 88.588935][ T3642] loop6: partition table partially beyond EOD, truncated [ 88.596885][ T3642] loop6: p2 start 4294901760 is beyond EOD, truncated [ 88.603707][ T3642] loop6: p4 size 8192 extends beyond EOD, truncated [ 88.620776][ T1038] usb 2-1: USB disconnect, device number 24 [ 88.663332][ T929] udevd[929]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 88.670003][ T3647] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 88.681677][ T3647] EXT4-fs (loop6): orphan cleanup on readonly fs [ 88.688337][ T3647] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.702866][ T3647] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 88.709926][ T3647] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2914: inode #16: comm syz.6.1805: corrupted xattr block 31 [ 88.722239][ T3647] EXT4-fs (loop6): Remounting filesystem read-only [ 88.728895][ T3647] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -117) [ 88.738038][ T3647] EXT4-fs (loop6): 1 orphan inode deleted [ 88.743889][ T3647] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc,errors=remount-ro, [ 88.754305][ T1039] usb 3-1: config 34 has an invalid interface number: 212 but max is 0 [ 88.762588][ T1039] usb 3-1: config 34 has no interface number 0 [ 88.768776][ T1039] usb 3-1: config 34 interface 212 has no altsetting 0 [ 88.858278][ T1041] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 88.948224][ T1039] usb 3-1: New USB device found, idVendor=1a72, idProduct=1009, bcdDevice= 4.0c [ 88.957272][ T1039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.972052][ T3651] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 88.974953][ T1039] usb 3-1: Product: syz [ 88.985697][ T1039] usb 3-1: Manufacturer: syz [ 88.986954][ T3651] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(196611) [ 88.996396][ T1039] usb 3-1: SerialNumber: syz [ 88.998861][ T3651] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 89.011924][ T3651] F2FS-fs (loop6): invalid crc value [ 89.020215][ T3651] F2FS-fs (loop6): invalid crc value [ 89.027803][ T3655] loop3: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 89.030216][ T3651] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 89.298227][ T1042] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 89.308235][ T1041] usb 6-1: unable to get BOS descriptor or descriptor too short [ 89.398642][ T1039] ftdi_sio 3-1:34.212: FTDI USB Serial Device converter detected [ 89.419329][ T1039] usb 3-1: Detected FT232BM [ 89.432343][ T1041] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 89.441493][ T1039] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 89.448772][ T1041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.459183][ T1041] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.468232][ T1041] usb 6-1: config 1 interface 1 has no altsetting 2 [ 89.484994][ T1039] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 89.492550][ T1039] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 89.512143][ T1039] usb 3-1: USB disconnect, device number 25 [ 89.520177][ T1039] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 89.539633][ T1039] ftdi_sio 3-1:34.212: device disconnected [ 89.628323][ T1041] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.650819][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.668217][ T1041] usb 6-1: Product: syz [ 89.678258][ T1041] usb 6-1: Manufacturer: syz [ 89.678833][ T929] udevd[929]: inotify_add_watch(7, /dev/loop3p30, 10) failed: No such file or directory [ 89.682950][ T1041] usb 6-1: SerialNumber: syz [ 89.702642][ T1323] udevd[1323]: inotify_add_watch(7, /dev/loop3p31, 10) failed: No such file or directory [ 89.702646][ T1325] udevd[1325]: inotify_add_watch(7, /dev/loop3p37, 10) failed: No such file or directory [ 89.704236][ T1324] udevd[1324]: inotify_add_watch(7, /dev/loop3p39, 10) failed: No such file or directory [ 89.713387][ T1322] udevd[1322]: inotify_add_watch(7, /dev/loop3p32, 10) failed: No such file or directory [ 89.723501][ T1321] udevd[1321]: inotify_add_watch(7, /dev/loop3p40, 10) failed: No such file or directory [ 89.733095][ T1319] udevd[1319]: inotify_add_watch(7, /dev/loop3p33, 10) failed: No such file or directory [ 89.749653][ T285] udevd[285]: inotify_add_watch(7, /dev/loop3p38, 10) failed: No such file or directory [ 89.752062][ T1042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 89.787127][ T24] audit: type=1326 audit(1781606485.003:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.3.1825" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a67c2e59 code=0x0 [ 89.905646][ T3693] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 89.917297][ T3693] EXT4-fs (loop6): mount failed [ 89.988219][ T1042] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 89.997321][ T1042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.005318][ T1042] usb 2-1: Product: syz [ 90.009541][ T1042] usb 2-1: Manufacturer: syz [ 90.014114][ T1042] usb 2-1: SerialNumber: syz [ 90.021606][ T1042] usb 2-1: config 0 descriptor?? [ 90.058236][ T3667] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 90.080003][ T1042] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 90.168276][ T1041] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.189210][ T1039] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 90.198215][ T1017] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 90.201240][ T1041] usb 6-1: 0:2 : does not exist [ 90.217635][ T1041] usb 6-1: USB disconnect, device number 27 [ 90.313775][ T1042] usb 2-1: USB disconnect, device number 25 [ 90.448175][ T1038] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 90.458251][ T1039] usb 3-1: Using ep0 maxpacket: 8 [ 90.558211][ T1017] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.568606][ T1017] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 90.577604][ T1017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.586078][ T1017] usb 4-1: config 0 descriptor?? [ 90.618186][ T1039] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.638617][ T1017] rndis_host: probe of 4-1:0.0 failed with error -22 [ 90.649514][ T3722] EXT4-fs (loop5): Unsupported blocksize for fs-verity [ 90.808208][ T1038] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.818440][ T1038] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.828982][ T1038] usb 7-1: config 1 has no interface number 0 [ 90.841739][ T1016] usb 4-1: USB disconnect, device number 25 [ 90.858215][ T1039] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 90.867277][ T1039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.875406][ T1039] usb 3-1: Product: syz [ 90.879770][ T1039] usb 3-1: Manufacturer: syz [ 90.884336][ T1039] usb 3-1: SerialNumber: syz [ 90.988236][ T1038] usb 7-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 90.997287][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.005280][ T1038] usb 7-1: Product: syz [ 91.009460][ T1038] usb 7-1: Manufacturer: syz [ 91.014026][ T1038] usb 7-1: SerialNumber: syz [ 91.038274][ T1041] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 91.118165][ T1017] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 91.208202][ T1039] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 91.216431][ T1039] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 91.225248][ T1039] usb 3-1: USB disconnect, device number 26 [ 91.278216][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 91.398170][ T1017] usb 2-1: Using ep0 maxpacket: 8 [ 91.398283][ T1038] usb 7-1: 1:0 : does not exist [ 91.408070][ T1038] usb 7-1: 1:2 : does not exist [ 91.413194][ T1038] usb 7-1: 1:3 : does not exist [ 91.419251][ T1038] usb 7-1: 1:4 : does not exist [ 91.419877][ T3743] EXT4-fs error (device loop3): dx_probe:796: inode #2: comm syz.3.1849: Attempting to read directory block (0) that is past i_size (16) [ 91.424123][ T1038] usb 7-1: BAAD HEADSET c_chmask mismatch [ 91.424214][ T1038] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 91.444633][ T3743] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 91.455471][ T1038] usb 7-1: USB disconnect, device number 23 [ 91.459640][ T3743] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,grpid,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue [ 91.568262][ T1041] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 91.577627][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.585687][ T1041] usb 6-1: Product: syz [ 91.589864][ T1041] usb 6-1: Manufacturer: syz [ 91.594442][ T1041] usb 6-1: SerialNumber: syz [ 91.628198][ T1017] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.638375][ T1017] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.647227][ T1017] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.818167][ T1018] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 91.827795][ T24] audit: type=1326 audit(1781606487.043:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.6.1861" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94120fe59 code=0x0 [ 91.852172][ T1017] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.861480][ T1017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.869665][ T1017] usb 2-1: Product: syz [ 91.873821][ T1017] usb 2-1: Manufacturer: syz [ 91.878935][ T1017] usb 2-1: SerialNumber: syz [ 91.918619][ T1017] cdc_ncm 2-1:1.0: bind() failure [ 91.998787][ T1038] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 92.041207][ T1041] usb 6-1: USB disconnect, device number 28 [ 92.049236][ T1323] udevd[1323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.122956][ T1039] usb 2-1: USB disconnect, device number 26 [ 92.148209][ T1016] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 92.258181][ T1018] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.398224][ T1016] usb 7-1: Using ep0 maxpacket: 32 [ 92.418932][ T3777] SELinux: duplicate or incompatible mount options [ 92.498230][ T1018] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 92.507287][ T1018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.515552][ T1018] usb 4-1: Product: syz [ 92.518214][ T1038] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 92.520022][ T1016] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 92.535084][ T1038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.541096][ T1018] usb 4-1: Manufacturer: syz [ 92.550570][ T1038] usb 3-1: Product: syz [ 92.553845][ T1016] usb 7-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 92.557709][ T1038] usb 3-1: Manufacturer: syz [ 92.565339][ T1018] usb 4-1: SerialNumber: syz [ 92.570243][ T1038] usb 3-1: SerialNumber: syz [ 92.575222][ T1016] usb 7-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 92.701254][ T3792] FAT-fs (loop1): Directory bread(block 199916) failed [ 92.708218][ T3792] FAT-fs (loop1): Directory bread(block 199917) failed [ 92.715102][ T3792] FAT-fs (loop1): Directory bread(block 199918) failed [ 92.722219][ T3792] FAT-fs (loop1): Directory bread(block 199919) failed [ 92.729308][ T3792] FAT-fs (loop1): Directory bread(block 199920) failed [ 92.736174][ T3792] FAT-fs (loop1): Directory bread(block 199921) failed [ 92.743104][ T3792] FAT-fs (loop1): Directory bread(block 199922) failed [ 92.748209][ T1016] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 92.749973][ T3792] FAT-fs (loop1): Directory bread(block 199923) failed [ 92.759065][ T1016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.779232][ T1016] usb 7-1: Product: syz [ 92.783398][ T1016] usb 7-1: Manufacturer: syz [ 92.788267][ T1016] usb 7-1: SerialNumber: syz [ 92.830445][ T1016] usb 7-1: Fast Track Pro config OK [ 92.848691][ T1041] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 93.128206][ T1042] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 93.138211][ T1016] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 93.146098][ T1016] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 93.153477][ T1016] usb 7-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 93.198228][ T1016] usb 7-1: 0:2 : does not exist [ 93.203123][ T1016] usb 7-1: unit 5 not found! [ 93.207717][ T1016] usb 7-1: unit 6 not found! [ 93.221346][ T1016] usb 7-1: USB disconnect, device number 24 [ 93.249509][ T1038] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.308212][ T1041] usb 6-1: unable to get BOS descriptor or descriptor too short [ 93.348244][ T1041] usb 6-1: not running at top speed; connect to a high speed hub [ 93.360140][ T1018] usb 4-1: MIDIStreaming interface descriptor not found [ 93.379578][ T1018] usb 4-1: USB disconnect, device number 26 [ 93.392674][ T1319] udevd[1319]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:6.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.408823][ T1038] usb 3-1: cannot setup if 2: error -71 [ 93.414420][ T1038] snd-usb-audio: probe of 3-1:1.2 failed with error -71 [ 93.432507][ T1038] usb 3-1: USB disconnect, device number 27 [ 93.450084][ T1041] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 93.467510][ T1041] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 93.480855][ T24] audit: type=1400 audit(1781606488.703:235): avc: denied { write } for pid=3812 comm="syz.2.1882" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.502539][ T1042] usb 2-1: config 3 has an invalid interface number: 214 but max is 0 [ 93.502548][ T24] audit: type=1400 audit(1781606488.703:236): avc: denied { remove_name } for pid=3812 comm="syz.2.1882" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.502565][ T24] audit: type=1400 audit(1781606488.703:237): avc: denied { unlink } for pid=3812 comm="syz.2.1882" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.511452][ T1042] usb 2-1: config 3 has no interface number 0 [ 93.562495][ T1041] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 93.573141][ T3801] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 93.573238][ T3801] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 93.592691][ T3801] F2FS-fs (loop3): invalid crc value [ 93.598439][ T3801] F2FS-fs (loop3): invalid crc value [ 93.603786][ T3801] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 93.640193][ T1042] usb 2-1: config 3 interface 214 has no altsetting 0 [ 93.732585][ T3820] FAT-fs (loop6): bogus number of directory entries (8) [ 93.739632][ T3820] FAT-fs (loop6): Can't find a valid FAT filesystem [ 93.768230][ T1041] usb 6-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.06 [ 93.777313][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.785469][ T1041] usb 6-1: Product: syz [ 93.789856][ T1041] usb 6-1: Manufacturer: syz [ 93.794448][ T1041] usb 6-1: SerialNumber: syz [ 93.818287][ T3780] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 93.825318][ T3780] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 93.858234][ T1038] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 93.878232][ T1042] usb 2-1: string descriptor 0 read error: -22 [ 93.884420][ T1042] usb 2-1: New USB device found, idVendor=154b, idProduct=f00d, bcdDevice=56.43 [ 93.893477][ T1042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.938888][ T1042] usb-storage 2-1:3.214: USB Mass Storage device detected [ 93.946571][ T1042] usb-storage 2-1:3.214: Quirks match for vid 154b pid f00d: 2000000 [ 94.119701][ T1041] usb 6-1: USB disconnect, device number 29 [ 94.163703][ T1040] usb 2-1: USB disconnect, device number 27 [ 94.218209][ T1038] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.228424][ T1038] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.258169][ T1016] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 94.298173][ T1042] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 94.318505][ T1038] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.327544][ T1038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.335590][ T1038] usb 3-1: SerialNumber: syz [ 94.378595][ T1038] usb 3-1: bad CDC descriptors [ 94.384205][ T1323] udevd[1323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 94.585953][ T1017] usb 3-1: USB disconnect, device number 28 [ 94.648554][ T1016] usb 4-1: config 3 has an invalid interface number: 141 but max is 0 [ 94.657007][ T3868] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 94.658267][ T1042] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.665547][ T1016] usb 4-1: config 3 has no interface number 0 [ 94.675429][ T1042] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.692567][ T3868] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.1907: invalid indirect mapped block 1 (level 1) [ 94.694293][ T1042] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 94.713765][ T1016] usb 4-1: config 3 interface 141 altsetting 4 endpoint 0x9 is Bulk; changing to Interrupt [ 94.721864][ T3868] EXT4-fs (loop5): Remounting filesystem read-only [ 94.726840][ T3874] SELinux: security_context_str_to_sid(user_u) failed for (dev binder, type binder) errno=-22 [ 94.733404][ T3868] EXT4-fs (loop5): 1 truncate cleaned up [ 94.743267][ T1016] usb 4-1: config 3 interface 141 has no altsetting 0 [ 94.755951][ T3868] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro, [ 94.908257][ T1042] usb 7-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 94.917352][ T1042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.925349][ T1042] usb 7-1: Product: syz [ 94.929695][ T1042] usb 7-1: Manufacturer: syz [ 94.934291][ T1042] usb 7-1: SerialNumber: syz [ 94.988856][ T3899] EXT4-fs (loop5): cluster size (1024) smaller than block size (4096) [ 95.028262][ T1016] usb 4-1: string descriptor 0 read error: -22 [ 95.034780][ T1016] usb 4-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=5c.73 [ 95.044010][ T1016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.068254][ T3836] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 95.088169][ T1040] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 95.088766][ T1016] asix: probe of 4-1:3.141 failed with error -22 [ 95.220462][ T3910] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 95.232659][ T3910] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 95.241757][ T3910] F2FS-fs (loop5): invalid crc value [ 95.247999][ T3910] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 95.263102][ T3923] EXT4-fs (loop2): Ignoring removed nobh option [ 95.273892][ T3910] F2FS-fs (loop5): Start checkpoint disabled! [ 95.275288][ T3923] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.281206][ T3910] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 95.288813][ T3923] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.294290][ T3910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 95.318215][ T1042] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 95.326057][ T1042] usb 7-1: 1:1: invalid format type 0x1101 is detected, processed as PCM [ 95.326122][ T3923] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:980: inode #11: comm syz.2.1932: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 95.338155][ T1040] usb 2-1: Using ep0 maxpacket: 32 [ 95.354451][ T1042] usb 7-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 95.363648][ T1016] usb 4-1: USB disconnect, device number 27 [ 95.368185][ T3923] EXT4-fs (loop2): Remounting filesystem read-only [ 95.376084][ T3923] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1173: inode #11: comm syz.2.1932: ea_inode dec ref err=-117 [ 95.388923][ T1042] usb 7-1: 0:2 : does not exist [ 95.389157][ T3923] EXT4-fs (loop2): 1 orphan inode deleted [ 95.398073][ T1042] usb 7-1: USB disconnect, device number 25 [ 95.408963][ T3923] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,jqfmt=vfsold,nobh,resgid=0x0000000000000000,test_dummy_encryption,stripe=0x0000000000000009, [ 95.538212][ T1040] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.561975][ T3931] EXT4-fs error (device loop5): ext4_quota_enable:6451: inode #4: comm syz.5.1933: iget: bad i_size value: -72057594037921792 [ 95.575227][ T3931] EXT4-fs error (device loop5): ext4_quota_enable:6454: comm syz.5.1933: Bad quota inode: 4, type: 1 [ 95.586339][ T3931] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.601405][ T3931] EXT4-fs (loop5): mount failed [ 95.608593][ T1319] udevd[1319]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.626767][ T1040] usb 2-1: config 7 has an invalid interface number: 12 but max is 0 [ 95.635330][ T1040] usb 2-1: config 7 has no interface number 0 [ 95.641639][ T1040] usb 2-1: config 7 interface 12 has no altsetting 0 [ 95.697929][ T24] audit: type=1326 audit(1781606491.910:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.5.1937" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af94fae59 code=0x0 [ 95.781079][ T3949] FAT-fs (loop6): bogus number of reserved sectors [ 95.787703][ T3949] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 95.797044][ T3949] FAT-fs (loop6): Can't find a valid FAT filesystem [ 95.803843][ T1038] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 95.818246][ T1040] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=6e.e6 [ 95.827323][ T1040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.835391][ T1040] usb 2-1: Product: syz [ 95.839597][ T1040] usb 2-1: Manufacturer: syz [ 95.844185][ T1040] usb 2-1: SerialNumber: syz [ 96.158500][ T1040] hub 2-1:7.12: bad descriptor, ignoring hub [ 96.170413][ T1040] hub: probe of 2-1:7.12 failed with error -5 [ 96.178195][ T1038] usb 3-1: config index 0 descriptor too short (expected 60991, got 36) [ 96.186544][ T1038] usb 3-1: config 138 has too many interfaces: 81, using maximum allowed: 32 [ 96.196383][ T1040] usb 2-1: bad CDC descriptors [ 96.204448][ T1038] usb 3-1: config 138 has an invalid descriptor of length 0, skipping remainder of the config [ 96.219529][ T1038] usb 3-1: config 138 has 0 interfaces, different from the descriptor's value: 81 [ 96.231374][ T1040] usb 2-1: USB disconnect, device number 28 [ 96.239925][ T1038] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.252010][ T1038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.271993][ T3994] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.285158][ T3994] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 96.309972][ T3994] EXT4-fs (loop5): failed to open journal device unknown-block(175,178) -6 [ 96.408179][ T1042] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 96.512873][ T1018] usb 3-1: USB disconnect, device number 29 [ 96.550600][ T4009] F2FS-fs (loop5): Found nat_bits in checkpoint [ 96.571952][ T4009] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 96.768522][ T1042] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 96.786247][ T4021] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 210 vs 220 free clusters [ 96.804135][ T4021] EXT4-fs (loop1): Remounting filesystem read-only [ 96.810893][ T4021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1974: inode #11520: comm syz.1.1974: iget: illegal inode # [ 96.824515][ T4021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1974: error while reading EA inode 11520 err=-117 [ 96.838539][ T4029] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 34)! [ 96.849251][ T4029] EXT4-fs (loop3): group descriptors corrupted! [ 96.853700][ T4021] EXT4-fs (loop1): 1 orphan inode deleted [ 96.865001][ T4021] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,min_batch_time=0x0000000000000008,dioread_lock,grpid, [ 96.948234][ T1042] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 96.957287][ T1042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.965453][ T1042] usb 7-1: Product: syz [ 96.969905][ T1042] usb 7-1: Manufacturer: syz [ 96.974509][ T1042] usb 7-1: SerialNumber: syz [ 96.979742][ T1042] usb 7-1: config 0 descriptor?? [ 97.198459][ T1040] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 97.232263][ T1016] usb 7-1: USB disconnect, device number 26 [ 97.308165][ T1017] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 97.308173][ T1042] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 97.338162][ T1037] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 97.438357][ T1040] usb 6-1: Using ep0 maxpacket: 8 [ 97.558220][ T1040] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.568341][ T1040] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.578168][ T1037] usb 2-1: Using ep0 maxpacket: 32 [ 97.668223][ T1042] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.678503][ T1042] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.718229][ T1017] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 97.728250][ T1040] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 97.729147][ T1017] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 97.738226][ T1037] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.760689][ T1040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.768898][ T1040] usb 6-1: Product: syz [ 97.773049][ T1040] usb 6-1: Manufacturer: syz [ 97.777630][ T1040] usb 6-1: SerialNumber: syz [ 97.848188][ T1037] usb 2-1: config index 0 descriptor too short (expected 1056, got 55) [ 97.856487][ T1037] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 97.865362][ T1037] usb 2-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 97.875624][ T1037] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 97.884617][ T1042] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.893691][ T1042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.901807][ T1042] usb 4-1: Product: syz [ 97.905944][ T1042] usb 4-1: Manufacturer: syz [ 97.910566][ T1042] usb 4-1: SerialNumber: syz [ 97.938292][ T1017] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 97.947472][ T1017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.948612][ T1042] hub 4-1:1.0: bad descriptor, ignoring hub [ 97.956407][ T1017] usb 3-1: Product: syz [ 97.961503][ T1042] hub: probe of 4-1:1.0 failed with error -5 [ 97.965745][ T1017] usb 3-1: Manufacturer: syz [ 97.976160][ T1017] usb 3-1: SerialNumber: syz [ 98.048212][ T1037] usb 2-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=23.50 [ 98.057288][ T1037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.065821][ T1037] usb 2-1: Product: syz [ 98.070017][ T1037] usb 2-1: Manufacturer: syz [ 98.074604][ T1037] usb 2-1: SerialNumber: syz [ 98.079274][ T1038] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 98.138258][ T1040] usb 6-1: unit 0 not found! [ 98.144360][ T1040] usb 6-1: USB disconnect, device number 30 [ 98.278222][ T1016] usb 4-1: USB disconnect, device number 28 [ 98.358233][ T1017] usb 3-1: Can't get UAC3 power state for id 10 [ 98.361630][ T1037] usb 2-1: USB disconnect, device number 29 [ 98.438198][ T1017] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 98.438220][ T1038] usb 7-1: config 0 has an invalid interface number: 42 but max is 8 [ 98.447824][ T1017] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 98.455882][ T1038] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.468521][ T1017] usb 3-1: USB disconnect, device number 30 [ 98.474578][ T1038] usb 7-1: config 0 has no interface number 0 [ 98.485652][ T1038] usb 7-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 98.494827][ T1038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.503364][ T1038] usb 7-1: config 0 descriptor?? [ 98.548566][ T1038] usb-storage 7-1:0.42: USB Mass Storage device detected [ 98.566341][ T1038] usb-storage 7-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 98.574392][ T1038] usb-storage 7-1:0.42: This device (04cb,0100,00bb S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 98.574392][ T1038] Please send a copy of this message to and [ 98.578739][ T4080] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 98.608532][ T4080] EXT4-fs (loop5): failed to open journal device unknown-block(8,3) -6 [ 98.719116][ T4093] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.740041][ T4093] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e018, mo2=0000] [ 98.757186][ T4093] EXT4-fs (loop5): failed to initialize system zone (-117) [ 98.764996][ T4093] EXT4-fs (loop5): mount failed [ 98.766228][ T1038] usb 7-1: USB disconnect, device number 27 [ 98.994702][ T4126] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000009,,errors=continue [ 99.006552][ T4126] SELinux: security_context_str_to_sid(staff_u) failed for (dev loop5, type ext4) errno=-22 [ 99.028172][ T1017] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 99.268163][ T1017] usb 4-1: Using ep0 maxpacket: 16 [ 99.303062][ T4107] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 99.311389][ T4107] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.320383][ T4107] F2FS-fs (loop2): invalid crc value [ 99.326023][ T4107] F2FS-fs (loop2): invalid crc value [ 99.331891][ T4107] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 99.388307][ T1017] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 99.408267][ T1017] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.419359][ T1018] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 99.428617][ T1017] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 99.444033][ T1017] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 99.455697][ T1017] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 99.465919][ T1017] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 99.472180][ T4153] F2FS-fs (loop6): invalid crc value [ 99.498194][ T1016] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 99.507038][ T4153] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 99.535227][ T4153] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 99.578225][ T1017] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.587316][ T1017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.595454][ T1017] usb 4-1: SerialNumber: syz [ 99.618242][ T4104] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.625213][ T4104] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.658180][ T1018] usb 6-1: Using ep0 maxpacket: 16 [ 99.691752][ T4174] EXT4-fs error (device loop6): ext4_iget_extra_inode:4692: inode #15: comm syz.6.2041: corrupted in-inode xattr [ 99.698278][ T1018] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 99.704065][ T4174] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.2041: couldn't read orphan inode 15 (err -117) [ 99.723521][ T4174] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 99.748231][ T1016] usb 2-1: Using ep0 maxpacket: 16 [ 99.758253][ T1025] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 99.868223][ T1016] usb 2-1: config 236 has an invalid interface number: 154 but max is 0 [ 99.876622][ T1016] usb 2-1: config 236 has no interface number 0 [ 99.883678][ T1016] usb 2-1: config 236 interface 154 has no altsetting 0 [ 99.898521][ T1017] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 99.905302][ T1017] usb 4-1: USB disconnect, device number 29 [ 99.998168][ T1025] usb 3-1: Using ep0 maxpacket: 32 [ 100.048267][ T1016] usb 2-1: New USB device found, idVendor=0df6, idProduct=0069, bcdDevice=8e.f3 [ 100.057372][ T1016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.065449][ T1019] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 100.073120][ T1016] usb 2-1: Product: syz [ 100.077255][ T1016] usb 2-1: Manufacturer: syz [ 100.081917][ T1016] usb 2-1: SerialNumber: syz [ 100.158207][ T1025] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.358673][ T1016] usb-storage 2-1:236.154: USB Mass Storage device detected [ 100.398657][ T1025] usb 3-1: New USB device found, idVendor=0e41, idProduct=5050, bcdDevice= 0.40 [ 100.409116][ T1016] usb 2-1: USB disconnect, device number 30 [ 100.416003][ T1025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.428249][ T1025] usb 3-1: Product: syz [ 100.432429][ T1025] usb 3-1: Manufacturer: syz [ 100.436991][ T1025] usb 3-1: SerialNumber: syz [ 100.468265][ T1018] usb 6-1: New USB device found, idVendor=17ef, idProduct=2f1e, bcdDevice=de.06 [ 100.477298][ T1018] usb 6-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 100.485706][ T1019] usb 7-1: unable to get BOS descriptor or descriptor too short [ 100.493511][ T1018] usb 6-1: Product: syz [ 100.497657][ T1018] usb 6-1: Manufacturer: syz [ 100.502758][ T1018] usb 6-1: config 0 descriptor?? [ 100.538557][ T1018] cdc_acm 6-1:0.0: Zero length descriptor references [ 100.545260][ T1018] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 100.578205][ T1019] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 100.588540][ T1019] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 100.668192][ T1038] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 100.740754][ T1016] usb 6-1: USB disconnect, device number 31 [ 100.748430][ T1019] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 100.757853][ T1019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.765865][ T1019] usb 7-1: Product: syz [ 100.770091][ T1019] usb 7-1: Manufacturer: syz [ 100.774656][ T1019] usb 7-1: SerialNumber: syz [ 100.788215][ T1025] usb 3-1: 1:1 : bogus bTerminalLink 13 [ 100.808256][ T1025] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 100.828215][ T1025] usb 3-1: unit 249 not found! [ 100.832987][ T1025] usb 3-1: unit 2 not found! [ 100.872876][ T1025] usb 3-1: USB disconnect, device number 31 [ 100.898478][ T4200] ================================================================== [ 100.906578][ T4200] BUG: KASAN: use-after-free in __ext4_iget+0x378/0x44e0 [ 100.913578][ T4200] Read of size 8 at addr ffff88811aec5f48 by task syz.1.2052/4200 [ 100.921375][ T4200] [ 100.923711][ T4200] CPU: 0 PID: 4200 Comm: syz.1.2052 Tainted: G W syzkaller #0 [ 100.932438][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.942472][ T4200] Call Trace: [ 100.945737][ T4200] __dump_stack+0x21/0x24 [ 100.950041][ T4200] dump_stack_lvl+0x1a7/0x208 [ 100.954693][ T4200] ? show_regs_print_info+0x18/0x18 [ 100.959864][ T4200] ? thaw_kernel_threads+0x220/0x220 [ 100.965124][ T4200] ? _raw_spin_lock+0x94/0xf0 [ 100.969774][ T4200] print_address_description+0x7f/0x2c0 [ 100.975295][ T4200] ? __ext4_iget+0x378/0x44e0 [ 100.980814][ T4200] kasan_report+0x100/0x140 [ 100.985816][ T4200] ? __ext4_iget+0x378/0x44e0 [ 100.990467][ T4200] __asan_report_load8_noabort+0x14/0x20 [ 100.996073][ T4200] __ext4_iget+0x378/0x44e0 [ 101.000549][ T4200] ? __kasan_check_write+0x14/0x20 [ 101.005636][ T4200] ? _raw_write_trylock+0x150/0x150 [ 101.010810][ T4200] ? __proc_create+0x581/0x8f0 [ 101.015545][ T4200] ? _raw_write_trylock+0x150/0x150 [ 101.020719][ T4200] ? ext4_get_projid+0x140/0x140 [ 101.025632][ T4200] ? _raw_write_unlock+0x2b/0x60 [ 101.030541][ T4200] ? proc_register+0x339/0x4d0 [ 101.035278][ T4200] ext4_enable_quotas+0x338/0x6d0 [ 101.040280][ T4200] ? ext4_register_sysfs+0x251/0x290 [ 101.045537][ T4200] ext4_fill_super+0x84cc/0x8d90 [ 101.050447][ T4200] ? ext4_mount+0x40/0x40 [ 101.054749][ T4200] ? vscnprintf+0x80/0x80 [ 101.059051][ T4200] ? set_blocksize+0x1eb/0x3a0 [ 101.063786][ T4200] ? sb_set_blocksize+0xaa/0xf0 [ 101.068193][ T1038] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.068618][ T4200] mount_bdev+0x26a/0x380 [ 101.080526][ T4200] ? ext4_mount+0x40/0x40 [ 101.084826][ T4200] ext4_mount+0x34/0x40 [ 101.088961][ T4200] legacy_get_tree+0xed/0x190 [ 101.093607][ T4200] ? ext4_chksum+0x180/0x180 [ 101.098172][ T4200] vfs_get_tree+0x89/0x260 [ 101.102560][ T4200] do_new_mount+0x25a/0xa30 [ 101.107033][ T4200] path_mount+0x581/0xca0 [ 101.111338][ T4200] __se_sys_mount+0x320/0x390 [ 101.115984][ T4200] ? __x64_sys_mount+0xd0/0xd0 [ 101.120722][ T4200] ? debug_smp_processor_id+0x17/0x20 [ 101.126065][ T4200] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 101.132102][ T4200] __x64_sys_mount+0xbf/0xd0 [ 101.136662][ T4200] do_syscall_64+0x31/0x40 [ 101.141055][ T4200] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.146930][ T4200] RIP: 0033:0x7efe4c4da0ca [ 101.148221][ T1038] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.151326][ T4200] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.151333][ T4200] RSP: 002b:00007efe4af32e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.161502][ T1038] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.180966][ T4200] RAX: ffffffffffffffda RBX: 00007efe4af32ee0 RCX: 00007efe4c4da0ca [ 101.180973][ T4200] RDX: 0000200000000580 RSI: 00002000000002c0 RDI: 00007efe4af32ea0 [ 101.180979][ T4200] RBP: 0000200000000580 R08: 00007efe4af32ee0 R09: 0000000000000010 [ 101.180985][ T4200] R10: 0000000000000010 R11: 0000000000000246 R12: 00002000000002c0 [ 101.180992][ T4200] R13: 00007efe4af32ea0 R14: 00000000000005a4 R15: 0000200000000600 [ 101.180999][ T4200] [ 101.181005][ T4200] Allocated by task 1773: [ 101.181020][ T4200] __kasan_slab_alloc+0xb7/0xe0 [ 101.181037][ T4200] slab_post_alloc_hook+0x5d/0x2f0 [ 101.256455][ T4208] futex_wake_op: syz.2.2055 tries to shift op by 32; fix this program [ 101.256542][ T4200] kmem_cache_alloc+0x15a/0x2d0 [ 101.269496][ T4200] f2fs_alloc_inode+0x26/0x410 [ 101.274241][ T4200] iget_locked+0x146/0x7d0 [ 101.278633][ T4200] f2fs_iget+0x55/0x4ae0 [ 101.282850][ T4200] f2fs_fill_super+0x4fb4/0x73d0 [ 101.287760][ T4200] mount_bdev+0x26a/0x380 [ 101.292069][ T4200] f2fs_mount+0x34/0x40 [ 101.296203][ T4200] legacy_get_tree+0xed/0x190 [ 101.300855][ T4200] vfs_get_tree+0x89/0x260 [ 101.305244][ T4200] do_new_mount+0x25a/0xa30 [ 101.309720][ T4200] path_mount+0x581/0xca0 [ 101.314022][ T4200] __se_sys_mount+0x320/0x390 [ 101.318675][ T4200] __x64_sys_mount+0xbf/0xd0 [ 101.323241][ T4200] do_syscall_64+0x31/0x40 [ 101.327633][ T4200] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.333493][ T4200] [ 101.335796][ T4200] Last potentially related work creation: [ 101.341488][ T4200] kasan_save_stack+0x3a/0x60 [ 101.346140][ T4200] __kasan_record_aux_stack+0xd2/0x100 [ 101.351573][ T4200] kasan_record_aux_stack_noalloc+0xb/0x10 [ 101.357352][ T4200] call_rcu+0x11a/0x1090 [ 101.361567][ T4200] evict+0x88f/0x940 [ 101.365437][ T4200] evict_inodes+0x620/0x6a0 [ 101.369917][ T4200] generic_shutdown_super+0x96/0x320 [ 101.375177][ T4200] kill_block_super+0x7f/0xf0 [ 101.379829][ T4200] kill_f2fs_super+0x30a/0x3d0 [ 101.384569][ T4200] deactivate_locked_super+0xa0/0x100 [ 101.389916][ T4200] deactivate_super+0xaf/0xe0 [ 101.394565][ T4200] cleanup_mnt+0x44f/0x500 [ 101.398954][ T4200] __cleanup_mnt+0x19/0x20 [ 101.403345][ T4200] task_work_run+0x127/0x190 [ 101.407910][ T4200] exit_to_user_mode_loop+0xcb/0xe0 [ 101.413081][ T4200] exit_to_user_mode_prepare+0x76/0xa0 [ 101.418514][ T4200] syscall_exit_to_user_mode+0x1d/0x40 [ 101.423946][ T4200] do_syscall_64+0x3d/0x40 [ 101.428337][ T4200] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.434198][ T4200] [ 101.436507][ T4200] The buggy address belongs to the object at ffff88811aec5a20 [ 101.436507][ T4200] which belongs to the cache f2fs_inode_cache of size 1520 [ 101.451057][ T4200] The buggy address is located 1320 bytes inside of [ 101.451057][ T4200] 1520-byte region [ffff88811aec5a20, ffff88811aec6010) [ 101.464472][ T4200] The buggy address belongs to the page: [ 101.470094][ T4200] page:ffffea00046bb000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811aec4d40 pfn:0x11aec0 [ 101.481603][ T4200] head:ffffea00046bb000 order:3 compound_mapcount:0 compound_pincount:0 [ 101.489915][ T4200] flags: 0x4000000000010200(slab|head) [ 101.495380][ T4200] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810279ad80 [ 101.503941][ T4200] raw: ffff88811aec4d40 000000008013000c 00000001ffffffff 0000000000000000 [ 101.512498][ T4200] page dumped because: kasan: bad access detected [ 101.518885][ T4200] page_owner tracks the page as allocated [ 101.524585][ T4200] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 1193, ts 31580066727, free_ts 30841219141 [ 101.546004][ T4200] prep_new_page+0x176/0x190 [ 101.550606][ T4200] get_page_from_freelist+0x225f/0x23f0 [ 101.556126][ T4200] __alloc_pages_nodemask+0x29a/0x640 [ 101.561473][ T4200] new_slab+0x84/0x3f0 [ 101.565517][ T4200] ___slab_alloc+0x2f8/0x4c0 [ 101.570080][ T4200] __slab_alloc+0x63/0xa0 [ 101.574386][ T4200] kmem_cache_alloc+0x1a4/0x2d0 [ 101.579209][ T4200] f2fs_alloc_inode+0x26/0x410 [ 101.583959][ T4200] iget_locked+0x146/0x7d0 [ 101.588353][ T4200] f2fs_iget+0x55/0x4ae0 [ 101.592570][ T4200] f2fs_fill_super+0x40d3/0x73d0 [ 101.597488][ T4200] mount_bdev+0x26a/0x380 [ 101.601794][ T4200] f2fs_mount+0x34/0x40 [ 101.605927][ T4200] legacy_get_tree+0xed/0x190 [ 101.610583][ T4200] vfs_get_tree+0x89/0x260 [ 101.614972][ T4200] do_new_mount+0x25a/0xa30 [ 101.619445][ T4200] page last free stack trace: [ 101.624097][ T4200] __free_pages_ok+0x80b/0x830 [ 101.628834][ T4200] __free_pages+0xd8/0x390 [ 101.633225][ T4200] __free_slab+0xcf/0x190 [ 101.637525][ T4200] unfreeze_partials+0x150/0x180 [ 101.642434][ T4200] put_cpu_partial+0xc1/0x180 [ 101.647084][ T4200] __slab_free+0x2c9/0x3a0 [ 101.651477][ T4200] ___cache_free+0x10e/0x130 [ 101.656052][ T4200] qlink_free+0x50/0x90 [ 101.660188][ T4200] qlist_free_all+0x5f/0xb0 [ 101.664668][ T4200] kasan_quarantine_reduce+0x14a/0x160 [ 101.670103][ T4200] __kasan_slab_alloc+0x2f/0xe0 [ 101.674927][ T4200] slab_post_alloc_hook+0x5d/0x2f0 [ 101.680013][ T4200] kmem_cache_alloc+0x15a/0x2d0 [ 101.684839][ T4200] sock_alloc_inode+0x1b/0xb0 [ 101.689497][ T4200] new_inode_pseudo+0x62/0x210 [ 101.694257][ T4200] __sock_create+0x12c/0x770 [ 101.698830][ T4200] [ 101.701133][ T4200] Memory state around the buggy address: [ 101.706737][ T4200] ffff88811aec5e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.714770][ T4200] ffff88811aec5e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.722807][ T4200] >ffff88811aec5f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.730838][ T4200] ^ [ 101.737227][ T4200] ffff88811aec5f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.745266][ T4200] ffff88811aec6000: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.753298][ T4200] ================================================================== [ 101.761331][ T4200] Disabling lock debugging due to kernel taint [ 101.775631][ T24] audit: type=1400 audit(1781606497.990:239): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 101.779473][ T4200] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 101.803528][ T24] audit: type=1400 audit(1781606497.990:240): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.812398][ T4200] EXT4-fs (loop1): mount failed [ 101.833602][ T1038] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 101.838676][ T24] audit: type=1400 audit(1781606497.990:241): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.847370][ T1038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.868773][ T24] audit: type=1400 audit(1781606497.990:242): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.896987][ T1038] usb 4-1: Product: syz [ 101.900811][ T1019] usb 7-1: USB disconnect, device number 28 [ 101.904879][ T1038] usb 4-1: Manufacturer: syz [ 101.908287][ T24] audit: type=1400 audit(1781606497.990:243): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.914261][ T1038] usb 4-1: SerialNumber: syz [ 101.932206][ T24] audit: type=1400 audit(1781606497.990:244): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.959502][ T24] audit: type=1400 audit(1781606497.990:245): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.959987][ T929] udevd[929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.228660][ T1038] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 102.248212][ T1038] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 102.256020][ T1038] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 102.265422][ T1038] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 102.273225][ T1038] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 102.323084][ T1038] usb 4-1: USB disconnect, device number 30