last executing test programs: 3.19295617s ago: executing program 2 (id=5079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 3.125549441s ago: executing program 2 (id=5082): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRES32], 0x1, 0x105a0, &(0x7f0000010600)="$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") rename(&(0x7f0000006840)='./file1\x00', &(0x7f0000006640)='./file0/file0\x00') 1.300945026s ago: executing program 2 (id=5153): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)='T', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee01) 1.291571976s ago: executing program 1 (id=5154): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.238875157s ago: executing program 1 (id=5157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x2}, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8002011a}) 1.143126787s ago: executing program 1 (id=5162): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 1.089539056s ago: executing program 1 (id=5164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e45c, 0x700000000000000) 1.023906337s ago: executing program 1 (id=5167): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 972.429427ms ago: executing program 1 (id=5170): mlockall(0x3) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 608.586248ms ago: executing program 2 (id=5182): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x1, 0x7, "f1bf5cd49827"}}) 546.257779ms ago: executing program 2 (id=5185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 452.725189ms ago: executing program 2 (id=5192): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x1) 332.036329ms ago: executing program 0 (id=5196): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/200, 0xc8}], 0x1, 0x0, 0x0) 331.505529ms ago: executing program 3 (id=5197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) 318.444169ms ago: executing program 4 (id=5198): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 278.611279ms ago: executing program 0 (id=5199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000062c0)) 273.918629ms ago: executing program 4 (id=5200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0), 0x4) 205.365049ms ago: executing program 3 (id=5201): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x12, 0x0, 0xb05, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x31, 0x0, 0x0, @binary="862f43dd6b"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 205.23934ms ago: executing program 4 (id=5202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8970, &(0x7f0000000140)={'lo\x00', 0x0}) 205.142139ms ago: executing program 0 (id=5203): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000000)='./mnt\x00', 0x65) 172.58767ms ago: executing program 4 (id=5204): r0 = getpid() getpriority(0x2, r0) 164.41085ms ago: executing program 3 (id=5205): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) ioctl$EVIOCGSW(r0, 0x5452, &(0x7f0000001440)=""/4103) 132.44263ms ago: executing program 3 (id=5206): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 125.862089ms ago: executing program 0 (id=5207): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x1, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x4, 0x0, @empty, @empty}}}}) 78.3763ms ago: executing program 4 (id=5208): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f0000000100)={0x0, 0x2d, 0x5, 0xa, 0x0, 0x2c}, 0x48) 77.90151ms ago: executing program 3 (id=5209): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) 72.23896ms ago: executing program 0 (id=5210): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 53.86012ms ago: executing program 4 (id=5211): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16], 0x4, 0x2f6, &(0x7f0000000400)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 18.35663ms ago: executing program 0 (id=5212): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1480, 0x4) 0s ago: executing program 3 (id=5213): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x3, 0xb}}) kernel console output (not intermixed with test programs): [ 143.233759][ T24] usb 1-1: USB disconnect, device number 63 [ 143.240781][ T309] usb 4-1: Using ep0 maxpacket: 8 [ 143.246692][ T304] EXT4-fs (loop4): unmounting filesystem. [ 143.252442][ T309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.263373][ T40] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 143.274921][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.286432][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.297233][ T1297] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 143.304704][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.314311][ T40] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 143.329149][ T40] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 143.338782][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.347262][ T309] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 143.356418][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.364513][ T40] usb 2-1: config 0 descriptor?? [ 143.369367][ T309] usb 4-1: Product: syz [ 143.373399][ T309] usb 4-1: Manufacturer: syz [ 143.379607][ T40] usbhid 2-1:0.0: can't add hid device: -22 [ 143.385943][ T309] usb 4-1: SerialNumber: syz [ 143.390487][ T40] usbhid: probe of 2-1:0.0 failed with error -22 [ 143.397291][ T309] usb 4-1: config 0 descriptor?? [ 143.409423][ T309] cdc_acm 4-1:0.0: skipping garbage [ 143.530593][ T1297] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 143.539690][ T1297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.553659][ T1297] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 143.596403][ T1851] usb 2-1: USB disconnect, device number 59 [ 143.622226][ T1297] usb 4-1: USB disconnect, device number 58 [ 143.771660][ T24] usb 3-1: USB disconnect, device number 62 [ 143.850121][ T6] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 144.042613][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 144.048922][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.057546][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.067037][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.079357][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.090562][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.099479][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.107290][ T6] usb 5-1: Product: syz [ 144.111217][ T6] usb 5-1: Manufacturer: syz [ 144.115646][ T6] usb 5-1: SerialNumber: syz [ 144.309887][ T1851] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 144.340139][ T6] usb 5-1: USB disconnect, device number 64 [ 144.386325][ T6638] loop2: detected capacity change from 0 to 1024 [ 144.405334][ T6638] EXT4-fs: Ignoring removed orlov option [ 144.414246][ T6638] EXT4-fs (loop2): Test dummy encryption mode enabled [ 144.423841][ T6638] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.2960: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 144.450346][ T6638] EXT4-fs error (device loop2): ext4_quota_enable:6982: comm syz.2.2960: Bad quota inode: 4, type: 1 [ 144.461797][ T509] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 144.461922][ T6638] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.487035][ T6638] EXT4-fs (loop2): mount failed [ 144.503456][ T1851] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 144.513355][ T1851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.521661][ T1851] usb 1-1: config 0 descriptor?? [ 144.527313][ T1851] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 144.545150][ T1851] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 144.663780][ T509] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 144.671874][ T509] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 144.679808][ T509] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 144.688483][ T509] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 144.699268][ T509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 144.709221][ T509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 144.718940][ T509] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 144.732129][ T509] usb 4-1: language id specifier not provided by device, defaulting to English [ 144.743760][ T590] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 144.751635][ T1851] usb 1-1: USB disconnect, device number 64 [ 144.757948][ T1851] ftdi_sio 1-1:0.0: device disconnected [ 144.768821][ T509] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 144.777854][ T509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.785624][ T509] usb 4-1: Product: 吮 [ 144.790419][ T509] usb 4-1: config 0 descriptor?? [ 144.796255][ T509] hub 4-1:0.0: bad descriptor, ignoring hub [ 144.803303][ T509] hub: probe of 4-1:0.0 failed with error -5 [ 144.810578][ T509] input: 吮 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 144.887102][ T6] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 144.951264][ T590] usb 2-1: Using ep0 maxpacket: 16 [ 144.957309][ T590] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.966057][ T590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.976238][ T590] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 144.985034][ T590] usb 2-1: config 1 has no interface number 1 [ 144.990957][ T590] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 145.003556][ T590] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.014197][ T590] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 59015, setting to 1024 [ 145.016570][ T24] usb 4-1: USB disconnect, device number 59 [ 145.030127][ T590] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.040765][ T590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.048698][ T590] usb 2-1: Product: syz [ 145.052890][ T590] usb 2-1: Manufacturer: syz [ 145.057295][ T590] usb 2-1: SerialNumber: syz [ 145.079616][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 145.085935][ T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 145.094501][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.104408][ T6] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 145.113789][ T6] usb 3-1: config 1 has no interface number 1 [ 145.119850][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 145.132482][ T6] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.144677][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.153814][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.162097][ T6] usb 3-1: Product: syz [ 145.166046][ T6] usb 3-1: Manufacturer: syz [ 145.170459][ T6] usb 3-1: SerialNumber: syz [ 145.175887][ T309] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 145.279141][ T590] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 145.286935][ T590] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 145.296120][ T590] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 145.313405][ T590] usb 2-1: USB disconnect, device number 60 [ 145.368253][ T309] usb 5-1: Using ep0 maxpacket: 8 [ 145.376954][ T309] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d96, bcdDevice=2f.62 [ 145.394833][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.397979][ T6] usb 3-1: USB disconnect, device number 63 [ 145.405321][ T309] usb 5-1: Product: syz [ 145.414348][ T309] usb 5-1: Manufacturer: syz [ 145.419181][ T309] usb 5-1: SerialNumber: syz [ 145.434098][ T309] usb 5-1: config 0 descriptor?? [ 145.625568][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.633420][ T6677] loop3: detected capacity change from 0 to 512 [ 145.649993][ T6677] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.664178][ T6677] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2978: invalid indirect mapped block 4294967295 (level 1) [ 145.669328][ T309] usb 5-1: USB disconnect, device number 65 [ 145.681275][ T6677] EXT4-fs (loop3): Remounting filesystem read-only [ 145.690354][ T6677] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2978: invalid indirect mapped block 4294967295 (level 1) [ 145.704452][ T6677] EXT4-fs (loop3): Remounting filesystem read-only [ 145.711177][ T6677] EXT4-fs (loop3): 2 truncates cleaned up [ 145.716734][ T6677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.731698][ T1851] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 145.740180][ T305] EXT4-fs (loop3): unmounting filesystem. [ 145.850999][ T6689] loop1: detected capacity change from 0 to 1024 [ 145.858214][ T6689] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 145.869151][ T6689] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 145.879215][ T6689] EXT4-fs error (device loop1): ext4_get_journal_inode:5721: comm syz.1.2983: inode #1: comm syz.1.2983: iget: illegal inode # [ 145.892537][ T6689] EXT4-fs (loop1): no journal found [ 145.897695][ T6689] EXT4-fs (loop1): can't get journal size [ 145.904143][ T6689] EXT4-fs (loop1): failed to initialize system zone (-22) [ 145.911770][ T6689] EXT4-fs (loop1): mount failed [ 145.925530][ T1851] usb 1-1: config 1 interface 0 has no altsetting 0 [ 145.933540][ T1851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.947087][ T1851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.955023][ T1851] usb 1-1: Product: syz [ 145.961315][ T1851] usb 1-1: Manufacturer: syz [ 145.968870][ T1851] usb 1-1: SerialNumber: syz [ 146.053791][ T6] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 146.089047][ T6713] loop1: detected capacity change from 0 to 512 [ 146.104497][ T6713] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 146.115686][ T6713] EXT4-fs (loop1): group descriptors corrupted! [ 146.195638][ T1851] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 146.215880][ T6722] loop1: detected capacity change from 0 to 128 [ 146.233127][ T6722] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 146.250940][ T1851] usb 1-1: USB disconnect, device number 65 [ 146.256734][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 146.262775][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.281616][ T6] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.292601][ T1851] usblp0: removed [ 146.335538][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 146.352390][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.364985][ T6] usb 4-1: Product: syz [ 146.369328][ T6] usb 4-1: Manufacturer: syz [ 146.373967][ T6] usb 4-1: SerialNumber: syz [ 146.385086][ T6] usb 4-1: config 0 descriptor?? [ 146.617290][ T6] usb 4-1: USB disconnect, device number 60 [ 146.640499][ T1297] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 146.642403][ T6714] loop2: detected capacity change from 0 to 131072 [ 146.655359][ T6714] F2FS-fs (loop2): Invalid log_blocksize (0), supports only 12 [ 146.662935][ T6714] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.670977][ T6714] F2FS-fs (loop2): Test dummy encryption mode enabled [ 146.678388][ T6714] F2FS-fs (loop2): Can't change test_dummy_encryption on remount [ 146.693903][ T24] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 146.845108][ T1297] usb 5-1: No LPM exit latency info found, disabling LPM. [ 146.858959][ T1297] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 146.886342][ T1297] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 146.894092][ T6755] tmpfs: Bad value for 'huge' [ 146.901634][ T1297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.919081][ T24] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 146.934437][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.944610][ T1297] usb 5-1: string descriptor 0 read error: -22 [ 146.951553][ T1297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.960644][ T1297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.968949][ T24] usb 2-1: config 0 has no interface number 0 [ 146.977017][ T24] usb 2-1: config 0 interface 39 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.003447][ T1297] usb 5-1: 0:2 : does not exist [ 147.010165][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 147.025245][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.033096][ T24] usb 2-1: Product: syz [ 147.037355][ T24] usb 2-1: Manufacturer: syz [ 147.041818][ T24] usb 2-1: SerialNumber: syz [ 147.047209][ T24] usb 2-1: config 0 descriptor?? [ 147.226931][ T309] usb 5-1: USB disconnect, device number 66 [ 147.276093][ T24] usb 2-1: USB disconnect, device number 61 [ 147.356736][ T1297] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 147.452886][ T6] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 147.463555][ T1851] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 147.506718][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.39/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.559797][ T1297] usb 3-1: Using ep0 maxpacket: 16 [ 147.567394][ T1297] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=99.81 [ 147.576431][ T1297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.584309][ T1297] usb 3-1: Product: syz [ 147.588350][ T1297] usb 3-1: Manufacturer: syz [ 147.592800][ T1297] usb 3-1: SerialNumber: syz [ 147.598636][ T1297] usb 3-1: config 0 descriptor?? [ 147.604526][ T1297] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 147.612216][ T1297] ftdi_sio ttyUSB0: unknown device type: 0x9981 [ 147.645305][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 147.651463][ T6] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 147.659626][ T6] usb 1-1: config 0 has no interface number 0 [ 147.666772][ T1851] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.677618][ T1851] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 147.689313][ T1851] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.698366][ T1851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.706443][ T6] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 147.715723][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.724223][ T6] usb 1-1: Product: syz [ 147.728271][ T6] usb 1-1: Manufacturer: syz [ 147.733729][ T1851] usb 4-1: invalid MIDI out EP 0 [ 147.738990][ T6] usb 1-1: SerialNumber: syz [ 147.745009][ T6] usb 1-1: config 0 descriptor?? [ 147.750428][ T1851] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 147.758045][ T6] ums-jumpshot 1-1:0.16: USB Mass Storage device detected [ 147.766428][ T6] ums-jumpshot 1-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 147.774240][ T972] udevd[972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.785231][ T6] scsi host1: usb-storage 1-1:0.16 [ 147.824824][ T1297] usb 3-1: USB disconnect, device number 64 [ 147.836085][ T1297] ftdi_sio 3-1:0.0: device disconnected [ 147.950768][ T529] usb 4-1: USB disconnect, device number 61 [ 147.977411][ T1851] usb 1-1: USB disconnect, device number 66 [ 148.222646][ T6] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 148.244000][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 148.398366][ T6819] loop2: detected capacity change from 0 to 512 [ 148.416344][ T6] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 148.417146][ T6819] EXT4-fs error (device loop2): ext4_quota_enable:6975: comm syz.2.3045: Bad quota inum: 2, type: 2 [ 148.424522][ T6] usb 5-1: config 0 has no interface number 1 [ 148.435928][ T6819] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 148.441688][ T6] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 148.455724][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 148.465721][ T6] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 148.471542][ T6819] EXT4-fs (loop2): mount failed [ 148.481560][ T6] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 148.485224][ T24] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 148.495182][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.513761][ T6] usb 5-1: SerialNumber: syz [ 148.517484][ T24] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 148.532400][ T6] usb 5-1: config 0 descriptor?? [ 148.545870][ T24] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 148.551198][ T6] usb 5-1: Found UVC 0.00 device (0002:0000) [ 148.553894][ T24] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 148.568839][ T6] usb 5-1: No valid video chain found. [ 148.571292][ T24] usb 2-1: config 0 has no interface number 0 [ 148.583487][ T24] usb 2-1: config 0 has no interface number 1 [ 148.590041][ T24] usb 2-1: config 0 has no interface number 2 [ 148.596179][ T24] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.618478][ T24] usb 2-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 148.639679][ T24] usb 2-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 148.654875][ T24] usb 2-1: too many endpoints for config 0 interface 3 altsetting 75: 205, using maximum allowed: 30 [ 148.682517][ T24] usb 2-1: config 0 interface 3 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 148.697456][ T24] usb 2-1: config 0 interface 150 has no altsetting 0 [ 148.708105][ T24] usb 2-1: config 0 interface 112 has no altsetting 0 [ 148.714973][ T24] usb 2-1: config 0 interface 3 has no altsetting 0 [ 148.721396][ T24] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 148.730245][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.739270][ T24] usb 2-1: config 0 descriptor?? [ 148.745448][ T24] usb 2-1: selecting invalid altsetting 0 [ 148.797753][ T6] usb 5-1: USB disconnect, device number 67 [ 148.831961][ T1851] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 148.853467][ T6839] loop3: detected capacity change from 0 to 40427 [ 148.860528][ T6839] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (31, 24) [ 148.868254][ T6839] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 148.877231][ T6839] F2FS-fs (loop3): heap/no_heap options were deprecated [ 148.887555][ T6839] F2FS-fs (loop3): invalid crc value [ 148.895259][ T6839] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 148.904398][ T6839] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 148.920582][ T6839] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 148.960264][ T24] usb 2-1: string descriptor 0 read error: -71 [ 148.968772][ T24] usb 2-1: USB disconnect, device number 62 [ 149.024381][ T1851] usb 1-1: Using ep0 maxpacket: 32 [ 149.031233][ T1851] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.039920][ T1851] usb 1-1: config 8 has an invalid interface number: 192 but max is 0 [ 149.048219][ T1851] usb 1-1: config 8 has no interface number 0 [ 149.054221][ T1851] usb 1-1: config 8 interface 192 altsetting 8 has an invalid endpoint with address 0x61, skipping [ 149.065117][ T1851] usb 1-1: config 8 interface 192 has no altsetting 0 [ 149.088277][ T1851] usb 1-1: New USB device found, idVendor=7ef7, idProduct=b679, bcdDevice=e9.25 [ 149.097671][ T1851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.105778][ T1851] usb 1-1: Product: syz [ 149.109918][ T1851] usb 1-1: Manufacturer: syz [ 149.114296][ T1851] usb 1-1: SerialNumber: syz [ 149.196385][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.150/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.238212][ T509] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 149.337279][ T1851] usb-storage 1-1:8.192: USB Mass Storage device detected [ 149.366559][ T1297] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 149.378849][ T1851] usb 1-1: USB disconnect, device number 67 [ 149.430619][ T509] usb 3-1: Using ep0 maxpacket: 16 [ 149.436721][ T509] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 149.450687][ T509] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.459809][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.467663][ T509] usb 3-1: SerialNumber: syz [ 149.569633][ T1297] usb 4-1: Using ep0 maxpacket: 16 [ 149.576160][ T1297] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.588535][ T1297] usb 4-1: config 12 has an invalid interface number: 155 but max is 0 [ 149.597050][ T1297] usb 4-1: config 12 has no interface number 0 [ 149.603531][ T1297] usb 4-1: config 12 interface 155 altsetting 98 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 149.614820][ T1297] usb 4-1: config 12 interface 155 has no altsetting 0 [ 149.622786][ T1297] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=f3.13 [ 149.631689][ T1297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.639619][ T1297] usb 4-1: Product: syz [ 149.643542][ T1297] usb 4-1: Manufacturer: syz [ 149.648026][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 149.655441][ T1297] usb 4-1: SerialNumber: syz [ 149.691051][ T529] usb 3-1: USB disconnect, device number 65 [ 149.869244][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 149.869288][ T509] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 149.881488][ T1297] usb 4-1: USB disconnect, device number 62 [ 149.890848][ T24] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 149.905894][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.926626][ T24] usb 5-1: config 0 has no interface number 0 [ 149.934653][ T24] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 149.945843][ T28] audit: type=1326 audit(2000002591.288:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.0.3067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1d85d19 code=0x0 [ 149.949877][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.977143][ T24] usb 5-1: Product: syz [ 149.981029][ T24] usb 5-1: Manufacturer: syz [ 149.985515][ T24] usb 5-1: SerialNumber: syz [ 149.991542][ T24] usb 5-1: config 0 descriptor?? [ 149.997959][ T24] dm9601: probe of 5-1:0.41 failed with error -22 [ 150.004416][ T24] sr9700: probe of 5-1:0.41 failed with error -22 [ 150.083816][ T509] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.095007][ T509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.106041][ T509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.117588][ T509] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.127777][ T509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.135613][ T509] usb 2-1: Product: syz [ 150.139946][ T509] usb 2-1: Manufacturer: syz [ 150.144390][ T509] usb 2-1: SerialNumber: syz [ 150.158007][ T509] usb 2-1: bad CDC descriptors [ 150.234186][ T24] usb 5-1: USB disconnect, device number 68 [ 150.373399][ T1851] usb 2-1: USB disconnect, device number 63 [ 150.574560][ T509] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 150.766950][ T509] usb 1-1: Using ep0 maxpacket: 16 [ 150.767051][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 150.780077][ T509] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.788403][ T1297] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 150.793281][ T509] usb 1-1: config 156 has an invalid interface number: 243 but max is 0 [ 150.804119][ T509] usb 1-1: config 156 has no interface number 0 [ 150.812567][ T509] usb 1-1: config 156 interface 243 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 150.824758][ T509] usb 1-1: config 156 interface 243 has no altsetting 0 [ 150.833222][ T509] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=80.a7 [ 150.842173][ T509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.849899][ T509] usb 1-1: Product: syz [ 150.853957][ T509] usb 1-1: Manufacturer: syz [ 150.858329][ T509] usb 1-1: SerialNumber: syz [ 150.981069][ T1297] usb 3-1: Using ep0 maxpacket: 16 [ 150.986101][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 151.000702][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.010913][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.031012][ T1297] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=94.d7 [ 151.040331][ T1297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.048598][ T1297] usb 3-1: Product: syz [ 151.052686][ T24] usb 4-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 151.061760][ T1297] usb 3-1: Manufacturer: syz [ 151.066192][ T1297] usb 3-1: SerialNumber: syz [ 151.070941][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.079551][ T24] usb 4-1: Product: syz [ 151.083534][ T24] usb 4-1: Manufacturer: syz [ 151.088111][ T509] usb 1-1: selecting invalid altsetting 0 [ 151.088208][ T1297] usb 3-1: config 0 descriptor?? [ 151.104283][ T24] usb 4-1: SerialNumber: syz [ 151.110186][ T24] usb 4-1: config 0 descriptor?? [ 151.115829][ T1297] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 151.116641][ T509] usb 1-1: USB disconnect, device number 68 [ 151.130690][ T40] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 151.328768][ T24] usb 3-1: USB disconnect, device number 66 [ 151.336437][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 151.345559][ T6] usb 4-1: USB disconnect, device number 63 [ 151.347523][ T40] usb 5-1: not running at top speed; connect to a high speed hub [ 151.361864][ T40] usb 5-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 151.370906][ T40] usb 5-1: config 219 interface 0 has no altsetting 0 [ 151.377468][ T40] usb 5-1: config 219 interface 0 has no altsetting 1 [ 151.385516][ T40] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 151.394651][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.402572][ T40] usb 5-1: Product: syz [ 151.406548][ T40] usb 5-1: Manufacturer: syz [ 151.411329][ T40] usb 5-1: SerialNumber: syz [ 151.429779][ T590] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 151.622194][ T590] usb 2-1: Using ep0 maxpacket: 32 [ 151.629520][ T590] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.647886][ T590] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 151.650383][ T40] usb 5-1: selecting invalid altsetting 0 [ 151.657229][ T590] usb 2-1: config 12 has no interface number 0 [ 151.668287][ T590] usb 2-1: config 12 interface 184 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 151.687489][ T40] snd-usb-audio: probe of 5-1:219.0 failed with error -22 [ 151.693202][ T28] audit: type=1326 audit(2000002592.925:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.0.3102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1d85d19 code=0x0 [ 151.698743][ T40] usb 5-1: USB disconnect, device number 69 [ 151.717703][ T590] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 151.732176][ T590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.740164][ T590] usb 2-1: Product: syz [ 151.744112][ T590] usb 2-1: Manufacturer: syz [ 151.758513][ T590] usb 2-1: SerialNumber: syz [ 151.764685][ T6938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.954679][ T971] udevd[971]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:219.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.998669][ T590] usb 2-1: USB disconnect, device number 64 [ 152.081911][ T24] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 152.203596][ T28] audit: type=1326 audit(2000002593.402:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.3121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdbf785d19 code=0x0 [ 152.228348][ T971] udevd[971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.294066][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.301664][ T40] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 152.317606][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 152.346484][ T7000] loop3: detected capacity change from 0 to 256 [ 152.354663][ T24] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 152.366766][ T24] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.382026][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 152.390277][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.399713][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.407766][ T24] usb 1-1: Product: syz [ 152.411809][ T24] usb 1-1: Manufacturer: syz [ 152.416235][ T24] usb 1-1: SerialNumber: syz [ 152.421602][ T460] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.421731][ T6947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 152.521532][ T40] usb 3-1: config 1 has an invalid interface number: 17 but max is 1 [ 152.530418][ T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.540706][ T40] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 152.556785][ T40] usb 3-1: config 1 has no interface number 2 [ 152.562779][ T40] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.575652][ T40] usb 3-1: config 1 interface 1 has no altsetting 0 [ 152.586065][ T40] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.594961][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.607213][ T40] usb 3-1: Product: syz [ 152.613349][ T40] usb 3-1: Manufacturer: syz [ 152.619015][ T40] usb 3-1: SerialNumber: syz [ 152.668053][ T24] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 152.669927][ T590] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 152.695785][ T24] usb 1-1: USB disconnect, device number 69 [ 152.840265][ T40] usb 3-1: selecting invalid altsetting 0 [ 152.846486][ T40] usb 3-1: selecting invalid altsetting 0 [ 152.852558][ T40] cdc_ncm 3-1:1.0: bind() failure [ 152.858427][ T40] cdc_ncm 3-1:1.17: CDC Union missing and no IAD found [ 152.865494][ T40] cdc_ncm 3-1:1.17: bind() failure [ 152.874114][ T590] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 152.875165][ T40] usb 3-1: USB disconnect, device number 67 [ 152.887151][ T590] usb 5-1: config 0 has no interfaces? [ 152.893247][ T590] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 152.903177][ T590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.915794][ T1297] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 152.922926][ T590] usb 5-1: config 0 descriptor?? [ 152.983625][ T7014] loop3: detected capacity change from 0 to 131072 [ 152.990702][ T7014] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 152.998876][ T7014] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.007054][ T7014] F2FS-fs (loop3): Test dummy encryption mode enabled [ 153.013907][ T7014] F2FS-fs (loop3): Can't change test_dummy_encryption on remount [ 153.140324][ T1297] usb 2-1: Using ep0 maxpacket: 8 [ 153.146488][ T1297] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 153.148706][ T509] usb 5-1: USB disconnect, device number 70 [ 153.160984][ T1297] usb 2-1: config 0 has no interface number 0 [ 153.184141][ T1297] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 153.193343][ T1297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.201761][ T1297] usb 2-1: Product: syz [ 153.206200][ T1297] usb 2-1: Manufacturer: syz [ 153.222772][ T1297] usb 2-1: SerialNumber: syz [ 153.254374][ T1297] usb 2-1: config 0 descriptor?? [ 153.307855][ T7027] loop3: detected capacity change from 0 to 2048 [ 153.343872][ T7027] loop3: p4 < > [ 153.435328][ T7035] loop2: detected capacity change from 0 to 16 [ 153.442382][ T7035] erofs: (device loop2): mounted with root inode @ nid 36. [ 153.480390][ T1297] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 153.491722][ T1297] usb 2-1: No streaming interface found for terminal 6. [ 153.500165][ T1297] usb 2-1: USB disconnect, device number 65 [ 153.546555][ T40] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 153.706973][ T509] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 153.742911][ T28] audit: type=1326 audit(2000002594.843:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.3153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff013785d19 code=0x0 [ 153.771077][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 153.777705][ T40] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.787642][ T40] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.798145][ T40] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.811618][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 153.819572][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.832239][ T40] usb 1-1: Product: syz [ 153.842140][ T40] usb 1-1: Manufacturer: syz [ 153.846764][ T40] usb 1-1: SerialNumber: syz [ 153.858390][ T7055] loop4: detected capacity change from 0 to 1024 [ 153.864900][ T7055] journal_path: Non-blockdev passed as '' [ 153.871354][ T7055] EXT4-fs: error: could not find journal device path [ 153.910028][ T509] usb 4-1: Using ep0 maxpacket: 8 [ 153.916388][ T509] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 153.928031][ T509] usb 4-1: config 0 has no interface number 0 [ 153.942933][ T509] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 153.954105][ T509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.961947][ T509] usb 4-1: Product: syz [ 153.966430][ T509] usb 4-1: Manufacturer: syz [ 153.972993][ T509] usb 4-1: SerialNumber: syz [ 153.979423][ T509] usb 4-1: config 0 descriptor?? [ 154.027564][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 154.040491][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.052108][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 154.065268][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.073672][ T24] usb 3-1: Product: syz [ 154.081046][ T40] usb 1-1: cannot find UAC_HEADER [ 154.088658][ T40] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 154.096473][ T24] usb 3-1: Manufacturer: syz [ 154.103699][ T24] usb 3-1: SerialNumber: syz [ 154.108980][ T24] usb 3-1: config 0 descriptor?? [ 154.121174][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.137839][ T40] usb 1-1: USB disconnect, device number 70 [ 154.202351][ T509] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 154.208700][ T509] usb 4-1: No valid video chain found. [ 154.216630][ T509] usb 4-1: USB disconnect, device number 64 [ 154.316343][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 154.361837][ T1297] usb 3-1: USB disconnect, device number 68 [ 154.412485][ T590] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 154.509738][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.519802][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.528497][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.543473][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.552623][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.560385][ T24] usb 5-1: Product: syz [ 154.564407][ T24] usb 5-1: Manufacturer: syz [ 154.568805][ T24] usb 5-1: SerialNumber: syz [ 154.574997][ T24] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 154.581600][ T24] cdc_ncm 5-1:1.0: bind() failure [ 154.604919][ T590] usb 2-1: Using ep0 maxpacket: 16 [ 154.611021][ T590] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 154.620349][ T590] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 154.635713][ T590] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.648699][ T590] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.662826][ T590] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.675339][ T590] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.684512][ T590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.692743][ T590] usb 2-1: Product: syz [ 154.696648][ T590] usb 2-1: Manufacturer: syz [ 154.701487][ T590] usb 2-1: SerialNumber: syz [ 154.793902][ T1297] usb 5-1: USB disconnect, device number 71 [ 154.927301][ T590] usb 2-1: USB disconnect, device number 66 [ 154.947238][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 155.151018][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.151415][ T24] usb 1-1: config 7 descriptor has 1 excess byte, ignoring [ 155.171527][ T509] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 155.174365][ T24] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 155.191452][ T24] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 155.200364][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.208203][ T529] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 155.215621][ T24] usb 1-1: Product: syz [ 155.219624][ T24] usb 1-1: Manufacturer: syz [ 155.224043][ T24] usb 1-1: SerialNumber: syz [ 155.230173][ T24] rndis_host 1-1:7.0: skipping garbage [ 155.235481][ T24] usb 1-1: bad CDC descriptors [ 155.376068][ T509] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.389362][ T509] usb 4-1: not running at top speed; connect to a high speed hub [ 155.398442][ T509] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 155.407459][ T509] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.418072][ T509] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 155.428061][ T529] usb 3-1: Using ep0 maxpacket: 32 [ 155.433148][ T509] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 155.433489][ T28] audit: type=1400 audit(2000002596.424:206): avc: denied { write } for pid=7112 comm="syz.4.3185" name="net" dev="proc" ino=34661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 155.444606][ T509] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 155.477922][ T28] audit: type=1400 audit(2000002596.470:207): avc: denied { add_name } for pid=7112 comm="syz.4.3185" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 155.478858][ T529] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 155.498603][ T28] audit: type=1400 audit(2000002596.470:208): avc: denied { create } for pid=7112 comm="syz.4.3185" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 155.523225][ T529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.536642][ T509] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.541654][ T529] usb 3-1: Product: syz [ 155.550020][ T529] usb 3-1: Manufacturer: syz [ 155.557158][ T509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.560028][ T529] usb 3-1: SerialNumber: syz [ 155.570117][ T28] audit: type=1400 audit(2000002596.470:209): avc: denied { associate } for pid=7112 comm="syz.4.3185" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 155.578015][ T509] usb 4-1: Product: syz [ 155.592893][ T529] usb 3-1: config 0 descriptor?? [ 155.601161][ T24] usb 1-1: USB disconnect, device number 71 [ 155.604290][ T509] usb 4-1: Manufacturer: syz [ 155.612171][ T529] cdc_ether 3-1:0.0: More than one union descriptor, skipping ... [ 155.621222][ T529] cdc_ether 3-1:0.0: skipping garbage [ 155.626643][ T529] usb 3-1: bad CDC descriptors [ 155.626899][ T509] usb 4-1: SerialNumber: syz [ 155.632121][ T529] usb 3-1: unsupported MDLM descriptors [ 155.763727][ T7127] loop4: detected capacity change from 0 to 2048 [ 155.837981][ T7127] loop4: unable to read partition table [ 155.847497][ T7127] loop4: partition table beyond EOD, truncated [ 155.853510][ T7127] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 155.856603][ T6] usb 3-1: USB disconnect, device number 69 [ 155.876026][ T509] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 155.890418][ T509] usb 4-1: USB disconnect, device number 65 [ 155.916926][ T102] loop4: unable to read partition table [ 155.922866][ T1851] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 155.922925][ T102] loop4: partition table beyond EOD, truncated [ 156.056759][ T28] audit: type=1326 audit(2000002597.004:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.4.3198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff013785d19 code=0x0 [ 156.124137][ T1851] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 156.135484][ T971] udevd[971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.155264][ T1851] usb 2-1: config 0 has no interface number 0 [ 156.161194][ T1851] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 156.179252][ T1851] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 156.199824][ T7157] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 156.204800][ T1851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.217823][ T1851] usb 2-1: config 0 descriptor?? [ 156.231376][ T7115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.240941][ T28] audit: type=1326 audit(2000002597.181:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.3209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1d85d19 code=0x0 [ 156.273964][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.460195][ T6] usb 2-1: USB disconnect, device number 67 [ 156.550736][ T1851] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 156.657486][ T24] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 156.732337][ T509] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 156.743021][ T1851] usb 5-1: Using ep0 maxpacket: 16 [ 156.749550][ T1851] usb 5-1: config 4 has an invalid interface number: 107 but max is 0 [ 156.757849][ T1851] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 156.768201][ T1851] usb 5-1: config 4 has no interface number 0 [ 156.774167][ T1851] usb 5-1: config 4 interface 107 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 156.783764][ T1851] usb 5-1: config 4 interface 107 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.796542][ T590] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 156.805459][ T1851] usb 5-1: New USB device found, idVendor=0499, idProduct=1022, bcdDevice=f1.aa [ 156.814854][ T1851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.822738][ T1851] usb 5-1: Product: syz [ 156.826707][ T1851] usb 5-1: Manufacturer: syz [ 156.831335][ T1851] usb 5-1: SerialNumber: syz [ 156.861782][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 156.870122][ T24] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.881081][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 156.890318][ T24] usb 1-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 156.900351][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.908192][ T24] usb 1-1: Product: syz [ 156.912255][ T24] usb 1-1: Manufacturer: syz [ 156.916701][ T24] usb 1-1: SerialNumber: syz [ 156.926235][ T509] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.934674][ T509] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 156.945532][ T509] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 156.955540][ T509] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.965319][ T509] usb 3-1: config 1 interface 0 has no altsetting 0 [ 156.975231][ T509] usb 3-1: string descriptor 0 read error: -22 [ 156.981511][ T509] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.990412][ T509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.999656][ T7183] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 157.000861][ T590] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 80 [ 157.006822][ T7183] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 157.018325][ T590] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 157.032361][ T590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.033237][ T509] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 157.040703][ T7194] cgroup: none used incorrectly [ 157.060343][ T1851] snd-usb-audio: probe of 5-1:4.107 failed with error -2 [ 157.071796][ T1851] usb 5-1: USB disconnect, device number 72 [ 157.077780][ T590] usb 4-1: Product: syz [ 157.082039][ T590] usb 4-1: Manufacturer: syz [ 157.086749][ T590] usb 4-1: SerialNumber: syz [ 157.094663][ T590] usb 4-1: config 0 descriptor?? [ 157.100025][ T7192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.141677][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 157.149655][ T24] usbhid: probe of 1-1:1.0 failed with error -71 [ 157.163541][ T24] usb 1-1: USB disconnect, device number 72 [ 157.255331][ T529] usb 3-1: USB disconnect, device number 70 [ 157.299302][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.107/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.330377][ T590] usb 4-1: USB disconnect, device number 66 [ 157.502044][ T1297] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 157.545501][ T972] udevd[972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.620569][ T7213] loop4: detected capacity change from 0 to 512 [ 157.629364][ T7213] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3234: attempt to clear invalid blocks 2 len 1 [ 157.642399][ T7213] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 157.657134][ T7213] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3234: invalid indirect mapped block 1819239214 (level 0) [ 157.671460][ T7213] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3234: invalid indirect mapped block 1819239214 (level 1) [ 157.693020][ T7213] EXT4-fs (loop4): 1 truncate cleaned up [ 157.704780][ T7213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.719466][ T1297] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.734366][ T1297] usb 2-1: not running at top speed; connect to a high speed hub [ 157.751395][ T304] EXT4-fs (loop4): unmounting filesystem. [ 157.757017][ T1297] usb 2-1: config 1 has an invalid interface descriptor of length 5, skipping [ 157.765903][ T1297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.777012][ T1297] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 157.798360][ T1297] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 157.822809][ T1297] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 157.856680][ T28] audit: type=1326 audit(2000002598.687:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.0.3244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1d85d19 code=0x0 [ 157.857984][ T1297] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.891511][ T1297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.899773][ T1297] usb 2-1: Product: syz [ 157.934364][ T1297] usb 2-1: Manufacturer: syz [ 157.938813][ T1297] usb 2-1: SerialNumber: syz [ 158.111688][ T590] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 158.186381][ T1297] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 158.213974][ T1297] usb 2-1: USB disconnect, device number 68 [ 158.325252][ T590] usb 3-1: Using ep0 maxpacket: 32 [ 158.343187][ T590] usb 3-1: config 1 has an invalid interface number: 182 but max is 0 [ 158.351811][ T590] usb 3-1: config 1 has no interface number 0 [ 158.384397][ T590] usb 3-1: config 1 interface 182 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 158.394318][ T28] audit: type=1400 audit(2000002599.183:213): avc: denied { unmount } for pid=304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 158.415977][ T590] usb 3-1: config 1 interface 182 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.425989][ T28] audit: type=1326 audit(2000002599.193:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.4.3290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff013785d19 code=0x0 [ 158.449408][ T590] usb 3-1: config 1 interface 182 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 158.461965][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.496087][ T590] usb 3-1: config 1 interface 182 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 158.522741][ T590] usb 3-1: New USB device found, idVendor=2100, idProduct=9e56, bcdDevice=9c.e0 [ 158.542706][ T590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.560675][ T590] usb 3-1: Product: syz [ 158.564805][ T590] usb 3-1: Manufacturer: syz [ 158.569376][ T590] usb 3-1: SerialNumber: syz [ 158.578903][ T7232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.592599][ T7232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.611435][ T590] ftdi_sio 3-1:1.182: FTDI USB Serial Device converter detected [ 158.633744][ T590] ftdi_sio ttyUSB0: unknown device type: 0x9ce0 [ 158.635559][ T7353] loop4: detected capacity change from 0 to 256 [ 158.654487][ T7353] FAT-fs (loop4): Directory bread(block 64) failed [ 158.660983][ T7353] FAT-fs (loop4): Directory bread(block 65) failed [ 158.668437][ T7353] FAT-fs (loop4): Directory bread(block 66) failed [ 158.674804][ T7353] FAT-fs (loop4): Directory bread(block 67) failed [ 158.681824][ T7353] FAT-fs (loop4): Directory bread(block 68) failed [ 158.688299][ T7353] FAT-fs (loop4): Directory bread(block 69) failed [ 158.694675][ T7353] FAT-fs (loop4): Directory bread(block 70) failed [ 158.700980][ T7353] FAT-fs (loop4): Directory bread(block 71) failed [ 158.707289][ T7353] FAT-fs (loop4): Directory bread(block 72) failed [ 158.713916][ T7353] FAT-fs (loop4): Directory bread(block 73) failed [ 158.798827][ T1297] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 158.814415][ T7371] 9pnet_fd: Insufficient options for proto=fd [ 158.830102][ T322] usb 3-1: USB disconnect, device number 71 [ 158.843431][ T322] ftdi_sio 3-1:1.182: device disconnected [ 158.863074][ T7375] loop1: detected capacity change from 0 to 1024 [ 158.879646][ T7375] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 158.889635][ T7375] EXT4-fs (loop1): orphan cleanup on readonly fs [ 158.896587][ T7375] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.3313: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 158.915155][ T7375] EXT4-fs (loop1): Remounting filesystem read-only [ 158.921666][ T7375] EXT4-fs error (device loop1): ext4_quota_enable:6982: comm syz.1.3313: Bad quota inode: 3, type: 0 [ 158.932804][ T7375] EXT4-fs (loop1): Remounting filesystem read-only [ 158.939233][ T7375] EXT4-fs warning (device loop1): ext4_enable_quotas:7023: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 158.953853][ T590] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 158.953998][ T7375] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 158.968112][ T7375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.986515][ T301] EXT4-fs (loop1): unmounting filesystem. [ 158.999967][ T1297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.015545][ T1297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.029539][ T1297] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.029792][ T28] audit: type=1326 audit(2000002599.782:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.1.3318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75e9185d19 code=0x0 [ 159.070689][ T1297] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.080032][ T1297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.087872][ T1297] usb 1-1: Product: syz [ 159.101253][ T1297] usb 1-1: Manufacturer: syz [ 159.109421][ T1297] usb 1-1: SerialNumber: syz [ 159.116981][ T1297] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 159.124269][ T1297] cdc_ncm 1-1:1.0: bind() failure [ 159.170404][ T590] usb 4-1: Using ep0 maxpacket: 8 [ 159.178553][ T590] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.181613][ T7398] loop1: detected capacity change from 0 to 512 [ 159.191174][ T590] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 159.204570][ T7398] EXT4-fs (loop1): Invalid log block size: 393217 [ 159.204791][ T590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.219920][ T590] usb 4-1: config 0 descriptor?? [ 159.226157][ T590] usb 4-1: Found UVC 0.00 device (05a9:2630) [ 159.233200][ T590] usb 4-1: No valid video chain found. [ 159.333490][ T1297] usb 1-1: USB disconnect, device number 73 [ 159.415698][ T7404] loop2: detected capacity change from 0 to 512 [ 159.422464][ T7404] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 159.442480][ T309] usb 4-1: USB disconnect, device number 67 [ 159.466024][ T7408] loop2: detected capacity change from 0 to 512 [ 159.492089][ T7408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.500919][ T7408] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.519344][ T303] EXT4-fs (loop2): unmounting filesystem. [ 159.565525][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 159.757781][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 159.764613][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.774727][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.789191][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.798334][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.806322][ T24] usb 2-1: Product: syz [ 159.810437][ T24] usb 2-1: Manufacturer: syz [ 159.815070][ T24] usb 2-1: SerialNumber: syz [ 159.854081][ T40] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 160.045522][ T24] usb 2-1: USB disconnect, device number 69 [ 160.078845][ T40] usb 3-1: too many configurations: 24, using maximum allowed: 8 [ 160.090497][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.106251][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.120684][ T309] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 160.132554][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.150248][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.167070][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.177779][ T1297] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 160.188292][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.199050][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.211524][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.223334][ T40] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 160.232400][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.240253][ T40] usb 3-1: Product: syz [ 160.244312][ T40] usb 3-1: Manufacturer: syz [ 160.249272][ T40] usb 3-1: SerialNumber: syz [ 160.257789][ T40] usb 3-1: config 0 descriptor?? [ 160.263720][ T40] usb 3-1: bad CDC descriptors [ 160.268641][ T40] cdc_acm 3-1:0.0: Zero length descriptor references [ 160.276120][ T40] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 160.283893][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.345905][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 160.352012][ T309] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 160.360071][ T309] usb 5-1: config 0 has no interface number 0 [ 160.367620][ T309] usb 5-1: New USB device found, idVendor=ff6d, idProduct=08d3, bcdDevice= b.28 [ 160.376740][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.384714][ T309] usb 5-1: Product: syz [ 160.388653][ T309] usb 5-1: Manufacturer: syz [ 160.393139][ T309] usb 5-1: SerialNumber: syz [ 160.398021][ T1297] usb 1-1: config 252 has an invalid interface number: 250 but max is 0 [ 160.406804][ T309] usb 5-1: config 0 descriptor?? [ 160.411775][ T1297] usb 1-1: config 252 has no interface number 0 [ 160.417902][ T1297] usb 1-1: config 252 interface 250 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 160.428788][ T1297] usb 1-1: config 252 interface 250 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 160.440148][ T1297] usb 1-1: New USB device found, idVendor=f706, idProduct=1048, bcdDevice=ff.fc [ 160.449265][ T1297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.457168][ T1297] usb 1-1: Product: syz [ 160.461298][ T1297] usb 1-1: Manufacturer: syz [ 160.465759][ T1297] usb 1-1: SerialNumber: syz [ 160.479253][ T590] usb 3-1: USB disconnect, device number 72 [ 160.538204][ T322] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 160.645388][ T309] usb 5-1: USB disconnect, device number 73 [ 160.688638][ T1851] usb 1-1: USB disconnect, device number 74 [ 160.730591][ T322] usb 4-1: Using ep0 maxpacket: 8 [ 160.736700][ T322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 160.749576][ T322] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 160.758574][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.767015][ T322] usb 4-1: config 0 descriptor?? [ 160.901646][ T1297] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 160.989436][ T322] usbhid 4-1:0.0: can't add hid device: -71 [ 160.995237][ T322] usbhid: probe of 4-1:0.0 failed with error -71 [ 161.002246][ T322] usb 4-1: USB disconnect, device number 68 [ 161.094100][ T1297] usb 2-1: Using ep0 maxpacket: 16 [ 161.102828][ T1297] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.111626][ T1297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.121772][ T1297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.130783][ T1297] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.145533][ T1297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.154771][ T1297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.162926][ T1297] usb 2-1: Product: syz [ 161.167185][ T1297] usb 2-1: Manufacturer: syz [ 161.171858][ T1297] usb 2-1: SerialNumber: syz [ 161.214903][ T7462] loop2: detected capacity change from 0 to 40427 [ 161.226555][ T7462] F2FS-fs (loop2): fault_type options not supported [ 161.247480][ T7462] F2FS-fs (loop2): invalid crc value [ 161.268595][ T7462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.351265][ T7462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.397480][ T1297] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 161.409637][ T1297] cdc_ncm 2-1:1.0: bind() failure [ 161.426521][ T1297] usb 2-1: USB disconnect, device number 70 [ 161.697221][ T7517] loop4: detected capacity change from 0 to 40427 [ 161.704095][ T7517] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 161.710993][ T7517] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.719131][ T309] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 161.831785][ T322] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 161.884155][ T7532] loop4: detected capacity change from 0 to 8192 [ 161.896936][ T7532] loop4: p1 < > p3 < > p4 < > [ 161.901546][ T7532] loop4: partition table partially beyond EOD, truncated [ 161.906558][ T1851] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 161.910503][ T7532] loop4: p4 start 117440512 is beyond EOD, truncated [ 161.928663][ T309] usb 1-1: not running at top speed; connect to a high speed hub [ 161.948186][ T460] udevd[460]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 161.961807][ T309] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.978055][ T309] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.996037][ T971] udevd[971]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 162.009867][ T460] udevd[460]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 162.019624][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.034861][ T309] usb 1-1: Product: syz [ 162.035968][ T322] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.038859][ T309] usb 1-1: Manufacturer: syz [ 162.051670][ T309] usb 1-1: SerialNumber: syz [ 162.064673][ T322] usb 4-1: config 0 has no interface number 0 [ 162.072138][ T7546] loop1: detected capacity change from 0 to 256 [ 162.077671][ T322] usb 4-1: config 0 interface 1 has no altsetting 0 [ 162.088706][ T322] usb 4-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice= 3.2e [ 162.099547][ T7546] FAT-fs (loop1): bogus sectors per cluster 0 [ 162.100437][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.105524][ T7546] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 162.120371][ T1851] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 162.123009][ T7546] FAT-fs (loop1): Can't find a valid FAT filesystem [ 162.144842][ T322] usb 4-1: config 0 descriptor?? [ 162.149708][ T1851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.160430][ T322] ftdi_sio 4-1:0.1: FTDI USB Serial Device converter detected [ 162.177141][ T1851] usb 3-1: config 0 has no interface number 0 [ 162.188682][ T322] ftdi_sio ttyUSB0: unknown device type: 0x32e [ 162.198964][ T1851] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 162.210601][ T1851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.223832][ T1851] usb 3-1: Product: syz [ 162.228631][ T1851] usb 3-1: Manufacturer: syz [ 162.233075][ T1851] usb 3-1: SerialNumber: syz [ 162.262176][ T1851] usb 3-1: config 0 descriptor?? [ 162.271456][ T1851] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 162.277899][ T1851] usb 3-1: No valid video chain found. [ 162.285495][ T309] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 162.299162][ T309] usb 1-1: USB disconnect, device number 75 [ 162.336966][ T7542] loop4: detected capacity change from 0 to 40427 [ 162.354091][ T7542] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 162.363010][ T7542] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 162.371691][ T7542] F2FS-fs (loop4): heap/no_heap options were deprecated [ 162.383324][ T40] usb 4-1: USB disconnect, device number 69 [ 162.390041][ T7542] F2FS-fs (loop4): fault_injection options not supported [ 162.390278][ T40] ftdi_sio 4-1:0.1: device disconnected [ 162.409393][ T7542] F2FS-fs (loop4): Image doesn't support compression [ 162.418254][ T7542] F2FS-fs (loop4): Image doesn't support compression [ 162.426397][ T7542] F2FS-fs (loop4): fault_type options not supported [ 162.433770][ T7542] F2FS-fs (loop4): invalid crc value [ 162.440259][ T7542] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391) [ 162.456034][ T7554] loop1: detected capacity change from 0 to 40427 [ 162.473044][ T7554] F2FS-fs (loop1): invalid crc value [ 162.477244][ T7542] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 162.479762][ T7554] F2FS-fs (loop1): invalid journal entries nats 9728 sits 6 [ 162.486500][ T7542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.501938][ T590] usb 3-1: USB disconnect, device number 73 [ 162.509109][ T7554] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-22) [ 162.640178][ T7564] loop4: detected capacity change from 0 to 2048 [ 162.774983][ T7586] loop4: detected capacity change from 0 to 128 [ 162.790623][ T7586] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 163.013680][ T7604] loop1: detected capacity change from 0 to 40427 [ 163.021011][ T7604] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 163.029978][ T7604] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 163.038068][ T7604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 163.048341][ T7604] F2FS-fs (loop1): heap/no_heap options were deprecated [ 163.061171][ T7604] F2FS-fs (loop1): invalid crc value [ 163.067716][ T7604] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.120603][ T7604] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 163.128106][ T7604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 163.178812][ T309] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 163.186738][ T40] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 163.193729][ T7635] loop2: detected capacity change from 0 to 512 [ 163.209977][ T7635] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.3434: inode #13: comm syz.2.3434: iget: illegal inode # [ 163.223406][ T7635] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3434: couldn't read orphan inode 13 (err -117) [ 163.236300][ T7635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.254308][ T303] EXT4-fs (loop2): unmounting filesystem. [ 163.264420][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 163.268963][ T7639] loop1: detected capacity change from 0 to 128 [ 163.284067][ T7639] FAT-fs (loop1): bread failed, FSINFO block (sector = 65535) [ 163.415353][ T309] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 163.423447][ T309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.433811][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.441664][ T309] usb 5-1: config 0 has no interface number 0 [ 163.448062][ T40] usb 1-1: not running at top speed; connect to a high speed hub [ 163.456499][ T40] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 163.465908][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 163.475909][ T40] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.486018][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.493848][ T40] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 163.502853][ T309] usb 5-1: Product: syz [ 163.507010][ T309] usb 5-1: Manufacturer: syz [ 163.511614][ T40] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 163.522468][ T309] usb 5-1: SerialNumber: syz [ 163.527321][ T40] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 163.538351][ T309] usb 5-1: config 0 descriptor?? [ 163.543320][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.554337][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 163.562252][ T40] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.572324][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 163.581660][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.589484][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.597371][ T40] usb 1-1: Product: syz [ 163.601428][ T40] usb 1-1: Manufacturer: syz [ 163.605844][ T40] usb 1-1: SerialNumber: syz [ 163.610330][ T24] usb 4-1: Product: syz [ 163.614265][ T24] usb 4-1: SerialNumber: syz [ 163.713308][ T529] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 163.721123][ T1297] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 163.768532][ T309] usb 5-1: USB disconnect, device number 74 [ 163.840501][ T40] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 163.847654][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 163.853483][ T24] usbhid: probe of 4-1:1.0 failed with error -71 [ 163.864437][ T40] usb 1-1: USB disconnect, device number 76 [ 163.873548][ T24] usb 4-1: USB disconnect, device number 70 [ 163.937818][ T1297] usb 2-1: Using ep0 maxpacket: 8 [ 163.948273][ T1297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 163.957949][ T529] usb 3-1: not running at top speed; connect to a high speed hub [ 163.965648][ T1297] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 163.975460][ T1297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 163.986603][ T1297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.996169][ T529] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 164.007087][ T1297] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 164.017858][ T529] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 164.030006][ T1297] usb 2-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 164.039084][ T529] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.048174][ T1297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.055975][ T529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.064275][ T529] usb 3-1: Product: syz [ 164.068300][ T1297] usb 2-1: Product: syz [ 164.072256][ T1297] usb 2-1: Manufacturer: syz [ 164.076807][ T1297] usb 2-1: SerialNumber: syz [ 164.081472][ T529] usb 3-1: Manufacturer: syz [ 164.085880][ T529] usb 3-1: SerialNumber: syz [ 164.091403][ T1297] usb 2-1: config 0 descriptor?? [ 164.316866][ T529] cdc_ncm 3-1:1.0: bind() failure [ 164.323352][ T1297] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 164.333093][ T529] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 164.344458][ T1297] usb 2-1: USB disconnect, device number 71 [ 164.352815][ T971] udevd[971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.370436][ T529] cdc_ncm 3-1:1.1: bind() failure [ 164.376919][ T529] usb 3-1: USB disconnect, device number 74 [ 164.444252][ T7676] loop4: detected capacity change from 0 to 512 [ 164.468685][ T7676] EXT4-fs (loop4): first meta block group too large: 4227858432 (group descriptor block count 1) [ 164.583994][ T7698] incfs: Options parsing error. -22 [ 164.589046][ T7698] incfs: mount failed -22 [ 164.652234][ T7708] loop3: detected capacity change from 0 to 16 [ 164.662149][ T7708] erofs: (device loop3): mounted with root inode @ nid 36. [ 164.710384][ T7714] loop3: detected capacity change from 0 to 1024 [ 164.717558][ T7714] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 164.727303][ T7714] EXT4-fs (loop3): invalid journal inode [ 164.733091][ T7714] EXT4-fs (loop3): can't get journal size [ 164.739434][ T7714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.756915][ T305] EXT4-fs (loop3): unmounting filesystem. [ 164.792892][ T7721] loop3: detected capacity change from 0 to 16 [ 164.801282][ T7721] erofs: (device loop3): mounted with root inode @ nid 36. [ 164.835817][ T590] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 164.846589][ T1851] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 164.880031][ T7730] loop1: detected capacity change from 0 to 16 [ 164.888762][ T7731] loop2: detected capacity change from 0 to 16 [ 164.890599][ T7733] loop3: detected capacity change from 0 to 16 [ 164.899519][ T7731] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.907281][ T7733] erofs: (device loop3): mounted with root inode @ nid 36. [ 164.912331][ T7730] erofs: (device loop1): mounted with root inode @ nid 36. [ 164.950501][ T7736] loop2: detected capacity change from 0 to 256 [ 165.013044][ T7745] loop1: detected capacity change from 0 to 512 [ 165.014205][ T7743] loop2: detected capacity change from 0 to 2048 [ 165.028372][ T590] usb 1-1: Using ep0 maxpacket: 16 [ 165.039111][ T1851] usb 5-1: Using ep0 maxpacket: 16 [ 165.043281][ T7743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.044405][ T590] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.064199][ T303] EXT4-fs (loop2): unmounting filesystem. [ 165.075672][ T1851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.096738][ T7745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.118272][ T1851] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.129029][ T590] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 165.139848][ T7745] ext4 filesystem being mounted at /740/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.153827][ T7752] loop2: detected capacity change from 0 to 2048 [ 165.160103][ T1851] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.173108][ T590] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.193057][ T7741] loop3: detected capacity change from 0 to 40427 [ 165.202867][ T7741] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 165.210730][ T301] EXT4-fs (loop1): unmounting filesystem. [ 165.216375][ T7741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.216710][ T1851] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.231618][ T7741] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.233804][ T590] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 0 [ 165.249530][ T1851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.257711][ T590] usb 1-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 165.271087][ T1851] usb 5-1: Product: syz [ 165.272108][ T7752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.275235][ T1851] usb 5-1: Manufacturer: syz [ 165.283760][ T7752] ext4 filesystem being mounted at /633/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.288106][ T590] usb 1-1: config 1 interface 0 has no altsetting 0 [ 165.304635][ T1851] usb 5-1: SerialNumber: syz [ 165.317953][ T590] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.329693][ T590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.334836][ T7759] loop1: detected capacity change from 0 to 1024 [ 165.337775][ T590] usb 1-1: SerialNumber: syz [ 165.357296][ T303] EXT4-fs (loop2): unmounting filesystem. [ 165.360359][ T7741] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.363875][ T7759] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.369804][ T7741] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.389343][ T7741] SELinux: (dev loop3, type f2fs) getxattr errno 2 [ 165.390718][ T301] EXT4-fs (loop1): unmounting filesystem. [ 165.410734][ T7763] loop2: detected capacity change from 0 to 1024 [ 165.434956][ T7763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.438429][ T7767] loop1: detected capacity change from 0 to 512 [ 165.443552][ T7763] ext4 filesystem being mounted at /634/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.460376][ T7767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.478148][ T303] EXT4-fs (loop2): unmounting filesystem. [ 165.506788][ T301] EXT4-fs (loop1): unmounting filesystem. [ 165.521850][ T7770] loop2: detected capacity change from 0 to 2048 [ 165.540018][ T1851] usb 5-1: USB disconnect, device number 75 [ 165.561839][ T7772] loop1: detected capacity change from 0 to 1024 [ 165.582729][ T590] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 165.589907][ T7770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.606965][ T590] usb 1-1: USB disconnect, device number 77 [ 165.626527][ T7772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.635126][ T7772] ext4 filesystem being mounted at /743/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.646088][ T303] EXT4-fs (loop2): unmounting filesystem. [ 165.666713][ T7777] loop3: detected capacity change from 0 to 2048 [ 165.683691][ T7779] loop2: detected capacity change from 0 to 512 [ 165.695504][ T301] EXT4-fs (loop1): unmounting filesystem. [ 165.711677][ T7777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.721268][ T7779] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.746026][ T7783] loop1: detected capacity change from 0 to 2048 [ 165.757792][ T303] EXT4-fs (loop2): unmounting filesystem. [ 165.758004][ T305] EXT4-fs (loop3): unmounting filesystem. [ 165.765349][ T7783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.780816][ T7783] ext4 filesystem being mounted at /744/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.783727][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.821959][ T7787] loop2: detected capacity change from 0 to 512 [ 165.836236][ T301] EXT4-fs (loop1): unmounting filesystem. [ 165.843549][ T7787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.886394][ T7796] loop3: detected capacity change from 0 to 512 [ 165.887617][ T7795] loop1: detected capacity change from 0 to 1024 [ 165.896867][ T7796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.909060][ T303] EXT4-fs (loop2): unmounting filesystem. [ 165.928536][ T305] EXT4-fs (loop3): unmounting filesystem. [ 165.935859][ T7795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.938138][ T7800] loop2: detected capacity change from 0 to 2048 [ 165.970724][ T7800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.978374][ T7802] loop3: detected capacity change from 0 to 2048 [ 165.986319][ T301] EXT4-fs (loop1): unmounting filesystem. [ 166.004930][ T303] EXT4-fs (loop2): unmounting filesystem. [ 166.021650][ T7808] loop2: detected capacity change from 0 to 128 [ 166.031878][ T7802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.036041][ T7811] loop1: detected capacity change from 0 to 128 [ 166.055519][ T305] EXT4-fs (loop3): unmounting filesystem. [ 166.117173][ T7813] loop2: detected capacity change from 0 to 4096 [ 166.142589][ T7813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.143090][ T7815] loop3: detected capacity change from 0 to 4096 [ 166.162452][ T7815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.204871][ T305] EXT4-fs (loop3): unmounting filesystem. [ 166.215783][ T303] EXT4-fs (loop2): unmounting filesystem. [ 166.223700][ T7826] loop4: detected capacity change from 0 to 2048 [ 166.272141][ T7831] loop2: detected capacity change from 0 to 128 [ 166.279522][ T7826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.310448][ T7834] loop3: detected capacity change from 0 to 256 [ 166.319791][ T7826] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.360776][ T7838] loop2: detected capacity change from 0 to 128 [ 166.428537][ T304] EXT4-fs (loop4): unmounting filesystem. [ 166.429344][ T7823] loop1: detected capacity change from 0 to 40427 [ 166.452020][ T7840] loop3: detected capacity change from 0 to 128 [ 166.471324][ T7844] loop4: detected capacity change from 0 to 512 [ 166.484770][ T971] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.499934][ T7846] loop2: detected capacity change from 0 to 512 [ 166.547659][ T7846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.561161][ T7851] loop3: detected capacity change from 0 to 4096 [ 166.579200][ T7846] ext4 filesystem being mounted at /643/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.601470][ T7851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.630713][ T7856] loop4: detected capacity change from 0 to 2048 [ 166.637177][ T303] EXT4-fs (loop2): unmounting filesystem. [ 166.644063][ T305] EXT4-fs (loop3): unmounting filesystem. [ 166.669028][ T7858] loop2: detected capacity change from 0 to 128 [ 166.713640][ T7860] loop3: detected capacity change from 0 to 512 [ 166.718376][ T7862] loop1: detected capacity change from 0 to 512 [ 166.775310][ T7866] loop4: detected capacity change from 0 to 2048 [ 166.810616][ T7864] loop2: detected capacity change from 0 to 8192 [ 166.815802][ T7870] loop3: detected capacity change from 0 to 512 [ 166.824883][ T529] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 166.855482][ T7870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.908220][ T7870] ext4 filesystem being mounted at /721/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.973081][ T305] EXT4-fs (loop3): unmounting filesystem. [ 167.027396][ T529] usb 1-1: Using ep0 maxpacket: 32 [ 167.033498][ T529] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.059410][ T529] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.079062][ T529] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 167.103613][ T529] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.112502][ T529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.142053][ T529] usb 1-1: Product: syz [ 167.146324][ T529] usb 1-1: Manufacturer: syz [ 167.150740][ T529] usb 1-1: SerialNumber: syz [ 167.168001][ T529] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 167.175587][ T529] cdc_ncm 1-1:1.0: bind() failure [ 167.386081][ T40] usb 1-1: USB disconnect, device number 78 [ 168.860574][ T7868] loop1: detected capacity change from 0 to 262144 [ 168.935914][ T7868] F2FS-fs (loop1): Found nat_bits in checkpoint [ 169.075394][ T7868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 169.156461][ T7876] loop4: detected capacity change from 0 to 262144 [ 169.230779][ T7876] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.284629][ T7878] loop3: detected capacity change from 0 to 262144 [ 169.330097][ T7876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.345262][ T7874] loop2: detected capacity change from 0 to 262144 [ 169.352735][ T7878] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.414589][ T7874] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.459051][ T7878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.564951][ T7874] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.416882][ T7909] loop2: detected capacity change from 0 to 128 [ 170.491597][ T7911] loop2: detected capacity change from 0 to 128 [ 170.572610][ T7914] loop2: detected capacity change from 0 to 2048 [ 170.682037][ T7916] loop2: detected capacity change from 0 to 256 [ 170.764110][ T7918] loop2: detected capacity change from 0 to 256 [ 171.143219][ T509] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 171.347479][ T509] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 171.378427][ T509] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 171.408852][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.423656][ T7920] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.670651][ T509] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 171.681132][ T509] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input14 [ 171.719656][ T509] usb 3-1: USB disconnect, device number 75 [ 171.719701][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 172.131073][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 172.131092][ T28] audit: type=1400 audit(2000002612.045:217): avc: denied { create } for pid=7924 comm="syz.0.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.159278][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3546'. [ 172.168056][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3546'. [ 172.201351][ T28] audit: type=1400 audit(2000002612.073:218): avc: denied { write } for pid=7924 comm="syz.0.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.313343][ T7932] loop2: detected capacity change from 0 to 2048 [ 172.323720][ T7903] loop1: detected capacity change from 0 to 262144 [ 172.391585][ T7907] loop3: detected capacity change from 0 to 262144 [ 172.406824][ T7932] loop2: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 172.407997][ T7932] loop2: p3 start 4259840 is beyond EOD, [ 172.423345][ T7905] loop4: detected capacity change from 0 to 262144 [ 172.495233][ T7932] truncated [ 172.650635][ T509] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 172.856637][ T509] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.867405][ T509] usb 1-1: not running at top speed; connect to a high speed hub [ 172.877508][ T509] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.939309][ T40] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 172.951271][ T509] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.982014][ T509] usb 1-1: config 1 has no interface number 1 [ 172.988649][ T509] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 173.044365][ T509] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 173.078308][ T509] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.087201][ T509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.110328][ T509] usb 1-1: Product: syz [ 173.114359][ T509] usb 1-1: Manufacturer: syz [ 173.129588][ T509] usb 1-1: SerialNumber: syz [ 173.174819][ T28] audit: type=1400 audit(2000002613.018:219): avc: denied { write } for pid=7941 comm="syz.1.3551" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.198982][ T40] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 173.217218][ T40] usb 4-1: config 0 has no interface number 0 [ 173.232525][ T40] usb 4-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=82.b2 [ 173.263119][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.292958][ T40] usb 4-1: config 0 descriptor?? [ 173.303895][ T40] smsc75xx v1.0.0 [ 173.307804][ T40] smsc75xx 4-1:0.126 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 173.345535][ T40] smsc75xx: probe of 4-1:0.126 failed with error -22 [ 173.369969][ T509] hub 1-1:1.0: bad descriptor, ignoring hub [ 173.375719][ T509] hub: probe of 1-1:1.0 failed with error -5 [ 173.396831][ T509] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 173.442117][ T7956] 9pnet_fd: Insufficient options for proto=fd [ 173.463743][ T509] usb 1-1: USB disconnect, device number 79 [ 173.481470][ T28] audit: type=1400 audit(2000002613.298:220): avc: denied { read write } for pid=7957 comm="syz.1.3563" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.515489][ T7958] binder: 7957:7958 ioctl c018620c 20000cc0 returned -22 [ 173.521551][ T40] usb 4-1: USB disconnect, device number 71 [ 173.554487][ T460] udevd[460]: inotify_add_watch(7, /dev/loop2p41, 10) failed: No such file or directory [ 173.554930][ T28] audit: type=1400 audit(2000002613.336:221): avc: denied { open } for pid=7957 comm="syz.1.3563" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.571753][ T972] udevd[972]: inotify_add_watch(7, /dev/loop2p42, 10) failed: No such file or directory [ 173.598632][ T477] udevd[477]: inotify_add_watch(7, /dev/loop2p43, 10) failed: No such file or directory [ 173.609576][ T325] udevd[325]: inotify_add_watch(7, /dev/loop2p46, 10) failed: No such file or directory [ 173.609586][ T413] udevd[413]: inotify_add_watch(7, /dev/loop2p44, 10) failed: No such file or directory [ 173.611597][ T970] udevd[970]: inotify_add_watch(7, /dev/loop2p45, 10) failed: No such file or directory [ 173.620599][ T478] udevd[478]: inotify_add_watch(7, /dev/loop2p48, 10) failed: No such file or directory [ 173.630429][ T969] udevd[969]: inotify_add_watch(7, /dev/loop2p47, 10) failed: No such file or directory [ 173.658641][ T481] udevd[481]: inotify_add_watch(7, /dev/loop2p49, 10) failed: No such file or directory [ 173.668759][ T460] udevd[460]: inotify_add_watch(7, /dev/loop2p53, 10) failed: No such file or directory [ 173.719546][ T28] audit: type=1400 audit(2000002613.336:222): avc: denied { ioctl } for pid=7957 comm="syz.1.3563" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.755523][ T28] audit: type=1400 audit(2000002613.560:223): avc: denied { write } for pid=7973 comm="syz.1.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.799377][ T7981] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3573'. [ 173.821376][ T28] audit: type=1400 audit(2000002613.598:224): avc: denied { setopt } for pid=7978 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.886981][ T28] audit: type=1400 audit(2000002613.682:225): avc: denied { bind } for pid=7982 comm="syz.2.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.131188][ T28] audit: type=1400 audit(2000002613.916:226): avc: denied { create } for pid=8009 comm="syz.1.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 174.250580][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3597'. [ 174.317062][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3605'. [ 174.488376][ T8064] xt_CT: No such helper "netbios-ns" [ 174.560221][ T8073] netlink: 'syz.3.3617': attribute type 30 has an invalid length. [ 174.897038][ T8140] SELinux: failed to load policy [ 175.033536][ T8168] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3665'. [ 175.045549][ T8168] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3665'. [ 175.067373][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3665'. [ 175.076657][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3665'. [ 175.291827][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3685'. [ 175.326536][ T8215] netlink: 'syz.4.3687': attribute type 10 has an invalid length. [ 175.616328][ T8260] netlink: 'syz.2.3709': attribute type 9 has an invalid length. [ 175.643991][ T8260] netlink: 'syz.2.3709': attribute type 7 has an invalid length. [ 175.661011][ T8260] netlink: 'syz.2.3709': attribute type 8 has an invalid length. [ 176.318995][ T8361] xt_CT: No such helper "syz1" [ 176.426085][ T8374] loop1: detected capacity change from 0 to 512 [ 176.509273][ T8374] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3763: inode #1: comm syz.1.3763: iget: illegal inode # [ 176.538920][ T8374] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3763: error while reading EA inode 1 err=-117 [ 176.552125][ T8374] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3763: inode #1: comm syz.1.3763: iget: illegal inode # [ 176.592702][ T8374] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3763: error while reading EA inode 1 err=-117 [ 176.600416][ T8388] netlink: 'syz.4.3773': attribute type 49 has an invalid length. [ 176.612789][ T8388] netlink: 'syz.4.3773': attribute type 49 has an invalid length. [ 176.709034][ T8374] EXT4-fs (loop1): 1 orphan inode deleted [ 176.715832][ T8374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.822768][ T301] EXT4-fs (loop1): unmounting filesystem. [ 177.014433][ T8435] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 177.032401][ T8435] overlayfs: missing 'lowerdir' [ 177.248465][ T8465] xt_TCPMSS: Only works on TCP SYN packets [ 177.509127][ T28] kauditd_printk_skb: 553 callbacks suppressed [ 177.509147][ T28] audit: type=1400 audit(2000002617.069:780): avc: denied { bpf } for pid=8498 comm="syz.3.3826" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.600412][ T28] audit: type=1400 audit(2000002617.078:781): avc: denied { read write } for pid=304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.676427][ T28] audit: type=1400 audit(2000002617.078:782): avc: denied { open } for pid=304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.727726][ T8525] xt_NFQUEUE: number of total queues is 0 [ 177.772780][ T28] audit: type=1400 audit(2000002617.078:783): avc: denied { ioctl } for pid=304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.809439][ T8536] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.817208][ T8536] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 177.825851][ T8536] audit: backlog limit exceeded [ 177.836108][ T28] audit: type=1400 audit(2000002617.078:784): avc: denied { read write } for pid=303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.861348][ T303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.866248][ T305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.996129][ T8556] overlayfs: workdir and upperdir must be separate subtrees [ 178.456250][ T8625] Illegal XDP return value 947002931 on prog (id 372) dev N/A, expect packet loss! [ 178.603653][ T8648] x_tables: duplicate entry at hook 2 [ 178.897839][ T8686] netlink: 'syz.2.3919': attribute type 3 has an invalid length. [ 180.225654][ T8836] loop3: detected capacity change from 0 to 512 [ 180.273837][ T8836] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 180.291522][ T8836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 180.326502][ T8836] System zones: 0-1, 15-15, 18-18, 34-34 [ 180.332564][ T8836] EXT4-fs (loop3): orphan cleanup on readonly fs [ 180.339295][ T8836] EXT4-fs warning (device loop3): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 180.354298][ T8836] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 180.361263][ T8836] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.3993: bad orphan inode 16 [ 180.377452][ T8836] ext4_test_bit(bit=15, block=18) = 1 [ 180.382715][ T8836] is_bad_inode(inode)=0 [ 180.391522][ T8836] NEXT_ORPHAN(inode)=0 [ 180.393057][ T8847] netlink: 'syz.4.3997': attribute type 13 has an invalid length. [ 180.395420][ T8836] max_ino=32 [ 180.410998][ T8836] i_nlink=2 [ 180.414009][ T8836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.446201][ T8836] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 180.471551][ T305] EXT4-fs (loop3): unmounting filesystem. [ 180.639976][ T8865] printk: syz.2.4006 (8865): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 181.176416][ T8921] xt_TCPMSS: Only works on TCP SYN packets [ 181.584106][ T8970] xt_l2tp: v2 sid > 0xffff: 50331648 [ 181.918515][ T9010] xt_hashlimit: overflow, try lower: 2647300743266041856/8 [ 182.004463][ T9019] loop2: detected capacity change from 0 to 512 [ 182.078251][ T9019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.099963][ T9019] ext4 filesystem being mounted at /765/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.224797][ T303] EXT4-fs (loop2): unmounting filesystem. [ 182.296961][ T9034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.696122][ T9066] __nla_validate_parse: 5 callbacks suppressed [ 182.696145][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4103'. [ 182.738106][ T9066] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4103'. [ 182.861578][ T28] kauditd_printk_skb: 7461 callbacks suppressed [ 182.861598][ T28] audit: type=1400 audit(2000002622.083:8205): avc: denied { read write } for pid=305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.946300][ T28] audit: type=1400 audit(2000002622.083:8206): avc: denied { open } for pid=305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.047881][ T28] audit: type=1400 audit(2000002622.083:8207): avc: denied { ioctl } for pid=305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.146481][ T28] audit: type=1400 audit(2000002622.111:8208): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 183.235210][ T28] audit: type=1400 audit(2000002622.111:8209): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.258646][ T305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.259270][ T304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.264976][ T305] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 183.264991][ T305] audit: backlog limit exceeded [ 183.286393][ T9126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4134'. [ 183.300409][ T301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.577318][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.584395][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.773616][ T9181] xt_TCPMSS: Only works on TCP SYN packets [ 184.460575][ T9271] binfmt_misc: register: failed to install interpreter file ./file0 [ 184.508780][ T9277] xt_l2tp: invalid flags combination: 0 [ 184.943768][ T9339] loop1: detected capacity change from 0 to 256 [ 184.983030][ T9339] FAT-fs (loop1): Directory bread(block 64) failed [ 184.998392][ T9339] FAT-fs (loop1): Directory bread(block 65) failed [ 185.020995][ T9339] FAT-fs (loop1): Directory bread(block 66) failed [ 185.031247][ T9339] FAT-fs (loop1): Directory bread(block 67) failed [ 185.044472][ T9339] FAT-fs (loop1): Directory bread(block 68) failed [ 185.064319][ T9339] FAT-fs (loop1): Directory bread(block 69) failed [ 185.096203][ T9339] FAT-fs (loop1): Directory bread(block 70) failed [ 185.115156][ T9339] FAT-fs (loop1): Directory bread(block 71) failed [ 185.129703][ T9339] FAT-fs (loop1): Directory bread(block 72) failed [ 185.146950][ T9339] FAT-fs (loop1): Directory bread(block 73) failed [ 185.194718][ T9364] loop4: detected capacity change from 0 to 2048 [ 185.266863][ T9364] loop4: p2 p3 < > p4 < p5 > [ 185.271418][ T9364] loop4: partition table partially beyond EOD, truncated [ 185.300113][ T9364] loop4: p3 start 4284289 is beyond EOD, truncated [ 185.363521][ T102] loop4: p2 p3 < > p4 < p5 > [ 185.377777][ T102] loop4: partition table partially beyond EOD, truncated [ 185.392372][ T9380] xt_l2tp: v2 tid > 0xffff: 134217728 [ 185.399122][ T102] loop4: p3 start 4284289 is beyond EOD, truncated [ 185.484106][ T304] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 185.490523][ T971] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.490626][ T971] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.490651][ T971] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 185.493865][ T972] I/O error, dev loop4, sector 516 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.493940][ T972] I/O error, dev loop4, sector 516 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.493977][ T972] Buffer I/O error on dev loop4p5, logical block 0, async page read [ 185.494008][ T972] I/O error, dev loop4, sector 518 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.494031][ T972] Buffer I/O error on dev loop4p5, logical block 1, async page read [ 185.494058][ T972] I/O error, dev loop4, sector 520 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.494079][ T972] Buffer I/O error on dev loop4p5, logical block 2, async page read [ 185.567172][ T477] udevd[477]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 185.567306][ T972] udevd[972]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 185.581579][ T460] udevd[460]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 185.828136][ T9414] xt_TCPMSS: Only works on TCP SYN packets [ 186.781439][ T9552] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4344'. [ 186.986073][ T9584] tc_dump_action: action bad kind [ 187.305110][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4382'. [ 187.857196][ T9621] loop1: detected capacity change from 0 to 40427 [ 187.889335][ T9687] xt_TCPMSS: Only works on TCP SYN packets [ 187.898584][ T9621] F2FS-fs (loop1): invalid crc value [ 187.927866][ T9621] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.045319][ T9702] loop3: detected capacity change from 0 to 128 [ 188.073944][ T9621] F2FS-fs (loop1): Start checkpoint disabled! [ 188.096754][ T9702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.106676][ T9621] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 188.126407][ T9702] ext4 filesystem being mounted at /913/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.173490][ T9702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4417: bg 0: block 81: padding at end of block bitmap is not set [ 188.222111][ T28] kauditd_printk_skb: 1056 callbacks suppressed [ 188.222130][ T28] audit: type=1400 audit(2000002627.150:9256): avc: denied { remount } for pid=9620 comm="syz.1.4378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 188.255018][ T305] EXT4-fs (loop3): unmounting filesystem. [ 188.260964][ T9725] mmap: syz.2.4428 (9725): VmData 29085696 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 188.277440][ T28] audit: type=1400 audit(2000002627.159:9257): avc: denied { unmount } for pid=305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 188.320133][ T28] audit: type=1400 audit(2000002627.159:9258): avc: denied { read write } for pid=304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.344621][ T28] audit: type=1400 audit(2000002627.159:9259): avc: denied { open } for pid=304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.406687][ T28] audit: type=1400 audit(2000002627.159:9260): avc: denied { ioctl } for pid=304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.484913][ T28] audit: type=1400 audit(2000002627.178:9261): avc: denied { read write } for pid=303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.557659][ T28] audit: type=1400 audit(2000002627.178:9262): avc: denied { open } for pid=303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.601213][ T28] audit: type=1400 audit(2000002627.178:9263): avc: denied { ioctl } for pid=303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.655931][ T28] audit: type=1400 audit(2000002627.206:9264): avc: denied { read write } for pid=305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.725346][ T9769] loop4: detected capacity change from 0 to 256 [ 188.732257][ T28] audit: type=1400 audit(2000002627.206:9265): avc: denied { open } for pid=305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.772684][ T9771] xt_SECMARK: invalid security context 'unconfined' [ 188.779686][ T9769] exfat: Deprecated parameter 'namecase' [ 188.822284][ T9769] exfat: Deprecated parameter 'utf8' [ 188.828589][ T9778] netlink: 'syz.3.4451': attribute type 9 has an invalid length. [ 188.859122][ T9769] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 188.958149][ T9769] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 189.193899][ T9807] loop3: detected capacity change from 0 to 512 [ 189.202502][ T9811] xt_bpf: check failed: parse error [ 189.312748][ T9807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.337515][ T9807] ext4 filesystem being mounted at /922/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.521916][ T305] EXT4-fs (loop3): unmounting filesystem. [ 189.641196][ T9858] bridge0: port 3(veth1_to_bridge) entered blocking state [ 189.661505][ T9858] bridge0: port 3(veth1_to_bridge) entered disabled state [ 189.687141][ T9858] device veth1_to_bridge entered promiscuous mode [ 189.702250][ T9858] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 189.734631][ T9858] bridge0: port 3(veth1_to_bridge) entered blocking state [ 189.741683][ T9858] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 190.381664][ T9949] xt_socket: unknown flags 0x58 [ 190.552135][ T9969] xt_connbytes: Forcing CT accounting to be enabled [ 190.962897][T10013] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 190.995992][T10017] loop4: detected capacity change from 0 to 512 [ 191.060949][T10017] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 191.077325][T10017] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 191.081764][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4572'. [ 191.112607][T10017] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 191.124182][T10017] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 191.183532][T10017] EXT4-fs (loop4): 1 truncate cleaned up [ 191.211546][T10017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.249380][T10017] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 191.271120][ T304] EXT4-fs (loop4): unmounting filesystem. [ 191.668195][T10105] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 192.311803][T10175] syz.2.4643 uses obsolete (PF_INET,SOCK_PACKET) [ 192.911600][T10258] xt_policy: too many policy elements [ 192.947250][T10261] loop2: detected capacity change from 0 to 256 [ 192.985069][T10261] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.023009][T10261] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 193.055948][T10261] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 193.573338][ T28] kauditd_printk_skb: 975 callbacks suppressed [ 193.573355][ T28] audit: type=1400 audit(2000002632.163:10211): avc: denied { read write } for pid=301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.623752][T10334] loop4: detected capacity change from 0 to 1024 [ 193.628701][ T28] audit: type=1400 audit(2000002632.163:10212): avc: denied { read write } for pid=304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.672196][ T28] audit: type=1400 audit(2000002632.163:10213): avc: denied { open } for pid=304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.738898][ T28] audit: type=1400 audit(2000002632.163:10214): avc: denied { ioctl } for pid=304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.739195][T10334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 193.772367][ T28] audit: type=1400 audit(2000002632.201:10215): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 193.816125][ T28] audit: type=1400 audit(2000002632.201:10216): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.849818][ T28] audit: type=1400 audit(2000002632.201:10217): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.888748][ T304] EXT4-fs (loop4): unmounting filesystem. [ 193.945358][ T28] audit: type=1400 audit(2000002632.201:10218): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.997235][T10364] netlink: 'syz.4.4735': attribute type 1 has an invalid length. [ 194.072861][ T305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.079373][ T28] audit: type=1400 audit(2000002632.201:10219): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.760642][T10452] netlink: 'syz.0.4778': attribute type 1 has an invalid length. [ 194.943330][T10467] xt_hashlimit: max too large, truncated to 1048576 [ 195.076184][T10478] xt_l2tp: wrong L2TP version: 0 [ 195.262700][T10494] loop2: detected capacity change from 0 to 256 [ 195.584720][T10529] loop1: detected capacity change from 0 to 2048 [ 195.635163][T10529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 195.695363][T10557] xt_l2tp: unknown flags: 17 [ 195.718749][ T301] EXT4-fs (loop1): unmounting filesystem. [ 195.813538][T10570] netlink: 'syz.4.4835': attribute type 30 has an invalid length. [ 195.907575][T10584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4843'. [ 195.956159][T10584] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4843'. [ 195.974335][T10590] xt_ecn: cannot match TCP bits for non-tcp packets [ 196.083771][T10600] loop1: detected capacity change from 0 to 512 [ 196.112472][T10600] EXT4-fs: Ignoring removed nobh option [ 196.168879][T10610] 8021q: VLANs not supported on lo [ 196.183397][T10600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.208833][T10600] ext4 filesystem being mounted at /1008/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.322989][ T301] EXT4-fs (loop1): unmounting filesystem. [ 196.439510][T10639] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 197.285882][T10747] loop4: detected capacity change from 0 to 128 [ 197.291065][T10746] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4922'. [ 197.775580][T10814] xt_bpf: check failed: parse error [ 198.336033][T10894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4993'. [ 198.600791][T10931] loop4: detected capacity change from 0 to 512 [ 198.665129][T10931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.744080][T10931] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.778957][T10931] ext4 filesystem being mounted at /960/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.802021][T10963] loop1: detected capacity change from 0 to 256 [ 198.836567][T10963] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 198.859104][ T304] EXT4-fs (loop4): unmounting filesystem. [ 198.939237][ T28] kauditd_printk_skb: 1045 callbacks suppressed [ 198.939257][ T28] audit: type=1400 audit(2000002637.177:11239): avc: denied { mount } for pid=10962 comm="syz.1.5026" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.056999][ T28] audit: type=1400 audit(2000002637.177:11240): avc: denied { read write } for pid=10962 comm="syz.1.5026" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.140252][ T28] audit: type=1400 audit(2000002637.177:11241): avc: denied { open } for pid=10962 comm="syz.1.5026" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.238433][ T28] audit: type=1400 audit(2000002637.177:11242): avc: denied { ioctl } for pid=10962 comm="syz.1.5026" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.271192][T11012] netlink: 'syz.3.5050': attribute type 2 has an invalid length. [ 199.282024][ T28] audit: type=1400 audit(2000002637.186:11243): avc: denied { read write } for pid=305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.324009][T11018] xt_bpf: check failed: parse error [ 199.336531][ T304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.348023][ T304] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 199.356506][ T302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.356825][ T28] audit: type=1400 audit(2000002637.186:11244): avc: denied { open } for pid=305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.362827][ T302] audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 [ 199.609285][T11050] x_tables: unsorted entry at hook 2 [ 200.393245][T11102] loop1: detected capacity change from 0 to 8192 [ 201.040823][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5123'. [ 201.300678][T11079] loop2: detected capacity change from 0 to 131072 [ 201.308486][T11183] x_tables: duplicate underflow at hook 3 [ 201.321561][T11079] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 201.355098][T11079] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 201.382442][T11079] F2FS-fs (loop2): invalid crc value [ 201.467613][T11079] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.547616][T11209] netlink: 'syz.3.5145': attribute type 3 has an invalid length. [ 201.571118][T11215] xt_hashlimit: size too large, truncated to 1048576 [ 201.587053][T11079] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 201.612318][T11079] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 202.451765][T11292] netlink: 'syz.2.5185': attribute type 1 has an invalid length. [ 202.464597][T11294] netlink: 'syz.4.5186': attribute type 15 has an invalid length. [ 202.763234][T11328] netlink: 'syz.3.5201': attribute type 49 has an invalid length. [ 202.783614][T11328] netlink: 'syz.3.5201': attribute type 49 has an invalid length. [ 202.945987][T11347] loop4: detected capacity change from 0 to 128 [ 202.980476][ T1317] ------------[ cut here ]------------ [ 202.985791][ T1317] kernel BUG at fs/buffer.c:2714! [ 203.006019][ T1317] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 203.011941][ T1317] CPU: 0 PID: 1317 Comm: kmmpd-loop0 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 203.021652][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.031546][ T1317] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 203.036754][ T1317] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f [ 203.056198][ T1317] RSP: 0018:ffffc90000ec7c20 EFLAGS: 00010293 [ 203.062097][ T1317] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff888115638000 [ 203.069910][ T1317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.077723][ T1317] RBP: ffffc90000ec7c70 R08: ffffffff81d625b0 R09: ffffed1026206494 [ 203.085533][ T1317] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 203.093343][ T1317] R13: 1ffff11026206493 R14: ffff888131032498 R15: 0000000000003801 [ 203.101156][ T1317] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 203.109926][ T1317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.116348][ T1317] CR2: 000055555bc9e4a8 CR3: 0000000119625000 CR4: 00000000003506b0 [ 203.124161][ T1317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.131971][ T1317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.139782][ T1317] Call Trace: [ 203.142904][ T1317] [ 203.145683][ T1317] ? __die_body+0x62/0xb0 [ 203.149858][ T1317] ? die+0x88/0xb0 [ 203.153493][ T1317] ? do_trap+0x103/0x330 [ 203.157575][ T1317] ? submit_bh_wbc+0x4cd/0x4f0 [ 203.162437][ T1317] ? handle_invalid_op+0x95/0xc0 [ 203.167212][ T1317] ? submit_bh_wbc+0x4cd/0x4f0 [ 203.171819][ T1317] ? exc_invalid_op+0x32/0x50 [ 203.176321][ T1317] ? asm_exc_invalid_op+0x1b/0x20 [ 203.181186][ T1317] ? submit_bh_wbc+0xa0/0x4f0 [ 203.185696][ T1317] ? submit_bh_wbc+0x4cd/0x4f0 [ 203.190299][ T1317] ? submit_bh_wbc+0x4cd/0x4f0 [ 203.194898][ T1317] ? __kasan_check_read+0x11/0x20 [ 203.199758][ T1317] submit_bh+0x1d/0x30 [ 203.203663][ T1317] write_mmp_block_thawed+0x3a0/0x570 [ 203.208874][ T1317] ? read_mmp_block+0x7d0/0x7d0 [ 203.213556][ T1317] ? update_process_times+0x1b0/0x1b0 [ 203.218769][ T1317] write_mmp_block+0x12b/0x2a0 [ 203.223367][ T1317] kmmpd+0x40c/0xa10 [ 203.227108][ T1317] ? write_mmp_block_thawed+0x570/0x570 [ 203.232481][ T1317] ? __kthread_parkme+0x12d/0x180 [ 203.237347][ T1317] kthread+0x26d/0x300 [ 203.241244][ T1317] ? write_mmp_block_thawed+0x570/0x570 [ 203.246628][ T1317] ? kthread_blkcg+0xd0/0xd0 [ 203.251060][ T1317] ret_from_fork+0x1f/0x30 [ 203.255313][ T1317] [ 203.258168][ T1317] Modules linked in: [ 203.315131][ T1317] ---[ end trace 0000000000000000 ]--- [ 203.320511][ T1317] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 203.331478][ T1317] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f [ 203.351874][ T1317] RSP: 0018:ffffc90000ec7c20 EFLAGS: 00010293 [ 203.358137][ T1317] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff888115638000 [ 203.366287][ T1317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.375432][ T1317] RBP: ffffc90000ec7c70 R08: ffffffff81d625b0 R09: ffffed1026206494 [ 203.383330][ T1317] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 203.391238][ T1317] R13: 1ffff11026206493 R14: ffff888131032498 R15: 0000000000003801 [ 203.399043][ T1317] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 203.407783][ T1317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.414352][ T1317] CR2: 00007f75e9348178 CR3: 000000012d64f000 CR4: 00000000003506a0 [ 203.422169][ T1317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.429978][ T1317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.437886][ T1317] Kernel panic - not syncing: Fatal exception [ 203.444153][ T1317] Kernel Offset: disabled [ 203.448293][ T1317] Rebooting in 86400 seconds..