last executing test programs: 1.223272549s ago: executing program 0 (id=5367): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1, 0x8, 0x6a40, 0x5, 0xbcd}) 1.191257122s ago: executing program 0 (id=5369): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 1.169656865s ago: executing program 0 (id=5373): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) 1.137294018s ago: executing program 0 (id=5378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x30, 0xc, 0xff, 0x2, 0xc8, 0x7, 0x7c00}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3b, 0x22}}, @RTA_NH_ID={0x8, 0x1e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x84) 1.088016662s ago: executing program 0 (id=5384): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xfff1, 0xd}, {0x2, 0x5}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x100, 0x1ffe, 0x0, 0x3, 0x8, 0x3}}, {0xa, 0x2, [0x4, 0x8001, 0x0]}}]}]}, 0x50}}, 0x4000) 1.077090694s ago: executing program 0 (id=5388): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x1064b, &(0x7f0000031280)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 283.814022ms ago: executing program 2 (id=5450): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@nat={'nat\x00', 0x62, 0x5, 0x548, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x1a8, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {}, {}, 0x0, 0x0, 0x11}, 0x0, 0xb8, 0xf0, 0x0, {0x22e}, [@common=@unspec=@limit={{0x48}, {0xea6a, 0x9, 0x100000001, 0x6, 0x7fffffff, 0x5, 0x8001}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv6=@mcast1, @ipv4=@multicast2, @icmp_id=0x65, @gre_key=0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x1a0, 0x1d8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@recent1={{0x108}, {0x4, 0x80000000, 0x1, 0x0, 'syz1\x00', 0x86, [0xff000000, 0xffffff00, 0xffffff00, 0xff]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) 218.763628ms ago: executing program 2 (id=5454): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000880)="$eJzs3b1rJGUYAPBnNrMfarFbWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2ES4Q8QPXq8TOxtK/QBD8Q2zsLAVbwc4IgZGZncl+ZNhsJBvx8vsVyZuZ55n3ed+ZJNPkyQcvTw4fZvH46Re/Ra+XRGvYjThJYhCtqH0VS4bfBgDwf3aS5/FnPtNw+tdv1uT2tlgXALA9F/z+r6TlxwdFxE/XVxsAsB33H7z79t7+/t13sqwX9yZfH4+SiCg+z87vPY6PYhyP4nb04zSifFFoR/m2UAzv5Xk+TbPCIF6bTI9HRebk/Z+r6+/9EVHm70Y/BuWhs7eNMv+t/bu72cxC/rSo4/lq/mGRfyf68eJZ8lL+nYb8GHXi9VcX6r8V/fjlw/g4xvGwLGKe/+Vulr2Zf/fX5+8V5RX5yfR41C3j5vKdevLpNd8jAAAAAAAAAAAAAAAAAAAAAACePbeq3jndKPv3FIeq/js7p8UX7chqg+X+PLP8pL7QvD9QtPI8n+bxfd1f53aWZXkVOM9P46W0aiwIAAAAAAAAAAAAAAAAAAAAN9zRp58dHozHj55cyaDuBpBGxN/3I/7tdYYLR16J9cHdas6D8bhVDZdj0sUjsVPHJBFryygWcUXbctHguXM1V4MffmzMKlZ0lEbTqd7Fk7ab57rk4JP2bB8bY+qn6/Agad7D7lnxveLGxeqN60Tz7O1YOdKp7+dqcP0obracTuOp/qW3pfNCOZiuiYlk3ffFG78vLSeJleBO2XGjMb1dDZp2Y/ZsbPQ8R2+Wfv5nRaJbBwAAAAAAAAAAAAAAAAAAbNX8r38bTj5dm9rKu1srCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu1fz//28ySJeTN8jqxJOj/2ptAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Bz/BAAA//8a6VGq") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 188.671391ms ago: executing program 2 (id=5458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x35, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4, 0x2, [@TCA_MATCHALL_FLAGS={0x0, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x0, 0x2, [@m_bpf={0x0, 0x7, 0x0, 0x0, {{}, {}, {0x0, 0x6, "5d3a366f13937ae9feca633493335772dbe6c83007a69557f78e8b5673972952a5c9aeb217ae69072f350cd2dfeb7054fb03411018228a0853574d31dad61d73376f40252c965d8c24492a6ae96f07584ca2d75221d97b307bbb13c8b0260545ec7e178d56fea50705f20c84f964b9b11d09086028e19eaaddb2f790a4bf12d359b67548f96dad9dc54a4c018b665bee31aa23ed80c7035d9de039da0bde646cdc477c5236b02a46bf5890f15515bbd74325fb5b42d016d6e63f46a2ccb7bac11349f3cbb13d59a71d332fa132611d6f064bfb3f4b74146c54aa415b010c9c8c03e22a31d111af731a03d7d462884282539c546b01d162"}, {0x0, 0x7, {0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x0, 0x1, {0xffe0, 0x9}}, @TCA_MATCHALL_CLASSID={0x0, 0x1, {0xa, 0x1}}]}}]}, 0x38}}, 0x0) 160.032454ms ago: executing program 1 (id=5461): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x9}, 0x4) 156.752234ms ago: executing program 3 (id=5462): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 150.630415ms ago: executing program 4 (id=5463): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000240)=""/190, 0xbe}], 0x2) 136.548396ms ago: executing program 3 (id=5464): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@local]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 130.780787ms ago: executing program 2 (id=5465): r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000021c0)='test_dummy_encryption', &(0x7f0000000180)='v2\x89\x00\x00\x00\x00\x00a8\xceoc', 0x0) 126.424098ms ago: executing program 1 (id=5466): r0 = gettid() setpgid(0x0, r0) 122.736537ms ago: executing program 4 (id=5467): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8936, 0x0) 104.596599ms ago: executing program 4 (id=5468): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, 0x47, 0x4) 95.383811ms ago: executing program 3 (id=5469): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x42, 0x20088015, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x40007}, 0xd8) 81.241692ms ago: executing program 1 (id=5470): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x30, 0x0, 0x4, 0xfffff03c}, {0x6, 0x0, 0x4, 0xfffffff9}]}, 0x10) 81.117232ms ago: executing program 3 (id=5471): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 80.915602ms ago: executing program 1 (id=5472): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee00, 0x0) 79.919862ms ago: executing program 4 (id=5473): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x34}}) 64.064333ms ago: executing program 2 (id=5474): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x7, 0xfffffffffffffffc, &(0x7f0000000000)=0x1) 52.503154ms ago: executing program 1 (id=5475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 52.282974ms ago: executing program 3 (id=5476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@dellinkprop={0x34, 0x12, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10433}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x34}}, 0x0) 49.450235ms ago: executing program 4 (id=5477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 0x4e24, 0x0, 0x2, 0x60, 0xa0, 0x1d}, {0x87e8, 0x40, 0xff, 0x7, 0x6, 0x7, 0x7f, 0x7fffffff}, {0x6, 0x5b, 0x0, 0x8}, 0x4, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x2b}, 0xb, @in6=@remote, 0x3502, 0x1, 0x0, 0x5, 0xac5, 0x7, 0xffffffff}}, 0xe8) 13.991449ms ago: executing program 1 (id=5478): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) 13.939389ms ago: executing program 2 (id=5479): prctl$PR_SET_SECUREBITS(0x1c, 0x30) prctl$PR_SET_SECUREBITS(0x8, 0x0) 13.169759ms ago: executing program 4 (id=5480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 0s ago: executing program 3 (id=5481): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000200)) kernel console output (not intermixed with test programs): latform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input13 [ 153.731411][ T39] usb-storage 3-1:255.0: USB Mass Storage device detected [ 153.739158][ T6] usb 5-1: USB disconnect, device number 77 [ 153.810666][ T39] usb 3-1: USB disconnect, device number 78 [ 153.819575][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 153.902375][ T7392] 9pnet: Could not find request transport: fûGÈ#²CñÑ-g½µË®Œô©Gžçõ¢ER‹”w -Ù¸E"Êö{"©*æt [ 154.022086][ T7418] loop3: detected capacity change from 0 to 256 [ 154.035405][ T7418] FAT-fs (loop3): IO charset ŽZ¸f?xðAÜpF†…(Y0Öó+c‹æ_ÞîeF9Ò­Nh‡‹ØÛ— ã×0³”¬^Ã_ãù”ÙÜë&a½ÿbvzRX:a• [ 154.035405][ T7418] Bœ5ñ ê›Nt?PHì¨ not found [ 154.095472][ T7424] futex_wake_op: syz.3.3407 tries to shift op by -1; fix this program [ 154.320412][ T6] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 154.448755][ T39] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 154.512673][ T7501] loop4: detected capacity change from 0 to 2048 [ 154.519114][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 154.525434][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.533740][ T6] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 154.544787][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.553837][ T635] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 154.561639][ T7501] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 154.561659][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.567083][ T7501] loop4: partition table partially beyond EOD, truncated [ 154.574950][ T6] usb 2-1: Product: syz [ 154.582380][ T7501] loop4: p1 start 4278190080 is beyond EOD, truncated [ 154.586169][ T6] usb 2-1: Manufacturer: syz [ 154.593026][ T7501] loop4: p2 start 16908800 is beyond EOD, truncated [ 154.597606][ T6] usb 2-1: SerialNumber: syz [ 154.605323][ T7501] loop4: p5 start 16908800 is beyond EOD, truncated [ 154.630476][ T1122] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 154.645018][ T39] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 154.655245][ T335] udevd[335]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 154.661987][ T39] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 154.677818][ T7068] udevd[7068]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 154.690477][ T39] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 154.705127][ T335] udevd[335]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 154.711194][ T39] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bf.9d [ 154.724046][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.735120][ T7438] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.756308][ T39] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 154.770438][ T7512] loop4: detected capacity change from 0 to 256 [ 154.773546][ T7068] udevd[7068]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.776963][ T7512] exfat: Deprecated parameter 'utf8' [ 154.798298][ T7512] exfat: Deprecated parameter 'namecase' [ 154.804372][ T7512] exFAT-fs (loop4): bogus fat length [ 154.809758][ T7512] exFAT-fs (loop4): failed to read boot sector [ 154.816002][ T635] usb 1-1: Using ep0 maxpacket: 16 [ 154.820527][ T7512] exFAT-fs (loop4): failed to recognize exfat type [ 154.822449][ T635] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 154.833585][ T1122] usb 3-1: Using ep0 maxpacket: 16 [ 154.835905][ T635] usb 1-1: config 0 has no interface number 0 [ 154.841859][ T1122] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.851416][ T6] cdc_ncm 2-1:1.0: bind() failure [ 154.857187][ T1122] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.863214][ T635] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 6.76 [ 154.872516][ T1122] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.880841][ T6] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 154.902833][ T635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.906070][ T1122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.910935][ T7514] futex_wake_op: syz.4.3451 tries to shift op by -1; fix this program [ 154.919151][ T1122] usb 3-1: Product: syz [ 154.927086][ T6] cdc_ncm 2-1:1.1: bind() failure [ 154.931343][ T1122] usb 3-1: Manufacturer: syz [ 154.936464][ T635] usb 1-1: Product: syz [ 154.941119][ T1122] usb 3-1: SerialNumber: syz [ 154.945279][ T635] usb 1-1: Manufacturer: syz [ 154.962976][ T6] usb 2-1: USB disconnect, device number 72 [ 154.962976][ T347] usb 4-1: USB disconnect, device number 74 [ 154.964869][ T635] usb 1-1: SerialNumber: syz [ 154.995784][ T635] usb 1-1: config 0 descriptor?? [ 155.004841][ T635] hub 1-1:0.79: bad descriptor, ignoring hub [ 155.010850][ T635] hub: probe of 1-1:0.79 failed with error -5 [ 155.021919][ T635] ftdi_sio 1-1:0.79: FTDI USB Serial Device converter detected [ 155.035323][ T635] ftdi_sio ttyUSB0: unknown device type: 0x676 [ 155.186389][ T1122] usb 3-1: 0:2 : does not exist [ 155.191308][ T1122] usb 3-1: unit 9 not found! [ 155.199145][ T1122] usb 3-1: USB disconnect, device number 79 [ 155.357401][ T347] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 155.365095][ T643] usb 1-1: USB disconnect, device number 76 [ 155.371498][ T643] ftdi_sio 1-1:0.79: device disconnected [ 155.503515][ T28] audit: type=1326 audit(1762094910.292:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.3473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70bc58efc9 code=0x0 [ 155.562716][ T347] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.583713][ T347] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.599303][ T347] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.608896][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.619326][ T347] usb 5-1: Product: syz [ 155.623503][ T347] usb 5-1: Manufacturer: syz [ 155.628245][ T347] usb 5-1: SerialNumber: syz [ 155.665937][ T28] audit: type=1400 audit(1762094910.441:244): avc: denied { write } for pid=7589 comm="syz.1.3489" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 155.825168][ T7608] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 155.834421][ T28] audit: type=1400 audit(1762094910.600:245): avc: denied { relabelto } for pid=7607 comm="syz.0.3498" name="751" dev="tmpfs" ino=3821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 155.854025][ T347] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 155.866888][ T28] audit: type=1400 audit(1762094910.619:246): avc: denied { associate } for pid=7607 comm="syz.0.3498" name="751" dev="tmpfs" ino=3821 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 155.874009][ T347] usb 5-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 155.902645][ T6] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 155.921838][ T347] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 155.953577][ T347] usb 5-1: USB disconnect, device number 78 [ 156.040490][ T7626] loop2: detected capacity change from 0 to 4096 [ 156.047255][ T7626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.058775][ T7626] EXT4-fs: Ignoring removed i_version option [ 156.072800][ T7626] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 156.129575][ T6] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 156.145710][ T7650] SELinux: security_context_str_to_sid (unconfined_uobj_type=fsconte,) failed with errno=-22 [ 156.147806][ T6] usb 4-1: config 1 interface 0 has no altsetting 0 [ 156.185725][ T28] audit: type=1326 audit(1762619198.939:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.0.3521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa011f8efc9 code=0x0 [ 156.219973][ T6] usb 4-1: string descriptor 0 read error: -22 [ 156.226245][ T6] usb 4-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 156.236107][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.247726][ T7578] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 156.308931][ T1122] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 156.471694][ T6] usbhid 4-1:1.0: can't add hid device: -71 [ 156.477665][ T6] usbhid: probe of 4-1:1.0 failed with error -71 [ 156.485424][ T6] usb 4-1: USB disconnect, device number 75 [ 156.512093][ T1122] usb 2-1: Using ep0 maxpacket: 32 [ 156.519936][ T1122] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.528487][ T1122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.540049][ T1122] usb 2-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 156.549154][ T1122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.557286][ T1122] usb 2-1: Product: syz [ 156.561622][ T1122] usb 2-1: Manufacturer: syz [ 156.566283][ T1122] usb 2-1: SerialNumber: syz [ 156.725870][ T347] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 156.733480][ T39] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 156.789364][ T1122] usb 2-1: USB disconnect, device number 73 [ 156.886274][ T60] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 156.929062][ T347] usb 3-1: Using ep0 maxpacket: 16 [ 156.935491][ T39] usb 1-1: config 4 has an invalid interface number: 63 but max is 1 [ 156.943636][ T39] usb 1-1: config 4 has an invalid interface number: 97 but max is 1 [ 156.951821][ T39] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 156.961939][ T347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.969606][ T39] usb 1-1: config 4 has no interface number 0 [ 156.975805][ T39] usb 1-1: config 4 has no interface number 1 [ 156.981968][ T39] usb 1-1: config 4 interface 63 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.995054][ T347] usb 3-1: config 200 has an invalid interface number: 170 but max is 0 [ 157.003380][ T347] usb 3-1: config 200 has no interface number 0 [ 157.009788][ T39] usb 1-1: config 4 interface 97 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 157.022839][ T347] usb 3-1: config 200 interface 170 has no altsetting 0 [ 157.029804][ T39] usb 1-1: config 4 interface 63 has no altsetting 0 [ 157.036769][ T39] usb 1-1: config 4 interface 97 has no altsetting 0 [ 157.046348][ T347] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=ed.86 [ 157.055672][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.063994][ T39] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 157.073053][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.081131][ T347] usb 3-1: Product: syz [ 157.085315][ T347] usb 3-1: Manufacturer: syz [ 157.090004][ T39] usb 1-1: Product: syz [ 157.094176][ T39] usb 1-1: Manufacturer: syz [ 157.098851][ T347] usb 3-1: SerialNumber: syz [ 157.103834][ T39] usb 1-1: SerialNumber: syz [ 157.108633][ T60] usb 5-1: config 3 has an invalid interface number: 61 but max is 0 [ 157.117188][ T60] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 157.127660][ T60] usb 5-1: config 3 has no interface number 0 [ 157.134069][ T60] usb 5-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.147049][ T60] usb 5-1: config 3 interface 61 has no altsetting 0 [ 157.158246][ T60] usb 5-1: string descriptor 0 read error: -22 [ 157.166219][ T60] usb 5-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 157.175312][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.185907][ T60] snd-usb-audio: probe of 5-1:3.61 failed with error -2 [ 157.198100][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.61/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 157.303276][ T7324] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 157.346043][ T6] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 157.346808][ T347] usb 3-1: unknown interface protocol 0x37, assuming v1 [ 157.360594][ T347] usb 3-1: cannot find UAC_HEADER [ 157.366726][ T347] snd-usb-audio: probe of 3-1:200.170 failed with error -22 [ 157.370754][ T635] usb 1-1: USB disconnect, device number 77 [ 157.377628][ T347] usb 3-1: USB disconnect, device number 80 [ 157.404333][ T362] usb 5-1: USB disconnect, device number 79 [ 157.539466][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.549629][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 157.563243][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.572363][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.580322][ T6] usb 4-1: SerialNumber: syz [ 157.586057][ T6] usb 4-1: bad CDC descriptors [ 157.603380][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:200.170/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 157.624041][ T60] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 157.801478][ T347] usb 4-1: USB disconnect, device number 76 [ 157.818282][ T60] usb 2-1: descriptor type invalid, skip [ 157.824598][ T60] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 157.835245][ T60] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.848025][ T60] usb 2-1: config 1 interface 0 has no altsetting 0 [ 157.856754][ T60] usb 2-1: string descriptor 0 read error: -22 [ 157.863000][ T60] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40 [ 157.872024][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.880764][ T7730] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 157.970903][ T28] audit: type=1326 audit(1762619200.604:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.0.3566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa011f8efc9 code=0x0 [ 158.106224][ T60] usbhid 2-1:1.0: can't add hid device: -71 [ 158.112201][ T60] usbhid: probe of 2-1:1.0 failed with error -71 [ 158.120151][ T60] usb 2-1: USB disconnect, device number 74 [ 158.190707][ T362] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 158.240822][ T7756] loop4: detected capacity change from 0 to 2048 [ 158.351138][ T6] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 158.383219][ T362] usb 3-1: Using ep0 maxpacket: 32 [ 158.389626][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 158.400648][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 158.411588][ T362] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 158.420662][ T362] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 158.428663][ T362] usb 3-1: Manufacturer: syz [ 158.433229][ T362] usb 3-1: SerialNumber: syz [ 158.438580][ T362] usb 3-1: config 0 descriptor?? [ 158.444618][ T362] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 158.555345][ T6] usb 1-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=cf.91 [ 158.564446][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.573192][ T6] usb 1-1: config 0 descriptor?? [ 158.578978][ T6] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 158.660540][ T60] usb 3-1: USB disconnect, device number 81 [ 158.666547][ T347] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 158.674185][ T635] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 158.796514][ T39] usb 1-1: USB disconnect, device number 78 [ 158.865276][ T347] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 158.873626][ T347] usb 4-1: config 160 has no interface number 0 [ 158.879898][ T347] usb 4-1: config 160 interface 200 has no altsetting 0 [ 158.888122][ T347] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 158.896382][ T635] usb 5-1: Using ep0 maxpacket: 8 [ 158.897324][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.903485][ T635] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.910178][ T347] usb 4-1: Product: syz [ 158.922023][ T635] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 158.924337][ T347] usb 4-1: Manufacturer: syz [ 158.933609][ T635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.938102][ T347] usb 4-1: SerialNumber: syz [ 158.946225][ T635] usb 5-1: Product: syz [ 158.955106][ T635] usb 5-1: Manufacturer: syz [ 158.959740][ T635] usb 5-1: SerialNumber: syz [ 158.965206][ T635] usb 5-1: config 0 descriptor?? [ 158.970931][ T635] cdc_ether 5-1:0.0: skipping garbage [ 158.976349][ T635] cdc_ether 5-1:0.0: skipping garbage [ 158.981758][ T635] usb 5-1: bad CDC descriptors [ 158.986702][ T635] usb 5-1: unsupported MDLM descriptors [ 158.992652][ T6] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 159.000323][ T635] cdc_acm 5-1:0.0: skipping garbage [ 159.005679][ T635] cdc_acm 5-1:0.0: skipping garbage [ 159.170402][ T347] usb 4-1: MIDIStreaming interface descriptor not found [ 159.182111][ T347] usb 4-1: USB disconnect, device number 77 [ 159.195794][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 159.202516][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.216597][ T39] usb 5-1: USB disconnect, device number 80 [ 159.226153][ T6] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 159.228460][ T7776] loop2: detected capacity change from 0 to 128 [ 159.237723][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.242200][ T7776] EXT4-fs: journaled quota format not specified [ 159.252530][ T6] usb 2-1: Product: syz [ 159.268047][ T6] usb 2-1: Manufacturer: syz [ 159.296890][ T6] usb 2-1: SerialNumber: syz [ 159.313693][ T6] usb 2-1: config 0 descriptor?? [ 159.374843][ T28] audit: type=1326 audit(1762619201.913:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.0.3588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa011f8efc9 code=0x0 [ 159.420894][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.554243][ T635] usb 2-1: USB disconnect, device number 75 [ 159.612782][ T60] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 159.827590][ T60] usb 3-1: not running at top speed; connect to a high speed hub [ 159.836189][ T60] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 159.844291][ T60] usb 3-1: config 95 has no interface number 0 [ 159.850468][ T60] usb 3-1: config 95 interface 1 has no altsetting 0 [ 159.858611][ T60] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 159.868362][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.876387][ T60] usb 3-1: Product: syz [ 159.880579][ T60] usb 3-1: Manufacturer: syz [ 159.885295][ T60] usb 3-1: SerialNumber: syz [ 160.072542][ T6] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 160.083338][ T635] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 160.122611][ T60] usb 3-1: USB disconnect, device number 82 [ 160.140890][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.254330][ T1187] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 160.265067][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 160.271893][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.280432][ T6] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.293525][ T635] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.304287][ T6] usb 4-1: config 1 interface 0 has no altsetting 0 [ 160.310932][ T635] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.319893][ T635] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.322690][ T7890] loop1: detected capacity change from 0 to 512 [ 160.334028][ T6] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 160.348146][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.356235][ T635] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.362481][ T7890] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.3639: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 255, max 4(4), depth 0(0) [ 160.365385][ T6] usb 4-1: Product: syz [ 160.383505][ T7890] EXT4-fs (loop1): get root inode failed [ 160.387073][ T635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.392591][ T7890] EXT4-fs (loop1): mount failed [ 160.400686][ T635] usb 5-1: Product: syz [ 160.400702][ T635] usb 5-1: Manufacturer: syz [ 160.400715][ T635] usb 5-1: SerialNumber: syz [ 160.401039][ T6] usb 4-1: Manufacturer: 膬䯹䄰䞙㞌ìœì¥™í˜Ÿç¿¶å¤¼ëœ‚쌴싵ꉄ鮅↣롱鋃䘲ñ²³ [ 160.428985][ T6] usb 4-1: SerialNumber: syz [ 160.434063][ T635] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 160.441028][ T635] cdc_ncm 5-1:1.0: bind() failure [ 160.455637][ T1187] usb 1-1: Using ep0 maxpacket: 32 [ 160.461985][ T1187] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 160.470209][ T1187] usb 1-1: config 0 has no interface number 0 [ 160.476336][ T1187] usb 1-1: config 0 interface 196 has no altsetting 0 [ 160.484856][ T1187] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 160.493973][ T1187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.502029][ T1187] usb 1-1: Product: syz [ 160.521617][ T1187] usb 1-1: Manufacturer: syz [ 160.526372][ T1187] usb 1-1: SerialNumber: syz [ 160.534708][ T1187] usb 1-1: config 0 descriptor?? [ 160.660383][ T363] usb 5-1: USB disconnect, device number 81 [ 160.669504][ T6] usbhid 4-1:1.0: can't add hid device: -22 [ 160.675998][ T6] usbhid: probe of 4-1:1.0 failed with error -22 [ 160.688964][ T6] usb 4-1: USB disconnect, device number 78 [ 160.756176][ T1187] ipheth 1-1:0.196: Unable to find endpoints [ 160.763188][ T1187] usb 1-1: USB disconnect, device number 79 [ 160.842401][ T635] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 160.992049][ T347] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 161.046504][ T635] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 161.055582][ T635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.064357][ T635] usb 2-1: config 0 descriptor?? [ 161.070084][ T635] usb 2-1: Invalid firmware size=18. [ 161.185546][ T347] usb 3-1: config 0 has an invalid interface number: 245 but max is 0 [ 161.193786][ T347] usb 3-1: config 0 has no interface number 0 [ 161.202334][ T347] usb 3-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 161.225959][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.241416][ T347] usb 3-1: config 0 descriptor?? [ 161.289377][ T635] usb 2-1: USB disconnect, device number 76 [ 161.465139][ T347] usb 3-1: string descriptor 0 read error: -71 [ 161.471824][ T347] usb-storage 3-1:0.245: USB Mass Storage device detected [ 161.517013][ T347] usb 3-1: USB disconnect, device number 83 [ 161.548054][ T1187] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 161.562275][ T7908] loop3: detected capacity change from 0 to 131072 [ 161.569881][ T7908] F2FS-fs (loop3): Test dummy encryption mode enabled [ 161.579506][ T7908] F2FS-fs (loop3): invalid crc value [ 161.586101][ T7908] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.615396][ T7908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.622949][ T363] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 161.752469][ T1187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.760818][ T1187] usb 5-1: config 2 has an invalid interface number: 224 but max is 0 [ 161.769281][ T1187] usb 5-1: config 2 has no interface number 0 [ 161.775423][ T1187] usb 5-1: config 2 interface 224 has no altsetting 0 [ 161.783465][ T1187] usb 5-1: New USB device found, idVendor=aa69, idProduct=ef1c, bcdDevice=5a.da [ 161.792610][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.800647][ T1187] usb 5-1: Product: syz [ 161.804829][ T1187] usb 5-1: Manufacturer: syz [ 161.809408][ T1187] usb 5-1: SerialNumber: syz [ 161.837846][ T363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.849952][ T363] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 161.859233][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.867795][ T363] usb 1-1: config 0 descriptor?? [ 161.873726][ T363] usb 1-1: bad CDC descriptors [ 161.874039][ T7930] loop1: detected capacity change from 0 to 1024 [ 161.885503][ T7930] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 161.896051][ T7930] EXT4-fs (loop1): barriers disabled [ 161.901488][ T7930] JBD2: no valid journal superblock found [ 161.907195][ T7930] EXT4-fs (loop1): error loading journal [ 161.998028][ T7938] cgroup: No subsys list or none specified [ 162.020714][ T347] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 162.035708][ T1187] usb-storage 5-1:2.224: USB Mass Storage device detected [ 162.092778][ T635] usb 1-1: USB disconnect, device number 80 [ 162.102196][ T1187] usb 5-1: USB disconnect, device number 82 [ 162.244439][ T347] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 162.256909][ T347] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.269889][ T347] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 162.278932][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.287422][ T347] usb 4-1: config 0 descriptor?? [ 162.293518][ T347] usb-storage 4-1:0.0: USB Mass Storage device detected [ 162.301081][ T347] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 162.478284][ T60] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 162.478284][ T363] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 162.512471][ T347] usb 4-1: USB disconnect, device number 79 [ 162.601292][ T7972] loop4: detected capacity change from 0 to 512 [ 162.608259][ T7972] FAT-fs (loop4): count of clusters too big (130558) [ 162.614952][ T7972] FAT-fs (loop4): Can't find a valid FAT filesystem [ 162.672560][ T363] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 162.680927][ T363] usb 2-1: config 0 has no interface number 0 [ 162.681433][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 162.687303][ T363] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 162.699589][ T60] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.712999][ T60] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 162.713149][ T363] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 162.722058][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.725166][ T60] usb 3-1: config 0 descriptor?? [ 162.736073][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.752163][ T363] usb 2-1: Product: syz [ 162.756689][ T363] usb 2-1: Manufacturer: syz [ 162.761441][ T363] usb 2-1: SerialNumber: syz [ 162.768959][ T363] usb 2-1: config 0 descriptor?? [ 162.774217][ T7966] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.787396][ T363] usb-storage 2-1:0.20: USB Mass Storage device detected [ 162.795187][ T363] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 162.938039][ T1187] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 162.991188][ T362] usb 3-1: USB disconnect, device number 84 [ 163.005033][ T363] scsi host1: usb-storage 2-1:0.20 [ 163.012667][ T363] usb 2-1: USB disconnect, device number 77 [ 163.141225][ T60] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 163.148865][ T1187] usb 5-1: Using ep0 maxpacket: 32 [ 163.155171][ T1187] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 163.163190][ T1187] usb 5-1: config 0 has no interface number 0 [ 163.169255][ T1187] usb 5-1: config 0 interface 2 has no altsetting 0 [ 163.177157][ T1187] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 163.186214][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.194191][ T1187] usb 5-1: Product: syz [ 163.198347][ T1187] usb 5-1: Manufacturer: syz [ 163.202929][ T1187] usb 5-1: SerialNumber: syz [ 163.208086][ T1187] usb 5-1: config 0 descriptor?? [ 163.355058][ T6] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 163.366771][ T60] usb 1-1: config index 0 descriptor too short (expected 324, got 68) [ 163.374996][ T60] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 163.386135][ T60] usb 1-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 163.400661][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.409717][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.417729][ T60] usb 1-1: SerialNumber: syz [ 163.430386][ T1187] usb 5-1: invalid MIDI in EP 0 [ 163.437388][ T1187] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 163.445266][ T1187] usb 5-1: USB disconnect, device number 83 [ 163.451074][ T7068] udevd[7068]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.548582][ T6] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 163.559483][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.573046][ T6] ums-cypress 4-1:1.0: USB Mass Storage device detected [ 163.623373][ T8029] SELinux: Context system_u:object is not valid (left unmapped). [ 163.631402][ T28] audit: type=1400 audit(1762619205.897:250): avc: denied { relabelto } for pid=8028 comm="syz.1.3700" name="cgroup.procs" dev="cgroup" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 163.657643][ T28] audit: type=1400 audit(1762619205.907:251): avc: denied { associate } for pid=8028 comm="syz.1.3700" name="cgroup.procs" dev="cgroup" ino=161 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 163.661895][ T60] rndis_host 1-1:253.0: skipping garbage [ 163.705868][ T60] usb 1-1: USB disconnect, device number 81 [ 163.706816][ T8035] loop2: detected capacity change from 0 to 512 [ 163.726961][ T8035] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.3703: inode #0: comm syz.2.3703: iget: illegal inode # [ 163.744693][ T8035] EXT4-fs (loop2): get orphan inode failed [ 163.751880][ T8035] EXT4-fs (loop2): mount failed [ 163.793314][ T6] usb 4-1: USB disconnect, device number 80 [ 163.807110][ T28] audit: type=1326 audit(1762619206.066:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.1.3710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70bc58efc9 code=0x0 [ 163.833075][ T8054] loop2: detected capacity change from 0 to 256 [ 163.841824][ T8054] exFAT-fs (loop2): bogus sector size bits : 0 [ 163.848918][ T8054] exFAT-fs (loop2): failed to read boot sector [ 163.855219][ T8054] exFAT-fs (loop2): failed to recognize exfat type [ 163.950123][ T8076] incfs: Options parsing error. -22 [ 163.955440][ T8076] incfs: mount failed -22 [ 164.221108][ T363] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 164.295966][ T362] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 164.338795][ T60] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 164.404781][ T8118] loop3: detected capacity change from 0 to 512 [ 164.413595][ T363] usb 2-1: Using ep0 maxpacket: 8 [ 164.419450][ T8118] EXT4-fs warning (device loop3): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 164.423002][ T363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.434611][ T8118] EXT4-fs (loop3): mount failed [ 164.444243][ T363] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 164.459054][ T363] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 164.469370][ T363] usb 2-1: config 4 has no interface number 0 [ 164.479914][ T363] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 164.489410][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.497536][ T363] usb 2-1: Product: syz [ 164.505586][ T363] usb 2-1: Manufacturer: syz [ 164.510250][ T363] usb 2-1: SerialNumber: syz [ 164.514920][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.525313][ T362] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 164.539415][ T362] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 164.548495][ T362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.552659][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 164.556523][ T635] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 164.563048][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.569154][ T362] usb 3-1: SerialNumber: syz [ 164.579675][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 164.585845][ T362] usb-storage 3-1:1.0: USB Mass Storage device detected [ 164.604553][ T362] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 164.605358][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.621365][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.629387][ T60] usb 5-1: SerialNumber: syz [ 164.638246][ T60] cdc_acm 5-1:1.0: Zero length descriptor references [ 164.644923][ T60] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 164.692470][ T362] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 164.757515][ T363] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 164.763878][ T363] usb 2-1: No streaming interface found for terminal 6. [ 164.772708][ T363] usb 2-1: USB disconnect, device number 78 [ 164.780067][ T635] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.788881][ T635] usb 1-1: not running at top speed; connect to a high speed hub [ 164.798684][ T635] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.807730][ T635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.810685][ T60] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 164.815920][ T635] usb 1-1: Product: syz [ 164.828377][ T635] usb 1-1: Manufacturer: syz [ 164.833029][ T635] usb 1-1: SerialNumber: syz [ 164.852571][ T1122] usb 3-1: USB disconnect, device number 85 [ 164.864043][ T1187] usb 5-1: USB disconnect, device number 84 [ 165.023085][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 165.029289][ T60] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 165.038017][ T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.048173][ T60] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.058165][ T635] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 165.059474][ T60] usb 4-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 165.068874][ T635] usb 1-1: USB disconnect, device number 82 [ 165.076235][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.087958][ T60] usb 4-1: Product: syz [ 165.092122][ T60] usb 4-1: Manufacturer: syz [ 165.096715][ T60] usb 4-1: SerialNumber: syz [ 165.102241][ T60] usb 4-1: config 0 descriptor?? [ 165.331739][ T60] usb 4-1: USB disconnect, device number 81 [ 165.651599][ T8154] loop1: detected capacity change from 0 to 32768 [ 165.707322][ T1187] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 165.846315][ T362] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 165.921215][ T635] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 165.921215][ T1187] usb 3-1: Using ep0 maxpacket: 16 [ 165.934979][ T1187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.945063][ T1187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.953920][ T1187] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 197, using maximum allowed: 30 [ 165.964683][ T1187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 165.975625][ T1187] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 197 [ 165.989866][ T1187] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.998900][ T1187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.006925][ T1187] usb 3-1: Product: syz [ 166.011099][ T1187] usb 3-1: Manufacturer: syz [ 166.015692][ T1187] usb 3-1: SerialNumber: syz [ 166.038819][ T362] usb 5-1: Using ep0 maxpacket: 8 [ 166.048036][ T362] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.056445][ T362] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.066646][ T362] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.075564][ T362] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 166.089757][ T362] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.098832][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.107032][ T362] usb 5-1: Product: syz [ 166.111190][ T362] usb 5-1: Manufacturer: syz [ 166.115919][ T362] usb 5-1: SerialNumber: syz [ 166.122366][ T635] usb 1-1: not running at top speed; connect to a high speed hub [ 166.131808][ T635] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 166.142644][ T635] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 166.154860][ T635] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.163937][ T635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.172039][ T635] usb 1-1: Product: syz [ 166.176233][ T635] usb 1-1: Manufacturer: syz [ 166.180847][ T635] usb 1-1: SerialNumber: syz [ 166.238362][ T1187] usb 3-1: 0:2 : does not exist [ 166.244986][ T1187] usb 3-1: USB disconnect, device number 86 [ 166.341544][ T362] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 166.351669][ T362] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 166.363285][ T362] usb 5-1: USB disconnect, device number 85 [ 166.365418][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.402076][ T635] cdc_ncm 1-1:1.0: bind() failure [ 166.407914][ T635] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 166.414701][ T635] cdc_ncm 1-1:1.1: bind() failure [ 166.422102][ T635] usb 1-1: USB disconnect, device number 83 [ 166.820707][ T8182] loop1: detected capacity change from 0 to 128 [ 166.836244][ T8182] FAT-fs (loop1): bogus number of FAT structure [ 166.851658][ T8182] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 166.871217][ T8182] FAT-fs (loop1): Can't find a valid FAT filesystem [ 166.909343][ T8189] loop3: detected capacity change from 0 to 8192 [ 166.969313][ T335] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.008492][ T28] audit: type=1326 audit(1762619209.059:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8212 comm="syz.0.3787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa011f8efc9 code=0x0 [ 167.072374][ T8217] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 167.113424][ T8217] EXT4-fs (loop4): unable to read superblock [ 167.277405][ T8251] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 167.282412][ T8207] loop1: detected capacity change from 0 to 40427 [ 167.296936][ T8207] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 167.305541][ T8207] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 167.318820][ T8207] F2FS-fs (loop1): invalid crc value [ 167.333174][ T8207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.379928][ T8207] F2FS-fs (loop1): Start checkpoint disabled! [ 167.388127][ T8207] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 167.402036][ T8207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 167.418084][ T1122] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 167.470870][ T8269] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:0:54d3:7419::b586:0 [ 167.482226][ T1187] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 167.536141][ T60] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 167.621203][ T1122] usb 4-1: Using ep0 maxpacket: 16 [ 167.627324][ T1122] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.637749][ T1122] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.647952][ T1122] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.657070][ T1122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.665114][ T1122] usb 4-1: Product: syz [ 167.669283][ T1122] usb 4-1: Manufacturer: syz [ 167.673878][ T1122] usb 4-1: SerialNumber: syz [ 167.697467][ T1187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.705795][ T1187] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 167.714037][ T1187] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 167.724261][ T1187] usb 5-1: config 63 has no interface number 0 [ 167.730457][ T1187] usb 5-1: config 63 interface 66 has no altsetting 0 [ 167.738571][ T1187] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 167.747646][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.755693][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 167.761000][ T1187] usb 5-1: Product: syz [ 167.765204][ T1187] usb 5-1: Manufacturer: syz [ 167.769867][ T1187] usb 5-1: SerialNumber: syz [ 167.775005][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.781606][ T3847] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 167.788616][ T60] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 167.801904][ T60] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 167.812735][ T60] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.823675][ T60] usb 3-1: config 1 interface 1 has no altsetting 0 [ 167.832218][ T60] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.841311][ T347] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 167.848895][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.856954][ T60] usb 3-1: Product: syz [ 167.861186][ T60] usb 3-1: Manufacturer: syz [ 167.865873][ T60] usb 3-1: SerialNumber: syz [ 167.896146][ T1122] usb 4-1: 0:2 : does not exist [ 167.902691][ T1122] usb 4-1: USB disconnect, device number 82 [ 167.984767][ T3847] usb 1-1: Using ep0 maxpacket: 32 [ 167.991041][ T3847] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 167.999323][ T3847] usb 1-1: config 2 has no interface number 0 [ 168.007080][ T3847] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 168.018263][ T3847] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 168.024054][ T1187] usb 5-1: Found UVC 0.07 device syz (174f:8a31) [ 168.029197][ T3847] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 168.035611][ T1187] usb 5-1: No valid video chain found. [ 168.044519][ T3847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.045404][ T8271] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 168.055863][ T1187] usb 5-1: USB disconnect, device number 86 [ 168.072712][ T347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.081599][ T347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.091855][ T347] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 20, changing to 7 [ 168.102847][ T347] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.114695][ T60] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 168.122506][ T60] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 168.134521][ T60] usb 3-1: 2:1 : sample bitwidth 252 in over sample bytes 4 [ 168.141851][ T60] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 168.153745][ T347] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.163113][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.173829][ T60] usb 3-1: USB disconnect, device number 87 [ 168.180655][ T347] usb 2-1: Product: syz [ 168.185230][ T347] usb 2-1: Manufacturer: syz [ 168.190111][ T347] usb 2-1: SerialNumber: syz [ 168.280222][ T3847] usb 1-1: string descriptor 0 read error: -71 [ 168.291696][ T3847] usb 1-1: USB disconnect, device number 84 [ 168.402372][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.419545][ T347] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.427424][ T347] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 168.435313][ T347] usb 2-1: 2:1 : format type 0 is not supported yet [ 168.450695][ T347] usb 2-1: USB disconnect, device number 79 [ 168.509208][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.545466][ T8298] loop3: detected capacity change from 0 to 512 [ 168.552135][ T8298] EXT4-fs: Ignoring removed bh option [ 168.557593][ T8298] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.564662][ T8298] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 168.574916][ T8298] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 168.583297][ T8298] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.590184][ T8298] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 168.604356][ T8298] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 168.615858][ T8298] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.3826: Failed to acquire dquot type 1 [ 168.627889][ T8298] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.3826: Invalid block bitmap block 0 in block_group 0 [ 168.641951][ T8298] Quota error (device loop3): write_blk: dquota write failed [ 168.649668][ T8298] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 168.660899][ T8298] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.3826: Failed to acquire dquot type 1 [ 168.672537][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.678286][ T8298] Quota error (device loop3): write_blk: dquota write failed [ 168.696729][ T8298] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 168.706698][ T8298] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.3826: Failed to acquire dquot type 1 [ 168.719560][ T8298] EXT4-fs (loop3): 1 orphan inode deleted [ 168.725699][ T8298] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.756104][ T287] EXT4-fs (loop3): unmounting filesystem. [ 168.761932][ T8298] syz.3.3826 (8298) used greatest stack depth: 21088 bytes left [ 168.968433][ T347] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 169.003504][ T8340] loop1: detected capacity change from 0 to 1024 [ 169.011455][ T8340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.020191][ T8340] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 169.030154][ T8340] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 169.040082][ T8340] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 169.050032][ T8340] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26909!=20869) [ 169.059986][ T8340] EXT4-fs error (device loop1): ext4_get_journal_inode:5724: inode #5: comm syz.1.3846: unexpected bad inode w/o EXT4_IGET_BAD [ 169.073301][ T8340] EXT4-fs (loop1): no journal found [ 169.078547][ T8340] EXT4-fs (loop1): can't get journal size [ 169.084476][ T8340] EXT4-fs error (device loop1): __ext4_fill_super:5391: inode #2: comm syz.1.3846: iget: special inode unallocated [ 169.096661][ T60] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 169.104404][ T8340] EXT4-fs (loop1): get root inode failed [ 169.110260][ T8340] EXT4-fs (loop1): mount failed [ 169.128836][ T362] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 169.136359][ T3847] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 169.172645][ T347] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 169.185490][ T347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.195757][ T347] usb 3-1: config 0 has no interface number 0 [ 169.203287][ T347] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 169.216943][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.224970][ T347] usb 3-1: Product: syz [ 169.229224][ T347] usb 3-1: Manufacturer: syz [ 169.233810][ T347] usb 3-1: SerialNumber: syz [ 169.241839][ T347] usb 3-1: config 0 descriptor?? [ 169.299877][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 169.306338][ T60] usb 4-1: descriptor type invalid, skip [ 169.313264][ T60] usb 4-1: config 0 has no interfaces? [ 169.320353][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 169.329549][ T60] usb 4-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 169.333133][ T362] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 169.337761][ T60] usb 4-1: Product: syz [ 169.346238][ T3847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.350221][ T60] usb 4-1: Manufacturer: syz [ 169.358195][ T362] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 169.362550][ T60] usb 4-1: SerialNumber: syz [ 169.371093][ T362] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 169.380410][ T60] usb 4-1: config 0 descriptor?? [ 169.388972][ T362] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 169.399912][ T3847] usb 1-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 169.411238][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4 [ 169.422216][ T3847] usb 1-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 169.435530][ T362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 169.448548][ T3847] usb 1-1: config 1 interface 2 has no altsetting 2 [ 169.455217][ T3847] usb 1-1: config 1 interface 1 has no altsetting 0 [ 169.464086][ T3847] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.464262][ T347] usb 3-1: USB disconnect, device number 88 [ 169.473688][ T362] usb 5-1: string descriptor 0 read error: -22 [ 169.485394][ T3847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.493456][ T362] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 169.502534][ T3847] usb 1-1: Product: syz [ 169.506753][ T3847] usb 1-1: Manufacturer: syz [ 169.511343][ T3847] usb 1-1: SerialNumber: syz [ 169.516011][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.524990][ T362] usb 5-1: config 0 descriptor?? [ 169.530658][ T362] hub 5-1:0.0: bad descriptor, ignoring hub [ 169.536593][ T362] hub: probe of 5-1:0.0 failed with error -5 [ 169.629436][ T362] usb 4-1: USB disconnect, device number 83 [ 169.717283][ T60] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 169.749131][ T3847] usb 1-1: USB disconnect, device number 85 [ 169.877311][ T347] usb 5-1: USB disconnect, device number 87 [ 169.921150][ T60] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 169.929453][ T60] usb 2-1: config 0 has no interface number 0 [ 169.935539][ T60] usb 2-1: config 0 interface 108 has no altsetting 0 [ 169.943790][ T60] usb 2-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice=42.b7 [ 169.952866][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.960835][ T60] usb 2-1: Product: syz [ 169.965005][ T60] usb 2-1: Manufacturer: syz [ 169.969585][ T60] usb 2-1: SerialNumber: syz [ 169.974769][ T60] usb 2-1: config 0 descriptor?? [ 169.984867][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 170.195489][ T60] ftdi_sio 2-1:0.108: FTDI USB Serial Device converter detected [ 170.204247][ T60] ftdi_sio ttyUSB0: unknown device type: 0x42b7 [ 170.214721][ T60] usb 2-1: USB disconnect, device number 80 [ 170.222397][ T60] ftdi_sio 2-1:0.108: device disconnected [ 170.636408][ T347] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 170.657948][ T3847] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 170.732650][ T1122] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 170.840550][ T347] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 170.848794][ T347] usb 4-1: config 0 has no interface number 0 [ 170.856240][ T347] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 170.860934][ T3847] usb 1-1: Using ep0 maxpacket: 8 [ 170.865465][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.871458][ T3847] usb 1-1: config index 0 descriptor too short (expected 546, got 34) [ 170.878391][ T347] usb 4-1: Product: syz [ 170.886654][ T3847] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 170.891542][ T347] usb 4-1: Manufacturer: syz [ 170.898800][ T3847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.903392][ T347] usb 4-1: SerialNumber: syz [ 170.913553][ T3847] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 170.918830][ T347] usb 4-1: config 0 descriptor?? [ 170.931758][ T3847] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 170.933254][ T1122] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.940912][ T3847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.949151][ T1122] usb 5-1: not running at top speed; connect to a high speed hub [ 170.965228][ T1122] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 170.965369][ T3847] usb 1-1: config 0 descriptor?? [ 170.978379][ T1122] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 170.988542][ T1122] usb 5-1: config 4 has no interface number 0 [ 170.989281][ T362] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 170.996133][ T1122] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 171.011354][ T1122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.019358][ T1122] usb 5-1: Product: syz [ 171.023536][ T1122] usb 5-1: Manufacturer: syz [ 171.028138][ T1122] usb 5-1: SerialNumber: syz [ 171.085502][ T643] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 171.147487][ T347] asix: probe of 4-1:0.251 failed with error -71 [ 171.157138][ T347] usb 4-1: USB disconnect, device number 84 [ 171.204993][ T362] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 171.215403][ T362] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 171.224769][ T362] usb 3-1: config 220 interface 0 has no altsetting 0 [ 171.233044][ T1187] usb 1-1: USB disconnect, device number 86 [ 171.233142][ T362] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 171.248098][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.252720][ T1122] usb 5-1: USB disconnect, device number 88 [ 171.277941][ T643] usb 2-1: Using ep0 maxpacket: 16 [ 171.277942][ T362] usb 3-1: Product: syz [ 171.281042][ T643] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 171.283219][ T362] usb 3-1: Manufacturer: syz [ 171.287249][ T643] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.313760][ T643] usb 2-1: config 0 has no interface number 0 [ 171.316928][ T362] usb 3-1: SerialNumber: syz [ 171.319860][ T643] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 171.333776][ T643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.345231][ T643] usb 2-1: config 0 descriptor?? [ 171.566626][ T362] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 171.572578][ T1122] usb 2-1: USB disconnect, device number 81 [ 171.574843][ T362] usb 3-1: No valid video chain found. [ 171.586263][ T362] usb 3-1: USB disconnect, device number 89 [ 172.010103][ T8476] loop4: detected capacity change from 0 to 16 [ 172.026227][ T8476] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.045717][ T8478] loop4: detected capacity change from 0 to 16 [ 172.054866][ T8478] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.119403][ T8484] loop4: detected capacity change from 0 to 512 [ 172.154758][ T362] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 172.186872][ T8484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 172.211800][ T8484] ext4 filesystem being mounted at /749/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.224001][ T8492] loop2: detected capacity change from 0 to 2048 [ 172.234131][ T8496] loop1: detected capacity change from 0 to 2048 [ 172.267989][ T285] EXT4-fs (loop4): unmounting filesystem. [ 172.287610][ T8496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.306056][ T8492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.351984][ T283] EXT4-fs (loop2): unmounting filesystem. [ 172.359509][ T284] EXT4-fs (loop1): unmounting filesystem. [ 172.368790][ T362] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 172.377069][ T362] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 172.419821][ T362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.432484][ T8513] loop2: detected capacity change from 0 to 512 [ 172.441259][ T8511] loop1: detected capacity change from 0 to 512 [ 172.448129][ T362] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.458841][ T8513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.461560][ T362] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 172.479622][ T283] EXT4-fs (loop2): unmounting filesystem. [ 172.496872][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.505890][ T8511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.516382][ T362] usb 4-1: config 0 descriptor?? [ 172.551271][ T8505] loop4: detected capacity change from 0 to 40427 [ 172.553245][ T8518] loop2: detected capacity change from 0 to 1024 [ 172.560582][ T8505] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 172.571714][ T8505] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 172.573130][ T284] EXT4-fs (loop1): unmounting filesystem. [ 172.597079][ T8518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.614209][ T8521] loop1: detected capacity change from 0 to 2048 [ 172.632766][ T8523] loop4: detected capacity change from 0 to 1024 [ 172.643695][ T283] EXT4-fs (loop2): unmounting filesystem. [ 172.663497][ T8526] loop2: detected capacity change from 0 to 512 [ 172.667978][ T363] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 172.679309][ T8523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.701015][ T285] EXT4-fs (loop4): unmounting filesystem. [ 172.710467][ T8521] loop1: unable to read partition table [ 172.716351][ T8521] loop1: partition table beyond EOD, truncated [ 172.723984][ T8521] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 172.739408][ T362] usb 4-1: USB disconnect, device number 85 [ 172.750689][ T8526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.769135][ T283] EXT4-fs (loop2): unmounting filesystem. [ 172.772624][ T8532] loop4: detected capacity change from 0 to 512 [ 172.783828][ T8532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.793463][ T103] loop1: unable to read partition table [ 172.799961][ T103] loop1: partition table beyond EOD, truncated [ 172.807274][ T285] EXT4-fs (loop4): unmounting filesystem. [ 172.842952][ T8538] loop2: detected capacity change from 0 to 512 [ 172.843248][ T8539] loop4: detected capacity change from 0 to 512 [ 172.861665][ T8538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.865746][ T447] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.874383][ T8538] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.893115][ T8539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 172.901595][ T8539] ext4 filesystem being mounted at /755/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.904831][ T363] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.935238][ T285] EXT4-fs (loop4): unmounting filesystem. [ 172.941903][ T283] EXT4-fs (loop2): unmounting filesystem. [ 172.952291][ T363] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 172.961555][ T363] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.963706][ T8545] loop4: detected capacity change from 0 to 4096 [ 172.984006][ T363] usb 1-1: config 1 has no interface number 1 [ 172.990346][ T363] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 173.003760][ T363] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 173.004927][ T8545] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.027760][ T363] usb 1-1: string descriptor 0 read error: -22 [ 173.035821][ T363] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.046005][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.054629][ T285] EXT4-fs (loop4): unmounting filesystem. [ 173.056286][ T363] usb 1-1: low speed audio streaming not supported [ 173.159763][ T347] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 173.296002][ T1122] usb 1-1: USB disconnect, device number 87 [ 173.298757][ T6] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 173.326147][ T8552] loop3: detected capacity change from 0 to 2048 [ 173.343202][ T8552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.352203][ T347] usb 2-1: Using ep0 maxpacket: 8 [ 173.358900][ T347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.371417][ T8550] loop4: detected capacity change from 0 to 131072 [ 173.378477][ T8550] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 173.383763][ T347] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.387449][ T8550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 173.404850][ T347] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 173.406690][ T8550] F2FS-fs (loop4): invalid crc value [ 173.416128][ T347] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.434032][ T287] EXT4-fs (loop3): unmounting filesystem. [ 173.436271][ T347] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.452594][ T8550] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 173.459489][ T8556] loop3: detected capacity change from 0 to 1024 [ 173.471531][ T8556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.475368][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.488572][ T347] usb 2-1: Product: syz [ 173.493329][ T287] EXT4-fs (loop3): unmounting filesystem. [ 173.493438][ T347] usb 2-1: Manufacturer: syz [ 173.504134][ T347] usb 2-1: SerialNumber: syz [ 173.509199][ T8550] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 173.516516][ T8542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.516691][ T8550] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 173.524429][ T8542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.531212][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 173.576133][ T6] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 173.587861][ T8561] loop3: detected capacity change from 0 to 512 [ 173.594239][ T6] usb 3-1: config 0 has no interface number 0 [ 173.600372][ T6] usb 3-1: config 0 interface 225 has no altsetting 0 [ 173.626184][ T8561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.630923][ T6] usb 3-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice=73.6a [ 173.646666][ T287] EXT4-fs (loop3): unmounting filesystem. [ 173.663064][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.676666][ T6] usb 3-1: Product: syz [ 173.682303][ T6] usb 3-1: Manufacturer: syz [ 173.686949][ T6] usb 3-1: SerialNumber: syz [ 173.695935][ T8567] loop3: detected capacity change from 0 to 2048 [ 173.703440][ T6] usb 3-1: config 0 descriptor?? [ 173.718183][ T8567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.727363][ T8567] ext4 filesystem being mounted at /715/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.753414][ T287] EXT4-fs (loop3): unmounting filesystem. [ 173.785771][ T347] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 173.802669][ T8572] loop3: detected capacity change from 0 to 1024 [ 173.809151][ T347] usb 2-1: USB disconnect, device number 82 [ 173.825795][ T8572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.840508][ T287] EXT4-fs (loop3): unmounting filesystem. [ 173.928237][ T6] snd-usb-audio: probe of 3-1:0.225 failed with error -2 [ 173.945765][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.225/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.947891][ T6] usb 3-1: USB disconnect, device number 90 [ 174.122110][ T362] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 174.132879][ T363] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 174.315587][ T362] usb 5-1: config 5 has an invalid interface number: 3 but max is 0 [ 174.323606][ T362] usb 5-1: config 5 has no interface number 0 [ 174.329834][ T363] usb 4-1: Using ep0 maxpacket: 32 [ 174.336142][ T363] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 174.344310][ T363] usb 4-1: config 0 has no interface number 0 [ 174.350604][ T363] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 174.360823][ T362] usb 5-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 174.369910][ T363] usb 4-1: config 0 interface 196 has no altsetting 0 [ 174.376723][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.385025][ T362] usb 5-1: Product: syz [ 174.389286][ T362] usb 5-1: Manufacturer: syz [ 174.394126][ T362] usb 5-1: SerialNumber: syz [ 174.399510][ T363] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 174.408927][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.418792][ T362] ftdi_sio 5-1:5.3: FTDI USB Serial Device converter detected [ 174.427032][ T8597] loop1: detected capacity change from 0 to 512 [ 174.430742][ T362] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 174.439563][ T363] usb 4-1: Product: syz [ 174.444995][ T363] usb 4-1: Manufacturer: syz [ 174.449594][ T363] usb 4-1: SerialNumber: syz [ 174.455844][ T363] usb 4-1: config 0 descriptor?? [ 174.461120][ T8577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 174.477586][ T8597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 174.501412][ T284] EXT4-fs (loop1): unmounting filesystem. [ 174.535233][ T8601] loop2: detected capacity change from 0 to 2048 [ 174.569534][ T8601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.584020][ T8601] ext4 filesystem being mounted at /732/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.660730][ T283] EXT4-fs (loop2): unmounting filesystem. [ 174.670940][ T362] usb 5-1: USB disconnect, device number 89 [ 174.684769][ T362] ftdi_sio 5-1:5.3: device disconnected [ 174.690708][ T363] ipheth 4-1:0.196: Unable to find endpoints [ 174.709539][ T363] usb 4-1: USB disconnect, device number 86 [ 174.738982][ T8608] loop2: detected capacity change from 0 to 128 [ 174.808637][ T8610] loop2: detected capacity change from 0 to 1024 [ 174.838748][ T8610] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 174.937523][ T8614] loop2: detected capacity change from 0 to 8192 [ 175.026702][ T8618] loop2: detected capacity change from 0 to 512 [ 175.088265][ T8620] loop2: detected capacity change from 0 to 256 [ 175.134006][ T8622] loop2: detected capacity change from 0 to 2048 [ 175.149600][ T8603] loop1: detected capacity change from 0 to 131072 [ 175.199131][ T8603] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.213132][ T8622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.278901][ T8630] loop3: detected capacity change from 0 to 512 [ 175.296930][ T8632] loop4: detected capacity change from 0 to 128 [ 175.304713][ T283] EXT4-fs (loop2): unmounting filesystem. [ 175.357499][ T8634] loop2: detected capacity change from 0 to 512 [ 175.365065][ T8603] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955 [ 175.462064][ T8641] loop2: detected capacity change from 0 to 256 [ 175.505101][ T8643] loop2: detected capacity change from 0 to 512 [ 175.541655][ T8645] loop2: detected capacity change from 0 to 128 [ 175.593173][ T8647] loop2: detected capacity change from 0 to 512 [ 175.672512][ T347] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 175.685382][ T8651] loop1: detected capacity change from 0 to 1024 [ 175.693891][ T1122] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 175.704247][ T8651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.733573][ T284] EXT4-fs (loop1): unmounting filesystem. [ 175.767419][ T8654] loop1: detected capacity change from 0 to 2048 [ 175.813489][ T8656] loop1: detected capacity change from 0 to 512 [ 175.875651][ T347] usb 4-1: Using ep0 maxpacket: 32 [ 175.876066][ T8658] loop1: detected capacity change from 0 to 8192 [ 175.882935][ T347] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 175.896033][ T347] usb 4-1: config 0 has no interface number 0 [ 175.902320][ T347] usb 4-1: config 0 interface 230 has no altsetting 0 [ 175.909217][ T643] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 175.917831][ T1122] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 175.926410][ T1122] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.936634][ T1122] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 175.940005][ T8658] loop1: p1 p2 p3 [ 175.948289][ T1122] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 175.948381][ T347] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 175.975449][ T1122] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 175.984394][ T1122] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.995614][ T1122] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 176.007124][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.015768][ T347] usb 4-1: Product: syz [ 176.020575][ T1122] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 176.040230][ T347] usb 4-1: Manufacturer: syz [ 176.045174][ T347] usb 4-1: SerialNumber: syz [ 176.058165][ T347] usb 4-1: config 0 descriptor?? [ 176.066476][ T7068] udevd[7068]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 176.078025][ T7070] udevd[7070]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 176.091063][ T1122] usb 5-1: string descriptor 0 read error: -71 [ 176.096453][ T335] udevd[335]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 176.097252][ T1122] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.116408][ T347] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 176.123668][ T643] usb 3-1: Using ep0 maxpacket: 32 [ 176.130268][ T643] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.140713][ T643] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.150165][ T1122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.158687][ T347] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 176.175014][ T643] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.184070][ T643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.192377][ T1122] usb 5-1: can't set config #1, error -71 [ 176.196542][ T8660] loop1: detected capacity change from 0 to 32768 [ 176.207773][ T643] usb 3-1: Product: syz [ 176.211943][ T643] usb 3-1: Manufacturer: syz [ 176.218564][ T643] usb 3-1: SerialNumber: syz [ 176.224222][ T1122] usb 5-1: USB disconnect, device number 90 [ 176.295365][ T362] usb 4-1: USB disconnect, device number 87 [ 176.447489][ T643] usb 3-1: 0:2 : does not exist [ 176.465010][ T643] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 176.472944][ T8664] loop1: detected capacity change from 0 to 32768 [ 176.481002][ T643] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 176.497643][ T643] usb 3-1: USB disconnect, device number 91 [ 176.595720][ T8670] loop1: detected capacity change from 0 to 8192 [ 176.634440][ T8674] loop1: detected capacity change from 0 to 4096 [ 176.642616][ T8674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.663165][ T284] EXT4-fs (loop1): unmounting filesystem. [ 176.671339][ T8677] loop4: detected capacity change from 0 to 512 [ 176.724343][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.749502][ T28] audit: type=1400 audit(1762619218.168:254): avc: denied { write } for pid=8682 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.866428][ T28] audit: type=1400 audit(1762619218.271:255): avc: denied { write } for pid=8694 comm="syz.3.4003" name="igmp6" dev="proc" ino=4026532719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 176.900083][ T8697] netlink: 'syz.4.4004': attribute type 32 has an invalid length. [ 176.908020][ T28] audit: type=1400 audit(1762619218.308:256): avc: denied { create } for pid=8696 comm="syz.4.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.944480][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4005'. [ 176.962382][ T28] audit: type=1400 audit(1762619218.308:257): avc: denied { write } for pid=8696 comm="syz.4.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.012502][ T28] audit: type=1400 audit(1762619218.308:258): avc: denied { nlmsg_write } for pid=8696 comm="syz.4.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.089803][ T28] audit: type=1400 audit(1762619218.365:259): avc: denied { read } for pid=8701 comm="syz.4.4006" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.117058][ T8685] loop1: detected capacity change from 0 to 32768 [ 177.124463][ T8722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.133044][ T28] audit: type=1400 audit(1762619218.365:260): avc: denied { open } for pid=8701 comm="syz.4.4006" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.167503][ T28] audit: type=1400 audit(1762619218.365:261): avc: denied { ioctl } for pid=8701 comm="syz.4.4006" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.194311][ T28] audit: type=1326 audit(1762619218.411:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.3.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca8b8efc9 code=0x7ffc0000 [ 177.212996][ T8726] loop1: detected capacity change from 0 to 128 [ 177.220299][ T28] audit: type=1326 audit(1762619218.411:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.3.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fbca8b8efc9 code=0x7ffc0000 [ 177.349523][ T8742] loop1: detected capacity change from 0 to 256 [ 177.369438][ T8742] FAT-fs (loop1): Directory bread(block 64) failed [ 177.380065][ T8742] FAT-fs (loop1): Directory bread(block 65) failed [ 177.387057][ T8742] FAT-fs (loop1): Directory bread(block 66) failed [ 177.393631][ T8742] FAT-fs (loop1): Directory bread(block 67) failed [ 177.393855][ T1122] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 177.400713][ T8742] FAT-fs (loop1): Directory bread(block 68) failed [ 177.414352][ T362] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 177.422810][ T8742] FAT-fs (loop1): Directory bread(block 69) failed [ 177.429616][ T8742] FAT-fs (loop1): Directory bread(block 70) failed [ 177.436308][ T8742] FAT-fs (loop1): Directory bread(block 71) failed [ 177.443064][ T8742] FAT-fs (loop1): Directory bread(block 72) failed [ 177.449725][ T8742] FAT-fs (loop1): Directory bread(block 73) failed [ 177.598097][ T1122] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 177.606359][ T1122] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.616547][ T1122] usb 4-1: config 1 has no interface number 0 [ 177.618382][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 177.622709][ T1122] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.640498][ T362] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 177.640859][ T60] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 177.659210][ T1122] usb 4-1: config 1 interface 105 has no altsetting 0 [ 177.661157][ T362] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.667496][ T1122] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 177.685946][ T1122] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 177.694491][ T1122] usb 4-1: Product: syz [ 177.694692][ T362] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.698784][ T1122] usb 4-1: Manufacturer: syz [ 177.712376][ T1122] usb 4-1: SerialNumber: syz [ 177.714617][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.725538][ T362] usb 3-1: Product: syz [ 177.729701][ T362] usb 3-1: Manufacturer: syz [ 177.734282][ T362] usb 3-1: SerialNumber: syz [ 177.853656][ T6] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 177.864458][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 177.870997][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.880316][ T60] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 177.888606][ T60] usb 5-1: config 0 has no interface number 0 [ 177.894752][ T60] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 177.906033][ T60] usb 5-1: config 0 interface 88 has no altsetting 0 [ 177.915025][ T60] usb 5-1: string descriptor 0 read error: -22 [ 177.921492][ T60] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 177.930811][ T60] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 177.940145][ T1122] aqc111: probe of 4-1:1.105 failed with error -22 [ 177.952311][ T60] usb 5-1: config 0 descriptor?? [ 177.959634][ T60] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input15 [ 177.963393][ T362] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 178.012580][ T362] usb 3-1: USB disconnect, device number 92 [ 178.046083][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 178.052316][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.069477][ T6] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 178.088934][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.096940][ T6] usb 2-1: Product: syz [ 178.110223][ T6] usb 2-1: Manufacturer: syz [ 178.138878][ T6] usb 2-1: SerialNumber: syz [ 178.151940][ T6] usb 2-1: config 0 descriptor?? [ 178.158707][ T6] asix: probe of 2-1:0.0 failed with error -22 [ 178.165408][ T60] usb 4-1: USB disconnect, device number 88 [ 178.189636][ T6] usb 5-1: USB disconnect, device number 91 [ 178.376649][ T643] usb 2-1: USB disconnect, device number 83 [ 178.420399][ T1122] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 178.612788][ T1122] usb 1-1: Using ep0 maxpacket: 32 [ 178.619011][ T1122] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 178.627553][ T1122] usb 1-1: config 0 has no interface number 0 [ 178.633661][ T1122] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 178.643776][ T1122] usb 1-1: config 0 interface 196 has no altsetting 0 [ 178.652091][ T1122] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 178.661245][ T1122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.669343][ T1122] usb 1-1: Product: syz [ 178.673490][ T1122] usb 1-1: Manufacturer: syz [ 178.678183][ T1122] usb 1-1: SerialNumber: syz [ 178.683703][ T1122] usb 1-1: config 0 descriptor?? [ 178.689030][ T8754] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 178.745586][ T8762] loop3: detected capacity change from 0 to 256 [ 178.763708][ T8762] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 178.798588][ T8762] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 178.856197][ T8776] device batadv_slave_0 entered promiscuous mode [ 178.864229][ T8776] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 178.875256][ T8756] loop2: detected capacity change from 0 to 65536 [ 178.913318][ T1122] ipheth 1-1:0.196: Unable to find endpoints [ 178.938250][ T1122] usb 1-1: USB disconnect, device number 88 [ 178.974344][ T8794] loop3: detected capacity change from 0 to 256 [ 179.003396][ T8794] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 179.054519][ T8801] loop2: detected capacity change from 0 to 2048 [ 179.113612][ T8805] loop3: detected capacity change from 0 to 256 [ 179.125309][ T8807] loop2: detected capacity change from 0 to 128 [ 179.143997][ T8807] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 179.157796][ T8805] FAT-fs (loop3): Directory bread(block 64) failed [ 179.165351][ T8807] FAT-fs (loop2): Filesystem has been set read-only [ 179.174223][ T8805] FAT-fs (loop3): Directory bread(block 65) failed [ 179.197311][ T8805] FAT-fs (loop3): Directory bread(block 66) failed [ 179.216784][ T8805] FAT-fs (loop3): Directory bread(block 67) failed [ 179.224892][ T8805] FAT-fs (loop3): Directory bread(block 68) failed [ 179.238496][ T8805] FAT-fs (loop3): Directory bread(block 69) failed [ 179.246638][ T8813] Driver unsupported XDP return value 0 on prog (id 440) dev N/A, expect packet loss! [ 179.249752][ T8805] FAT-fs (loop3): Directory bread(block 70) failed [ 179.263008][ T8805] FAT-fs (loop3): Directory bread(block 71) failed [ 179.270342][ T8805] FAT-fs (loop3): Directory bread(block 72) failed [ 179.270367][ T8805] FAT-fs (loop3): Directory bread(block 73) failed [ 179.337389][ T8821] x_tables: duplicate entry at hook 2 [ 179.451490][ T8842] ipt_REJECT: ECHOREPLY no longer supported. [ 179.603432][ T8866] loop3: detected capacity change from 0 to 256 [ 179.741985][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4098'. [ 179.771394][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'. [ 179.796353][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'. [ 179.872437][ T8906] netlink: 'syz.0.4106': attribute type 16 has an invalid length. [ 180.132578][ T8944] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 180.177830][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 180.188471][ T8948] loop2: detected capacity change from 0 to 256 [ 180.229330][ T8952] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.252272][ T8948] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.614456][ T9010] loop2: detected capacity change from 0 to 128 [ 180.780682][ T9031] loop2: detected capacity change from 0 to 512 [ 180.806175][ T9031] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.832784][ T9031] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.847338][ T9031] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.4168: bad orphan inode 15 [ 180.871520][ T9031] ext4_test_bit(bit=14, block=18) = 1 [ 180.876922][ T9031] is_bad_inode(inode)=0 [ 180.923597][ T9031] NEXT_ORPHAN(inode)=1023 [ 180.927967][ T9031] max_ino=32 [ 180.931158][ T9031] i_nlink=0 [ 180.965112][ T9031] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #15: comm syz.2.4168: corrupted xattr block 19 [ 180.986964][ T9031] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 180.996053][ T9031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 181.062067][ T283] EXT4-fs (loop2): unmounting filesystem. [ 181.084049][ T9058] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 181.220198][ T8791] loop4: detected capacity change from 0 to 262144 [ 181.389139][ T9105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4205'. [ 181.618442][ T9135] netlink: 'syz.2.4219': attribute type 6 has an invalid length. [ 181.687013][ T9144] loop2: detected capacity change from 0 to 256 [ 181.758958][ T9144] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 181.834052][ T9144] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 181.987808][ T8876] loop1: detected capacity change from 0 to 262144 [ 182.032446][ T9190] loop2: detected capacity change from 0 to 256 [ 182.085998][ T9190] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 182.158584][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 182.158600][ T28] audit: type=1400 audit(1762619223.228:306): avc: denied { getopt } for pid=9211 comm="syz.1.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.163024][ T9214] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 182.262507][ T643] hid-generic 0002:0004:F02C.0001: unknown main item tag 0xd [ 182.272991][ T643] hid-generic 0002:0004:F02C.0001: unknown main item tag 0x4 [ 182.297545][ T643] hid-generic 0002:0004:F02C.0001: item fetching failed at offset 15/54 [ 182.313121][ T643] hid-generic: probe of 0002:0004:F02C.0001 failed with error -22 [ 182.396088][ T28] audit: type=1326 audit(1762619223.443:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc425b8efc9 code=0x7ffc0000 [ 182.430692][ T9254] loop4: detected capacity change from 0 to 256 [ 182.460635][ T9265] netlink: 'syz.1.4282': attribute type 32 has an invalid length. [ 182.469978][ T28] audit: type=1326 audit(1762619223.471:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc425b8efc9 code=0x7ffc0000 [ 182.473888][ T9256] kernel read not supported for file /policy (pid: 9256 comm: syz.3.4276) [ 182.535478][ T9254] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 182.594112][ T28] audit: type=1326 audit(1762619223.471:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fc425b8efc9 code=0x7ffc0000 [ 182.656370][ T28] audit: type=1326 audit(1762619223.471:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc425b8efc9 code=0x7ffc0000 [ 182.681622][ T9277] loop2: detected capacity change from 0 to 4096 [ 182.698591][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'. [ 182.707570][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4293'. [ 182.715022][ T9277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.740707][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4297'. [ 182.770101][ T9297] loop1: detected capacity change from 0 to 256 [ 182.776486][ T28] audit: type=1326 audit(1762619223.471:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc425b8efc9 code=0x7ffc0000 [ 182.800264][ T9277] EXT4-fs (loop2): Test dummy encryption mode enabled [ 182.839198][ T9297] FAT-fs (loop1): Directory bread(block 64) failed [ 182.847959][ T9303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4303'. [ 182.856956][ T28] audit: type=1400 audit(1762619223.527:312): avc: denied { module_load } for pid=9253 comm="syz.3.4276" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 182.882241][ T9297] FAT-fs (loop1): Directory bread(block 65) failed [ 182.884462][ T9277] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 182.888932][ T9297] FAT-fs (loop1): Directory bread(block 66) failed [ 182.905558][ T9277] System zones: 0-5 [ 182.909831][ T9303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4303'. [ 182.919116][ T28] audit: type=1400 audit(1762619223.621:313): avc: denied { rmdir } for pid=9250 comm="syz.4.4278" name="file2" dev="loop4" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.941804][ T9277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.953811][ T9297] FAT-fs (loop1): Directory bread(block 67) failed [ 182.960373][ T9297] FAT-fs (loop1): Directory bread(block 68) failed [ 182.967586][ T9297] FAT-fs (loop1): Directory bread(block 69) failed [ 183.021571][ T9297] FAT-fs (loop1): Directory bread(block 70) failed [ 183.028208][ T9297] FAT-fs (loop1): Directory bread(block 71) failed [ 183.037009][ T9297] FAT-fs (loop1): Directory bread(block 72) failed [ 183.045245][ T9297] FAT-fs (loop1): Directory bread(block 73) failed [ 183.071167][ T283] EXT4-fs (loop2): unmounting filesystem. [ 183.101505][ T28] audit: type=1400 audit(1762619224.107:314): avc: denied { ioctl } for pid=9329 comm="syz.4.4314" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.243635][ T28] audit: type=1400 audit(1762619224.247:315): avc: denied { write } for pid=9358 comm="syz.1.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.259679][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4331'. [ 183.332540][ T9375] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 183.344215][ T9377] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.366572][ T9375] SELinux: failed to load policy [ 183.418776][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4344'. [ 183.455429][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4349'. [ 183.480099][ T9405] loop1: detected capacity change from 0 to 256 [ 183.609166][ T9431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 183.672086][ T9446] netlink: 600 bytes leftover after parsing attributes in process `syz.4.4370'. [ 183.695299][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4370'. [ 183.932205][ T9505] device ip6gretap2 entered promiscuous mode [ 183.976875][ T9517] tc_dump_action: action bad kind [ 184.108561][ T643] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 184.185957][ T9561] netlink: 'syz.4.4426': attribute type 1 has an invalid length. [ 184.196531][ T9561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.243056][ T9573] xt_l2tp: v2 doesn't support IP mode [ 184.326308][ T643] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 184.348202][ T643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.380954][ T643] usb 4-1: config 0 descriptor?? [ 184.535193][ T9626] ip6t_REJECT: ECHOREPLY is not supported [ 184.563104][ T9630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.686909][ T347] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 184.694582][ T60] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 184.739395][ T1122] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 184.815765][ T643] usb 4-1: Cannot set MAC address [ 184.820913][ T643] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 184.832392][ T643] usb 4-1: USB disconnect, device number 89 [ 184.899815][ T347] usb 3-1: Using ep0 maxpacket: 8 [ 184.907554][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.916117][ T60] usb 5-1: not running at top speed; connect to a high speed hub [ 184.926616][ T347] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 184.935730][ T347] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 184.946465][ T347] usb 3-1: config 135 has no interface number 0 [ 184.953873][ T60] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.962952][ T347] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 184.974504][ T60] usb 5-1: config 1 has no interface number 1 [ 184.981151][ T1122] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.988883][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.002302][ T347] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 185.016119][ T347] usb 3-1: config 135 interface 230 has no altsetting 0 [ 185.023349][ T1122] usb 2-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 185.034733][ T1122] usb 2-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 185.040720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.048445][ T1122] usb 2-1: config 1 interface 2 has no altsetting 2 [ 185.063456][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.073050][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.081324][ T347] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 185.090637][ T1122] usb 2-1: config 1 interface 1 has no altsetting 0 [ 185.097719][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.105793][ T60] usb 5-1: Product: syz [ 185.110041][ T60] usb 5-1: Manufacturer: syz [ 185.114720][ T347] usb 3-1: Product: syz [ 185.118954][ T60] usb 5-1: SerialNumber: syz [ 185.123650][ T347] usb 3-1: Manufacturer: syz [ 185.129608][ T1122] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.138769][ T347] usb 3-1: SerialNumber: syz [ 185.143914][ T1122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.152944][ T1122] usb 2-1: Product: syz [ 185.157703][ T1122] usb 2-1: Manufacturer: syz [ 185.162345][ T1122] usb 2-1: SerialNumber: syz [ 185.299769][ T9721] netlink: 'syz.0.4506': attribute type 49 has an invalid length. [ 185.307762][ T9721] netlink: 'syz.0.4506': attribute type 49 has an invalid length. [ 185.371698][ T60] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 185.396996][ T60] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 185.410088][ T9695] usb 3-1: USB disconnect, device number 93 [ 185.421554][ T60] usb 5-1: USB disconnect, device number 92 [ 185.430737][ T1122] usb 2-1: USB disconnect, device number 84 [ 185.755161][ T635] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 185.959073][ T9851] loop2: detected capacity change from 0 to 512 [ 185.965562][ T635] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.965588][ T635] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.967061][ T635] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.967089][ T635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.967110][ T635] usb 1-1: Product: syz [ 185.967131][ T635] usb 1-1: Manufacturer: syz [ 185.967146][ T635] usb 1-1: SerialNumber: syz [ 186.012762][ T9851] EXT4-fs (loop2): orphan cleanup on readonly fs [ 186.056785][ T9851] EXT4-fs warning (device loop2): ext4_xattr_inode_get:509: inode #11: comm syz.2.4572: EA inode hash validation failed [ 186.070910][ T9851] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.4572: corrupted inode contents [ 186.084435][ T9851] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #15: comm syz.2.4572: mark_inode_dirty error [ 186.106674][ T9851] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.4572: corrupted inode contents [ 186.122983][ T9851] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2963: inode #15: comm syz.2.4572: mark_inode_dirty error [ 186.137733][ T9851] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2966: inode #15: comm syz.2.4572: mark inode dirty (error -117) [ 186.161016][ T9851] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 186.170169][ T9851] EXT4-fs (loop2): 1 orphan inode deleted [ 186.176371][ T9851] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.244215][ T283] EXT4-fs (loop2): unmounting filesystem. [ 186.314519][ T9906] futex_wake_op: syz.2.4596 tries to shift op by 32; fix this program [ 186.400186][ T635] usb 1-1: skipping empty audio interface (v1) [ 186.429062][ T635] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 186.453891][ T635] usb 1-1: USB disconnect, device number 89 [ 186.472865][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.593815][ T9971] loop3: detected capacity change from 0 to 128 [ 186.627157][ T9977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.637155][ T9977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.655624][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 186.669851][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.701445][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 186.710909][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.719925][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.728836][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.736996][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.745143][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.971931][T10024] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 187.289291][T10078] IPv6: Can't replace route, no match found [ 187.429401][T10108] netlink: 'syz.4.4694': attribute type 5 has an invalid length. [ 187.665058][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 187.665070][ T28] audit: type=1400 audit(1762619228.372:350): avc: denied { read } for pid=10163 comm="syz.1.4722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.701068][ T1122] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 187.793603][T10180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.818679][ T9695] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 187.895939][ T1122] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 187.911341][ T1122] usb 3-1: config 0 has no interface number 0 [ 187.925376][ T1122] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 187.937955][T10210] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.946021][ T1122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.955404][ T1122] usb 3-1: Product: syz [ 187.959717][ T1122] usb 3-1: Manufacturer: syz [ 187.964317][ T1122] usb 3-1: SerialNumber: syz [ 187.971852][ T1122] usb 3-1: config 0 descriptor?? [ 188.008440][ T28] audit: type=1400 audit(1762619228.699:351): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.035841][ T28] audit: type=1400 audit(1762619228.699:352): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.038010][ T9695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.062542][ T28] audit: type=1400 audit(1762619228.699:353): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.070542][ T9695] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.096342][ T28] audit: type=1400 audit(1762619228.727:354): avc: denied { ioctl } for pid=10130 comm="syz.3.4706" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.106425][ T9695] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.147072][ T9695] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 188.154166][ T28] audit: type=1400 audit(1762619228.830:355): avc: denied { create } for pid=10223 comm="syz.1.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.156459][ T9695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.183419][ T28] audit: type=1400 audit(1762619228.830:356): avc: denied { write } for pid=10223 comm="syz.1.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.186609][ T9695] usb 4-1: Product: syz [ 188.207373][ T9695] usb 4-1: Manufacturer: syz [ 188.213806][ T28] audit: type=1400 audit(1762619228.886:357): avc: denied { read } for pid=10225 comm="syz.1.4752" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.216201][ T1122] usb 3-1: USB disconnect, device number 94 [ 188.241054][ T28] audit: type=1400 audit(1762619228.886:358): avc: denied { open } for pid=10225 comm="syz.1.4752" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.250805][ T9695] usb 4-1: SerialNumber: syz [ 188.286955][ T9695] usb 4-1: config 0 descriptor?? [ 188.301116][T10230] loop4: detected capacity change from 0 to 512 [ 188.308941][ T9695] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 188.314539][T10230] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.339160][ T9695] usb 4-1: No valid video chain found. [ 188.353459][ T28] audit: type=1400 audit(1762619228.886:359): avc: denied { ioctl } for pid=10225 comm="syz.1.4752" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.378775][T10230] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 188.393346][T10230] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4754: attempt to clear invalid blocks 2 len 1 [ 188.410367][T10230] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 188.425794][T10230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4754: invalid indirect mapped block 1819239214 (level 0) [ 188.440047][T10230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4754: invalid indirect mapped block 1819239214 (level 1) [ 188.456950][T10230] EXT4-fs (loop4): 1 truncate cleaned up [ 188.462652][T10230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.497473][ T285] EXT4-fs (loop4): unmounting filesystem. [ 188.520094][ T1122] usb 4-1: USB disconnect, device number 90 [ 188.607307][T10271] netlink: 'syz.1.4774': attribute type 29 has an invalid length. [ 188.609279][T10274] __nla_validate_parse: 13 callbacks suppressed [ 188.609297][T10274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4775'. [ 188.624848][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4774'. [ 188.662177][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4778'. [ 188.671406][T10271] netlink: 'syz.1.4774': attribute type 29 has an invalid length. [ 188.684608][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4774'. [ 188.709806][T10284] loop4: detected capacity change from 0 to 256 [ 188.725370][T10284] FAT-fs (loop4): Directory bread(block 64) failed [ 188.733802][T10284] FAT-fs (loop4): Directory bread(block 65) failed [ 188.742807][T10284] FAT-fs (loop4): Directory bread(block 66) failed [ 188.749490][T10284] FAT-fs (loop4): Directory bread(block 67) failed [ 188.764051][T10284] FAT-fs (loop4): Directory bread(block 68) failed [ 188.767836][T10290] xt_bpf: check failed: parse error [ 188.779323][T10284] FAT-fs (loop4): Directory bread(block 69) failed [ 188.799498][T10284] FAT-fs (loop4): Directory bread(block 70) failed [ 188.811954][T10284] FAT-fs (loop4): Directory bread(block 71) failed [ 188.822839][T10284] FAT-fs (loop4): Directory bread(block 72) failed [ 188.833984][T10284] FAT-fs (loop4): Directory bread(block 73) failed [ 188.994521][T10337] netlink: 'syz.2.4806': attribute type 5 has an invalid length. [ 189.176377][ T6] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 189.194138][T10384] loop3: detected capacity change from 0 to 256 [ 189.205397][T10384] FAT-fs (loop3): Directory bread(block 64) failed [ 189.212408][T10384] FAT-fs (loop3): Directory bread(block 65) failed [ 189.227131][T10384] FAT-fs (loop3): Directory bread(block 66) failed [ 189.238018][T10384] FAT-fs (loop3): Directory bread(block 67) failed [ 189.244759][T10384] FAT-fs (loop3): Directory bread(block 68) failed [ 189.258861][T10384] FAT-fs (loop3): Directory bread(block 69) failed [ 189.279280][T10384] FAT-fs (loop3): Directory bread(block 70) failed [ 189.306112][T10384] FAT-fs (loop3): Directory bread(block 71) failed [ 189.312679][T10384] FAT-fs (loop3): Directory bread(block 72) failed [ 189.328405][T10384] FAT-fs (loop3): Directory bread(block 73) failed [ 189.380555][ T6] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 189.396280][ T6] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 189.402058][T10418] loop4: detected capacity change from 0 to 512 [ 189.414402][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.430438][ T6] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 189.464306][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 189.470170][T10418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.482228][T10418] ext4 filesystem being mounted at /892/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.484913][ T6] usb 2-1: config 0 has no interface number 0 [ 189.509588][T10418] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.4846: corrupted xattr block 6 [ 189.522710][T10418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 189.531896][T10418] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.4846: corrupted xattr block 6 [ 189.548656][T10418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 189.559667][T10418] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.4846: corrupted xattr block 6 [ 189.560479][ T6] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 189.600872][T10443] device bridge3 entered promiscuous mode [ 189.612674][ T285] EXT4-fs (loop4): unmounting filesystem. [ 189.643048][T10451] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4862'. [ 189.664705][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4865'. [ 189.668309][ T6] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 189.747222][ T6] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.757271][ T6] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.777830][ T6] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 189.792628][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.834411][ T6] usb 2-1: config 0 descriptor?? [ 189.840970][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4878'. [ 189.851510][ T6] usb 2-1: MIDIStreaming interface descriptor not found [ 190.106424][ T9695] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 190.169572][ T60] usb 2-1: USB disconnect, device number 85 [ 190.186212][T10547] loop4: detected capacity change from 0 to 256 [ 190.259732][T10559] loop3: detected capacity change from 0 to 256 [ 190.273366][T10559] exfat: Deprecated parameter 'utf8' [ 190.290540][T10559] exfat: Deprecated parameter 'utf8' [ 190.302133][T10559] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 190.322022][ T9695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.342347][ T9695] usb 3-1: not running at top speed; connect to a high speed hub [ 190.364163][ T9695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.386112][T10579] syz.0.4925 (10579): /proc/10579/oom_adj is deprecated, please use /proc/10579/oom_score_adj instead. [ 190.397781][ T9695] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.419561][ T9695] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.431423][ T9695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.448388][ T9695] usb 3-1: Product: syz [ 190.453956][ T9695] usb 3-1: Manufacturer: syz [ 190.462966][ T9695] usb 3-1: SerialNumber: syz [ 190.478180][T10595] netlink: 'syz.3.4933': attribute type 13 has an invalid length. [ 190.694883][ T9695] usb 3-1: 0:2 : does not exist [ 190.711193][ T9695] usb 3-1: USB disconnect, device number 95 [ 190.758585][ T60] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 190.786670][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4948'. [ 191.406827][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4981'. [ 191.416500][T10694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.472461][T10701] xt_CT: No such helper "netbios-ns" [ 191.506146][T10709] xt_hashlimit: size too large, truncated to 1048576 [ 191.554981][T10720] device vti0 entered promiscuous mode [ 191.614591][T10740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.716921][T10776] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.818132][T10808] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 191.953119][T10858] device ipip0 entered promiscuous mode [ 191.959056][T10860] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.966624][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.973681][T10860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.172576][T10908] netlink: 'syz.1.5089': attribute type 46 has an invalid length. [ 192.180742][T10908] netlink: 'syz.1.5089': attribute type 46 has an invalid length. [ 192.322387][T10957] netlink: 'syz.1.5113': attribute type 11 has an invalid length. [ 192.337541][T10959] device ip6gretap2 entered promiscuous mode [ 192.532872][T11023] x_tables: unsorted entry at hook 2 [ 192.567547][T11033] ÿ: renamed from bond_slave_0 [ 193.045409][ T28] kauditd_printk_skb: 386 callbacks suppressed [ 193.045424][ T28] audit: type=1400 audit(1762619233.404:746): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.077767][T11096] netlink: 'syz.4.5182': attribute type 3 has an invalid length. [ 193.108807][T11096] netlink: 'syz.4.5182': attribute type 3 has an invalid length. [ 193.126491][ T28] audit: type=1400 audit(1762619233.461:747): avc: denied { read write } for pid=287 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.160005][T11104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.167250][T11104] IPv6: NLM_F_CREATE should be set when creating new route [ 193.174470][T11104] IPv6: NLM_F_CREATE should be set when creating new route [ 193.184156][ T28] audit: type=1400 audit(1762619233.461:748): avc: denied { read write } for pid=11097 comm="syz.3.5183" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.213806][T11110] binfmt_misc: register: failed to install interpreter file ./file0 [ 193.245318][ T28] audit: type=1400 audit(1762619233.461:749): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.309391][ T28] audit: type=1400 audit(1762619233.489:750): avc: denied { read write } for pid=287 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.382450][ T28] audit: type=1400 audit(1762619233.498:751): avc: denied { read } for pid=11101 comm="syz.3.5185" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 193.453602][ T28] audit: type=1400 audit(1762619233.507:752): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.520311][ T28] audit: type=1400 audit(1762619233.507:753): avc: denied { read write } for pid=287 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.559101][T11155] device bridge_slave_1 left promiscuous mode [ 193.582012][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.601835][ T28] audit: type=1400 audit(1762619233.517:754): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.627919][T11155] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 193.642881][ T28] audit: type=1400 audit(1762619233.517:755): avc: denied { bpf } for pid=11105 comm="syz.3.5187" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 193.781309][T11192] netlink: 'syz.1.5228': attribute type 16 has an invalid length. [ 193.847823][T11207] IPv6: sit1: Disabled Multicast RS [ 193.867481][T11210] tc_dump_action: action bad kind [ 193.944488][T11236] device sit0 entered promiscuous mode [ 193.964163][T11248] validate_nla: 2 callbacks suppressed [ 193.964180][T11248] netlink: 'syz.3.5257': attribute type 2 has an invalid length. [ 194.016988][T11266] __nla_validate_parse: 12 callbacks suppressed [ 194.017006][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5265'. [ 194.059338][T11280] netlink: 'syz.1.5271': attribute type 11 has an invalid length. [ 194.269238][T11354] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5309'. [ 194.278444][T11354] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 194.333897][T11369] netlink: 'syz.1.5318': attribute type 3 has an invalid length. [ 194.587671][T11466] xt_hashlimit: max too large, truncated to 1048576 [ 194.605874][T11466] xt_hashlimit: overflow, try lower: 0/0 [ 194.708072][T11498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5382'. [ 194.840134][T11536] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5400'. [ 194.939306][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5409'. [ 195.110420][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5424'. [ 195.132350][T11588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11588 comm=syz.2.5426 [ 195.152614][T11584] device veth1 entered promiscuous mode [ 195.169986][T11584] netlink: 'syz.1.5424': attribute type 8 has an invalid length. [ 195.189177][T11584] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 195.263107][T11595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5429'. [ 195.295020][T11598] syz.2.5431 uses obsolete (PF_INET,SOCK_PACKET) [ 195.370221][T11606] xt_l2tp: unknown flags: 17 [ 195.554265][T11634] netlink: 37 bytes leftover after parsing attributes in process `syz.1.5451'. [ 195.567364][T11638] xt_connbytes: Forcing CT accounting to be enabled [ 195.578307][T11634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.585543][T11634] IPv6: NLM_F_CREATE should be set when creating new route [ 195.592764][T11634] IPv6: NLM_F_CREATE should be set when creating new route [ 195.625691][T11648] IPv6: NLM_F_REPLACE set, but no existing node found! [ 195.643289][T11654] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5458'. [ 195.716571][T11670] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 195.777234][T11687] device bridge1 entered promiscuous mode [ 195.795235][ T7322] ------------[ cut here ]------------ [ 195.800718][ T7322] kernel BUG at fs/buffer.c:2714! [ 195.820489][ T7322] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 195.826586][ T7322] CPU: 1 PID: 7322 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 195.835522][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.845581][ T7322] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 195.850969][ T7322] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 2f e8 ff e9 b0 fe ff ff e8 1e c0 a3 ff 0f 0b e8 17 c0 a3 ff <0f> 0b e8 10 c0 a3 ff 0f 0b e8 09 c0 a3 ff 0f 0b e8 02 c0 a3 ff 0f [ 195.870573][ T7322] RSP: 0018:ffffc90001247ca0 EFLAGS: 00010293 [ 195.876647][ T7322] RAX: ffffffff81cc5e09 RBX: 0000000000000000 RCX: ffff888131288000 [ 195.884619][ T7322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.892587][ T7322] RBP: ffffc90001247cf0 R08: dffffc0000000000 R09: ffffed10266d4151 [ 195.900579][ T7322] R10: ffffed10266d4151 R11: 1ffff110266d4150 R12: 0000000000000000 [ 195.908562][ T7322] R13: 1ffff110266d4150 R14: ffff8881336a0a80 R15: 0000000000003801 [ 195.908581][ T7322] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 195.908598][ T7322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.908612][ T7322] CR2: 0000001b2eb21ff8 CR3: 00000001091de000 CR4: 00000000003506a0 [ 195.908628][ T7322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.908640][ T7322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.908652][ T7322] Call Trace: [ 195.908656][ T7322] [ 195.908664][ T7322] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 195.908689][ T7322] submit_bh+0x1f/0x30 [ 195.908708][ T7322] write_mmp_block_thawed+0x34a/0x4c0 [ 195.908729][ T7322] ? read_mmp_block+0x6d0/0x6d0 [ 195.908747][ T7322] ? __cfi_process_timeout+0x10/0x10 [ 195.908769][ T7322] write_mmp_block+0x138/0x2b0 [ 195.908788][ T7322] kmmpd+0x3ce/0x950 [ 195.908808][ T7322] kthread+0x281/0x320 [ 195.908826][ T7322] ? __cfi_kmmpd+0x10/0x10 [ 195.908844][ T7322] ? __cfi_kthread+0x10/0x10 [ 195.908862][ T7322] ret_from_fork+0x1f/0x30 [ 195.908883][ T7322] [ 195.908898][ T7322] Modules linked in: [ 195.925957][ T7322] ---[ end trace 0000000000000000 ]--- [ 196.029106][ T7322] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 196.034509][ T7322] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 2f e8 ff e9 b0 fe ff ff e8 1e c0 a3 ff 0f 0b e8 17 c0 a3 ff <0f> 0b e8 10 c0 a3 ff 0f 0b e8 09 c0 a3 ff 0f 0b e8 02 c0 a3 ff 0f [ 196.054167][ T7322] RSP: 0018:ffffc90001247ca0 EFLAGS: 00010293 [ 196.060234][ T7322] RAX: ffffffff81cc5e09 RBX: 0000000000000000 RCX: ffff888131288000 [ 196.068379][ T7322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.076376][ T7322] RBP: ffffc90001247cf0 R08: dffffc0000000000 R09: ffffed10266d4151 [ 196.084721][ T7322] R10: ffffed10266d4151 R11: 1ffff110266d4150 R12: 0000000000000000 [ 196.092682][ T7322] R13: 1ffff110266d4150 R14: ffff8881336a0a80 R15: 0000000000003801 [ 196.100728][ T7322] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 196.109688][ T7322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.116294][ T7322] CR2: 00005555728bf4a8 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 196.124260][ T7322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.132247][ T7322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.140268][ T7322] Kernel panic - not syncing: Fatal exception [ 196.146534][ T7322] Kernel Offset: disabled [ 196.150841][ T7322] Rebooting in 86400 seconds..