last executing test programs: 1.675425577s ago: executing program 1 (id=5738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in6=@loopback, {0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x10000}, {}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}}, 0x0) 1.674922088s ago: executing program 1 (id=5741): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xe, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 1.641628968s ago: executing program 1 (id=5746): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x220, 0x330, 0x110, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="e4a78435b4e9", @empty, @local, @broadcast, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @empty, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 1.600418218s ago: executing program 1 (id=5750): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/mcfilter6\x00') lseek(r0, 0x289e0cb5, 0x0) 1.542785479s ago: executing program 1 (id=5756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x59) 1.518791699s ago: executing program 1 (id=5759): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10653, &(0x7f0000002080)="$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") rename(&(0x7f0000000000)='./file3\x00', &(0x7f0000000100)='./file0/file0\x00') 547.737973ms ago: executing program 3 (id=5818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b"], 0x104}}, 0x0) 470.974894ms ago: executing program 4 (id=5823): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 432.266274ms ago: executing program 4 (id=5824): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) 412.879264ms ago: executing program 3 (id=5827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) 369.326965ms ago: executing program 4 (id=5830): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0x4, 0x2, 0x81}}) 355.720755ms ago: executing program 3 (id=5832): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006940)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x3, @mcast2, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000002140)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @dstopts_2292={{0x18}}], 0x48}}], 0x1, 0x4000) 345.951145ms ago: executing program 4 (id=5833): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) timerfd_gettime(r0, 0x0) 311.147156ms ago: executing program 4 (id=5836): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 291.565246ms ago: executing program 3 (id=5837): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet_buf(r0, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000000)=0x3) 284.262126ms ago: executing program 0 (id=5838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) 245.522997ms ago: executing program 3 (id=5840): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}, {}]}]}}, &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x20) 214.220437ms ago: executing program 0 (id=5842): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001800010025bd7000fbdbdf250a140007ff00fe02006c000008001e80"], 0x4c}}, 0x4004004) 176.368707ms ago: executing program 3 (id=5843): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffb) syz_usb_connect(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000064f1f440cf1065807991010203012302240042"], 0x0) 127.774778ms ago: executing program 2 (id=5845): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 93.870929ms ago: executing program 2 (id=5846): r0 = openat$urandom(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 92.866999ms ago: executing program 0 (id=5847): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x60}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd00170850800", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 81.726568ms ago: executing program 2 (id=5848): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'vlan0\x00', &(0x7f0000000380)=@ethtool_channels={0x1, 0x6, 0xb, 0x6, 0x0, 0x80000000, 0x1, 0x2, 0x2}}) 64.559419ms ago: executing program 0 (id=5849): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x1093, 0x4) 51.785519ms ago: executing program 2 (id=5850): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000f40)=[{{&(0x7f0000000380)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)="bf", 0x1}], 0x1, &(0x7f0000000580)=[{0x10, 0x11, 0x1ff}], 0x10}}], 0x1, 0x880) 47.182549ms ago: executing program 0 (id=5851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_SRC={0x8, 0x2, @multicast1}]}, 0x24}}, 0x0) 28.8657ms ago: executing program 4 (id=5852): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd"}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x119, 0x75, 0x0, 0x1, [@nested={0x10, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x98}]}, @nested={0x4, 0x8}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r0}, @generic="897a22072687e1d29eb84b27bdf276e019", @nested={0xe8, 0x425, 0x0, 0x1, [@nested={0xe1, 0xc7, 0x0, 0x1, [@generic="0e8a1ba9d0d1c3c46f11f097dd31b5ac0d84d4d2b2f914e4192e9f5e09954309143035825e421199ef3742a5289e741571d2ac7ef6550f8c0454460c177a12d8c5", @typed={0x8, 0xe4, 0x0, 0x0, @uid}, @nested={0x94, 0xc6, 0x0, 0x1, [@nested={0x8d, 0x122, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @u32=0x401}, @generic="e96c0df381a14a3c0b3ccaef33d226349e43f34829aab5a8b5ce756312fb361c", @nested={0x4, 0x16}, @typed={0x8, 0x48, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xcd}, @typed={0x4, 0xd3}, @typed={0x8, 0x131, 0x0, 0x0, @uid}, @generic="505cc13c38d5cb1b1a21cc2432667e2fb4a3a08478fb3eee8b38a29ba5d5c2a84d62a9dd4b4f7c910ffd498d0675938ab60c08feb09c1c5c11e94d394898be24f68107e100"]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 28.67185ms ago: executing program 0 (id=5853): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x4000, &(0x7f0000000500)={[{@oldalloc}, {@test_dummy_encryption}, {@inlinecrypt}, {@delalloc}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10000}}, {}, {@quota}]}, 0x8a, 0xbdd, &(0x7f00000010c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 15.19656ms ago: executing program 2 (id=5854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001a0001002abd700000000000810000000000657238d5000008000f"], 0x24}}, 0x0) 0s ago: executing program 2 (id=5855): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xe4, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x48, 0x1, {0xa2d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xe265}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x48, 0xef8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf03b, 0x15}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x54, 0x1, {0x48, 0x81}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xe4}}, 0x0) kernel console output (not intermixed with test programs): 174.527763][ T634] usbhid 3-1:0.166: couldn't find an input interrupt endpoint [ 174.530937][ T24] usb 5-1: Manufacturer: syz [ 174.542896][ T24] usb 5-1: SerialNumber: syz [ 174.690554][ T1511] usb 4-1: Using ep0 maxpacket: 16 [ 174.697150][ T1511] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 174.735731][ T1511] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.738840][ T24] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 174.761232][ T1511] usb 4-1: config 0 has no interface number 0 [ 174.767401][ T24] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 174.780649][ T24] usb 5-1: USB disconnect, device number 88 [ 174.793606][ T1511] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 174.810057][ T1511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.818428][ T535] usb 3-1: USB disconnect, device number 87 [ 174.827937][ T1511] usb 4-1: Product: syz [ 174.832756][ T1511] usb 4-1: Manufacturer: syz [ 174.837515][ T1511] usb 4-1: SerialNumber: syz [ 174.843114][ T1511] usb 4-1: config 0 descriptor?? [ 174.859159][ T1511] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 174.875595][ T1511] usb 4-1: No valid video chain found. [ 175.016835][ T313] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 175.051025][ T535] usb 4-1: USB disconnect, device number 87 [ 175.146474][ T7376] loop1: detected capacity change from 0 to 131072 [ 175.155897][ T7376] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.189914][ T7376] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 175.209981][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.222170][ T313] usb 1-1: not running at top speed; connect to a high speed hub [ 175.233597][ T313] usb 1-1: config 1 has an invalid interface number: 231 but max is 0 [ 175.242048][ T313] usb 1-1: config 1 has no interface number 0 [ 175.248409][ T313] usb 1-1: config 1 interface 231 altsetting 9 endpoint 0x6 has invalid maxpacket 57933, setting to 64 [ 175.260840][ T313] usb 1-1: config 1 interface 231 has no altsetting 0 [ 175.270261][ T313] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8b.ca [ 175.286543][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.298751][ T313] usb 1-1: Product: syz [ 175.308602][ T313] usb 1-1: Manufacturer: syz [ 175.331053][ T313] usb 1-1: SerialNumber: syz [ 175.544883][ T313] usb 1-1: USB disconnect, device number 90 [ 175.625232][ T28] audit: type=1326 audit(1747326021.967:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.4.3459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2a7f8e969 code=0x0 [ 175.715840][ T7439] loop4: detected capacity change from 0 to 256 [ 175.766119][ T7448] IPv6: addrconf: prefix option has invalid lifetime [ 175.775474][ T2326] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.930530][ T1511] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 176.070023][ T636] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 176.107731][ T1511] usb 2-1: Using ep0 maxpacket: 16 [ 176.114043][ T1511] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 176.122837][ T7486] loop4: detected capacity change from 0 to 40427 [ 176.123565][ T1511] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 176.139640][ T1511] usb 2-1: config 8 has no interface number 0 [ 176.145779][ T1511] usb 2-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.147166][ T7486] F2FS-fs (loop4): fault_injection options not supported [ 176.159037][ T1511] usb 2-1: config 8 interface 39 has no altsetting 0 [ 176.168078][ T7486] F2FS-fs (loop4): invalid crc value [ 176.178824][ T7486] F2FS-fs (loop4): SIT is corrupted node# 5 vs 7 [ 176.187199][ T7486] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 176.187444][ T1511] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 176.219277][ T1511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.237566][ T1511] usb 2-1: Product: syz [ 176.241796][ T1511] usb 2-1: Manufacturer: syz [ 176.246403][ T1511] usb 2-1: SerialNumber: syz [ 176.251235][ T636] usb 4-1: Using ep0 maxpacket: 16 [ 176.258028][ T636] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.268569][ T636] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.279234][ T636] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.288473][ T636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.296524][ T636] usb 4-1: Product: syz [ 176.300778][ T636] usb 4-1: Manufacturer: syz [ 176.305431][ T636] usb 4-1: SerialNumber: syz [ 176.312149][ T313] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 176.321421][ T634] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 176.467249][ T1511] ipheth 2-1:8.39: Unable to find endpoints [ 176.475060][ T1511] usb 2-1: USB disconnect, device number 89 [ 176.489726][ T535] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 176.500259][ T636] usb 4-1: 0:2 : does not exist [ 176.500703][ T313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.510807][ T634] usb 3-1: Using ep0 maxpacket: 32 [ 176.521009][ T636] usb 4-1: USB disconnect, device number 88 [ 176.521075][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.529349][ T634] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.551242][ T313] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 176.554870][ T634] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 176.572262][ T634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.574032][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.588308][ T634] usb 3-1: Product: syz [ 176.588328][ T634] usb 3-1: Manufacturer: syz [ 176.588343][ T634] usb 3-1: SerialNumber: syz [ 176.589167][ T634] usb 3-1: config 0 descriptor?? [ 176.601627][ T313] usb 1-1: Product: syz [ 176.611045][ T313] usb 1-1: Manufacturer: syz [ 176.616018][ T634] usb 3-1: bad CDC descriptors [ 176.616770][ T313] usb 1-1: SerialNumber: syz [ 176.621304][ T634] usb 3-1: unsupported MDLM descriptors [ 176.626591][ T313] usb 1-1: config 0 descriptor?? [ 176.667364][ T535] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.675987][ T535] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.686462][ T535] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.695840][ T535] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.706635][ T535] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.715690][ T535] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.723705][ T535] usb 5-1: Product: syz [ 176.727876][ T535] usb 5-1: Manufacturer: syz [ 176.734074][ T535] cdc_wdm 5-1:1.0: skipping garbage [ 176.739275][ T535] cdc_wdm 5-1:1.0: skipping garbage [ 176.744551][ T535] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 176.819367][ T535] usb 3-1: USB disconnect, device number 88 [ 176.838871][ T313] usb 1-1: USB disconnect, device number 91 [ 176.926362][ T1511] usb 5-1: USB disconnect, device number 89 [ 177.440648][ T634] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 177.464836][ T28] audit: type=1400 audit(2000000001.652:227): avc: denied { create } for pid=7573 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 177.533751][ T313] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 177.619040][ T634] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.632906][ T634] usb 4-1: config 128 has an invalid interface number: 59 but max is 0 [ 177.641269][ T634] usb 4-1: config 128 has no interface number 0 [ 177.648063][ T634] usb 4-1: config 128 interface 59 has no altsetting 0 [ 177.657042][ T634] usb 4-1: string descriptor 0 read error: -22 [ 177.663251][ T634] usb 4-1: New USB device found, idVendor=a2f1, idProduct=6ed8, bcdDevice=bc.ba [ 177.672537][ T634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.682788][ T634] usb-storage 4-1:128.59: USB Mass Storage device detected [ 177.722768][ T313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.730940][ T313] usb 2-1: not running at top speed; connect to a high speed hub [ 177.739774][ T313] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 177.752194][ T313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.761273][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.769491][ T313] usb 2-1: Product: syz [ 177.773701][ T313] usb 2-1: Manufacturer: syz [ 177.778354][ T313] usb 2-1: SerialNumber: syz [ 177.794155][ T636] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 177.875395][ T634] usb 4-1: USB disconnect, device number 89 [ 177.881401][ T1511] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 177.887253][ T535] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 177.974919][ T313] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 177.983999][ T313] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 177.989947][ T636] usb 1-1: Using ep0 maxpacket: 16 [ 177.996289][ T313] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 177.997643][ T636] usb 1-1: config 0 has an invalid interface number: 190 but max is 1 [ 178.006904][ T313] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 178.012263][ T636] usb 1-1: config 0 has an invalid interface number: 2 but max is 1 [ 178.028727][ T636] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 178.038629][ T636] usb 1-1: config 0 has no interface number 1 [ 178.041112][ T313] usb 2-1: USB disconnect, device number 90 [ 178.044741][ T636] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.063890][ T636] usb 1-1: config 0 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 178.077661][ T535] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 178.084614][ T1511] usb 5-1: config 0 has an invalid interface number: 14 but max is 0 [ 178.092001][ T535] usb 3-1: config 0 has no interface number 0 [ 178.102405][ T535] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 6400, setting to 64 [ 178.109801][ T1511] usb 5-1: config 0 has no interface number 0 [ 178.113479][ T535] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 178.119842][ T1511] usb 5-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00 [ 178.133346][ T535] usb 3-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 178.139616][ T636] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.148800][ T535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.155258][ T636] usb 1-1: config 0 interface 2 has no altsetting 0 [ 178.165191][ T535] usb 3-1: Product: syz [ 178.169811][ T1511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.174204][ T535] usb 3-1: Manufacturer: syz [ 178.183334][ T1511] usb 5-1: config 0 descriptor?? [ 178.191595][ T535] usb 3-1: SerialNumber: syz [ 178.192805][ T1511] usb-storage 5-1:0.14: USB Mass Storage device detected [ 178.197971][ T535] usb 3-1: config 0 descriptor?? [ 178.208818][ T7595] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 178.216071][ T636] usb 1-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f [ 178.216080][ T7595] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 178.232413][ T636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.240788][ T1511] usb-storage 5-1:0.14: Quirks match for vid 04e6 pid 0006: 1 [ 178.248285][ T1511] usb-storage 5-1:0.14: This device (04e6,0006,0100 S de P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.1.134-syzkaller-00012-g646380b087a5) [ 178.248285][ T1511] Please send a copy of this message to and [ 178.276078][ T636] usb 1-1: Product: syz [ 178.280268][ T636] usb 1-1: Manufacturer: syz [ 178.284872][ T636] usb 1-1: SerialNumber: syz [ 178.290284][ T636] usb 1-1: config 0 descriptor?? [ 178.391365][ T1511] usb 5-1: USB disconnect, device number 90 [ 178.407394][ T535] usb 3-1: MIDIStreaming interface descriptor not found [ 178.419642][ T535] usb 3-1: USB disconnect, device number 89 [ 178.486435][ T636] usb 1-1: selecting invalid altsetting 0 [ 178.503322][ T636] usb 1-1: USB disconnect, device number 92 [ 178.560053][ T7625] futex_wake_op: syz.1.3556 tries to shift op by 32; fix this program [ 178.620717][ T2329] udevd[2329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.717709][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.190/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.733696][ T39] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 178.887688][ T7647] loop4: detected capacity change from 0 to 16 [ 178.895639][ T7647] erofs: (device loop4): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 178.906411][ T39] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 178.915454][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.925693][ T39] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.945067][ T39] usb 4-1: config 1 has no interface number 1 [ 178.951310][ T535] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 178.966811][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 178.990948][ T39] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 179.003691][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.034494][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.042631][ T39] usb 4-1: Product: syz [ 179.064330][ T39] usb 4-1: Manufacturer: syz [ 179.069018][ T39] usb 4-1: SerialNumber: syz [ 179.091098][ T7667] IPv6: addrconf: prefix option has invalid lifetime [ 179.145866][ T535] usb 2-1: Using ep0 maxpacket: 16 [ 179.152162][ T535] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 179.177103][ T535] usb 2-1: config 0 has no interface number 0 [ 179.193720][ T535] usb 2-1: New USB device found, idVendor=0d96, idProduct=410a, bcdDevice=9c.37 [ 179.210784][ T535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.228268][ T535] usb 2-1: Product: syz [ 179.238663][ T535] usb 2-1: Manufacturer: syz [ 179.238820][ T1511] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 179.243364][ T535] usb 2-1: SerialNumber: syz [ 179.265144][ T535] usb 2-1: config 0 descriptor?? [ 179.273138][ T535] usb-storage 2-1:0.143: USB Mass Storage device detected [ 179.281264][ T39] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 179.297436][ T535] usb-storage 2-1:0.143: Quirks match for vid 0d96 pid 410a: 8 [ 179.314734][ T39] usb 4-1: USB disconnect, device number 90 [ 179.454337][ T1511] usb 5-1: config 0 has an invalid interface number: 241 but max is 1 [ 179.473964][ T1511] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.500685][ T1511] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 179.511515][ T305] udevd[305]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.515927][ T1511] usb 5-1: config 0 has no interface number 0 [ 179.534814][ T1511] usb 5-1: config 0 interface 241 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 8 [ 179.553382][ T1511] usb 5-1: config 0 interface 241 has no altsetting 0 [ 179.570370][ T1511] usb 5-1: New USB device found, idVendor=2c42, idProduct=1608, bcdDevice=bd.4b [ 179.591533][ T1511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.607608][ T636] usb 2-1: USB disconnect, device number 91 [ 179.620416][ T1511] usb 5-1: config 0 descriptor?? [ 179.821183][ T1511] usb 5-1: string descriptor 0 read error: -71 [ 179.846397][ T1511] usb 5-1: USB disconnect, device number 91 [ 179.994160][ T634] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 180.031215][ T39] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 180.152614][ T636] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 180.170837][ T634] usb 3-1: Using ep0 maxpacket: 16 [ 180.177251][ T634] usb 3-1: config 4 has an invalid interface number: 52 but max is 1 [ 180.185424][ T634] usb 3-1: config 4 has an invalid interface number: 52 but max is 1 [ 180.193550][ T634] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 180.202466][ T634] usb 3-1: config 4 has no interface number 0 [ 180.208435][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 180.208577][ T634] usb 3-1: config 4 interface 52 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 180.216487][ T39] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 180.224628][ T634] usb 3-1: config 4 interface 52 has no altsetting 0 [ 180.224653][ T634] usb 3-1: config 4 interface 52 has no altsetting 1 [ 180.234123][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.242178][ T634] usb 3-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 180.247330][ T39] usb 1-1: Product: syz [ 180.255500][ T634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.264368][ T39] usb 1-1: Manufacturer: syz [ 180.268784][ T634] usb 3-1: Product: syz [ 180.276610][ T535] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 180.281415][ T634] usb 3-1: Manufacturer: syz [ 180.285265][ T39] usb 1-1: SerialNumber: syz [ 180.293056][ T634] usb 3-1: SerialNumber: syz [ 180.298824][ T39] usb 1-1: config 0 descriptor?? [ 180.319238][ T39] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 180.328796][ T39] usb 1-1: Detected FT232H [ 180.344938][ T636] usb 4-1: config index 0 descriptor too short (expected 113, got 81) [ 180.353653][ T636] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.369668][ T636] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.389514][ T636] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.399076][ T636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.412722][ T636] usb 4-1: SerialNumber: syz [ 180.429941][ T636] usb 4-1: bad CDC descriptors [ 180.469174][ T535] usb 2-1: Using ep0 maxpacket: 32 [ 180.475975][ T535] usb 2-1: config 0 has an invalid interface number: 42 but max is 0 [ 180.484570][ T535] usb 2-1: config 0 has no interface number 0 [ 180.494910][ T535] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27 [ 180.504430][ T535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.504852][ T634] asix 3-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 180.514987][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 180.527705][ T634] asix: probe of 3-1:4.52 failed with error -71 [ 180.535690][ T535] usb 2-1: Product: syz [ 180.540318][ T535] usb 2-1: Manufacturer: syz [ 180.546515][ T634] usb 3-1: USB disconnect, device number 90 [ 180.547134][ T535] usb 2-1: SerialNumber: syz [ 180.552809][ T28] audit: type=1400 audit(2000000004.967:228): avc: denied { write } for pid=7762 comm="syz.4.3624" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 180.557744][ T39] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 180.588356][ T535] usb 2-1: config 0 descriptor?? [ 180.597335][ T39] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 180.606386][ T39] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 180.618259][ T39] usb 1-1: USB disconnect, device number 93 [ 180.626484][ T636] usb 4-1: USB disconnect, device number 91 [ 180.646624][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 180.663753][ T39] ftdi_sio 1-1:0.0: device disconnected [ 180.689087][ T28] audit: type=1400 audit(2000000005.118:229): avc: denied { create } for pid=7768 comm="syz.4.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 180.786979][ T535] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 180.793375][ T535] usb 2-1: Forcing UVC version to 1.0a [ 180.799155][ T535] usb 2-1: No valid video chain found. [ 180.820165][ T535] usb 2-1: USB disconnect, device number 92 [ 181.130893][ T636] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 181.299176][ T636] usb 5-1: Using ep0 maxpacket: 8 [ 181.305435][ T636] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 181.314962][ T636] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.328272][ T636] usb 5-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 181.337516][ T636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.346316][ T636] usb 5-1: config 0 descriptor?? [ 181.352275][ T636] usb 5-1: Found UVC 0.00 device (05a9:2640) [ 181.359542][ T636] usb 5-1: No valid video chain found. [ 181.392154][ T39] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 181.448169][ T634] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 181.513496][ T636] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 181.543224][ T24] usb 5-1: USB disconnect, device number 92 [ 181.559568][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 181.567343][ T39] usb 3-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 181.576471][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.584505][ T39] usb 3-1: Product: syz [ 181.588717][ T39] usb 3-1: Manufacturer: syz [ 181.593355][ T39] usb 3-1: SerialNumber: syz [ 181.599078][ T39] usb 3-1: config 0 descriptor?? [ 181.604789][ T39] usb-storage 3-1:0.0: USB Mass Storage device detected [ 181.615491][ T634] usb 1-1: Using ep0 maxpacket: 16 [ 181.621842][ T634] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 181.630106][ T634] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.640407][ T634] usb 1-1: config 1 has no interface number 0 [ 181.646557][ T634] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 181.657445][ T634] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.670012][ T634] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.679111][ T634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.687141][ T634] usb 1-1: Product: syz [ 181.690225][ T535] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 181.691378][ T634] usb 1-1: Manufacturer: syz [ 181.703600][ T634] usb 1-1: SerialNumber: syz [ 181.708794][ T636] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.721425][ T636] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.730518][ T636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.738551][ T636] usb 4-1: Product: syz [ 181.742731][ T636] usb 4-1: Manufacturer: syz [ 181.747344][ T636] usb 4-1: SerialNumber: syz [ 181.793651][ T1511] usb 3-1: USB disconnect, device number 91 [ 181.868243][ T535] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 181.875509][ T535] usb 2-1: config 0 has no interfaces? [ 181.882481][ T535] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 181.891558][ T535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.899579][ T535] usb 2-1: Product: syz [ 181.903749][ T535] usb 2-1: Manufacturer: syz [ 181.908430][ T535] usb 2-1: SerialNumber: syz [ 181.912008][ T634] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 181.919685][ T535] usb 2-1: config 0 descriptor?? [ 181.926534][ T634] usb 1-1: USB disconnect, device number 94 [ 181.941846][ T636] cdc_ether 4-1:1.0: skipping garbage [ 181.947315][ T636] cdc_ether 4-1:1.0: skipping garbage [ 181.952924][ T636] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 181.965021][ T636] usb 4-1: USB disconnect, device number 92 [ 182.043443][ T7859] IPv6: addrconf: prefix option has invalid lifetime [ 182.084018][ T28] audit: type=1326 audit(2000000006.620:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.4.3674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2a7f8e969 code=0x0 [ 182.113291][ T1511] usb 2-1: USB disconnect, device number 93 [ 182.119737][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.4/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.435950][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 182.623557][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 182.635490][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.663055][ T24] ums-cypress 5-1:1.0: USB Mass Storage device detected [ 182.696936][ T28] audit: type=1400 audit(2000002585.272:231): avc: denied { write } for pid=7916 comm="syz.2.3699" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.697211][ T39] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 182.726709][ T28] audit: type=1400 audit(2000002585.304:232): avc: denied { remove_name } for pid=7916 comm="syz.2.3699" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.786992][ T1511] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 182.796039][ T28] audit: type=1400 audit(2000002585.304:233): avc: denied { unlink } for pid=7916 comm="syz.2.3699" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.842368][ T24] usb 5-1: USB disconnect, device number 93 [ 182.887171][ T7909] loop1: detected capacity change from 0 to 40427 [ 182.894869][ T7909] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 182.904771][ T7909] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 182.917140][ T7909] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 182.928413][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 182.935733][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.944681][ T39] usb 4-1: config 127 has an invalid interface number: 132 but max is 1 [ 182.953173][ T39] usb 4-1: config 127 has an invalid interface number: 91 but max is 1 [ 182.953230][ T7909] F2FS-fs (loop1): Inconsistent i_blocks, ino:3, iblocks:0, sectors:8 [ 182.961693][ T39] usb 4-1: config 127 has no interface number 0 [ 182.976021][ T39] usb 4-1: config 127 has no interface number 1 [ 182.982748][ T39] usb 4-1: config 127 interface 132 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 182.993745][ T39] usb 4-1: config 127 interface 91 altsetting 251 endpoint 0x7 has an invalid bInterval 170, changing to 11 [ 182.995194][ T1511] usb 1-1: Using ep0 maxpacket: 8 [ 183.005352][ T39] usb 4-1: config 127 interface 91 has no altsetting 0 [ 183.012354][ T1511] usb 1-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 183.020197][ T39] usb 4-1: New USB device found, idVendor=12d1, idProduct=52ff, bcdDevice=db.39 [ 183.027821][ T1511] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.037108][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.054057][ T1511] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.059823][ T39] usb 4-1: Product: syz [ 183.071444][ T39] usb 4-1: Manufacturer: syz [ 183.076060][ T39] usb 4-1: SerialNumber: syz [ 183.082903][ T1511] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.092103][ T1511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.100220][ T1511] usb 1-1: Product: syz [ 183.104475][ T1511] usb 1-1: Manufacturer: syz [ 183.109140][ T1511] usb 1-1: SerialNumber: syz [ 183.125195][ T1511] cdc_ncm 1-1:1.0: skipping garbage [ 183.130495][ T1511] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 183.141436][ T1511] cdc_ncm 1-1:1.0: bind() failure [ 183.219193][ T636] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 183.283369][ T39] cdc_ncm 4-1:127.132: CDC Union missing and no IAD found [ 183.290812][ T39] cdc_ncm 4-1:127.132: bind() failure [ 183.303120][ T7956] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 183.306354][ T39] usb 4-1: USB disconnect, device number 93 [ 183.351451][ T1511] usb 1-1: USB disconnect, device number 95 [ 183.396186][ T636] usb 3-1: Using ep0 maxpacket: 8 [ 183.408417][ T636] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 183.433388][ T636] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 183.452171][ T636] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 183.470855][ T636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.673598][ T636] usb 3-1: string descriptor 0 read error: -71 [ 183.680059][ T636] hub 3-1:32.0: USB hub found [ 183.685745][ T636] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 183.722604][ T636] usb 3-1: USB disconnect, device number 92 [ 183.824519][ T39] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 183.908483][ T313] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 183.993615][ T39] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 184.001917][ T39] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 184.012045][ T39] usb 2-1: config 8 has no interface number 0 [ 184.018140][ T39] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 184.029047][ T39] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.043559][ T39] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 184.052832][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.060949][ T39] usb 2-1: Product: syz [ 184.065132][ T39] usb 2-1: Manufacturer: syz [ 184.069763][ T39] usb 2-1: SerialNumber: syz [ 184.075943][ T313] usb 5-1: Using ep0 maxpacket: 32 [ 184.082067][ T313] usb 5-1: config 0 has an invalid interface number: 218 but max is 0 [ 184.090426][ T313] usb 5-1: config 0 has no interface number 0 [ 184.097924][ T313] usb 5-1: New USB device found, idVendor=05ac, idProduct=35f9, bcdDevice=6d.89 [ 184.107053][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.116114][ T24] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 184.123727][ T313] usb 5-1: Product: syz [ 184.128083][ T313] usb 5-1: Manufacturer: syz [ 184.132752][ T313] usb 5-1: SerialNumber: syz [ 184.138226][ T313] usb 5-1: config 0 descriptor?? [ 184.143985][ T313] ipheth 5-1:0.218: Unable to find alternate settings interface [ 184.197059][ T535] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 184.266167][ T39] usb 2-1: USB disconnect, device number 94 [ 184.310482][ T24] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 184.319646][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.329947][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.339184][ T24] usb 1-1: config 1 has no interface number 1 [ 184.347362][ T24] usb 1-1: string descriptor 0 read error: -22 [ 184.353564][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.362924][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.371437][ T1511] usb 5-1: USB disconnect, device number 94 [ 184.375272][ T535] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.388426][ T535] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.397668][ T535] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.413079][ T24] usb 1-1: MIDIStreaming interface descriptor not found [ 184.420852][ T636] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 184.420972][ T24] snd-usb-audio: probe of 1-1:1.2 failed with error -16 [ 184.435866][ T535] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.445605][ T535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.453666][ T535] usb 4-1: Product: syz [ 184.457837][ T535] usb 4-1: Manufacturer: syz [ 184.462649][ T535] usb 4-1: SerialNumber: syz [ 184.468795][ T535] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 184.475574][ T535] cdc_ncm 4-1:1.0: bind() failure [ 184.589781][ T636] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 184.598088][ T636] usb 3-1: config 0 has no interface number 0 [ 184.604248][ T636] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=e7.1d [ 184.613636][ T636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.621249][ T535] usb 1-1: USB disconnect, device number 96 [ 184.622641][ T636] usb 3-1: config 0 descriptor?? [ 184.634002][ T636] dm9601: probe of 3-1:0.126 failed with error -22 [ 184.640962][ T636] sr9700: probe of 3-1:0.126 failed with error -22 [ 184.657143][ T24] usb 4-1: USB disconnect, device number 94 [ 184.792055][ T8024] loop1: detected capacity change from 0 to 512 [ 184.798740][ T8024] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.805627][ T8024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.813392][ T8024] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.822739][ T636] usb 3-1: USB disconnect, device number 93 [ 184.824525][ T8024] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.851805][ T8024] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 184.866887][ T8024] Quota error (device loop1): write_blk: dquota write failed [ 184.874544][ T8024] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 184.884292][ T8024] Quota error (device loop1): write_blk: dquota write failed [ 184.892007][ T8024] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 184.902086][ T8024] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.3752: Failed to acquire dquot type 1 [ 184.913885][ T8024] EXT4-fs (loop1): 1 truncate cleaned up [ 184.919732][ T8024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.943678][ T282] EXT4-fs (loop1): unmounting filesystem. [ 184.957193][ T8037] IPv6: addrconf: prefix option has invalid lifetime [ 185.127207][ T8067] sit: Src spoofed 0.0.224.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 185.389038][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 185.389038][ T636] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 185.431727][ T535] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 185.495816][ T312] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 185.582420][ T24] usb 2-1: config 127 has an invalid interface number: 143 but max is 0 [ 185.590836][ T24] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 185.601404][ T24] usb 2-1: config 127 has no interface number 0 [ 185.607854][ T636] usb 5-1: Using ep0 maxpacket: 16 [ 185.607853][ T24] usb 2-1: config 127 interface 143 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 185.607882][ T24] usb 2-1: config 127 interface 143 altsetting 0 endpoint 0xA has invalid maxpacket 1032, setting to 1024 [ 185.624418][ T636] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.634682][ T24] usb 2-1: config 127 interface 143 altsetting 0 endpoint 0xD has invalid maxpacket 520, setting to 64 [ 185.644850][ T636] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.656058][ T313] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 185.672364][ T24] usb 2-1: config 127 interface 143 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 185.675093][ T636] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 185.682551][ T24] usb 2-1: config 127 interface 143 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 185.682664][ T535] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 185.691790][ T636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.710852][ T636] usb 5-1: SerialNumber: syz [ 185.719152][ T535] usb 4-1: config 0 has no interface number 0 [ 185.729518][ T24] usb 2-1: config 127 interface 143 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 185.730547][ T636] usb 5-1: 0:2 : does not exist [ 185.739668][ T535] usb 4-1: config 0 interface 239 has no altsetting 0 [ 185.751864][ T24] usb 2-1: config 127 interface 143 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 185.765267][ T24] usb 2-1: Dual-Role OTG device on HNP port [ 185.771291][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 185.779736][ T24] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0185, bcdDevice=b5.52 [ 185.789142][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.797550][ T535] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=fe.a8 [ 185.806817][ T312] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 185.816951][ T535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.825314][ T312] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 447 [ 185.835451][ T8065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.842713][ T535] usb 4-1: Product: syz [ 185.847007][ T535] usb 4-1: Manufacturer: syz [ 185.848359][ T8065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.851769][ T535] usb 4-1: SerialNumber: syz [ 185.859413][ T8065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.865134][ T535] usb 4-1: config 0 descriptor?? [ 185.875535][ T312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.875663][ T8065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.884717][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.900701][ T24] ftdi_sio 2-1:127.143: FTDI USB Serial Device converter detected [ 185.909668][ T313] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.918020][ T24] ftdi_sio ttyUSB0: unknown device type: 0xb552 [ 185.924316][ T313] usb 3-1: config 179 has no interface number 0 [ 185.930613][ T313] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 185.941841][ T312] usb 1-1: Product: syz [ 185.948039][ T312] usb 1-1: Manufacturer: syz [ 185.952794][ T312] usb 1-1: SerialNumber: syz [ 185.957737][ T313] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 185.969740][ T313] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 185.976367][ T636] usb 5-1: USB disconnect, device number 95 [ 185.981107][ T313] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 185.998402][ T313] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.011872][ T313] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.021090][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.030664][ T8081] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 186.038716][ T313] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 186.049070][ T313] xpad: probe of 3-1:179.65 failed with error -5 [ 186.121745][ T313] usb 2-1: USB disconnect, device number 95 [ 186.128372][ T535] ftdi_sio 4-1:0.239: FTDI USB Serial Device converter detected [ 186.136330][ T535] ftdi_sio ttyUSB1: unknown device type: 0xfea8 [ 186.143816][ T313] ftdi_sio 2-1:127.143: device disconnected [ 186.153098][ T535] usb 4-1: USB disconnect, device number 95 [ 186.159789][ T535] ftdi_sio 4-1:0.239: device disconnected [ 186.214967][ T312] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 186.221825][ T312] cdc_ncm 1-1:1.0: bind() failure [ 186.228054][ T312] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 186.234927][ T312] cdc_ncm 1-1:1.1: bind() failure [ 186.241162][ T312] usb 1-1: USB disconnect, device number 97 [ 186.267750][ T292] usb 3-1: USB disconnect, device number 94 [ 186.500637][ T28] audit: type=1400 audit(2000002589.160:234): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=3587 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 186.522325][ T28] audit: type=1400 audit(2000002589.160:235): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3587 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 186.546939][ T28] audit: type=1400 audit(2000002589.160:236): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3587 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 186.873513][ T1511] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 186.990946][ T636] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 187.076369][ T634] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 187.098845][ T1511] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.106969][ T1511] usb 5-1: config 0 has no interface number 0 [ 187.123615][ T1511] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 187.132973][ T1511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.141379][ T1511] usb 5-1: Product: syz [ 187.145566][ T1511] usb 5-1: Manufacturer: syz [ 187.150180][ T1511] usb 5-1: SerialNumber: syz [ 187.154900][ T6] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 187.164031][ T1511] usb 5-1: config 0 descriptor?? [ 187.169953][ T1511] usb-storage 5-1:0.8: USB Mass Storage device detected [ 187.180898][ T1511] usb-storage 5-1:0.8: device ignored [ 187.205695][ T636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 187.226075][ T636] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 187.235210][ T636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.244033][ T636] usb 4-1: Product: syz [ 187.248510][ T636] usb 4-1: Manufacturer: syz [ 187.253131][ T636] usb 4-1: SerialNumber: syz [ 187.258990][ T636] usb 4-1: config 0 descriptor?? [ 187.265457][ T636] hub 4-1:0.0: bad descriptor, ignoring hub [ 187.271731][ T636] hub: probe of 4-1:0.0 failed with error -5 [ 187.279044][ T634] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.289224][ T636] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 187.296681][ T634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.307319][ T634] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.315125][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.317881][ T634] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.341456][ T634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.349473][ T634] usb 2-1: Product: syz [ 187.353641][ T634] usb 2-1: Manufacturer: syz [ 187.358284][ T634] usb 2-1: SerialNumber: syz [ 187.376405][ T6] usb 1-1: descriptor type invalid, skip [ 187.382791][ T6] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 187.393656][ T6] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.403190][ T292] usb 5-1: USB disconnect, device number 96 [ 187.406556][ T6] usb 1-1: config 1 interface 0 has no altsetting 0 [ 187.421589][ T6] usb 1-1: string descriptor 0 read error: -22 [ 187.427818][ T6] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40 [ 187.436941][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.446196][ T8127] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 187.582003][ T634] usb 2-1: 0:2 : does not exist [ 187.587933][ T634] usb 2-1: unknown interface protocol 0x2, assuming v1 [ 187.594892][ T312] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 187.595379][ T634] usb 2-1: cannot find UAC_HEADER [ 187.608685][ T634] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 187.610531][ T535] usb 4-1: USB disconnect, device number 96 [ 187.617598][ T634] usb 2-1: USB disconnect, device number 96 [ 187.670040][ T6] usbhid 1-1:1.0: can't add hid device: -71 [ 187.676111][ T6] usbhid: probe of 1-1:1.0 failed with error -71 [ 187.686257][ T6] usb 1-1: USB disconnect, device number 98 [ 187.792975][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.803145][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 187.812011][ T312] usb 3-1: config 1 has no interface number 0 [ 187.818156][ T312] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.832591][ T312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.841694][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.849855][ T312] usb 3-1: Product: syz [ 187.854014][ T312] usb 3-1: Manufacturer: syz [ 187.858642][ T312] usb 3-1: SerialNumber: syz [ 187.864950][ T312] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 187.867747][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.872414][ T312] cdc_ncm 3-1:1.1: bind() failure [ 188.031605][ T28] audit: type=1326 audit(2000002590.583:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.4.3836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2a7f8e969 code=0x0 [ 188.068925][ T28] audit: type=1400 audit(2000002590.621:238): avc: denied { view } for pid=8200 comm="syz.3.3838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 188.100237][ T6] usb 3-1: USB disconnect, device number 95 [ 188.109243][ T28] audit: type=1326 audit(2000002590.658:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.3.3840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f554238e969 code=0x0 [ 188.466446][ T634] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 188.488118][ T636] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 188.661495][ T634] usb 5-1: Using ep0 maxpacket: 16 [ 188.667838][ T634] usb 5-1: config index 0 descriptor too short (expected 30768, got 72) [ 188.676263][ T6] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 188.684367][ T634] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 188.693092][ T634] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 188.703428][ T634] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 188.713018][ T636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 188.723131][ T312] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 188.723187][ T636] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 188.740979][ T636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 188.750682][ T636] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 188.761314][ T634] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 188.770479][ T634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.778508][ T634] usb 5-1: Product: syz [ 188.782823][ T634] usb 5-1: Manufacturer: syz [ 188.787448][ T634] usb 5-1: SerialNumber: syz [ 188.792138][ T636] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 188.801259][ T636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.809668][ T636] usb 2-1: Product: syz [ 188.814142][ T636] usb 2-1: Manufacturer: syz [ 188.818781][ T636] usb 2-1: SerialNumber: syz [ 188.824762][ T636] usb 2-1: config 0 descriptor?? [ 188.830744][ T636] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 188.910690][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 188.917276][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.925821][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.932320][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 188.935991][ T6] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 188.942359][ T312] usb 1-1: config 0 has an invalid interface number: 194 but max is 0 [ 188.950079][ T6] usb 4-1: config 1 has no interface number 1 [ 188.958730][ T312] usb 1-1: config 0 has no interface number 0 [ 188.966468][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.970593][ T312] usb 1-1: config 0 interface 194 has no altsetting 0 [ 188.979926][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.988093][ T312] usb 1-1: New USB device found, idVendor=0421, idProduct=0108, bcdDevice=26.d2 [ 188.994709][ T1511] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 189.003606][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.011390][ T6] usb 4-1: Product: syz [ 189.019151][ T312] usb 1-1: Product: syz [ 189.023557][ T6] usb 4-1: Manufacturer: syz [ 189.027360][ T312] usb 1-1: Manufacturer: syz [ 189.027378][ T312] usb 1-1: SerialNumber: syz [ 189.028439][ T312] usb 1-1: config 0 descriptor?? [ 189.041050][ T6] usb 4-1: SerialNumber: syz [ 189.046171][ T312] usb 1-1: bad CDC descriptors [ 189.056748][ T634] usb 5-1: USB disconnect, device number 97 [ 189.063095][ T636] scsi host1: usb-storage 2-1:0.0 [ 189.070460][ T636] usb 2-1: USB disconnect, device number 97 [ 189.246494][ T1511] usb 3-1: Using ep0 maxpacket: 32 [ 189.252923][ T1511] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 189.261274][ T1511] usb 3-1: config 0 has no interface number 0 [ 189.269072][ T1511] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 189.278151][ T1511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.286615][ T1511] usb 3-1: Product: syz [ 189.291045][ T1511] usb 3-1: Manufacturer: syz [ 189.295673][ T1511] usb 3-1: SerialNumber: syz [ 189.304917][ T6] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 189.310521][ T292] usb 1-1: USB disconnect, device number 99 [ 189.313220][ T1511] usb 3-1: config 0 descriptor?? [ 189.323755][ T6] usb 4-1: 2:1: invalid format type 0xf502 is detected, processed as PCM [ 189.332207][ T6] usb 4-1: 2:1 : sample bitwidth 76 in over sample bytes 0 [ 189.339730][ T6] usb 4-1: 2:1 : unsupported sample bitwidth 76 in 0 bytes [ 189.347583][ T1511] smsc95xx v2.0.0 [ 189.351237][ T1511] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 189.361516][ T1511] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 189.370926][ T6] usb 4-1: USB disconnect, device number 97 [ 189.567009][ T1511] usb 3-1: USB disconnect, device number 96 [ 189.594069][ T2329] udevd[2329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.983296][ T292] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 190.026605][ T636] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 190.178299][ T292] usb 2-1: Using ep0 maxpacket: 16 [ 190.185229][ T292] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.193699][ T292] usb 2-1: config index 0 descriptor too short (expected 2140, got 92) [ 190.202007][ T292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.212152][ T312] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 190.220057][ T292] usb 2-1: config 1 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 190.233250][ T292] usb 2-1: config 1 interface 1 has no altsetting 0 [ 190.241337][ T292] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.244875][ T636] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.251484][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.260949][ T636] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.268521][ T535] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 190.278530][ T636] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.284952][ T292] usb 2-1: Product: syz [ 190.294317][ T636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.298279][ T292] usb 2-1: Manufacturer: syz [ 190.306524][ T636] usb 5-1: SerialNumber: syz [ 190.310893][ T292] usb 2-1: SerialNumber: syz [ 190.428744][ T312] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 190.438545][ T312] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.452443][ T312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.461672][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.469895][ T312] usb 1-1: SerialNumber: syz [ 190.475760][ T8303] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 190.481654][ T313] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 190.491087][ T312] usb 1-1: bad CDC descriptors [ 190.515507][ T535] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.525978][ T535] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.534964][ T535] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.539638][ T636] usb 5-1: skipping empty audio interface (v1) [ 190.551464][ T292] usb 2-1: selecting invalid altsetting 1 [ 190.559827][ T636] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 190.560236][ T292] usb 2-1: selecting invalid altsetting 0 [ 190.572942][ T292] usb 2-1: selecting invalid altsetting 0 [ 190.578142][ T636] usb 5-1: USB disconnect, device number 98 [ 190.578834][ T292] cdc_ncm 2-1:1.0: bind() failure [ 190.586182][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.590459][ T535] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.619239][ T292] usb 2-1: USB disconnect, device number 98 [ 190.625986][ T535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.634532][ T535] usb 4-1: Product: syz [ 190.638719][ T535] usb 4-1: Manufacturer: syz [ 190.643318][ T535] usb 4-1: SerialNumber: syz [ 190.655442][ T535] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 190.676617][ T535] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 190.683439][ T535] cdc_ncm 4-1:1.0: bind() failure [ 190.698296][ T313] usb 3-1: Using ep0 maxpacket: 8 [ 190.705542][ T313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.715795][ T535] usb 1-1: USB disconnect, device number 100 [ 190.722657][ T313] usb 3-1: config 6 has an invalid interface number: 107 but max is 0 [ 190.731349][ T313] usb 3-1: config 6 has no interface number 0 [ 190.737449][ T313] usb 3-1: config 6 interface 107 has no altsetting 0 [ 190.745772][ T313] usb 3-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=65.f6 [ 190.754850][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.762827][ T313] usb 3-1: Product: syz [ 190.767086][ T313] usb 3-1: Manufacturer: syz [ 190.771708][ T313] usb 3-1: SerialNumber: syz [ 190.883189][ T292] usb 4-1: USB disconnect, device number 98 [ 190.998434][ T313] usb 3-1: USB disconnect, device number 97 [ 191.293615][ T28] audit: type=1400 audit(2000002593.594:240): avc: denied { create } for pid=8346 comm="syz.0.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 191.369202][ T28] audit: type=1400 audit(2000002593.668:241): avc: denied { read write } for pid=8356 comm="syz.0.3914" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 191.393882][ T28] audit: type=1400 audit(2000002593.668:242): avc: denied { open } for pid=8356 comm="syz.0.3914" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 191.418966][ T292] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 191.463994][ T28] audit: type=1326 audit(2000002593.760:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.3919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70aa38e969 code=0x0 [ 191.554193][ T535] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 191.620323][ T292] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 191.629137][ T292] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 191.648550][ T292] usb 5-1: config 135 has no interface number 0 [ 191.655184][ T292] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 191.673545][ T292] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 191.699808][ T292] usb 5-1: config 135 interface 230 has no altsetting 0 [ 191.725828][ T292] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 191.738466][ T312] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 191.753434][ T292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.766095][ T292] usb 5-1: Product: syz [ 191.770267][ T292] usb 5-1: Manufacturer: syz [ 191.774927][ T535] usb 2-1: Using ep0 maxpacket: 16 [ 191.780111][ T292] usb 5-1: SerialNumber: syz [ 191.785724][ T535] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 191.795546][ T535] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.806131][ T535] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.826707][ T535] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.835947][ T535] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 191.844121][ T535] usb 2-1: Product: syz [ 191.848442][ T535] usb 2-1: Manufacturer: syz [ 191.853098][ T535] usb 2-1: SerialNumber: syz [ 191.956832][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.964888][ T312] usb 4-1: not running at top speed; connect to a high speed hub [ 191.973492][ T312] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 191.981632][ T312] usb 4-1: config 0 has no interface number 0 [ 191.987800][ T312] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 191.998461][ T636] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 191.998907][ T312] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 192.017347][ T312] usb 4-1: config 0 interface 88 has no altsetting 0 [ 192.025540][ T312] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 192.034818][ T312] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 192.042956][ T312] usb 4-1: Product: syz [ 192.045220][ T1511] usb 5-1: USB disconnect, device number 99 [ 192.047141][ T312] usb 4-1: Manufacturer: syz [ 192.058542][ T312] usb 4-1: SerialNumber: syz [ 192.063932][ T312] usb 4-1: config 0 descriptor?? [ 192.078348][ T535] usb 2-1: 0:2 : does not exist [ 192.088043][ T535] usb 2-1: USB disconnect, device number 99 [ 192.106855][ T313] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 192.195097][ T636] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.203607][ T636] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.213987][ T636] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.223120][ T636] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.238417][ T636] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.247500][ T636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.255534][ T636] usb 3-1: Product: syz [ 192.259754][ T636] usb 3-1: Manufacturer: syz [ 192.264367][ T636] usb 3-1: SerialNumber: syz [ 192.290238][ T312] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input21 [ 192.301329][ T312] usb 4-1: USB disconnect, device number 99 [ 192.308895][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.318708][ T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.330124][ T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.340684][ T313] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0114, bcdDevice= 0.40 [ 192.349841][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.357945][ T313] usb 1-1: Product: syz [ 192.362120][ T313] usb 1-1: Manufacturer: syz [ 192.366722][ T313] usb 1-1: SerialNumber: syz [ 192.491373][ T636] cdc_ncm 3-1:1.0: skipping garbage [ 192.496766][ T636] cdc_ncm 3-1:1.0: skipping garbage [ 192.502038][ T636] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 192.508671][ T636] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 192.515457][ T636] cdc_ncm 3-1:1.0: bind() failure [ 192.521753][ T636] usb 3-1: USB disconnect, device number 98 [ 192.593248][ T313] usb 1-1: 0:2 : does not exist [ 192.608240][ T313] usb 1-1: USB disconnect, device number 101 [ 192.622897][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.636928][ T8411] 9pnet_fd: Insufficient options for proto=fd [ 192.724095][ T8427] loop4: detected capacity change from 0 to 512 [ 192.731613][ T8427] EXT4-fs (loop4): Invalid log block size: 33554433 [ 193.049503][ T6] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 193.060331][ T636] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 193.179511][ T313] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 193.244541][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 193.252364][ T6] usb 5-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 193.261877][ T636] usb 2-1: Using ep0 maxpacket: 16 [ 193.273413][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.281767][ T6] usb 5-1: Product: syz [ 193.286230][ T6] usb 5-1: Manufacturer: syz [ 193.291034][ T636] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 193.299379][ T6] usb 5-1: SerialNumber: syz [ 193.304487][ T636] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 193.316482][ T6] usb 5-1: config 0 descriptor?? [ 193.321536][ T636] usb 2-1: config 0 has no interface number 0 [ 193.328735][ T6] usb 5-1: bad CDC descriptors [ 193.338622][ T636] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 193.348354][ T636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.356522][ T636] usb 2-1: Product: syz [ 193.360825][ T636] usb 2-1: Manufacturer: syz [ 193.365751][ T636] usb 2-1: SerialNumber: syz [ 193.374791][ T636] usb 2-1: config 0 descriptor?? [ 193.383312][ T636] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 193.386692][ T313] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.390251][ T636] usb 2-1: No valid video chain found. [ 193.417896][ T313] usb 4-1: config 1 has no interface number 1 [ 193.424116][ T313] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 193.435303][ T313] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 193.448379][ T313] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 193.461527][ T313] usb 4-1: string descriptor 0 read error: -22 [ 193.467748][ T313] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.477025][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.482916][ T1511] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 193.495051][ T313] usb 4-1: low speed audio streaming not supported [ 193.551467][ T636] usb 5-1: USB disconnect, device number 100 [ 193.608793][ T313] usb 2-1: USB disconnect, device number 100 [ 193.686402][ T1511] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.705164][ T1511] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.734219][ T634] usb 4-1: USB disconnect, device number 100 [ 193.740752][ T1511] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.767061][ T1511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.775138][ T1511] usb 1-1: SerialNumber: syz [ 193.797342][ T1511] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 193.804244][ T1511] cdc_mbim 1-1:1.0: bind() failure [ 194.014950][ T313] usb 1-1: USB disconnect, device number 102 [ 194.111393][ T1511] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 194.194403][ T28] audit: type=1400 audit(2000002596.278:244): avc: denied { write } for pid=8490 comm="syz.4.3981" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 194.318697][ T1511] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.336567][ T1511] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 194.361152][ T1511] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.391151][ T1511] usb 3-1: config 1 interface 0 has no altsetting 0 [ 194.406883][ T1511] usb 3-1: string descriptor 0 read error: -22 [ 194.413134][ T1511] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 194.435144][ T8535] loop3: detected capacity change from 0 to 512 [ 194.447886][ T1511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.456911][ T8535] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 194.470243][ T8477] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.475731][ T8535] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.495239][ T8535] EXT4-fs (loop3): couldn't read superblock of external journal [ 194.550656][ T8551] loop3: detected capacity change from 0 to 256 [ 194.708113][ T1511] usbhid 3-1:1.0: can't add hid device: -71 [ 194.714132][ T1511] usbhid: probe of 3-1:1.0 failed with error -71 [ 194.723607][ T1511] usb 3-1: USB disconnect, device number 99 [ 194.772993][ T8582] binder: Bad value for 'max' [ 194.794029][ T313] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 194.902444][ T312] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 194.990793][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.003020][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.028911][ T313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.039151][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.062372][ T313] usb 2-1: Product: syz [ 195.070228][ T313] usb 2-1: Manufacturer: syz [ 195.074866][ T313] usb 2-1: SerialNumber: syz [ 195.108317][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 195.115257][ T312] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 195.129915][ T312] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 195.149578][ T312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.171218][ T312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 195.191739][ T312] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.215757][ T312] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 195.231877][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.253907][ T312] usb 5-1: config 0 descriptor?? [ 195.306168][ T313] usb 2-1: 0:2 : does not exist [ 195.315139][ T313] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 195.331709][ T313] usb 2-1: USB disconnect, device number 101 [ 195.358950][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 195.428024][ T8630] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 195.479444][ T312] usb 5-1: USB disconnect, device number 101 [ 195.509306][ T1511] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 195.660881][ T634] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 195.716406][ T1511] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 195.725236][ T1511] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.735552][ T1511] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.744612][ T1511] usb 1-1: config 1 has no interface number 0 [ 195.750744][ T1511] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 195.761594][ T1511] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 195.786401][ T1511] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.795615][ T1511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.803874][ T1511] usb 1-1: Product: syz [ 195.808140][ T1511] usb 1-1: Manufacturer: syz [ 195.812784][ T1511] usb 1-1: SerialNumber: syz [ 195.871796][ T634] usb 4-1: Using ep0 maxpacket: 32 [ 195.877645][ T8676] loop1: detected capacity change from 0 to 512 [ 195.887003][ T634] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 195.896606][ T634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.905329][ T634] usb 4-1: config 0 descriptor?? [ 195.911532][ T634] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 195.912372][ T8676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.919502][ T634] ftdi_sio ttyUSB0: unknown device type: 0x55d [ 195.928626][ T8676] ext4 filesystem being mounted at /818/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.957487][ T282] EXT4-fs (loop1): unmounting filesystem. [ 195.975684][ T8683] loop1: detected capacity change from 0 to 1024 [ 195.987663][ T8683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.005392][ T282] EXT4-fs (loop1): unmounting filesystem. [ 196.024490][ T8687] loop1: detected capacity change from 0 to 512 [ 196.033222][ T8687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.046818][ T1511] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 196.065654][ T1511] usb 1-1: USB disconnect, device number 103 [ 196.065672][ T8690] loop4: detected capacity change from 0 to 1024 [ 196.076666][ T282] EXT4-fs (loop1): unmounting filesystem. [ 196.086171][ T8690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.112444][ T8695] incfs: Options parsing error. -22 [ 196.118123][ T8695] incfs: mount failed -22 [ 196.123142][ T286] EXT4-fs (loop4): unmounting filesystem. [ 196.139904][ T8697] loop1: detected capacity change from 0 to 512 [ 196.151848][ T634] usb 4-1: USB disconnect, device number 101 [ 196.167916][ T634] ftdi_sio 4-1:0.0: device disconnected [ 196.177535][ T8697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.182502][ T8700] loop4: detected capacity change from 0 to 512 [ 196.196545][ T282] EXT4-fs (loop1): unmounting filesystem. [ 196.198302][ T312] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 196.221479][ T8700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.231500][ T8700] ext4 filesystem being mounted at /868/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.237234][ T8704] loop1: detected capacity change from 0 to 2048 [ 196.262689][ T286] EXT4-fs (loop4): unmounting filesystem. [ 196.269292][ T8704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.277866][ T8704] ext4 filesystem being mounted at /824/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.302312][ T8708] loop4: detected capacity change from 0 to 512 [ 196.309590][ T282] EXT4-fs (loop1): unmounting filesystem. [ 196.317040][ T8708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.341925][ T286] EXT4-fs (loop4): unmounting filesystem. [ 196.346357][ T8711] loop1: detected capacity change from 0 to 512 [ 196.379326][ T8711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.390142][ T8711] ext4 filesystem being mounted at /825/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.410483][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.427983][ T282] EXT4-fs (loop1): unmounting filesystem. [ 196.428474][ T312] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.444933][ T312] usb 3-1: config 1 has no interface number 1 [ 196.451398][ T312] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.467321][ T8717] loop4: detected capacity change from 0 to 16 [ 196.478985][ T8717] erofs: (device loop4): mounted with root inode @ nid 36. [ 196.489390][ T312] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.506893][ T8719] loop1: detected capacity change from 0 to 2048 [ 196.513350][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.527489][ T312] usb 3-1: Product: syz [ 196.531972][ T312] usb 3-1: Manufacturer: syz [ 196.533407][ T8719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.536737][ T8721] loop4: detected capacity change from 0 to 1024 [ 196.552211][ T312] usb 3-1: SerialNumber: syz [ 196.575165][ T282] EXT4-fs (loop1): unmounting filesystem. [ 196.587746][ T8721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.595218][ T8726] loop1: detected capacity change from 0 to 512 [ 196.602607][ T8721] ext4 filesystem being mounted at /872/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.612908][ T8726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.639257][ T282] EXT4-fs (loop1): unmounting filesystem. [ 196.661514][ T286] EXT4-fs (loop4): unmounting filesystem. [ 196.724717][ T8733] loop4: detected capacity change from 0 to 512 [ 196.747723][ T8735] loop3: detected capacity change from 0 to 256 [ 196.779107][ T312] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 196.793223][ T312] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 196.820729][ T312] usb 3-1: failed to enable PITCH for EP 0x82 [ 196.845126][ T312] usb 3-1: USB disconnect, device number 100 [ 196.880094][ T8739] loop3: detected capacity change from 0 to 512 [ 196.946038][ T8737] loop4: detected capacity change from 0 to 8192 [ 196.958347][ T8741] loop3: detected capacity change from 0 to 2048 [ 197.014066][ T8741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 197.046274][ T8745] loop4: detected capacity change from 0 to 128 [ 197.054484][ T283] EXT4-fs (loop3): unmounting filesystem. [ 197.093239][ T2329] udevd[2329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.111984][ T8747] loop3: detected capacity change from 0 to 2048 [ 197.139810][ T8749] loop4: detected capacity change from 0 to 256 [ 197.165191][ T8747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 197.237930][ T283] EXT4-fs (loop3): unmounting filesystem. [ 197.248305][ T8752] loop4: detected capacity change from 0 to 256 [ 197.306518][ T8754] loop3: detected capacity change from 0 to 2048 [ 197.330955][ T8756] loop4: detected capacity change from 0 to 128 [ 197.437254][ T8762] loop4: detected capacity change from 0 to 16 [ 197.452553][ T8762] erofs: (device loop4): mounted with root inode @ nid 36. [ 197.549960][ T8766] loop4: detected capacity change from 0 to 4096 [ 197.596254][ T8766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.677099][ T8731] loop1: detected capacity change from 0 to 131072 [ 197.684054][ T286] EXT4-fs (loop4): unmounting filesystem. [ 197.693838][ T634] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 197.732115][ T8772] loop4: detected capacity change from 0 to 128 [ 197.750556][ T8731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.797812][ T8774] loop4: detected capacity change from 0 to 256 [ 197.858736][ T8731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.881863][ T8777] loop4: detected capacity change from 0 to 256 [ 197.893126][ T634] usb 4-1: Using ep0 maxpacket: 32 [ 197.899391][ T634] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.933303][ T634] usb 4-1: config 1 interface 0 has no altsetting 0 [ 197.951434][ T634] usb 4-1: language id specifier not provided by device, defaulting to English [ 197.977099][ T634] usb 4-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.40 [ 197.988627][ T8779] loop4: detected capacity change from 0 to 512 [ 197.994980][ T634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.995007][ T634] usb 4-1: Product: syz [ 197.995022][ T634] usb 4-1: SerialNumber: syz [ 198.174057][ T8781] loop4: detected capacity change from 0 to 8192 [ 198.246050][ T634] usbhid 4-1:1.0: can't add hid device: -71 [ 198.252117][ T634] usbhid: probe of 4-1:1.0 failed with error -71 [ 198.270567][ T634] usb 4-1: USB disconnect, device number 102 [ 198.293334][ T8785] loop4: detected capacity change from 0 to 2048 [ 198.360748][ T8787] loop4: detected capacity change from 0 to 128 [ 198.420256][ T8791] loop1: detected capacity change from 0 to 128 [ 198.463942][ T8793] loop4: detected capacity change from 0 to 2048 [ 198.500847][ T8795] loop1: detected capacity change from 0 to 2048 [ 198.544962][ T8797] loop4: detected capacity change from 0 to 128 [ 198.572736][ T8799] loop1: detected capacity change from 0 to 128 [ 198.596793][ T8801] loop4: detected capacity change from 0 to 128 [ 198.646511][ T8803] loop1: detected capacity change from 0 to 2048 [ 198.763714][ T8807] loop4: detected capacity change from 0 to 8192 [ 198.885869][ T8819] loop4: detected capacity change from 0 to 512 [ 198.930790][ T28] audit: type=1400 audit(2000002600.643:245): avc: denied { setopt } for pid=8822 comm="syz.3.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.976619][ T28] audit: type=1400 audit(2000002600.671:246): avc: denied { create } for pid=8824 comm="syz.3.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.993800][ T8827] loop3: detected capacity change from 0 to 128 [ 199.028497][ T28] audit: type=1400 audit(2000002600.689:247): avc: denied { write } for pid=8824 comm="syz.3.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.052586][ T312] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 199.074423][ T8829] loop4: detected capacity change from 0 to 512 [ 199.127237][ T8829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.138125][ T8833] loop3: detected capacity change from 0 to 128 [ 199.157982][ T286] EXT4-fs (loop4): unmounting filesystem. [ 199.192544][ T8835] loop4: detected capacity change from 0 to 128 [ 199.258416][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 199.281035][ T312] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 199.289253][ T312] usb 2-1: config 0 has no interface number 0 [ 199.299189][ T8839] loop4: detected capacity change from 0 to 128 [ 199.313016][ T312] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 199.339229][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.359498][ T312] usb 2-1: config 0 descriptor?? [ 199.585662][ T312] usb 2-1: USB disconnect, device number 102 [ 199.648759][ T8841] loop4: detected capacity change from 0 to 32768 [ 200.120332][ T8853] loop4: detected capacity change from 0 to 32768 [ 200.309876][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4154'. [ 200.351270][ T28] audit: type=1400 audit(2000002601.953:248): avc: denied { bind } for pid=8870 comm="syz.4.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.509218][ T8881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4161'. [ 200.558615][ T313] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 200.591142][ T634] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 200.689049][ T28] audit: type=1400 audit(2000002602.276:249): avc: denied { create } for pid=8890 comm="syz.4.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.711525][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4166'. [ 200.720512][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4166'. [ 200.751421][ T28] audit: type=1400 audit(2000002602.295:250): avc: denied { write } for pid=8890 comm="syz.4.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.753682][ T8891] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4166'. [ 200.796997][ T634] usb 3-1: Using ep0 maxpacket: 8 [ 200.803201][ T634] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 200.811558][ T8891] netlink: 'syz.4.4166': attribute type 3 has an invalid length. [ 200.818483][ T634] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.820643][ T313] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 200.839348][ T634] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.848425][ T8891] netlink: 'syz.4.4166': attribute type 2 has an invalid length. [ 200.856336][ T634] usb 3-1: config 1 has no interface number 0 [ 200.861983][ T313] usb 2-1: config 0 has no interface number 0 [ 200.869657][ T634] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.879568][ T8891] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4166'. [ 200.891000][ T313] usb 2-1: New USB device found, idVendor=28a7, idProduct=71ab, bcdDevice=df.39 [ 200.891344][ T634] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.912526][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.920659][ T8891] netlink: 'syz.4.4166': attribute type 2 has an invalid length. [ 200.928480][ T313] usb 2-1: Product: syz [ 200.931871][ T634] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.932671][ T313] usb 2-1: Manufacturer: syz [ 200.932690][ T313] usb 2-1: SerialNumber: syz [ 200.951180][ T634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.981567][ T313] usb 2-1: config 0 descriptor?? [ 200.988268][ T313] cdc_wdm 2-1:0.246: More than one union descriptor, skipping ... [ 200.992050][ T634] usb 3-1: Product: syz [ 201.000570][ T634] usb 3-1: Manufacturer: syz [ 201.008163][ T313] cdc_wdm: probe of 2-1:0.246 failed with error -22 [ 201.014988][ T634] usb 3-1: SerialNumber: syz [ 201.025199][ T634] cdc_wdm 3-1:1.128: skipping garbage [ 201.042672][ T634] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 201.170243][ T8837] loop3: detected capacity change from 0 to 262144 [ 201.199133][ T8837] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.231941][ T28] audit: type=1400 audit(2000002602.775:251): avc: denied { ioctl } for pid=8905 comm="syz.4.4172" path="socket:[41333]" dev="sockfs" ino=41333 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.246182][ T313] usb 2-1: USB disconnect, device number 103 [ 201.305177][ T24] usb 3-1: USB disconnect, device number 101 [ 201.338961][ T8837] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.372505][ T8913] netlink: 'syz.4.4175': attribute type 5 has an invalid length. [ 201.420916][ T28] audit: type=1400 audit(2000002602.950:252): avc: denied { write } for pid=8914 comm="syz.4.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.421002][ T8915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4176'. [ 201.456376][ T28] audit: type=1400 audit(2000002602.950:253): avc: denied { nlmsg_read } for pid=8914 comm="syz.4.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.636843][ T8929] loop4: detected capacity change from 0 to 256 [ 201.651977][ T8931] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4185'. [ 201.731288][ T28] audit: type=1400 audit(2000002603.236:254): avc: denied { nlmsg_write } for pid=8936 comm="syz.0.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.010597][ T634] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 202.060299][ T28] audit: type=1400 audit(2000002603.541:255): avc: denied { write } for pid=8979 comm="syz.0.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.114305][ T8984] binfmt_misc: register: failed to install interpreter file ./file0 [ 202.160250][ T28] audit: type=1400 audit(2000002603.624:256): avc: denied { sqpoll } for pid=8990 comm="syz.2.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 202.180670][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4177'. [ 202.211455][ T28] audit: type=1400 audit(2000002603.651:257): avc: denied { audit_read } for pid=8989 comm="syz.1.4214" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.227355][ T634] usb 5-1: Using ep0 maxpacket: 16 [ 202.271157][ T634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.313497][ T634] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 202.333153][ T9015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4225'. [ 202.352597][ T634] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 202.416807][ T634] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.437167][ T634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.500099][ T8935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.519655][ T634] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 202.545506][ T9051] loop1: detected capacity change from 0 to 512 [ 202.567244][ T9051] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.629141][ T9051] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4243: bg 0: block 384: padding at end of block bitmap is not set [ 202.681891][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 202.694262][ T9075] netlink: 'syz.3.4254': attribute type 16 has an invalid length. [ 202.695453][ T9051] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 202.712731][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 202.725841][ T9051] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.4243: attempt to clear invalid blocks 983260 len 1 [ 202.747885][ T634] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 202.758843][ T634] usb 5-1: USB disconnect, device number 102 [ 202.769876][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 202.776446][ T9051] EXT4-fs error (device loop1): __ext4_get_inode_loc:4508: comm syz.1.4243: Invalid inode table block 0 in block_group 0 [ 202.806093][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 202.827701][ T9051] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 202.828218][ T9090] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 202.877452][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 202.884015][ T9051] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 202.919460][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 202.938669][ T9051] EXT4-fs error (device loop1): __ext4_get_inode_loc:4508: comm syz.1.4243: Invalid inode table block 0 in block_group 0 [ 202.966320][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 202.973083][ T9051] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 202.999119][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 203.029255][ T9051] EXT4-fs error (device loop1): ext4_truncate:4313: inode #11: comm syz.1.4243: mark_inode_dirty error [ 203.053749][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 203.067374][ T9051] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 203.092744][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 203.105013][ T9051] EXT4-fs (loop1): 1 truncate cleaned up [ 203.110710][ T9051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 203.143768][ T9051] EXT4-fs error (device loop1): __ext4_get_inode_loc:4508: comm syz.1.4243: Invalid inode table block 0 in block_group 0 [ 203.167701][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 203.208435][ T282] EXT4-fs (loop1): unmounting filesystem. [ 203.285877][ T9142] xt_ecn: cannot match TCP bits for non-tcp packets [ 203.407154][ T9158] loop4: detected capacity change from 0 to 512 [ 203.452635][ T9158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.507689][ T9158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 203.527655][ T9158] ext4 filesystem being mounted at /935/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.560650][ T286] EXT4-fs (loop4): unmounting filesystem. [ 203.599386][ T9182] netlink: 'syz.4.4306': attribute type 29 has an invalid length. [ 203.636076][ T9182] netlink: 'syz.4.4306': attribute type 29 has an invalid length. [ 204.070555][ T9248] xt_limit: Overflow, try lower: 65536/2147483648 [ 204.198062][ T9270] netlink: 'syz.0.4350': attribute type 27 has an invalid length. [ 204.261861][ T9276] loop4: detected capacity change from 0 to 1024 [ 204.274404][ T9276] EXT4-fs: Ignoring removed oldalloc option [ 204.282137][ T9276] EXT4-fs: Ignoring removed orlov option [ 204.288454][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.295699][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.330752][ T9276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.405479][ T9288] Illegal XDP return value 254234880 on prog (id 459) dev N/A, expect packet loss! [ 204.455940][ T286] EXT4-fs (loop4): unmounting filesystem. [ 204.468247][ T9290] loop1: detected capacity change from 0 to 512 [ 204.548076][ T9290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.632804][ T9290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.641781][ T9290] ext4 filesystem being mounted at /876/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.747649][ T9325] usb usb9: check_ctrlrecip: process 9325 (syz.2.4376) requesting ep 01 but needs 81 [ 204.757414][ T9325] usb usb9: usbfs: process 9325 (syz.2.4376) did not claim interface 0 before use [ 204.762580][ T9324] netlink: 'syz.4.4375': attribute type 27 has an invalid length. [ 204.785112][ T9290] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.4359: invalid size [ 204.845387][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.852704][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.874455][ T282] EXT4-fs (loop1): unmounting filesystem. [ 204.926252][ T9340] loop1: detected capacity change from 0 to 256 [ 204.944707][ T9340] FAT-fs (loop1): Directory bread(block 64) failed [ 204.955994][ T9340] FAT-fs (loop1): Directory bread(block 65) failed [ 204.976000][ T9340] FAT-fs (loop1): Directory bread(block 66) failed [ 204.998832][ T9340] FAT-fs (loop1): Directory bread(block 67) failed [ 205.037083][ T9340] FAT-fs (loop1): Directory bread(block 68) failed [ 205.043656][ T9340] FAT-fs (loop1): Directory bread(block 69) failed [ 205.052059][ T9340] FAT-fs (loop1): Directory bread(block 70) failed [ 205.058783][ T9340] FAT-fs (loop1): Directory bread(block 71) failed [ 205.065417][ T9340] FAT-fs (loop1): Directory bread(block 72) failed [ 205.075377][ T9340] FAT-fs (loop1): Directory bread(block 73) failed [ 205.532218][ T1511] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 205.598797][ T9416] loop1: detected capacity change from 0 to 256 [ 205.610631][ T9418] xt_CT: No such helper "snmp" [ 205.694074][ T9427] x_tables: duplicate underflow at hook 4 [ 205.702334][ T9130] loop3: detected capacity change from 0 to 262144 [ 205.748899][ T1511] usb 5-1: Using ep0 maxpacket: 8 [ 205.755593][ T1511] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.764265][ T9437] netlink: 'syz.1.4431': attribute type 3 has an invalid length. [ 206.886578][ C1] sched: RT throttling activated [ 206.907595][ T1511] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.917440][ T1511] usb 5-1: config 1 has no interface number 1 [ 206.930513][ T9443] __nla_validate_parse: 7 callbacks suppressed [ 206.930531][ T9443] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4435'. [ 206.931176][ T1511] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 206.973580][ T1511] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.978031][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4437'. [ 206.982668][ T1511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.011050][ T1511] usb 5-1: Product: syz [ 207.018034][ T1511] usb 5-1: Manufacturer: syz [ 207.022705][ T1511] usb 5-1: SerialNumber: syz [ 207.033978][ T9367] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.054048][ T9453] x_tables: duplicate entry at hook 2 [ 207.062809][ T9455] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4441'. [ 207.209526][ T9470] device veth1_macvtap left promiscuous mode [ 207.241316][ T9470] device macsec0 entered promiscuous mode [ 207.255627][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 207.255645][ T28] audit: type=1400 audit(2000002608.340:295): avc: denied { getopt } for pid=9481 comm="syz.0.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.289432][ T1511] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 207.306499][ T1511] usb 5-1: 2:1 : invalid channels 0 [ 207.324186][ T1511] usb 5-1: USB disconnect, device number 103 [ 207.363003][ T28] audit: type=1400 audit(2000002608.423:296): avc: denied { read } for pid=9489 comm="syz.0.4458" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 207.406245][ T9494] device bridge2 entered promiscuous mode [ 207.447546][ T28] audit: type=1400 audit(2000002608.487:297): avc: denied { setopt } for pid=9497 comm="syz.0.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.499438][ T28] audit: type=1326 audit(2000002608.533:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc558e969 code=0x7ffc0000 [ 207.569560][ T2326] udevd[2326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.574882][ T28] audit: type=1326 audit(2000002608.543:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fccc558e969 code=0x7ffc0000 [ 207.685846][ T28] audit: type=1326 audit(2000002608.543:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc558e969 code=0x7ffc0000 [ 207.774117][ T28] audit: type=1326 audit(2000002608.598:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9508 comm="syz.1.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4798e969 code=0x7ffc0000 [ 207.797974][ T9540] loop1: detected capacity change from 0 to 512 [ 207.837914][ T9540] journal_path: not usable as path [ 207.843706][ T28] audit: type=1326 audit(2000002608.598:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9508 comm="syz.1.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4798e969 code=0x7ffc0000 [ 207.860746][ T9540] EXT4-fs: error: could not find journal device path [ 207.898367][ T28] audit: type=1326 audit(2000002608.598:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9508 comm="syz.1.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7efd4798e969 code=0x7ffc0000 [ 207.951287][ T28] audit: type=1326 audit(2000002608.598:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9508 comm="syz.1.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4798e969 code=0x7ffc0000 [ 208.090748][ T9577] loop3: detected capacity change from 0 to 256 [ 208.124173][ T9577] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0a42a509, utbl_chksum : 0xe619d30d) [ 208.179918][ T9577] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 208.202967][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4509'. [ 208.228453][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4509'. [ 208.276997][ T9595] netlink: 'syz.1.4509': attribute type 1 has an invalid length. [ 208.278962][ T9605] device macsec0 entered promiscuous mode [ 208.323669][ T9614] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4518'. [ 208.350659][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4521'. [ 208.454308][ T9640] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4531'. [ 208.486317][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4531'. [ 208.503545][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'. [ 208.533568][ T9654] netlink: 'syz.0.4538': attribute type 3 has an invalid length. [ 208.776657][ T9701] device macsec0 entered promiscuous mode [ 208.808638][ T313] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 208.815244][ T327] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 209.021112][ T327] usb 4-1: Using ep0 maxpacket: 16 [ 209.024946][ T313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.031334][ T327] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.042848][ T313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.064413][ T327] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 209.092814][ T327] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 209.096702][ T313] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.106967][ T9764] netlink: 'syz.0.4592': attribute type 5 has an invalid length. [ 209.138149][ T327] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.148356][ T9766] tc_dump_action: action bad kind [ 209.151715][ T313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.167664][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.168329][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.205492][ T9651] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 209.213134][ T327] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 209.213173][ T313] usb 3-1: Product: syz [ 209.231855][ T313] usb 3-1: Manufacturer: syz [ 209.269773][ T313] usb 3-1: SerialNumber: syz [ 209.283220][ T313] usb 3-1: bad CDC descriptors [ 209.320274][ T9779] loop4: detected capacity change from 0 to 16 [ 209.341263][ T9779] erofs: (device loop4): mounted with root inode @ nid 36. [ 209.453013][ T327] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 209.465459][ T327] usb 4-1: USB disconnect, device number 103 [ 209.551878][ T9804] usb usb8: usbfs: process 9804 (syz.4.4611) did not claim interface 0 before use [ 209.568026][ T636] usb 3-1: USB disconnect, device number 102 [ 209.834191][ T9847] xt_TCPMSS: Only works on TCP SYN packets [ 209.896410][ T9860] xt_TCPMSS: Only works on TCP SYN packets [ 209.902087][ T9859] netlink: 'syz.0.4638': attribute type 5 has an invalid length. [ 209.947527][ T9866] overlayfs: missing 'workdir' [ 210.042744][ T9889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.138177][ T9904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=9904 comm=syz.3.4660 [ 210.427623][ T9948] netlink: 'syz.1.4682': attribute type 3 has an invalid length. [ 210.634358][ T9982] netlink: 'syz.3.4697': attribute type 5 has an invalid length. [ 210.652695][ T9984] xt_hashlimit: max too large, truncated to 1048576 [ 210.668607][ T9984] xt_limit: Overflow, try lower: 0/0 [ 210.934250][T10012] netlink: 'syz.2.4712': attribute type 6 has an invalid length. [ 211.005908][T10019] loop3: detected capacity change from 0 to 256 [ 211.087970][T10019] FAT-fs (loop3): Directory bread(block 64) failed [ 211.132198][T10019] FAT-fs (loop3): Directory bread(block 65) failed [ 211.161936][T10019] FAT-fs (loop3): Directory bread(block 66) failed [ 211.177753][T10019] FAT-fs (loop3): Directory bread(block 67) failed [ 211.208394][T10019] FAT-fs (loop3): Directory bread(block 68) failed [ 211.216917][T10019] FAT-fs (loop3): Directory bread(block 69) failed [ 211.223923][T10019] FAT-fs (loop3): Directory bread(block 70) failed [ 211.253815][T10019] FAT-fs (loop3): Directory bread(block 71) failed [ 211.260436][T10019] FAT-fs (loop3): Directory bread(block 72) failed [ 211.278452][T10019] FAT-fs (loop3): Directory bread(block 73) failed [ 211.409316][T10066] loop1: detected capacity change from 0 to 256 [ 211.446435][T10066] FAT-fs (loop1): Directory bread(block 64) failed [ 211.476677][T10066] FAT-fs (loop1): Directory bread(block 65) failed [ 211.486306][T10066] FAT-fs (loop1): Directory bread(block 66) failed [ 211.503508][T10066] FAT-fs (loop1): Directory bread(block 67) failed [ 211.521353][T10066] FAT-fs (loop1): Directory bread(block 68) failed [ 211.543890][T10066] FAT-fs (loop1): Directory bread(block 69) failed [ 211.561531][T10066] FAT-fs (loop1): Directory bread(block 70) failed [ 211.570557][T10066] FAT-fs (loop1): Directory bread(block 71) failed [ 211.577406][T10066] FAT-fs (loop1): Directory bread(block 72) failed [ 211.599836][T10066] FAT-fs (loop1): Directory bread(block 73) failed [ 211.609136][T10088] netlink: 'syz.3.4749': attribute type 5 has an invalid length. [ 211.620514][T10088] device ip6erspan0 entered promiscuous mode [ 212.071212][T10159] device ip6erspan0 entered promiscuous mode [ 212.088412][T10158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.166086][T10158] device ip6erspan0 left promiscuous mode [ 212.286568][T10187] netlink: 'syz.0.4798': attribute type 12 has an invalid length. [ 212.363597][T10195] x_tables: duplicate underflow at hook 3 [ 212.401362][ T636] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 212.461711][T10203] kernel profiling enabled (shift: 63) [ 212.479305][T10203] profiling shift: 63 too large [ 212.594239][ T9884] loop4: detected capacity change from 0 to 262144 [ 212.600937][ T636] usb 2-1: Using ep0 maxpacket: 16 [ 212.622441][ T636] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 213.484777][ T636] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.492320][T10215] netlink: 'syz.3.4811': attribute type 30 has an invalid length. [ 213.497399][ T636] usb 2-1: config 0 has no interface number 0 [ 213.510012][ T9884] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.532106][ T636] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 214.470737][ T636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.479352][ T636] usb 2-1: Product: syz [ 214.483680][ T636] usb 2-1: Manufacturer: syz [ 214.488292][ T636] usb 2-1: SerialNumber: syz [ 214.493813][ T636] usb 2-1: config 0 descriptor?? [ 214.633216][ T292] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 214.708641][T10231] device vlan0 entered promiscuous mode [ 214.726525][ T636] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 214.743580][ T636] usb 2-1: No valid video chain found. [ 214.772623][T10237] device lo entered promiscuous mode [ 214.795811][T10237] device tunl0 entered promiscuous mode [ 214.822408][T10237] device gre0 entered promiscuous mode [ 214.840877][T10237] device gretap0 entered promiscuous mode [ 214.859036][T10237] device erspan0 entered promiscuous mode [ 214.869883][T10237] device ip_vti0 entered promiscuous mode [ 214.882505][ T292] usb 1-1: Using ep0 maxpacket: 16 [ 214.903897][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.916668][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 214.916684][ T28] audit: type=1400 audit(2000000006.728:344): avc: denied { ioctl } for pid=10240 comm="syz.3.4824" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.964392][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.972923][ T636] usb 2-1: USB disconnect, device number 104 [ 214.981354][ T292] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 214.990900][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.003830][ T292] usb 1-1: config 0 descriptor?? [ 215.009781][ T292] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 215.024483][ T292] usb 1-1: No valid video chain found. [ 215.040929][ T28] audit: type=1400 audit(2000000006.830:345): avc: denied { read } for pid=10246 comm="syz.3.4827" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 215.066322][ T28] audit: type=1400 audit(2000000006.830:346): avc: denied { open } for pid=10246 comm="syz.3.4827" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 215.134108][T10253] SELinux: Context Ž is not valid (left unmapped). [ 215.179610][T10261] mmap: syz.2.4833 (10261): VmData 167489536 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 215.209153][T10265] loop3: detected capacity change from 0 to 128 [ 215.232978][ T292] usb 1-1: USB disconnect, device number 104 [ 215.259923][T10272] loop4: detected capacity change from 0 to 1024 [ 215.266960][T10265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.275810][T10265] ext4 filesystem being mounted at /842/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.300828][T10272] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 215.309685][ T283] EXT4-fs (loop3): unmounting filesystem. [ 215.320328][T10272] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.329426][T10272] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 215.339521][T10272] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #3: comm syz.4.4839: mark_inode_dirty error [ 215.352634][T10272] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.4839: Invalid block bitmap block 3 in block_group 0 [ 215.376608][T10272] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 215.378763][T10284] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.397228][T10272] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #3: comm syz.4.4839: mark_inode_dirty error [ 215.411862][T10272] Quota error (device loop4): write_blk: dquota write failed [ 215.425364][T10272] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm syz.4.4839: lblock 6 mapped to illegal pblock 1 (length 1) [ 215.437945][ T28] audit: type=1400 audit(2000000007.190:347): avc: denied { checkpoint_restore } for pid=10287 comm="syz.3.4845" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.440063][T10272] Quota error (device loop4): write_blk: dquota write failed [ 215.468799][T10272] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 215.468839][T10272] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.4839: lblock 0 mapped to illegal pblock 48 (length 1) [ 215.469048][T10272] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 215.469066][T10272] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.4839: Failed to acquire dquot type 0 [ 215.469221][T10272] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 49: comm syz.4.4839: lblock 1 mapped to illegal pblock 49 (length 1) [ 215.469363][T10272] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 215.469387][T10272] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 215.469410][T10272] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.4839: Failed to acquire dquot type 0 [ 215.469552][T10272] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 215.469701][T10272] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.4839: mark_inode_dirty error [ 215.579067][T10272] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 215.589659][T10272] EXT4-fs (loop4): 1 orphan inode deleted [ 215.595484][T10272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.641798][T10272] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 215.692429][T10272] EXT4-fs error (device loop4): __ext4_remount:6598: comm syz.4.4839: Abort forced by user [ 215.703887][T10272] EXT4-fs (loop4): Remounting filesystem read-only [ 215.710602][T10272] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 215.729842][T10314] loop3: detected capacity change from 0 to 256 [ 215.735902][T10272] syz.4.4839 (10272) used greatest stack depth: 21088 bytes left [ 215.744720][ T286] EXT4-fs (loop4): unmounting filesystem. [ 215.748669][T10314] exfat: Deprecated parameter 'utf8' [ 215.759397][T10314] exfat: Deprecated parameter 'namecase' [ 215.772665][T10314] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 215.934359][T10340] device vti0 entered promiscuous mode [ 216.190525][T10386] ipt_REJECT: ECHOREPLY no longer supported. [ 216.263985][T10397] xt_l2tp: missing protocol rule (udp|l2tpip) [ 216.281522][T10403] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 216.685863][T10504] netlink: 'syz.2.4951': attribute type 16 has an invalid length. [ 216.803379][T10538] netlink: 'syz.2.4969': attribute type 5 has an invalid length. [ 216.856929][T10554] __nla_validate_parse: 6 callbacks suppressed [ 216.856950][T10554] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4977'. [ 216.881705][T10558] ÿ: renamed from bond_slave_0 [ 217.193830][T10640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.249318][T10656] Zero length message leads to an empty skb [ 217.362923][T10682] netlink: 'syz.4.5039': attribute type 4 has an invalid length. [ 217.370871][T10682] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5039'. [ 217.700781][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5078'. [ 218.009818][T10847] netlink: 'syz.1.5119': attribute type 27 has an invalid length. [ 218.451945][T10973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.676496][T11022] bridge0: port 3(gretap0) entered blocking state [ 218.699600][T11022] bridge0: port 3(gretap0) entered disabled state [ 218.706629][T11022] device gretap0 entered promiscuous mode [ 218.801845][T11052] device ip6tnl1 entered promiscuous mode [ 218.874612][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5228'. [ 218.884335][T11066] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5228'. [ 218.950532][T11079] netlink: 'syz.2.5235': attribute type 7 has an invalid length. [ 218.958685][T11079] netlink: 'syz.2.5235': attribute type 8 has an invalid length. [ 219.378175][T11176] netlink: 'syz.4.5282': attribute type 12 has an invalid length. [ 219.527605][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5296'. [ 219.537372][T11204] tc_dump_action: action bad kind [ 219.780957][T11254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5321'. [ 220.139631][T11322] futex_wake_op: syz.3.5354 tries to shift op by 32; fix this program [ 220.217577][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5363'. [ 220.347908][ T28] kauditd_printk_skb: 695 callbacks suppressed [ 220.347929][ T28] audit: type=1400 audit(2000000011.737:1043): avc: denied { create } for pid=11363 comm="syz.0.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 220.433283][ T28] audit: type=1400 audit(2000000011.737:1044): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.504452][ T28] audit: type=1400 audit(2000000011.737:1045): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.537291][ T28] audit: type=1400 audit(2000000011.746:1046): avc: denied { read } for pid=11368 comm="syz.2.5378" dev="nsfs" ino=4026532482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 220.578438][ T28] audit: type=1400 audit(2000000011.774:1047): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.605954][ T28] audit: type=1400 audit(2000000011.783:1048): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.631702][ T28] audit: type=1400 audit(2000000011.783:1049): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.657302][ T28] audit: type=1400 audit(2000000011.783:1050): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.683834][ T28] audit: type=1400 audit(2000000011.792:1051): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.740552][ T28] audit: type=1400 audit(2000000011.801:1052): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.027401][T11472] sock: sock_timestamping_bind_phc: sock not bind to device [ 221.487252][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5455'. [ 221.602106][T11543] xt_TCPMSS: Only works on TCP SYN packets [ 221.660149][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5468'. [ 221.672611][T11551] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 221.900413][T11580] netlink: 'syz.4.5481': attribute type 9 has an invalid length. [ 222.919076][T11728] __nla_validate_parse: 3 callbacks suppressed [ 222.919095][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5554'. [ 223.378559][T11793] tc_dump_action: action bad kind [ 223.473276][T11808] IPv6: NLM_F_REPLACE set, but no existing node found! [ 223.613638][T11829] xt_l2tp: v2 doesn't support IP mode [ 223.699486][T11840] xt_hashlimit: invalid interval [ 224.036865][T11894] netlink: 'syz.0.5635': attribute type 13 has an invalid length. [ 224.056820][T11894] gretap0: refused to change device tx_queue_len [ 224.073283][T11894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 224.347395][T11942] netlink: 'syz.0.5662': attribute type 49 has an invalid length. [ 224.370110][T11942] netlink: 'syz.0.5662': attribute type 49 has an invalid length. [ 224.833099][T12038] netlink: 'syz.2.5709': attribute type 3 has an invalid length. [ 224.910319][T12053] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 225.092252][T12091] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 225.236209][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5751'. [ 225.246608][T12127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=12127 comm=syz.2.5753 [ 225.533577][T12171] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5774'. [ 225.696491][T12189] sock: sock_timestamping_bind_phc: sock not bind to device [ 225.773218][ T28] kauditd_printk_skb: 11052 callbacks suppressed [ 225.773236][ T28] audit: type=1400 audit(2000000016.739:12102): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 225.854030][ T28] audit: type=1400 audit(2000000016.739:12103): avc: denied { bpf } for pid=12196 comm="syz.3.5788" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 225.907686][ T28] audit: type=1400 audit(2000000016.739:12104): avc: denied { bpf } for pid=12196 comm="syz.3.5788" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 225.975200][ T28] audit: type=1400 audit(2000000016.739:12105): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 226.037821][ T28] audit: type=1400 audit(2000000016.776:12106): avc: denied { read write } for pid=12198 comm="syz.4.5790" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 226.104312][ T28] audit: type=1400 audit(2000000016.785:12107): avc: denied { bpf } for pid=12199 comm="syz.3.5791" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 226.150668][ T28] audit: type=1400 audit(2000000016.785:12108): avc: denied { prog_load } for pid=12199 comm="syz.3.5791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 226.218577][ T28] audit: type=1400 audit(2000000016.785:12109): avc: denied { bpf } for pid=12199 comm="syz.3.5791" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 226.278993][ T28] audit: type=1400 audit(2000000016.795:12110): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 226.310541][T12256] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5818'. [ 226.345053][ T28] audit: type=1400 audit(2000000016.804:12111): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 226.511633][T12293] device gretap0 left promiscuous mode [ 226.529665][T12293] bridge0: port 3(gretap0) entered disabled state [ 226.549524][T12293] device bridge_slave_1 left promiscuous mode [ 226.595918][T12293] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.618024][T12293] device bridge_slave_0 left promiscuous mode [ 226.644508][T12293] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.811202][ T656] ------------[ cut here ]------------ [ 226.816697][ T656] kernel BUG at fs/buffer.c:2714! [ 226.832453][ T656] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 226.838570][ T656] CPU: 1 PID: 656 Comm: kmmpd-loop0 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 226.848397][ T656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 226.853210][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5855'. [ 226.858560][ T656] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 226.858591][ T656] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 3d e8 ff e9 b0 fe ff ff e8 2e eb a3 ff 0f 0b e8 27 eb a3 ff <0f> 0b e8 20 eb a3 ff 0f 0b e8 19 eb a3 ff 0f 0b e8 12 eb a3 ff 0f [ 226.858609][ T656] RSP: 0018:ffffc90000f0fca0 EFLAGS: 00010293 [ 226.858628][ T656] RAX: ffffffff81cbfba9 RBX: 0000000000000000 RCX: ffff88810023d100 [ 226.894934][T12334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5855'. [ 226.898589][ T656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.898606][ T656] RBP: ffffc90000f0fcf0 R08: dffffc0000000000 R09: ffffed10200bf855 [ 226.898621][ T656] R10: ffffed10200bf855 R11: 1ffff110200bf854 R12: 0000000000000000 [ 226.898641][ T656] R13: 1ffff110200bf854 R14: ffff8881005fc2a0 R15: 0000000000003801 [ 226.898658][ T656] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 226.956340][ T656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.962946][ T656] CR2: 00007ffc27e9bb08 CR3: 000000012fbc9000 CR4: 00000000003506a0 [ 226.970964][ T656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.978959][ T656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.986955][ T656] Call Trace: [ 226.990249][ T656] [ 226.993196][ T656] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 226.999036][ T656] submit_bh+0x1f/0x30 [ 227.003128][ T656] write_mmp_block_thawed+0x34a/0x4c0 [ 227.008531][ T656] ? read_mmp_block+0x6d0/0x6d0 [ 227.013423][ T656] ? __cfi_process_timeout+0x10/0x10 [ 227.018738][ T656] write_mmp_block+0x138/0x2b0 [ 227.023529][ T656] kmmpd+0x3ce/0x950 [ 227.027450][ T656] kthread+0x281/0x320 [ 227.031628][ T656] ? __cfi_kmmpd+0x10/0x10 [ 227.036065][ T656] ? __cfi_kthread+0x10/0x10 [ 227.040684][ T656] ret_from_fork+0x1f/0x30 [ 227.045130][ T656] [ 227.048172][ T656] Modules linked in: [ 227.052459][T12334] device vlan0 entered promiscuous mode [ 227.061711][ T656] ---[ end trace 0000000000000000 ]--- [ 227.069028][ T656] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 227.084946][ T656] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 3d e8 ff e9 b0 fe ff ff e8 2e eb a3 ff 0f 0b e8 27 eb a3 ff <0f> 0b e8 20 eb a3 ff 0f 0b e8 19 eb a3 ff 0f 0b e8 12 eb a3 ff 0f [ 227.104771][ T656] RSP: 0018:ffffc90000f0fca0 EFLAGS: 00010293 [ 227.110875][ T656] RAX: ffffffff81cbfba9 RBX: 0000000000000000 RCX: ffff88810023d100 [ 227.119043][ T656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.127086][ T656] RBP: ffffc90000f0fcf0 R08: dffffc0000000000 R09: ffffed10200bf855 [ 227.135067][ T656] R10: ffffed10200bf855 R11: 1ffff110200bf854 R12: 0000000000000000 [ 227.143072][ T656] R13: 1ffff110200bf854 R14: ffff8881005fc2a0 R15: 0000000000003801 [ 227.151128][ T656] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 227.160146][ T656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.166856][ T656] CR2: 0000200000000b80 CR3: 000000012fbc9000 CR4: 00000000003506a0 [ 227.174925][ T656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.182945][ T656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.191022][ T656] Kernel panic - not syncing: Fatal exception [ 227.197427][ T656] Kernel Offset: disabled [ 227.201771][ T656] Rebooting in 86400 seconds..