last executing test programs: 2.211027376s ago: executing program 1 (id=3865): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x1f, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, r0}, 0x67) 2.125409757s ago: executing program 1 (id=3868): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000080)={[{@numtail}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_win95}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@shortname_win95}, {@uni_xlate}, {@uni_xlateno}, {@shortname_win95}]}, 0x1, 0x360, &(0x7f0000000900)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x149) 1.681203504s ago: executing program 1 (id=3876): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8990, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) 1.602819705s ago: executing program 1 (id=3880): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000180)=0xc0006, 0x4) 1.580656325s ago: executing program 1 (id=3883): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x40802, 0x0) write$tcp_mem(r0, &(0x7f0000000200)={0xfffffffffffffffe, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x48) 1.564967285s ago: executing program 1 (id=3884): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 984.848834ms ago: executing program 2 (id=3932): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 933.404605ms ago: executing program 2 (id=3936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 838.534407ms ago: executing program 2 (id=3944): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x3, 0x5, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x10000, 0x102, 0x0}) 813.672457ms ago: executing program 2 (id=3946): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000500)={0x8, "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"}) 776.418458ms ago: executing program 2 (id=3949): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) 683.163699ms ago: executing program 3 (id=3958): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, 0x0) 649.9521ms ago: executing program 3 (id=3960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x64, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}, @IFLA_VTI_IKEY={0x8, 0x2, 0xb99d}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 630.35126ms ago: executing program 3 (id=3962): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000300)=']', 0x0, 0x2845, &(0x7f0000000080)=@file={0x0, './file0/file0\x00'}, 0x0) 582.63582ms ago: executing program 3 (id=3967): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) 555.512191ms ago: executing program 3 (id=3969): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 509.531602ms ago: executing program 3 (id=3971): syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) 248.608256ms ago: executing program 0 (id=3992): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000180)) 229.210416ms ago: executing program 0 (id=3993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 197.871227ms ago: executing program 0 (id=3996): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 162.707468ms ago: executing program 0 (id=3998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000380), 0x0}, 0x20) 117.455548ms ago: executing program 4 (id=3999): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000000040)) 117.312168ms ago: executing program 0 (id=4000): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 116.955808ms ago: executing program 4 (id=4001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x3c}, @in=@remote, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 106.735238ms ago: executing program 0 (id=4002): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x800, &(0x7f0000000240), 0x3, 0x4d5, &(0x7f0000000680)="$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") quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 94.119388ms ago: executing program 4 (id=4003): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) 64.766009ms ago: executing program 2 (id=4004): syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9}, [@acm={0x4, 0x24, 0x2, 0xa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x7f, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5}}}}}]}}]}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 62.911349ms ago: executing program 4 (id=4005): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x200, 0x81}]}) 15.61748ms ago: executing program 4 (id=4006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200), 0x4) 0s ago: executing program 4 (id=4007): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002ec0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end, @rr={0x7, 0x3, 0x3e}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}], 0x1, 0x20000814) kernel console output (not intermixed with test programs): 4] loop1: p183 start 16909250 is beyond EOD, truncated [ 141.103135][ T4894] loop1: p184 start 16909250 is beyond EOD, truncated [ 141.103156][ T4894] loop1: p185 start 16909250 is beyond EOD, [ 141.113344][ T5] usb 3-1: config 1 interface 0 has no altsetting 0 [ 141.120587][ T4894] truncated [ 141.127202][ T1139] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.149459][ T4894] loop1: p186 start 16909250 is beyond EOD, truncated [ 141.163087][ T4894] loop1: p187 start 16909250 is beyond EOD, truncated [ 141.169927][ T4894] loop1: p188 start 16909250 is beyond EOD, truncated [ 141.176811][ T4894] loop1: p189 start 16909250 is beyond EOD, truncated [ 141.183659][ T4894] loop1: p190 start 16909250 is beyond EOD, truncated [ 141.190427][ T4894] loop1: p191 start 16909250 is beyond EOD, truncated [ 141.197324][ T4894] loop1: p192 start 16909250 is beyond EOD, truncated [ 141.204212][ T4894] loop1: p193 start 16909250 is beyond EOD, truncated [ 141.211012][ T4894] loop1: p194 start 16909250 is beyond EOD, truncated [ 141.217864][ T4894] loop1: p195 start 16909250 is beyond EOD, truncated [ 141.224714][ T4894] loop1: p196 start 16909250 is beyond EOD, truncated [ 141.231502][ T4894] loop1: p197 start 16909250 is beyond EOD, truncated [ 141.238407][ T1139] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.238568][ T4894] loop1: p198 start 16909250 is beyond EOD, truncated [ 141.254370][ T4894] loop1: p199 start 16909250 is beyond EOD, truncated [ 141.261223][ T1139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.261433][ T4894] loop1: p200 start 16909250 is beyond EOD, [ 141.269256][ T1139] usb 5-1: SerialNumber: syz [ 141.269355][ T4894] truncated [ 141.283065][ T4894] loop1: p201 start 16909250 is beyond EOD, truncated [ 141.289980][ T4894] loop1: p202 start 16909250 is beyond EOD, truncated [ 141.290199][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.296826][ T4894] loop1: p203 start 16909250 is beyond EOD, truncated [ 141.296838][ T4894] loop1: p204 start 16909250 is beyond EOD, truncated [ 141.296847][ T4894] loop1: p205 start 16909250 is beyond EOD, truncated [ 141.296857][ T4894] loop1: p206 start 16909250 is beyond EOD, truncated [ 141.296866][ T4894] loop1: p207 start 16909250 is beyond EOD, truncated [ 141.296875][ T4894] loop1: p208 start 16909250 is beyond EOD, truncated [ 141.296884][ T4894] loop1: p209 start 16909250 is beyond EOD, truncated [ 141.296894][ T4894] loop1: p210 start 16909250 is beyond EOD, truncated [ 141.296902][ T4894] loop1: p211 start 16909250 is beyond EOD, truncated [ 141.296912][ T4894] loop1: p212 start 16909250 is beyond EOD, truncated [ 141.296931][ T4894] loop1: p213 start 16909250 is beyond EOD, [ 141.306062][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.313182][ T4894] truncated [ 141.320256][ T1139] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 141.326521][ T4894] loop1: p214 start 16909250 is beyond EOD, [ 141.334086][ T5] usb 3-1: Product: syz [ 141.340605][ T4894] truncated [ 141.346859][ T1139] usb 5-1: bad CDC descriptors [ 141.353902][ T4894] loop1: p215 start 16909250 is beyond EOD, [ 141.360375][ T5] usb 3-1: Manufacturer: 凖円闇뾀恺㴢쩸윙⣥㺞훷ࡍ [ 141.367568][ T4894] truncated [ 141.382304][ T5] usb 3-1: SerialNumber: syz [ 141.388398][ T4894] loop1: p216 start 16909250 is beyond EOD, truncated [ 141.444976][ T4894] loop1: p217 start 16909250 is beyond EOD, truncated [ 141.451816][ T4894] loop1: p218 start 16909250 is beyond EOD, truncated [ 141.458701][ T4894] loop1: p219 start 16909250 is beyond EOD, truncated [ 141.465540][ T4894] loop1: p220 start 16909250 is beyond EOD, truncated [ 141.472354][ T4894] loop1: p221 start 16909250 is beyond EOD, truncated [ 141.479148][ T4894] loop1: p222 start 16909250 is beyond EOD, truncated [ 141.485996][ T4894] loop1: p223 start 16909250 is beyond EOD, truncated [ 141.492795][ T4894] loop1: p224 start 16909250 is beyond EOD, truncated [ 141.499575][ T4894] loop1: p225 start 16909250 is beyond EOD, truncated [ 141.506898][ T4894] loop1: p226 start 16909250 is beyond EOD, truncated [ 141.514070][ T4894] loop1: p227 start 16909250 is beyond EOD, truncated [ 141.520959][ T4894] loop1: p228 start 16909250 is beyond EOD, truncated [ 141.527830][ T4894] loop1: p229 start 16909250 is beyond EOD, truncated [ 141.546878][ T4894] loop1: p230 start 16909250 is beyond EOD, truncated [ 141.553698][ T4894] loop1: p231 start 16909250 is beyond EOD, truncated [ 141.566258][ T1139] usb 5-1: USB disconnect, device number 45 [ 141.572848][ T4894] loop1: p232 start 16909250 is beyond EOD, truncated [ 141.579719][ T4894] loop1: p233 start 16909250 is beyond EOD, truncated [ 141.586506][ T4894] loop1: p234 start 16909250 is beyond EOD, truncated [ 141.593348][ T24] audit: type=1400 audit(2000524331.722:207): avc: denied { create } for pid=4949 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.618337][ T4894] loop1: p235 start 16909250 is beyond EOD, truncated [ 141.633265][ T4894] loop1: p236 start 16909250 is beyond EOD, truncated [ 141.640077][ T4894] loop1: p237 start 16909250 is beyond EOD, truncated [ 141.647988][ T4894] loop1: p238 start 16909250 is beyond EOD, truncated [ 141.656418][ T4894] loop1: p239 start 16909250 is beyond EOD, truncated [ 141.663563][ T4894] loop1: p240 start 16909250 is beyond EOD, truncated [ 141.673957][ T4894] loop1: p241 start 16909250 is beyond EOD, truncated [ 141.680766][ T4894] loop1: p242 start 16909250 is beyond EOD, truncated [ 141.688052][ T4894] loop1: p243 start 16909250 is beyond EOD, truncated [ 141.712133][ T4894] loop1: p244 start 16909250 is beyond EOD, truncated [ 141.719572][ T4894] loop1: p245 start 16909250 is beyond EOD, truncated [ 141.728982][ T4894] loop1: p246 start 16909250 is beyond EOD, truncated [ 141.735787][ T4894] loop1: p247 start 16909250 is beyond EOD, truncated [ 141.751033][ T5] usb 3-1: USB disconnect, device number 43 [ 141.757188][ T4894] loop1: p248 start 16909250 is beyond EOD, truncated [ 141.764161][ T4894] loop1: p249 start 16909250 is beyond EOD, truncated [ 141.771487][ T4894] loop1: p250 start 16909250 is beyond EOD, truncated [ 141.778825][ T4894] loop1: p251 start 16909250 is beyond EOD, truncated [ 141.787948][ T4894] loop1: p252 start 16909250 is beyond EOD, truncated [ 141.795087][ T4894] loop1: p253 start 16909250 is beyond EOD, truncated [ 141.801971][ T4894] loop1: p254 start 16909250 is beyond EOD, truncated [ 141.808743][ T4894] loop1: p255 start 16909250 is beyond EOD, truncated [ 141.927338][ T1678] udevd[1678]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 141.937169][ T341] udevd[341]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 141.993699][ T15] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 142.036333][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 142.250017][ T469] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 142.292933][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 142.399711][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 142.409615][ T15] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 142.463742][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.474517][ T345] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 142.506463][ T469] usb 2-1: Using ep0 maxpacket: 16 [ 142.549367][ T25] usb 4-1: config 160 has an invalid interface number: 100 but max is 0 [ 142.557754][ T25] usb 4-1: config 160 has no interface number 0 [ 142.564089][ T330] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 142.571830][ T25] usb 4-1: config 160 interface 100 altsetting 129 has an invalid endpoint with address 0xA2, skipping [ 142.582932][ T25] usb 4-1: config 160 interface 100 altsetting 129 has a duplicate endpoint with address 0x82, skipping [ 142.594148][ T25] usb 4-1: config 160 interface 100 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.607713][ T25] usb 4-1: config 160 interface 100 has no altsetting 0 [ 142.613364][ T15] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 142.623759][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.631769][ T15] usb 1-1: Product: syz [ 142.634711][ T469] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.636009][ T15] usb 1-1: Manufacturer: syz [ 142.646451][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 142.650687][ T15] usb 1-1: SerialNumber: syz [ 142.660778][ T469] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.678689][ T15] usb 1-1: config 0 descriptor?? [ 142.784338][ T25] usb 4-1: New USB device found, idVendor=0079, idProduct=a8ea, bcdDevice=7d.3e [ 142.793524][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.801608][ T25] usb 4-1: Product: syz [ 142.805932][ T25] usb 4-1: Manufacturer: syz [ 142.810531][ T25] usb 4-1: SerialNumber: syz [ 142.827128][ T4966] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.837742][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 142.848454][ T469] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 142.857755][ T469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.866208][ T345] usb 5-1: config 7 has an invalid interface number: 111 but max is 0 [ 142.874465][ T345] usb 5-1: config 7 has no interface number 0 [ 142.880822][ T469] usb 2-1: Product: syz [ 142.884987][ T469] usb 2-1: Manufacturer: syz [ 142.889678][ T469] usb 2-1: SerialNumber: syz [ 142.895005][ T469] usb 2-1: config 0 descriptor?? [ 142.955466][ T15] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 142.963823][ T15] usb 1-1: USB disconnect, device number 40 [ 142.965964][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.980025][ T330] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.062177][ T345] usb 5-1: New USB device found, idVendor=152d, idProduct=0583, bcdDevice=7e.44 [ 143.071311][ T345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.079466][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.088638][ T345] usb 5-1: Product: syz [ 143.092823][ T345] usb 5-1: Manufacturer: syz [ 143.097472][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.105706][ T345] usb 5-1: SerialNumber: syz [ 143.110724][ T330] usb 3-1: SerialNumber: syz [ 143.151818][ T25] usb 4-1: USB disconnect, device number 45 [ 143.159128][ T1139] usb 2-1: USB disconnect, device number 43 [ 143.160320][ T345] usb-storage 5-1:7.111: USB Mass Storage device detected [ 143.177732][ T345] usb-storage 5-1:7.111: Quirks match for vid 152d pid 0583: 4000000 [ 143.378189][ T345] usb 5-1: USB disconnect, device number 46 [ 143.415205][ T330] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 143.423096][ T330] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 143.429608][ T330] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 143.438883][ T330] usb 3-1: USB disconnect, device number 44 [ 143.623652][ T5006] binder: Binderfs stats mode cannot be changed during a remount [ 143.769243][ T5016] exfat: Bad value for 'time_offset' [ 143.949189][ T5021] syz.2.2191[5021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.949257][ T5021] syz.2.2191[5021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.959629][ T330] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 144.056995][ T5027] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 144.066060][ T5027] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.104080][ T5034] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 144.237386][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 144.300108][ T5057] EXT4-fs (loop1): Ignoring removed oldalloc option [ 144.308646][ T5057] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2207: Parent and EA inode have the same ino 15 [ 144.321373][ T5057] EXT4-fs (loop1): Remounting filesystem read-only [ 144.328064][ T5057] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.341147][ T5057] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2207: Parent and EA inode have the same ino 15 [ 144.353877][ T5057] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2207: inode #261888: comm syz.1.2207: iget: illegal inode # [ 144.371320][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 144.376603][ T5057] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2207: error while reading EA inode 261888 err=-117 [ 144.408628][ T5057] EXT4-fs (loop1): 1 orphan inode deleted [ 144.415333][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable, [ 144.539411][ T5086] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 144.550055][ T5086] EXT4-fs (loop2): orphan cleanup on readonly fs [ 144.556949][ T5086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2220: bg 0: block 248: padding at end of block bitmap is not set [ 144.579400][ T330] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 144.588753][ T5086] Quota error (device loop2): write_blk: dquota write failed [ 144.599533][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.606721][ T5086] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 144.607683][ T330] usb 4-1: Product: syz [ 144.622041][ T330] usb 4-1: Manufacturer: syz [ 144.626662][ T330] usb 4-1: SerialNumber: syz [ 144.628396][ T5086] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.2220: Failed to acquire dquot type 1 [ 144.634139][ T330] usb 4-1: config 0 descriptor?? [ 144.648387][ T5086] EXT4-fs (loop2): 1 truncate cleaned up [ 144.654448][ T5086] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue [ 144.703967][ T5098] EXT4-fs (loop1): Ignoring removed oldalloc option [ 144.715412][ T5098] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.724715][ T5098] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 144.734019][ T5098] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 144.743275][ T5098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c02c, mo2=0002] [ 144.751464][ T5098] System zones: 0-2, 18-18, 34-34 [ 144.757104][ T5098] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.771946][ T5098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2225: bg 0: block 369: padding at end of block bitmap is not set [ 144.787018][ T5098] EXT4-fs (loop1): Remounting filesystem read-only [ 144.794145][ T5098] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 144.805558][ T5098] EXT4-fs (loop1): 1 truncate cleaned up [ 144.811340][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,abort,oldalloc,errors=remount-ro,noauto_da_alloc, [ 144.825055][ T469] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 144.917930][ T1139] usb 4-1: USB disconnect, device number 46 [ 145.209831][ T330] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 145.244881][ T5124] F2FS-fs (loop2): Corrupted extension count (150994981 + 1 > 64) [ 145.252559][ T469] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.252816][ T5124] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.268950][ T5124] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 6) [ 145.276862][ T5124] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 145.295339][ T469] usb 1-1: not running at top speed; connect to a high speed hub [ 145.380778][ T469] usb 1-1: config 4 has an invalid interface number: 32 but max is 0 [ 145.388949][ T469] usb 1-1: config 4 has no interface number 0 [ 145.466191][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 145.519714][ T5135] capability: warning: `syz.4.2242' uses 32-bit capabilities (legacy support in use) [ 145.562390][ T469] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 145.582816][ T469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.596007][ T330] usb 2-1: config 2 has an invalid interface number: 4 but max is 0 [ 145.606748][ T330] usb 2-1: config 2 has no interface number 0 [ 145.617121][ T24] audit: type=1400 audit(2000524335.485:208): avc: denied { write } for pid=5146 comm="syz.2.2248" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 145.651095][ T469] usb 1-1: Product: syz [ 145.655305][ T469] usb 1-1: Manufacturer: syz [ 145.667842][ T330] usb 2-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.679098][ T469] usb 1-1: SerialNumber: syz [ 145.861729][ T330] usb 2-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 145.873783][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.881822][ T330] usb 2-1: Product: syz [ 145.890246][ T330] usb 2-1: Manufacturer: syz [ 145.895324][ T330] usb 2-1: SerialNumber: syz [ 145.937013][ T330] snd-usb-audio: probe of 2-1:2.4 failed with error -2 [ 145.957712][ T1139] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 145.990359][ T5] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 146.140661][ T24] audit: type=1326 audit(2000524335.990:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.3.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8d9834929 code=0x0 [ 146.156729][ T1141] usb 2-1: USB disconnect, device number 44 [ 146.163591][ T469] uvcvideo: Found UVC 0.02 device syz (17dc:0202) [ 146.176425][ T469] uvcvideo: No valid video chain found. [ 146.183837][ T469] usb 1-1: USB disconnect, device number 41 [ 146.214163][ T1139] usb 5-1: Using ep0 maxpacket: 32 [ 146.331663][ T5] usb 3-1: not running at top speed; connect to a high speed hub [ 146.342563][ T1139] usb 5-1: config 1 has an invalid interface number: 99 but max is 0 [ 146.350670][ T1139] usb 5-1: config 1 has no interface number 0 [ 146.356835][ T1139] usb 5-1: config 1 interface 99 has no altsetting 0 [ 146.417178][ T5] usb 3-1: config 13 has an invalid interface number: 214 but max is 1 [ 146.425512][ T5] usb 3-1: config 13 has an invalid interface number: 164 but max is 1 [ 146.433803][ T5] usb 3-1: config 13 has no interface number 0 [ 146.440086][ T5] usb 3-1: config 13 has no interface number 1 [ 146.446246][ T5] usb 3-1: config 13 interface 214 has no altsetting 0 [ 146.453132][ T5] usb 3-1: config 13 interface 164 has no altsetting 0 [ 146.504133][ T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 146.524147][ T1139] usb 5-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice= 0.81 [ 146.533230][ T1139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.541399][ T1139] usb 5-1: Product: syz [ 146.545954][ T1139] usb 5-1: Manufacturer: syz [ 146.550546][ T1139] usb 5-1: SerialNumber: syz [ 146.588593][ T1139] usb 5-1: bad CDC descriptors [ 146.612580][ T5215] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 146.630976][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=08d7, bcdDevice=9a.60 [ 146.640058][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.648118][ T5] usb 3-1: Product: syz [ 146.652312][ T5] usb 3-1: Manufacturer: syz [ 146.656895][ T5] usb 3-1: SerialNumber: syz [ 146.747073][ T24] audit: type=1400 audit(2000524336.547:210): avc: denied { create } for pid=5227 comm="syz.1.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.769791][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 146.806241][ T490] usb 5-1: USB disconnect, device number 47 [ 146.817118][ T5230] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2765: inode #11: comm syz.1.2289: corrupted xattr block 95 [ 146.829939][ T5230] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2289: bg 0: block 7: invalid block bitmap [ 146.842460][ T5230] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 146.851405][ T5230] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2930: inode #11: comm syz.1.2289: corrupted xattr block 95 [ 146.863893][ T5230] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 146.873135][ T5230] EXT4-fs (loop1): 1 orphan inode deleted [ 146.878966][ T5230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 146.908694][ T25] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 146.916910][ T25] usb 4-1: config 0 has no interface number 0 [ 146.923042][ T25] usb 4-1: config 0 interface 96 has no altsetting 0 [ 146.984535][ T1139] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 147.068932][ T5] uvcvideo: Found UVC 0.00 device syz (046d:08d7) [ 147.075420][ T5] uvcvideo: No valid video chain found. [ 147.082151][ T5] usb 3-1: USB disconnect, device number 45 [ 147.093788][ T5234] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 147.102205][ T5234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 147.113030][ T5234] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 147.122390][ T25] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=21.e3 [ 147.131602][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.136595][ T5234] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.140417][ T25] usb 4-1: Product: syz [ 147.150621][ T25] usb 4-1: Manufacturer: syz [ 147.155660][ T25] usb 4-1: SerialNumber: syz [ 147.165594][ T25] usb 4-1: config 0 descriptor?? [ 147.179797][ T5234] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 147.187044][ T5234] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.208213][ T25] rtl8150 4-1:0.96: couldn't find required endpoints [ 147.215313][ T25] rtl8150: probe of 4-1:0.96 failed with error -5 [ 147.329262][ T5243] EXT4-fs (loop1): invalid inodes per group: 0 [ 147.329262][ T5243] [ 147.378787][ T1139] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 147.392756][ T1139] usb 1-1: config 0 has no interface number 0 [ 147.415258][ T1139] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 147.435531][ T1139] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 147.444061][ T469] usb 4-1: USB disconnect, device number 47 [ 147.446531][ T1139] usb 1-1: New USB device found, idVendor=abed, idProduct=cdee, bcdDevice= 5.b9 [ 147.487460][ T1139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.496212][ T1139] usb 1-1: config 0 descriptor?? [ 147.535334][ T1139] usb 1-1: MIDIStreaming interface descriptor not found [ 147.643729][ T5276] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.655540][ T5276] EXT4-fs (loop1): Ignoring removed bh option [ 147.726769][ T469] usb 1-1: USB disconnect, device number 42 [ 147.814063][ T25] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 147.897981][ T5293] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 147.908969][ T5293] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 147.918912][ T5293] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 147.927902][ T5293] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 148.112307][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 148.149410][ T330] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 148.186522][ T25] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.195867][ T25] usb 5-1: config 1 has no interface number 1 [ 148.202001][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 148.280069][ T469] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 148.289186][ T345] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 148.363687][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.372929][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.380913][ T25] usb 5-1: Product: syz [ 148.385149][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 148.390296][ T25] usb 5-1: Manufacturer: syz [ 148.395095][ T25] usb 5-1: SerialNumber: syz [ 148.494178][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.494228][ T1139] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 148.504456][ T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 148.521265][ T345] usb 4-1: Using ep0 maxpacket: 16 [ 148.526470][ T330] usb 2-1: config 0 has no interface number 0 [ 148.532625][ T330] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 148.541794][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.550670][ T330] usb 2-1: config 0 descriptor?? [ 148.625246][ T469] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 148.634378][ T469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.643167][ T469] usb 3-1: config 0 descriptor?? [ 148.648337][ T345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.659299][ T345] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 148.669245][ T345] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x24, skipping [ 148.679889][ T345] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 148.693415][ T469] usb 3-1: unsupported MDLM descriptors [ 148.710880][ T330] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 148.718709][ T25] usb 5-1: USB disconnect, device number 48 [ 148.774074][ T345] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.783286][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 148.784697][ T490] usb 2-1: USB disconnect, device number 45 [ 148.791290][ T345] usb 4-1: SerialNumber: syz [ 148.811537][ T5304] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 148.883452][ T345] usb 3-1: USB disconnect, device number 46 [ 148.923054][ T1139] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.932834][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.960085][ T1139] usb 1-1: not running at top speed; connect to a high speed hub [ 149.021257][ T490] usb 4-1: USB disconnect, device number 48 [ 149.035213][ T1139] usb 1-1: config 3 has an invalid interface number: 86 but max is 0 [ 149.043394][ T1139] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 149.053551][ T1139] usb 1-1: config 3 has no interface number 0 [ 149.059650][ T1139] usb 1-1: config 3 interface 86 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.072886][ T1139] usb 1-1: config 3 interface 86 has no altsetting 0 [ 149.111078][ T24] audit: type=1400 audit(2000524338.993:211): avc: denied { mount } for pid=5315 comm="syz.4.2327" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 149.215340][ T5332] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 149.223770][ T5332] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.230847][ T5332] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.2335: lblock 7 mapped to illegal pblock 2 (length 1) [ 149.244930][ T1139] usb 1-1: New USB device found, idVendor=19d2, idProduct=8241, bcdDevice=b0.5e [ 149.249684][ T5332] Quota error (device loop4): write_blk: dquota write failed [ 149.254088][ T1139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.261555][ T5332] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm syz.4.2335: lblock 6 mapped to illegal pblock 1 (length 1) [ 149.269760][ T1139] usb 1-1: Product: syz [ 149.287818][ T1139] usb 1-1: Manufacturer: syz [ 149.292638][ T1139] usb 1-1: SerialNumber: syz [ 149.298334][ T5332] Quota error (device loop4): write_blk: dquota write failed [ 149.305953][ T5332] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 149.317741][ T5332] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.2335: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.332390][ T5332] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 149.341555][ T5332] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2335: Failed to acquire dquot type 0 [ 149.353180][ T5332] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 49: comm syz.4.2335: lblock 1 mapped to illegal pblock 49 (length 1) [ 149.367718][ T5332] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2335: Failed to acquire dquot type 0 [ 149.379268][ T5332] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 149.389005][ T5332] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #15: comm syz.4.2335: mark_inode_dirty error [ 149.400520][ T5332] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 149.412332][ T5332] EXT4-fs (loop4): 1 orphan inode deleted [ 149.418221][ T5332] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,abort,minixdf,auto_da_alloc=0x0000000000000006,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,,errors=continue [ 149.575751][ T1139] usb 1-1: bad CDC descriptors [ 149.587856][ T1139] usb 1-1: USB disconnect, device number 43 [ 149.659711][ T490] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 149.901992][ T345] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 149.939391][ T25] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 150.004616][ T490] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 150.015895][ T490] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 150.027220][ T490] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.040129][ T490] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.049229][ T490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.107103][ T5342] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.126781][ T490] usb 3-1: invalid MIDI in EP 0 [ 150.132137][ T490] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 150.256114][ T345] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 150.269928][ T345] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 150.279286][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.290712][ T345] usb 4-1: config 0 descriptor?? [ 150.295902][ T25] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 150.304274][ T25] usb 5-1: config 0 has no interface number 0 [ 150.310376][ T25] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 150.326828][ T25] usb 5-1: config 0 interface 200 has no altsetting 0 [ 150.334269][ T469] usb 3-1: USB disconnect, device number 47 [ 150.356658][ T5400] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 150.453319][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 150.453334][ T24] audit: type=1326 audit(2000524340.431:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.2374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f3aa929 code=0x0 [ 150.498692][ T25] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 150.507583][ T490] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 150.514898][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.525617][ T25] usb 5-1: Product: syz [ 150.530058][ T25] usb 5-1: Manufacturer: syz [ 150.534688][ T25] usb 5-1: SerialNumber: syz [ 150.543587][ T25] usb 5-1: config 0 descriptor?? [ 150.623156][ T5424] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.628808][ T345] usbhid 4-1:0.0: can't add hid device: -71 [ 150.636147][ T345] usbhid: probe of 4-1:0.0 failed with error -71 [ 150.636683][ T5424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=4802e198, mo2=0002] [ 150.644680][ T345] usb 4-1: USB disconnect, device number 49 [ 150.657044][ T5424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2380: inode #1: comm syz.1.2380: iget: illegal inode # [ 150.670480][ T5424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2380: error while reading EA inode 1 err=-117 [ 150.683016][ T5424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2380: inode #1: comm syz.1.2380: iget: illegal inode # [ 150.696315][ T5424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2380: error while reading EA inode 1 err=-117 [ 150.708942][ T5424] EXT4-fs (loop1): 1 orphan inode deleted [ 150.714833][ T5424] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,debug,dioread_lock,noblock_validity,nouid32,,errors=continue [ 150.844963][ T25] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input11 [ 150.852470][ T490] usb 1-1: config 16 has an invalid interface number: 222 but max is 0 [ 150.861213][ T25] usb 5-1: USB disconnect, device number 49 [ 150.877316][ T490] usb 1-1: config 16 has no interface number 0 [ 150.884104][ T490] usb 1-1: config 16 interface 222 has no altsetting 0 [ 151.039104][ T490] usb 1-1: New USB device found, idVendor=11a6, idProduct=d09a, bcdDevice=da.e1 [ 151.048654][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.056922][ T490] usb 1-1: Product: syz [ 151.057213][ T332] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 151.061687][ T490] usb 1-1: Manufacturer: syz [ 151.073706][ T490] usb 1-1: SerialNumber: syz [ 151.271856][ T345] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 151.308768][ T332] usb 2-1: Using ep0 maxpacket: 16 [ 151.321328][ T1139] usb 1-1: USB disconnect, device number 44 [ 151.374725][ T490] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 151.420809][ T332] usb 2-1: config 1 has an invalid interface descriptor of length 2, skipping [ 151.429884][ T332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.440105][ T332] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 151.450972][ T332] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.504856][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 151.607745][ T332] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.616910][ T345] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 151.625109][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.625953][ T490] usb 4-1: Using ep0 maxpacket: 16 [ 151.633169][ T345] usb 3-1: config 0 has no interface number 0 [ 151.644393][ T345] usb 3-1: config 0 interface 196 has no altsetting 0 [ 151.651234][ T25] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 151.658818][ T332] usb 2-1: Product: syz [ 151.662975][ T332] usb 2-1: Manufacturer: syz [ 151.667627][ T332] usb 2-1: SerialNumber: syz [ 151.756991][ T490] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 151.765904][ T490] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 151.774674][ T490] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 151.784814][ T490] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.831449][ T345] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 151.840828][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.848861][ T345] usb 3-1: Product: syz [ 151.853423][ T345] usb 3-1: Manufacturer: syz [ 151.858076][ T345] usb 3-1: SerialNumber: syz [ 151.866737][ T345] usb 3-1: config 0 descriptor?? [ 151.924176][ T24] audit: type=1326 audit(2000524342.008:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.0.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f3cfda929 code=0x0 [ 151.947034][ T490] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.947049][ T490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.947058][ T490] usb 4-1: Product: syz [ 151.947068][ T490] usb 4-1: Manufacturer: syz [ 151.947078][ T490] usb 4-1: SerialNumber: syz [ 152.046121][ T25] usb 5-1: config 8 has an invalid interface number: 101 but max is 0 [ 152.054356][ T25] usb 5-1: config 8 has no interface number 0 [ 152.060681][ T25] usb 5-1: config 8 interface 101 has no altsetting 0 [ 152.068055][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 152.078961][ T332] usb 2-1: USB disconnect, device number 46 [ 152.092459][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.138986][ T345] ipheth 3-1:0.196: Unable to find endpoints [ 152.146410][ T345] usb 3-1: USB disconnect, device number 48 [ 152.240954][ T490] usb 4-1: 0:2 : does not exist [ 152.251579][ T490] usb 4-1: USB disconnect, device number 50 [ 152.278195][ T469] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 152.353403][ T25] usb 5-1: string descriptor 0 read error: -71 [ 152.362436][ T25] usb 5-1: USB disconnect, device number 50 [ 152.447336][ T1678] udevd[1678]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 152.466905][ T5515] EXT4-fs warning (device loop1): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 152.478662][ T5515] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 152.488928][ T5515] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2424: Corrupt directory, running e2fsck is recommended [ 152.502393][ T5515] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 152.510586][ T5515] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.2424: corrupted in-inode xattr [ 152.522950][ T5515] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2424: couldn't read orphan inode 15 (err -117) [ 152.535164][ T5515] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,noblock_validity,data_err=abort,discard,auto_da_alloc,grpjquota=.usrjquota=,data_err=ignore,jqfmt=vfsv1,grpid,,,errors=continue [ 152.585770][ T469] usb 1-1: not running at top speed; connect to a high speed hub [ 152.679143][ T469] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.688240][ T469] usb 1-1: config 1 has no interface number 1 [ 152.694333][ T469] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 152.795179][ T5540] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.857359][ T5540] EXT4-fs error (device loop2): ext4_quota_enable:6443: comm syz.2.2435: Bad quota inum: 28, type: 0 [ 152.878068][ T5540] EXT4-fs (loop2): Remounting filesystem read-only [ 152.887522][ T469] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.902331][ T469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.910520][ T5540] EXT4-fs warning (device loop2): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=28). Please run e2fsck to fix. [ 152.934829][ T5540] EXT4-fs (loop2): mount failed [ 152.946002][ T469] usb 1-1: Product: syz [ 152.950806][ T469] usb 1-1: Manufacturer: syz [ 152.955655][ T469] usb 1-1: SerialNumber: syz [ 153.125909][ T5560] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 153.145869][ T5560] F2FS-fs (loop1): invalid crc value [ 153.184625][ T5560] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 153.200135][ T5560] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 153.229609][ T5581] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.294285][ T469] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 153.343812][ T469] usb 1-1: USB disconnect, device number 45 [ 153.358821][ T5587] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 153.445238][ T5594] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.454603][ T5594] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.537042][ T299] udevd[299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.585305][ T5599] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 153.631602][ T5604] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.640593][ T5604] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.666942][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 153.676863][ T332] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 153.743311][ T5611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 153.770844][ T5615] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 154.010719][ T5627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 154.021310][ T332] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 154.029408][ T332] usb 4-1: config 0 has no interface number 0 [ 154.035842][ T332] usb 4-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 58888, setting to 1024 [ 154.047349][ T332] usb 4-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 154.088522][ T5625] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 154.148260][ T5638] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 154.217227][ T332] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 154.239097][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.247565][ T332] usb 4-1: Product: syz [ 154.251748][ T332] usb 4-1: Manufacturer: syz [ 154.258730][ T332] usb 4-1: SerialNumber: syz [ 154.266605][ T332] usb 4-1: config 0 descriptor?? [ 154.291857][ T5592] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.301686][ T5642] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 154.310626][ T15] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 154.561806][ T332] usb 4-1: MIDIStreaming interface descriptor not found [ 154.584035][ T332] usb 4-1: USB disconnect, device number 51 [ 154.646219][ T15] usb 1-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 154.674165][ T15] usb 1-1: config 1 interface 1 has no altsetting 0 [ 154.823348][ T15] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.832506][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.840508][ T15] usb 1-1: Product: syz [ 154.844749][ T15] usb 1-1: Manufacturer: syz [ 154.849362][ T15] usb 1-1: SerialNumber: syz [ 154.879320][ T5623] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.930764][ T5623] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 155.031285][ T5646] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.104039][ T332] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 155.107368][ T5646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.195950][ T15] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 155.271022][ T15] usb 1-1: USB disconnect, device number 46 [ 155.457094][ T332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.549746][ T332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.652328][ T332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.717625][ T490] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 155.746058][ T332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.839066][ T332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.851374][ T332] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 155.860846][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.876490][ T332] usb 2-1: config 0 descriptor?? [ 156.044189][ T1141] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 156.081633][ T490] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.100238][ T490] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.107798][ T332] usb 2-1: USB disconnect, device number 47 [ 156.139749][ T5702] F2FS-fs (loop2): invalid crc value [ 156.156635][ T5702] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 156.186706][ T5702] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 156.202889][ T490] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.214331][ T490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.222505][ T490] usb 5-1: SerialNumber: syz [ 156.295917][ T1141] usb 1-1: Using ep0 maxpacket: 8 [ 156.407760][ T1141] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 156.426101][ T1141] usb 1-1: config 0 has no interface number 0 [ 156.432245][ T1141] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 156.451382][ T1141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.461558][ T1141] usb 1-1: config 0 descriptor?? [ 156.482540][ T490] usb 5-1: invalid UAC_HEADER (v1) [ 156.487777][ T490] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 156.505079][ T490] usb 5-1: USB disconnect, device number 51 [ 156.651166][ T24] audit: type=1400 audit(2000524347.083:217): avc: denied { read write } for pid=5714 comm="syz.3.2492" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.677057][ T24] audit: type=1400 audit(2000524347.083:218): avc: denied { open } for pid=5714 comm="syz.3.2492" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.689624][ T15] usb 1-1: USB disconnect, device number 47 [ 156.731922][ T24] audit: type=1400 audit(2000524347.083:219): avc: denied { ioctl } for pid=5714 comm="syz.3.2492" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.910641][ T1141] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 157.007004][ T24] audit: type=1400 audit(2000524347.469:220): avc: denied { nlmsg_read } for pid=5720 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 157.067059][ T24] audit: type=1400 audit(2000524347.469:221): avc: denied { nlmsg_tty_audit } for pid=5720 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 157.295720][ T1141] usb 4-1: not running at top speed; connect to a high speed hub [ 157.340478][ T24] audit: type=1400 audit(2000524347.823:222): avc: denied { append } for pid=5733 comm="syz.0.2500" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.395674][ T1141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.417653][ T1141] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 157.433847][ T5713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.456777][ T5738] FAT-fs (loop0): Directory bread(block 64) failed [ 157.479475][ T5738] FAT-fs (loop0): Directory bread(block 65) failed [ 157.486064][ T5738] FAT-fs (loop0): Directory bread(block 66) failed [ 157.516539][ T5738] FAT-fs (loop0): Directory bread(block 67) failed [ 157.531992][ T5738] FAT-fs (loop0): Directory bread(block 68) failed [ 157.554030][ T5738] FAT-fs (loop0): Directory bread(block 69) failed [ 157.563371][ T5713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 157.590959][ T1141] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.591550][ T5738] FAT-fs (loop0): Directory bread(block 70) failed [ 157.603385][ T1141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.614654][ T5738] FAT-fs (loop0): Directory bread(block 71) failed [ 157.631903][ T1141] usb 4-1: Product: syz [ 157.640411][ T1141] usb 4-1: Manufacturer: syz [ 157.646943][ T5738] FAT-fs (loop0): Directory bread(block 72) failed [ 157.650637][ T1141] usb 4-1: SerialNumber: syz [ 157.655890][ T5738] FAT-fs (loop0): Directory bread(block 73) failed [ 157.666612][ T1141] usb 4-1: config 0 descriptor?? [ 157.680798][ T5731] loop4: p1 p3 < p5 p6 > [ 157.884945][ T24] audit: type=1400 audit(2000524348.403:223): avc: denied { read write } for pid=5748 comm="syz.0.2503" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 157.907602][ T1141] usb 4-1: USB disconnect, device number 52 [ 157.966603][ T24] audit: type=1400 audit(2000524348.413:224): avc: denied { read } for pid=5746 comm="syz.4.2504" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 157.990280][ T24] audit: type=1400 audit(2000524348.413:225): avc: denied { open } for pid=5746 comm="syz.4.2504" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 158.014632][ T24] audit: type=1400 audit(2000524348.446:226): avc: denied { open } for pid=5748 comm="syz.0.2503" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.129099][ T1677] udevd[1677]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 158.129146][ T299] udevd[299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 158.142926][ T341] udevd[341]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 158.150593][ T1675] udevd[1675]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 158.197316][ T15] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 158.243856][ T332] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 158.414630][ T5768] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 158.434436][ T5768] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.2513: iget: bad i_size value: -67835469387268086 [ 158.456217][ T5768] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.2513: couldn't read orphan inode 15 (err -117) [ 158.468519][ T5768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 158.477633][ T5768] ext2 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.493868][ T5768] EXT4-fs error (device loop0): ext4_add_entry:2442: inode #2: comm syz.0.2513: Directory hole found for htree leaf block 0 [ 158.588806][ T15] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.644826][ T332] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 158.653207][ T332] usb 3-1: config 160 has no interface number 0 [ 158.659364][ T15] usb 5-1: not running at top speed; connect to a high speed hub [ 158.668803][ T5789] EXT4-fs (loop0): Test dummy encryption mode enabled [ 158.676187][ T5789] EXT4-fs (loop0): Test dummy encryption mode enabled [ 158.700430][ T332] usb 3-1: config 160 interface 200 has no altsetting 0 [ 158.723332][ T5789] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,stripe=0x00000000000093a4,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004, [ 158.765983][ T15] usb 5-1: config 255 has an invalid interface number: 181 but max is 0 [ 158.778426][ T15] usb 5-1: config 255 has no interface number 0 [ 158.813404][ T15] usb 5-1: config 255 interface 181 has no altsetting 0 [ 158.858548][ T15] usb 5-1: language id specifier not provided by device, defaulting to English [ 158.894023][ T5809] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 158.915081][ T332] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 158.932830][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.945780][ T332] usb 3-1: Product: syz [ 158.956396][ T332] usb 3-1: Manufacturer: syz [ 158.961041][ T332] usb 3-1: SerialNumber: syz [ 158.979675][ T15] usb 5-1: New USB device found, idVendor=3340, idProduct=0f1c, bcdDevice=23.df [ 158.998905][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.026530][ T15] usb 5-1: Product: syz [ 159.039494][ T15] usb 5-1: Manufacturer: 幂〕뉃⯻ꦃ儘⹟軕஖靧資ᆟ浝ল橨쎺᪑滪㲲쎯㤤ᨳ履ﺖ䗧鹀ꫴ㷁欲ꇧ䤎ﬞ⊟喪ܜ熞馐躝䌮ᵤ㿝明䱇誎侕瀢ᇀᬥ [ 159.074692][ T5839] IPv6: Can't replace route, no match found [ 159.091066][ T15] usb 5-1: SerialNumber: syz [ 159.183130][ T5856] : renamed from team_slave_1 [ 159.247050][ T5874] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2563'. [ 159.362227][ T332] usb 3-1: MIDIStreaming interface descriptor not found [ 159.380638][ T332] usb 3-1: USB disconnect, device number 49 [ 159.400299][ T15] usb 5-1: USB disconnect, device number 52 [ 159.456388][ T5898] erofs: (device loop1): mounted with root inode @ nid 36. [ 159.707420][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 159.751002][ T5957] fuse: Bad value for 'rootmode' [ 159.846680][ T469] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 159.847021][ T5] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 160.088890][ T469] usb 2-1: Using ep0 maxpacket: 16 [ 160.183714][ T6023] printk: syz.4.2635 (6023): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 160.201237][ T469] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 160.217603][ T469] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.223163][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.238535][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.241360][ T469] usb 2-1: config 0 has no interface number 0 [ 160.322375][ T345] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 160.322426][ T5] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.350350][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.358388][ T5] usb 1-1: SerialNumber: syz [ 160.443560][ T469] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 160.453004][ T469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.461113][ T469] usb 2-1: Product: syz [ 160.465424][ T469] usb 2-1: Manufacturer: syz [ 160.470038][ T469] usb 2-1: SerialNumber: syz [ 160.476258][ T6027] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 160.486076][ T6027] F2FS-fs (loop4): invalid crc value [ 160.488918][ T469] usb 2-1: config 0 descriptor?? [ 160.504448][ T6027] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 160.522133][ T6027] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 160.639944][ T5] usb 1-1: 0:2 : does not exist [ 160.659034][ T5] usb 1-1: USB disconnect, device number 48 [ 160.676595][ T345] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 160.691143][ T345] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.713841][ T345] usb 3-1: config 0 has no interface number 0 [ 160.719978][ T345] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.740792][ T345] usb 3-1: config 0 interface 25 has no altsetting 0 [ 160.750816][ T469] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 160.760502][ T469] uvcvideo: No valid video chain found. [ 160.809848][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.817219][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.891024][ T345] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 160.900128][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.918970][ T345] usb 3-1: Product: syz [ 160.923215][ T345] usb 3-1: Manufacturer: syz [ 160.940202][ T345] usb 3-1: SerialNumber: syz [ 160.951844][ T469] usb 2-1: USB disconnect, device number 48 [ 160.960372][ T345] usb 3-1: config 0 descriptor?? [ 161.007567][ T6054] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 161.033454][ T6054] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc, [ 161.152364][ T6081] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.169055][ T6086] netlink: 'syz.3.2663': attribute type 9 has an invalid length. [ 161.177322][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2663'. [ 161.198046][ T345] uvcvideo: Found UVC 0.00 device syz (1b3b:2951) [ 161.204509][ T345] uvcvideo: No valid video chain found. [ 161.212113][ T6081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.223525][ T6081] EXT4-fs (loop4): 1 truncate cleaned up [ 161.229783][ T6081] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,dioread_nolock,data_err=abort,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 161.260155][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 161.271734][ T6095] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 161.347664][ T6107] syz.0.2672 uses obsolete (PF_INET,SOCK_PACKET) [ 161.357225][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 161.357240][ T24] audit: type=1400 audit(2000524352.136:254): avc: denied { ioctl } for pid=6104 comm="syz.0.2672" path="socket:[32780]" dev="sockfs" ino=32780 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.394075][ T345] usb 3-1: USB disconnect, device number 50 [ 161.421020][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 161.430356][ T24] audit: type=1400 audit(2000524352.136:255): avc: denied { setopt } for pid=6105 comm="syz.3.2673" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.463528][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 161.482223][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 161.495206][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 161.514589][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 161.524013][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 161.762776][ T6166] xt_ecn: cannot match TCP bits for non-tcp packets [ 161.777150][ T24] audit: type=1400 audit(2000524352.587:256): avc: denied { getopt } for pid=6168 comm="syz.4.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.818125][ T6173] Unknown ioctl 21531 [ 161.841037][ T345] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 161.869743][ T6176] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.2704: Invalid block bitmap block 0 in block_group 0 [ 161.893656][ T6176] Quota error (device loop4): write_blk: dquota write failed [ 161.901337][ T6176] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 161.911642][ T6176] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2704: Failed to acquire dquot type 0 [ 161.927934][ T6176] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.2704: Freeing blocks not in datazone - block = 0, count = 4096 [ 161.942929][ T6176] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2704: Invalid inode bitmap blk 0 in block_group 0 [ 161.955677][ T296] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 161.966940][ T296] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 161.972389][ T6176] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 161.990022][ T24] audit: type=1400 audit(2000524352.802:257): avc: denied { sys_module } for pid=6193 comm="syz.1.2713" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.009406][ T6176] EXT4-fs (loop4): 1 orphan inode deleted [ 162.016721][ T6176] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 162.058639][ T6176] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.2704: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 162.097131][ T24] audit: type=1400 audit(2000524352.930:258): avc: denied { read write } for pid=6202 comm="syz.2.2718" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 162.132327][ T24] audit: type=1400 audit(2000524352.952:259): avc: denied { open } for pid=6202 comm="syz.2.2718" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 162.156495][ T24] audit: type=1400 audit(2000524352.952:260): avc: denied { ioctl } for pid=6202 comm="syz.2.2718" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 162.208068][ T345] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.248916][ T345] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 162.262949][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.292347][ T345] usb 4-1: config 0 descriptor?? [ 162.324219][ T6235] xt_hashlimit: size too large, truncated to 1048576 [ 162.326657][ T345] usb 4-1: bad CDC descriptors [ 162.341502][ T6235] xt_hashlimit: max too large, truncated to 1048576 [ 162.354568][ T6240] xt_TCPMSS: Only works on TCP SYN packets [ 162.357742][ T6237] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.385752][ T6237] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 162.464291][ T6249] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.544366][ T345] usb 4-1: USB disconnect, device number 53 [ 162.608458][ T6268] erofs: (device loop1): mounted with root inode @ nid 36. [ 162.620960][ T6268] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 162.646846][ T6268] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 162.689607][ T6284] netlink: 'syz.2.2756': attribute type 16 has an invalid length. [ 162.697717][ T6284] netlink: 'syz.2.2756': attribute type 17 has an invalid length. [ 162.763158][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.770598][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.877819][ T6303] netlink: 'syz.4.2765': attribute type 3 has an invalid length. [ 162.909184][ T6308] xt_ecn: cannot match TCP bits for non-tcp packets [ 162.968955][ T469] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 163.008492][ T6318] FAT-fs (loop0): Directory bread(block 64) failed [ 163.016170][ T6318] FAT-fs (loop0): Directory bread(block 65) failed [ 163.028672][ T6318] FAT-fs (loop0): Directory bread(block 66) failed [ 163.046869][ T6332] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 163.057600][ T6318] FAT-fs (loop0): Directory bread(block 67) failed [ 163.065194][ T6332] overlayfs: missing 'lowerdir' [ 163.071914][ T6318] FAT-fs (loop0): Directory bread(block 68) failed [ 163.078480][ T6318] FAT-fs (loop0): Directory bread(block 69) failed [ 163.085270][ T6318] FAT-fs (loop0): Directory bread(block 70) failed [ 163.110270][ T6318] FAT-fs (loop0): Directory bread(block 71) failed [ 163.117056][ T6318] FAT-fs (loop0): Directory bread(block 72) failed [ 163.123830][ T6318] FAT-fs (loop0): Directory bread(block 73) failed [ 163.211802][ T469] usb 2-1: Using ep0 maxpacket: 16 [ 163.229237][ T6348] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 163.247431][ T6348] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue [ 163.260801][ T6348] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.290469][ T6363] xt_l2tp: invalid flags combination: 8 [ 163.323377][ T469] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 163.331708][ T469] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 163.371484][ T469] usb 2-1: config 4 has no interface number 0 [ 163.377728][ T469] usb 2-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.416210][ T469] usb 2-1: config 4 interface 51 has no altsetting 0 [ 163.459051][ T6393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.575231][ T469] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 163.599756][ T6410] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 163.630276][ T469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.649542][ T6425] ip6t_rpfilter: unknown options [ 163.658385][ T469] usb 2-1: Product: syz [ 163.665071][ T6428] netlink: 'syz.0.2825': attribute type 9 has an invalid length. [ 163.675191][ T469] usb 2-1: Manufacturer: syz [ 163.697445][ T469] usb 2-1: SerialNumber: syz [ 163.757999][ T469] cdc_eem: probe of 2-1:4.51 failed with error -22 [ 163.941269][ T5] usb 2-1: USB disconnect, device number 49 [ 164.037790][ T6501] __nla_validate_parse: 19 callbacks suppressed [ 164.037799][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 164.063060][ T6499] netlink: 'syz.3.2860': attribute type 13 has an invalid length. [ 164.096898][ T469] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 164.144980][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.152234][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.336510][ T6512] overlayfs: workdir and upperdir must be separate subtrees [ 164.442110][ T469] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.452983][ T469] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.471004][ T469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.480452][ T469] usb 1-1: config 0 descriptor?? [ 164.509018][ T6532] exFAT-fs (loop4): bogus sector size bits : 127 [ 164.509018][ T6532] [ 164.524781][ T469] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 164.525962][ T6532] exFAT-fs (loop4): failed to read boot sector [ 164.554537][ T6532] exFAT-fs (loop4): failed to recognize exfat type [ 164.687292][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 164.709958][ T6508] usb 1-1: USB disconnect, device number 49 [ 164.768668][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 164.778357][ T6564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.788345][ T6564] EXT4-fs (loop4): 1 orphan inode deleted [ 164.799430][ T6564] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 165.038199][ T469] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 165.104388][ T6615] usb usb1: check_ctrlrecip: process 6615 (syz.4.2916) requesting ep 01 but needs 81 [ 165.120090][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 165.120391][ T6615] usb usb1: usbfs: process 6615 (syz.4.2916) did not claim interface 0 before use [ 165.382975][ T469] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 165.402132][ T469] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 165.413646][ T469] usb 2-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 165.427347][ T469] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.434594][ T469] usb 2-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 165.444113][ T469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.452848][ T469] usb 2-1: config 0 descriptor?? [ 165.498340][ T469] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 165.520717][ T6680] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.543549][ T6680] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 165.565353][ T6680] System zones: 1-12 [ 165.570391][ T6680] EXT4-fs (loop0): 1 truncate cleaned up [ 165.570412][ T6680] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,abort,debug,errors=remount-ro,nodiscard,quota, [ 165.614652][ T6680] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 13: comm syz.0.2945: bad entry in directory: inode out of bounds - offset=44, inode=32780, rec_len=16, size=1024 fake=0 [ 165.646035][ T6698] binder: BC_ACQUIRE_RESULT not supported [ 165.651894][ T6698] binder: 6697:6698 ioctl c0306201 200000000080 returned -22 [ 165.669246][ T6680] EXT4-fs (loop0): Remounting filesystem read-only [ 165.683567][ T1138] usb 2-1: USB disconnect, device number 50 [ 165.776284][ T53] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 165.779973][ T6692] F2FS-fs (loop4): invalid crc value [ 165.790617][ T6712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2961'. [ 165.820424][ T6692] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 165.872317][ T6692] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.981650][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 166.030790][ T6738] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2972: inode #1: comm syz.2.2972: iget: illegal inode # [ 166.044008][ T6738] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2972: error while reading EA inode 1 err=-117 [ 166.050533][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 166.050547][ T24] audit: type=1400 audit(2000524357.168:288): avc: denied { setopt } for pid=6741 comm="syz.4.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.057008][ T6738] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2972: inode #1: comm syz.2.2972: iget: illegal inode # [ 166.097057][ T6738] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2972: error while reading EA inode 1 err=-117 [ 166.110052][ T6738] EXT4-fs (loop2): 1 orphan inode deleted [ 166.116088][ T6738] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue [ 166.119658][ T5] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 166.167164][ T6748] FAT-fs (loop4): Directory bread(block 64) failed [ 166.173825][ T6748] FAT-fs (loop4): Directory bread(block 65) failed [ 166.175848][ T24] audit: type=1400 audit(2000524357.297:289): avc: denied { remount } for pid=6737 comm="syz.2.2972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.180899][ T6748] FAT-fs (loop4): Directory bread(block 66) failed [ 166.206713][ T6748] FAT-fs (loop4): Directory bread(block 67) failed [ 166.213657][ T6748] FAT-fs (loop4): Directory bread(block 68) failed [ 166.220200][ T6748] FAT-fs (loop4): Directory bread(block 69) failed [ 166.220807][ T6738] SELinux: duplicate or incompatible mount options [ 166.226830][ T6748] FAT-fs (loop4): Directory bread(block 70) failed [ 166.240013][ T6748] FAT-fs (loop4): Directory bread(block 71) failed [ 166.248042][ T6748] FAT-fs (loop4): Directory bread(block 72) failed [ 166.254663][ T6748] FAT-fs (loop4): Directory bread(block 73) failed [ 166.352281][ T53] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 166.364746][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.390239][ T53] usb 4-1: Product: syz [ 166.395829][ T53] usb 4-1: Manufacturer: syz [ 166.401582][ T53] usb 4-1: SerialNumber: syz [ 166.409588][ T53] usb 4-1: config 0 descriptor?? [ 166.447108][ T24] audit: type=1400 audit(2000524357.597:290): avc: denied { read } for pid=6773 comm="syz.2.2988" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.479403][ T24] audit: type=1400 audit(2000524357.597:291): avc: denied { open } for pid=6773 comm="syz.2.2988" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.491217][ T6778] erofs: (device loop2): mounted with root inode @ nid 36. [ 166.511434][ T5] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.525641][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.536601][ T5] usb 1-1: config 0 descriptor?? [ 166.545266][ T24] audit: type=1400 audit(2000524357.597:292): avc: denied { ioctl } for pid=6773 comm="syz.2.2988" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.546694][ T6778] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 166.574779][ T6783] C: renamed from bond_slave_0 [ 166.581009][ T6778] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 166.595072][ T6778] SELinux: (dev overlay, type overlay) getxattr errno 117 [ 166.709638][ T6802] netlink: 'syz.4.3001': attribute type 1 has an invalid length. [ 166.747072][ T6799] EXT4-fs (loop2): filesystem is read-only [ 166.755065][ T6799] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 166.770460][ T6799] EXT4-fs (loop2): filesystem is read-only [ 166.777411][ T6799] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000001000,user_xattr,errors=remount-ro,nodioread_nolock,nolazytime,grpid,noauto_da_alloc, [ 166.812225][ T24] audit: type=1400 audit(2000524357.984:293): avc: denied { bind } for pid=6808 comm="syz.4.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.847707][ T53] usb 4-1: USB disconnect, device number 54 [ 167.005149][ T5] usb 1-1: Cannot set MAC address [ 167.013210][ T5] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 167.041070][ T5] usb 1-1: USB disconnect, device number 50 [ 167.050271][ T24] audit: type=1326 audit(2000524358.241:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.4.3022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221dbb3929 code=0x0 [ 167.300243][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 167.391723][ T24] audit: type=1400 audit(2000524358.606:295): avc: denied { ioctl } for pid=6883 comm="syz.3.3041" path="pid:[4026532454]" dev="nsfs" ino=4026532454 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.437743][ T6875] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.455139][ T6875] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 167.465493][ T6875] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 167.493368][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 167.505634][ T24] audit: type=1400 audit(2000524358.724:296): avc: denied { rename } for pid=6874 comm="syz.4.3036" name="file1" dev="loop4" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.555231][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 167.569387][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 167.579926][ T24] audit: type=1400 audit(2000524358.756:297): avc: denied { unlink } for pid=6874 comm="syz.4.3036" name="file0" dev="loop4" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.689168][ T6920] netlink: 'syz.4.3058': attribute type 4 has an invalid length. [ 167.907732][ T6957] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 167.938199][ T6957] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,stripe=0x00000000000000c4,usrjquota=,mblk_io_submit,nogrpid,usrjquota=,,errors=continue [ 167.967575][ T6968] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 167.996648][ T6957] EXT4-fs (loop4): Unrecognized mount option "ext4" or missing value [ 168.028694][ T6977] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue [ 168.067798][ T6506] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 168.106891][ T6989] device ip6erspan0 entered promiscuous mode [ 168.150864][ T6998] netlink: 'syz.2.3094': attribute type 12 has an invalid length. [ 168.290135][ T7010] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.290835][ T6506] usb 2-1: Using ep0 maxpacket: 16 [ 168.421772][ T6506] usb 2-1: config 0 has no interfaces? [ 168.436249][ T6506] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 168.445940][ T6506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.461370][ T469] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 168.482424][ T6506] usb 2-1: config 0 descriptor?? [ 168.524892][ T7040] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 168.725866][ T6507] usb 2-1: USB disconnect, device number 51 [ 168.794018][ T7089] device veth3 entered promiscuous mode [ 168.819313][ T469] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 168.839881][ T469] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.850310][ T469] usb 5-1: config 0 has no interface number 0 [ 168.887504][ T6506] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 168.999680][ T469] usb 5-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 169.013765][ T469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.042886][ T469] usb 5-1: Product: syz [ 169.047271][ T469] usb 5-1: Manufacturer: syz [ 169.051901][ T469] usb 5-1: SerialNumber: syz [ 169.071135][ T469] usb 5-1: config 0 descriptor?? [ 169.107392][ T7147] netlink: 'syz.2.3163': attribute type 5 has an invalid length. [ 169.141766][ T7151] bridge0: port 3(syz_tun) entered blocking state [ 169.148282][ T7151] bridge0: port 3(syz_tun) entered disabled state [ 169.155802][ T7151] device syz_tun entered promiscuous mode [ 169.179651][ T7158] netlink: 'syz.3.3169': attribute type 3 has an invalid length. [ 169.232894][ T6506] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.252593][ T6506] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 169.267204][ T6506] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 169.349774][ T7187] __nla_validate_parse: 3 callbacks suppressed [ 169.349785][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3183'. [ 169.381754][ T469] uvcvideo: Found UVC 0.00 device syz (056d:0000) [ 169.400462][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 169.402944][ T7199] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3189'. [ 169.425614][ T7199] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3189'. [ 169.428318][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 169.446877][ T6506] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 169.469026][ T6506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.481679][ T6506] usb 1-1: Product: syz [ 169.490791][ T6506] usb 1-1: Manufacturer: syz [ 169.496074][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 169.505718][ T6506] usb 1-1: SerialNumber: syz [ 169.511236][ T6506] usb 1-1: config 0 descriptor?? [ 169.517669][ T7211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.524418][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 169.540453][ T469] uvcvideo: No valid video chain found. [ 169.547053][ T469] usb 5-1: USB disconnect, device number 53 [ 169.749273][ T7238] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 169.749273][ T7238] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 169.749273][ T7238] [ 169.770761][ T7238] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.794442][ T6506] usb 1-1: USB disconnect, device number 51 [ 169.829045][ T7238] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,nouser_xattr,dioread_nolock, [ 169.901179][ T7261] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3219'. [ 169.976689][ T7265] erofs: (device loop2): mounted with root inode @ nid 36. [ 170.242328][ T7310] xt_TCPMSS: Only works on TCP SYN packets [ 170.303527][ T7322] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3247'. [ 170.316673][ T7322] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 170.470327][ T7343] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 170.487955][ T7356] xt_policy: output policy not valid in PREROUTING and INPUT [ 170.488231][ T7343] ext4 filesystem being mounted at /687/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.536475][ T7343] EXT4-fs error (device loop4): ext4_get_first_dir_block:3708: inode #12: comm syz.4.3257: Directory hole found for htree leaf block 0 [ 170.550845][ T7343] EXT4-fs (loop4): Remounting filesystem read-only [ 170.566745][ T49] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.568815][ T6506] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 170.577437][ T49] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.600460][ T49] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 170.658510][ T490] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 170.780100][ T1138] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 170.808046][ T6506] usb 2-1: Using ep0 maxpacket: 8 [ 170.850742][ T7393] erofs: (device loop4): mounted with root inode @ nid 36. [ 170.919866][ T6506] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 170.938049][ T6506] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 170.959705][ T6506] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 170.977012][ T6506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.013018][ T7320] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.021216][ T7402] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 171.031116][ T490] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 171.040431][ T7402] ext4 filesystem being mounted at /631/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.053480][ T490] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 171.071976][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 171.071990][ T24] audit: type=1400 audit(2000524362.554:339): avc: denied { rename } for pid=7401 comm="syz.0.3284" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.104354][ T7402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.3284: bg 0: block 18: invalid block bitmap [ 171.117028][ T490] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.133568][ T490] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.146201][ T7402] Quota error (device loop0): write_blk: dquota write failed [ 171.158187][ T490] usb 3-1: config 0 has no interface number 0 [ 171.164692][ T7402] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 171.178179][ T490] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 171.188201][ T1138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.201624][ T7402] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.3284: Failed to acquire dquot type 1 [ 171.213093][ T1138] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.225243][ T490] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 171.236433][ T1138] usb 4-1: config 1 has no interface number 0 [ 171.242971][ T490] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.253090][ T1138] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.266652][ T490] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.273698][ T6506] usb 2-1: string descriptor 0 read error: -71 [ 171.280200][ T490] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 171.295503][ T490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.295909][ T6506] hub 2-1:32.0: USB hub found [ 171.304777][ T490] usb 3-1: config 0 descriptor?? [ 171.349432][ T490] usb 3-1: MIDIStreaming interface descriptor not found [ 171.364229][ T24] audit: type=1400 audit(2000524362.865:340): avc: denied { getopt } for pid=7406 comm="syz.0.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.386746][ T6506] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 171.441409][ T1138] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.442024][ T6506] usb 2-1: USB disconnect, device number 52 [ 171.454166][ T1138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.465833][ T1138] usb 4-1: Product: syz [ 171.485951][ T1138] usb 4-1: Manufacturer: syz [ 171.490646][ T1138] usb 4-1: SerialNumber: syz [ 171.538689][ T53] usb 3-1: USB disconnect, device number 51 [ 171.548000][ T1138] usb 4-1: selecting invalid altsetting 1 [ 171.749405][ T7431] EXT4-fs (loop0): Ignoring removed bh option [ 171.756666][ T7431] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 171.782291][ T7431] EXT4-fs (loop0): 1 truncate cleaned up [ 171.793606][ T7431] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 171.843466][ T24] audit: type=1400 audit(2000524363.391:341): avc: denied { mounton } for pid=7430 comm="syz.0.3297" path="/644/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.868403][ T7431] overlayfs: missing 'lowerdir' [ 171.880951][ T24] audit: type=1400 audit(2000524363.391:342): avc: denied { bind } for pid=7439 comm="syz.4.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.935382][ T1138] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 171.944688][ T7450] overlayfs: unrecognized mount option "\" or missing value [ 171.951418][ T1138] cdc_ncm 4-1:1.1: bind() failure [ 171.959469][ T1138] usb 4-1: USB disconnect, device number 55 [ 172.056460][ T24] audit: type=1326 audit(2000524363.606:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166c10c929 code=0x7ffc0000 [ 172.085973][ T24] audit: type=1326 audit(2000524363.606:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166c10c929 code=0x7ffc0000 [ 172.114974][ T24] audit: type=1326 audit(2000524363.616:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f166c10c929 code=0x7ffc0000 [ 172.143207][ T24] audit: type=1326 audit(2000524363.616:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.2.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166c10c929 code=0x7ffc0000 [ 172.307244][ T7510] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3334'. [ 172.444578][ T7542] netlink: 'syz.1.3348': attribute type 5 has an invalid length. [ 172.458134][ T7527] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.3343: invalid indirect mapped block 234881024 (level 0) [ 172.490748][ T7542] device ip6erspan0 entered promiscuous mode [ 172.502434][ T7549] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3353'. [ 172.511891][ T7527] EXT4-fs (loop0): 1 truncate cleaned up [ 172.520675][ T7527] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,noload,dioread_lock,nogrpid,jqfmt=vfsv0,delalloc,quota,,errors=continue [ 172.561521][ T7527] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.3343: resize_inode disabled but reserved GDT blocks non-zero [ 172.593751][ T7549] device veth0_vlan left promiscuous mode [ 172.605574][ T7549] device veth0_vlan entered promiscuous mode [ 172.627549][ T7549] device veth1_macvtap left promiscuous mode [ 172.636492][ T7549] device veth1_macvtap entered promiscuous mode [ 172.644120][ T7549] device ip6erspan0 left promiscuous mode [ 172.655713][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.667035][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.702951][ T7557] device ip6erspan0 left promiscuous mode [ 172.728072][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.739304][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.759016][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.797555][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.804696][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.812254][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.841863][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 172.846170][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.863399][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 172.869866][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.879375][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.889437][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.897864][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): C: link becomes ready [ 172.909016][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.918946][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 172.928013][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.936581][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.950674][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.959221][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.970589][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.982529][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.012144][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.020653][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.029309][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.038055][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.046475][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.054573][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.062663][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.070793][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.079295][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.087669][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.095711][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.103666][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.111145][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.118549][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.127095][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.135376][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.146407][ T7609] netlink: 'syz.1.3383': attribute type 3 has an invalid length. [ 173.164258][ T7609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.196502][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.222046][ T469] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 173.260790][ T6507] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 173.324161][ T7630] EXT4-fs (loop0): 1 truncate cleaned up [ 173.334675][ T7630] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier, [ 173.461250][ T7650] binfmt_misc: register: failed to install interpreter file ./file0 [ 173.463945][ T469] usb 5-1: Using ep0 maxpacket: 16 [ 173.501594][ T6507] usb 3-1: Using ep0 maxpacket: 8 [ 173.594872][ T469] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 173.607619][ T469] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.619269][ T6507] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 173.629311][ T6507] usb 3-1: config 0 has no interface number 0 [ 173.641106][ T6507] usb 3-1: config 0 interface 200 has no altsetting 0 [ 173.647970][ T469] usb 5-1: config 0 has no interface number 0 [ 173.687958][ T490] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 173.790041][ T6507] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 173.799394][ T469] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 173.812009][ T469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.820513][ T6507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.828843][ T469] usb 5-1: Product: syz [ 173.833128][ T6507] usb 3-1: Product: syz [ 173.840821][ T469] usb 5-1: Manufacturer: syz [ 173.845580][ T6507] usb 3-1: Manufacturer: syz [ 173.850617][ T469] usb 5-1: SerialNumber: syz [ 173.855529][ T6507] usb 3-1: SerialNumber: syz [ 173.862099][ T6507] usb 3-1: config 0 descriptor?? [ 173.867596][ T469] usb 5-1: config 0 descriptor?? [ 173.903683][ T7710] mmap: syz.3.3432 (7710): VmData 40833024 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 173.921012][ T490] usb 2-1: Using ep0 maxpacket: 32 [ 173.995431][ T25] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 174.051507][ T490] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 174.059654][ T490] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 174.069852][ T490] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 174.107270][ T469] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 174.173080][ T6507] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input18 [ 174.185898][ T6507] usb 3-1: USB disconnect, device number 52 [ 174.228368][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 174.246897][ T490] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 174.256039][ T490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.264155][ T490] usb 2-1: Product: syz [ 174.268390][ T490] usb 2-1: Manufacturer: syz [ 174.273076][ T490] usb 2-1: SerialNumber: syz [ 174.311934][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 174.321931][ T490] cdc_acm: probe of 2-1:2.1 failed with error -22 [ 174.328974][ T490] cdc_acm: probe of 2-1:2.0 failed with error -22 [ 174.330640][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 174.344532][ T25] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 174.352801][ T25] usb 1-1: config 0 has no interface number 0 [ 174.367811][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 174.386435][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 174.415548][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 174.442934][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 174.470386][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 174.489136][ T469] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 174.498260][ T469] uvcvideo: No valid video chain found. [ 174.507133][ T469] usb 5-1: USB disconnect, device number 54 [ 174.513360][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 174.520973][ T490] usb 2-1: USB disconnect, device number 53 [ 174.523668][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.536929][ T25] usb 1-1: Product: syz [ 174.541108][ T25] usb 1-1: Manufacturer: syz [ 174.545767][ T25] usb 1-1: SerialNumber: syz [ 174.550961][ T25] usb 1-1: config 0 descriptor?? [ 174.834336][ T6506] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 174.998383][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 175.007604][ T7762] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 175.030845][ T25] usb 1-1: USB disconnect, device number 52 [ 175.105910][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3465'. [ 175.178780][ T6506] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 175.192960][ T6506] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.216090][ T6506] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 175.225379][ T6506] usb 3-1: config 1 has no interface number 1 [ 175.259246][ T6506] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 175.344089][ T7823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3489'. [ 175.421783][ T6506] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.436791][ T6506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.452395][ T6506] usb 3-1: Product: syz [ 175.462061][ T7846] IPv6: Can't replace route, no match found [ 175.468785][ T6506] usb 3-1: Manufacturer: syz [ 175.473416][ T6506] usb 3-1: SerialNumber: syz [ 175.492783][ T7850] device bridge2 entered promiscuous mode [ 175.544261][ T7856] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.565704][ T7856] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 175.588365][ T7856] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 175.733237][ T7882] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.831598][ T6506] usb 3-1: MIDIStreaming interface descriptor not found [ 175.861011][ T6506] usb 3-1: USB disconnect, device number 53 [ 175.885871][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 175.885886][ T24] audit: type=1326 audit(2000524367.715:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221dbb3929 code=0x7ffc0000 [ 175.950615][ T24] audit: type=1326 audit(2000524367.758:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f221dbb3929 code=0x7ffc0000 [ 176.008604][ T24] audit: type=1326 audit(2000524367.790:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221dbb3929 code=0x7ffc0000 [ 176.040750][ T7916] xt_l2tp: v2 doesn't support IP mode [ 176.055215][ T24] audit: type=1326 audit(2000524367.833:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221dbb3929 code=0x7ffc0000 [ 176.079539][ T7918] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3535'. [ 176.102257][ T7884] F2FS-fs (loop0): Invalid uid value -1 [ 176.121862][ T299] udevd[299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.205787][ T7934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.297588][ T24] audit: type=1400 audit(2000524368.155:371): avc: denied { prog_load } for pid=7943 comm="syz.2.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.379802][ T24] audit: type=1400 audit(2000524368.155:372): avc: denied { bpf } for pid=7943 comm="syz.2.3546" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.473368][ T24] audit: type=1400 audit(2000524368.155:373): avc: denied { perfmon } for pid=7943 comm="syz.2.3546" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.541347][ T24] audit: type=1400 audit(2000524368.155:374): avc: denied { prog_run } for pid=7943 comm="syz.2.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.614325][ T24] audit: type=1400 audit(2000524368.187:375): avc: denied { read write } for pid=282 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.657124][ T24] audit: type=1400 audit(2000524368.187:376): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.785674][ T8012] device sit0 entered promiscuous mode [ 176.834236][ T8012] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3579'. [ 176.874889][ T8020] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 176.893732][ T6506] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 176.902979][ T8020] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 176.919396][ T8020] overlayfs: missing 'lowerdir' [ 177.028847][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3595'. [ 177.114062][ T8056] cgroup: No subsys list or none specified [ 177.127460][ T6506] usb 1-1: Using ep0 maxpacket: 8 [ 177.218457][ T8079] device ip6gre1 entered promiscuous mode [ 177.248532][ T6506] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 177.259041][ T6506] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.269481][ T6506] usb 1-1: config 0 has no interface number 0 [ 177.349625][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3624'. [ 177.353821][ T8098] xt_TCPMSS: Only works on TCP SYN packets [ 177.416133][ T6506] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 177.433923][ T6506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.443576][ T6507] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 177.454697][ T6506] usb 1-1: Product: syz [ 177.459084][ T6506] usb 1-1: Manufacturer: syz [ 177.465677][ T6506] usb 1-1: SerialNumber: syz [ 177.471708][ T6506] usb 1-1: config 0 descriptor?? [ 177.550461][ T8130] EXT4-fs (loop1): Ignoring removed nobh option [ 177.557426][ T8130] EXT4-fs (loop1): Ignoring removed bh option [ 177.563537][ T8130] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.604816][ T8130] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 177.652674][ T8146] device vlan0 entered promiscuous mode [ 177.688574][ T6507] usb 5-1: Using ep0 maxpacket: 32 [ 177.723795][ T6506] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 177.736933][ T6506] uvcvideo: No valid video chain found. [ 177.798255][ T6507] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 177.813071][ T6507] usb 5-1: config 0 has no interface number 0 [ 177.834612][ T8175] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 177.837295][ T6507] usb 5-1: config 0 interface 2 has no altsetting 0 [ 177.922628][ T6506] usb 1-1: USB disconnect, device number 53 [ 177.993828][ T6507] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 178.008269][ T6507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.023059][ T6507] usb 5-1: Product: syz [ 178.028712][ T6507] usb 5-1: Manufacturer: syz [ 178.043213][ T6507] usb 5-1: SerialNumber: syz [ 178.050194][ T6507] usb 5-1: config 0 descriptor?? [ 178.147453][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3689'. [ 178.157797][ T8233] IPv6: Can't replace route, no match found [ 178.190068][ T8239] xt_TCPMSS: Only works on TCP SYN packets [ 178.277504][ T8259] incfs: Options parsing error. -22 [ 178.292965][ T8259] incfs: mount failed -22 [ 178.465145][ T8290] EXT4-fs (loop1): Test dummy encryption mode enabled [ 178.477310][ T8290] EXT4-fs (loop1): Test dummy encryption mode enabled [ 178.497154][ T8290] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 178.510594][ T8290] ext4 filesystem being mounted at /694/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.523977][ T6507] usb 5-1: USB disconnect, device number 55 [ 178.569983][ T8290] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 178.656917][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3728'. [ 178.731086][ T1678] udevd[1678]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.770819][ T15] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 178.782752][ T8342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3741'. [ 178.963230][ T25] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 179.067639][ T8388] x_tables: duplicate underflow at hook 2 [ 179.121337][ T15] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 179.129871][ T15] usb 3-1: config 0 has no interface number 0 [ 179.136322][ T15] usb 3-1: config 0 interface 41 has no altsetting 0 [ 179.161457][ T8375] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.224429][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 179.261669][ T8398] FAT-fs (loop4): Directory bread(block 64) failed [ 179.279874][ T8398] FAT-fs (loop4): Directory bread(block 65) failed [ 179.292070][ T8398] FAT-fs (loop4): Directory bread(block 66) failed [ 179.302995][ T15] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 179.312126][ T8398] FAT-fs (loop4): Directory bread(block 67) failed [ 179.312137][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.312153][ T15] usb 3-1: Product: syz [ 179.328508][ T8398] FAT-fs (loop4): Directory bread(block 68) failed [ 179.331470][ T15] usb 3-1: Manufacturer: syz [ 179.338000][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.342332][ T15] usb 3-1: SerialNumber: syz [ 179.358409][ T15] usb 3-1: config 0 descriptor?? [ 179.363498][ T8398] FAT-fs (loop4): Directory bread(block 69) failed [ 179.370286][ T8398] FAT-fs (loop4): Directory bread(block 70) failed [ 179.372348][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.377313][ T8398] FAT-fs (loop4): Directory bread(block 71) failed [ 179.393304][ T8398] FAT-fs (loop4): Directory bread(block 72) failed [ 179.399858][ T8398] FAT-fs (loop4): Directory bread(block 73) failed [ 179.464877][ T8412] netlink: 'syz.3.3774': attribute type 3 has an invalid length. [ 179.597065][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.624831][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.647061][ T25] usb 1-1: Product: syz [ 179.663207][ T8440] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.3788' sets config #0 [ 179.672079][ T25] usb 1-1: Manufacturer: syz [ 179.676981][ T25] usb 1-1: SerialNumber: syz [ 179.765001][ T8454] FAT-fs (loop1): Directory bread(block 64) failed [ 179.772427][ T8454] FAT-fs (loop1): Directory bread(block 65) failed [ 179.779182][ T8454] FAT-fs (loop1): Directory bread(block 66) failed [ 179.788026][ T8454] FAT-fs (loop1): Directory bread(block 67) failed [ 179.795818][ T8454] FAT-fs (loop1): Directory bread(block 68) failed [ 179.802228][ T15] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 179.802817][ T8454] FAT-fs (loop1): Directory bread(block 69) failed [ 179.812399][ T15] CoreChips: probe of 3-1:0.41 failed with error -71 [ 179.828248][ T15] usb 3-1: USB disconnect, device number 54 [ 179.834422][ T8454] FAT-fs (loop1): Directory bread(block 70) failed [ 179.843812][ T8454] FAT-fs (loop1): Directory bread(block 71) failed [ 179.850477][ T8454] FAT-fs (loop1): Directory bread(block 72) failed [ 179.857306][ T8454] FAT-fs (loop1): Directory bread(block 73) failed [ 179.922653][ T8469] binder: 8468:8469 ioctl c018620c 0 returned -14 [ 179.979137][ T490] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 180.006812][ T25] usb 1-1: 0:2 : does not exist [ 180.022847][ T25] usb 1-1: USB disconnect, device number 54 [ 180.193302][ T8525] binder: Unknown parameter 'context' [ 180.221260][ T490] usb 5-1: Using ep0 maxpacket: 16 [ 180.296622][ T8531] FAT-fs (loop1): Directory bread(block 64) failed [ 180.303575][ T8531] FAT-fs (loop1): Directory bread(block 65) failed [ 180.310423][ T8531] FAT-fs (loop1): Directory bread(block 66) failed [ 180.317219][ T8531] FAT-fs (loop1): Directory bread(block 67) failed [ 180.326300][ T8531] FAT-fs (loop1): Directory bread(block 68) failed [ 180.333161][ T8531] FAT-fs (loop1): Directory bread(block 69) failed [ 180.339973][ T8531] FAT-fs (loop1): Directory bread(block 70) failed [ 180.342943][ T490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 180.346669][ T8531] FAT-fs (loop1): Directory bread(block 71) failed [ 180.362733][ T8531] FAT-fs (loop1): Directory bread(block 72) failed [ 180.369386][ T8531] FAT-fs (loop1): Directory bread(block 73) failed [ 180.427505][ T6507] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 180.453986][ T8553] __nla_validate_parse: 1 callbacks suppressed [ 180.453996][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 180.502299][ T490] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 180.514705][ T490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.533072][ T490] usb 5-1: Product: syz [ 180.537646][ T490] usb 5-1: Manufacturer: syz [ 180.556938][ T490] usb 5-1: SerialNumber: syz [ 180.563125][ T490] usb 5-1: config 0 descriptor?? [ 180.564704][ T8564] xt_CT: No such helper "snmp" [ 180.604099][ T490] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 180.621512][ T490] usb 5-1: Detected FT232RL [ 180.671132][ T8579] @: renamed from bond_slave_0 [ 180.692234][ T24] kauditd_printk_skb: 127 callbacks suppressed [ 180.692248][ T24] audit: type=1400 audit(2000524372.875:504): avc: denied { create } for pid=8581 comm="syz.0.3857" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.723243][ T6507] usb 4-1: Using ep0 maxpacket: 32 [ 180.729735][ T8582] cgroup: release_agent respecified [ 180.733188][ T24] audit: type=1400 audit(2000524372.918:505): avc: denied { mounton } for pid=8581 comm="syz.0.3857" path="/706/file0" dev="tmpfs" ino=3616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.767048][ T24] audit: type=1400 audit(2000524372.961:506): avc: denied { unlink } for pid=277 comm="syz-executor" name="file0" dev="tmpfs" ino=3616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.816835][ T8592] erofs: (device loop0): mounted with root inode @ nid 36. [ 180.824433][ T24] audit: type=1400 audit(2000524373.015:507): avc: denied { mount } for pid=8591 comm="syz.0.3862" name="/" dev="loop0" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 180.856898][ T8592] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 180.868723][ T8592] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 180.877134][ T6507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.888654][ T6507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.898643][ T6507] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.900079][ T24] audit: type=1400 audit(2000524373.101:508): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 180.907800][ T6507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.912297][ T6507] usb 4-1: config 0 descriptor?? [ 180.976955][ T6507] hub 4-1:0.0: USB hub found [ 181.004315][ T490] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 181.032135][ T490] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 181.039264][ T490] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 181.049823][ T8601] EXT4-fs (loop2): Ignoring removed nobh option [ 181.058055][ T24] audit: type=1400 audit(2000524373.262:509): avc: denied { create } for pid=8608 comm="syz.0.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.066831][ T8603] FAT-fs (loop1): Directory bread(block 64) failed [ 181.087999][ T8601] EXT4-fs (loop2): Ignoring removed bh option [ 181.090626][ T24] audit: type=1400 audit(2000524373.294:510): avc: denied { setopt } for pid=8608 comm="syz.0.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.094283][ T8603] FAT-fs (loop1): Directory bread(block 65) failed [ 181.120816][ T8601] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.130829][ T8603] FAT-fs (loop1): Directory bread(block 66) failed [ 181.133864][ T490] usb 5-1: USB disconnect, device number 56 [ 181.139891][ T8603] FAT-fs (loop1): Directory bread(block 67) failed [ 181.147273][ T490] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.154397][ T8603] FAT-fs (loop1): Directory bread(block 68) failed [ 181.174205][ T8603] FAT-fs (loop1): Directory bread(block 69) failed [ 181.178104][ T490] ftdi_sio 5-1:0.0: device disconnected [ 181.182827][ T8603] FAT-fs (loop1): Directory bread(block 70) failed [ 181.187426][ T8601] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,grpjquota=,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 181.193284][ T6507] hub 4-1:0.0: 1 port detected [ 181.222004][ T8603] FAT-fs (loop1): Directory bread(block 71) failed [ 181.228964][ T8603] FAT-fs (loop1): Directory bread(block 72) failed [ 181.239807][ T24] audit: type=1400 audit(2000524373.466:511): avc: denied { read } for pid=8614 comm="syz.0.3871" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.250742][ T8603] FAT-fs (loop1): Directory bread(block 73) failed [ 181.273924][ T8601] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.279187][ T24] audit: type=1400 audit(2000524373.498:512): avc: denied { open } for pid=8614 comm="syz.0.3871" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.309050][ T24] audit: type=1400 audit(2000524373.498:513): avc: denied { ioctl } for pid=8614 comm="syz.0.3871" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.349676][ T8601] EXT4-fs (loop2): re-mounted. Opts: [ 181.396153][ T6507] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 181.402920][ T6507] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 181.421120][ T8623] binfmt_misc: register: failed to install interpreter file ./file0 [ 181.491767][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.517295][ T6507] usbhid 4-1:0.0: can't add hid device: -71 [ 181.527375][ T6507] usbhid: probe of 4-1:0.0 failed with error -71 [ 181.574050][ T6507] usb 4-1: USB disconnect, device number 56 [ 181.656301][ T8670] fuse: Bad value for 'user_id' [ 181.694968][ T8676] overlayfs: './file0' not a directory [ 181.749714][ T53] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 181.897210][ T8699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 181.992554][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 182.038020][ T8731] xt_hashlimit: invalid interval [ 182.069634][ T8739] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3930'. [ 182.112443][ T53] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 182.134334][ T53] usb 2-1: config 4 has no interface number 0 [ 182.140503][ T53] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 182.152401][ T53] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 182.174105][ T8749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.192088][ T53] usb 2-1: config 4 interface 51 has no altsetting 0 [ 182.346705][ T53] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 182.371328][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.394932][ T53] usb 2-1: Product: syz [ 182.399256][ T53] usb 2-1: Manufacturer: syz [ 182.404421][ T53] usb 2-1: SerialNumber: syz [ 182.439588][ T8641] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.448469][ T8641] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.533028][ T8811] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 182.543530][ T8811] ext4 filesystem being mounted at /741/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.657680][ T8641] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.671082][ T8641] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.703326][ T53] cdc_eem 2-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.1-1, CDC EEM Device, 9e:22:40:b8:0c:78 [ 182.723102][ T8858] netlink: 'syz.4.3986': attribute type 13 has an invalid length. [ 182.798669][ T8873] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 182.877660][ T53] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 182.904666][ T15] usb 2-1: USB disconnect, device number 54 [ 182.915457][ T15] cdc_eem 2-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.1-1, CDC EEM Device [ 183.018244][ T8906] ================================================================== [ 183.026376][ T8906] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x36a/0x4030 [ 183.033868][ T8906] Read of size 8 at addr ffff88812e09abc8 by task syz.0.4002/8906 [ 183.041845][ T8906] [ 183.044226][ T8906] CPU: 0 PID: 8906 Comm: syz.0.4002 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 183.054132][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.064223][ T8906] Call Trace: [ 183.067546][ T8906] __dump_stack+0x21/0x24 [ 183.071915][ T8906] dump_stack_lvl+0x169/0x1d8 [ 183.076632][ T8906] ? show_regs_print_info+0x18/0x18 [ 183.081858][ T8906] ? thaw_kernel_threads+0x220/0x220 [ 183.087171][ T8906] ? _raw_spin_lock+0x8e/0xe0 [ 183.091878][ T8906] print_address_description+0x7f/0x2c0 [ 183.097444][ T8906] ? __ext4_iget+0x36a/0x4030 [ 183.102162][ T8906] kasan_report+0xe2/0x130 [ 183.106618][ T8906] ? __ext4_iget+0x36a/0x4030 [ 183.111332][ T8906] __asan_report_load8_noabort+0x14/0x20 [ 183.116999][ T8906] __ext4_iget+0x36a/0x4030 [ 183.121540][ T8906] ? __kasan_check_write+0x14/0x20 [ 183.126679][ T8906] ? _raw_write_lock+0x8e/0xe0 [ 183.131465][ T8906] ? _raw_write_trylock+0x140/0x140 [ 183.136671][ T8906] ? __proc_create+0x564/0x8d0 [ 183.141437][ T8906] ? __kasan_check_write+0x14/0x20 [ 183.146547][ T8906] ? ext4_get_projid+0x140/0x140 [ 183.151482][ T8906] ? _raw_write_unlock+0x2b/0x60 [ 183.156418][ T8906] ? proc_register+0x34d/0x4e0 [ 183.161180][ T8906] ext4_enable_quotas+0x33b/0x6d0 [ 183.166208][ T8906] ext4_fill_super+0x82a9/0x8b60 [ 183.171151][ T8906] ? ext4_mount+0x40/0x40 [ 183.175480][ T8906] ? set_blocksize+0x1fe/0x3c0 [ 183.180243][ T8906] ? sb_set_blocksize+0xaa/0xf0 [ 183.185087][ T8906] mount_bdev+0x28b/0x3a0 [ 183.189419][ T8906] ? ext4_mount+0x40/0x40 [ 183.193744][ T8906] ext4_mount+0x34/0x40 [ 183.197904][ T8906] legacy_get_tree+0xed/0x190 [ 183.202713][ T8906] ? ext4_chksum+0x160/0x160 [ 183.207312][ T8906] vfs_get_tree+0x89/0x260 [ 183.211735][ T8906] do_new_mount+0x25a/0xa20 [ 183.216246][ T8906] path_mount+0x572/0xc80 [ 183.220580][ T8906] __se_sys_mount+0x318/0x380 [ 183.225386][ T8906] ? __x64_sys_mount+0xd0/0xd0 [ 183.230171][ T8906] ? debug_smp_processor_id+0x17/0x20 [ 183.235548][ T8906] __x64_sys_mount+0xbf/0xd0 [ 183.240138][ T8906] do_syscall_64+0x31/0x40 [ 183.244555][ T8906] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 183.250444][ T8906] RIP: 0033:0x7f8f3cfdc0ca [ 183.254865][ T8906] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.274477][ T8906] RSP: 002b:00007f8f3b642e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.282898][ T8906] RAX: ffffffffffffffda RBX: 00007f8f3b642ef0 RCX: 00007f8f3cfdc0ca [ 183.290876][ T8906] RDX: 0000200000000080 RSI: 0000200000000640 RDI: 00007f8f3b642eb0 [ 183.298859][ T8906] RBP: 0000200000000080 R08: 00007f8f3b642ef0 R09: 0000000000000800 [ 183.306841][ T8906] R10: 0000000000000800 R11: 0000000000000246 R12: 0000200000000640 [ 183.314816][ T8906] R13: 00007f8f3b642eb0 R14: 00000000000004d5 R15: 0000200000000240 [ 183.322810][ T8906] [ 183.325141][ T8906] Allocated by task 0: [ 183.329205][ T8906] (stack is not available) [ 183.333607][ T8906] [ 183.335938][ T8906] The buggy address belongs to the object at ffff88812e09a6a0 [ 183.335938][ T8906] which belongs to the cache f2fs_inode_cache of size 1520 [ 183.350510][ T8906] The buggy address is located 1320 bytes inside of [ 183.350510][ T8906] 1520-byte region [ffff88812e09a6a0, ffff88812e09ac90) [ 183.363946][ T8906] The buggy address belongs to the page: [ 183.369582][ T8906] page:ffffea0004b82600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812e09e090 pfn:0x12e098 [ 183.381119][ T8906] head:ffffea0004b82600 order:3 compound_mapcount:0 compound_pincount:0 [ 183.389442][ T8906] flags: 0x4000000000010200(slab|head) [ 183.394931][ T8906] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888102793b00 [ 183.403515][ T8906] raw: ffff88812e09e090 0000000080130007 00000001ffffffff 0000000000000000 [ 183.412088][ T8906] page dumped because: kasan: bad access detected [ 183.418516][ T8906] page_owner tracks the page as allocated [ 183.424241][ T8906] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 584, ts 56182000511, free_ts 0 [ 183.444722][ T8906] prep_new_page+0x179/0x180 [ 183.449313][ T8906] get_page_from_freelist+0x2235/0x23d0 [ 183.454863][ T8906] __alloc_pages_nodemask+0x268/0x5f0 [ 183.460235][ T8906] new_slab+0x84/0x3f0 [ 183.464298][ T8906] ___slab_alloc+0x2a6/0x450 [ 183.468885][ T8906] __slab_alloc+0x63/0xa0 [ 183.473211][ T8906] kmem_cache_alloc+0x1af/0x2e0 [ 183.478058][ T8906] f2fs_alloc_inode+0x26/0x410 [ 183.482816][ T8906] iget_locked+0x146/0x7d0 [ 183.487236][ T8906] f2fs_iget+0x55/0x4dc0 [ 183.491474][ T8906] f2fs_fill_super+0x39f0/0x6c70 [ 183.496408][ T8906] mount_bdev+0x28b/0x3a0 [ 183.500738][ T8906] f2fs_mount+0x34/0x40 [ 183.504890][ T8906] legacy_get_tree+0xed/0x190 [ 183.509569][ T8906] vfs_get_tree+0x89/0x260 [ 183.514003][ T8906] do_new_mount+0x25a/0xa20 [ 183.518494][ T8906] page_owner free stack trace missing [ 183.523855][ T8906] [ 183.526180][ T8906] Memory state around the buggy address: [ 183.531811][ T8906] ffff88812e09aa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.539874][ T8906] ffff88812e09ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.547931][ T8906] >ffff88812e09ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.555986][ T8906] ^ [ 183.562393][ T8906] ffff88812e09ac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to send rpc fd=3 want=4664 sent=0 n=-1 (errno 32: Broken pipe) [ 183.570450][ T8906] ffff88812e09ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.578506][ T8906] ================================================================== [ 183.586559][ T8906] Disabling lock debugging due to kernel taint [ 183.647738][ T8906] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 183.689443][ T8906] EXT4-fs (loop0): mount failed [ 183.723311][ T8921] device syz_tun left promiscuous mode [ 183.728886][ T8921] bridge0: port 3(syz_tun) entered disabled state [ 183.763757][ T490] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 183.800823][ T53] usb 4-1: device descriptor read/all, error -71 [ 184.409758][ T7] device bridge_slave_1 left promiscuous mode [ 184.416068][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.423443][ T7] device bridge_slave_0 left promiscuous mode [ 184.429617][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.012912][ T7] device bridge_slave_1 left promiscuous mode [ 186.019204][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.026661][ T7] device bridge_slave_0 left promiscuous mode [ 186.032896][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.040651][ T7] device bridge_slave_1 left promiscuous mode [ 186.046760][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.054695][ T7] device bridge_slave_1 left promiscuous mode [ 186.060962][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.068391][ T7] device bridge_slave_0 left promiscuous mode [ 186.074501][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.082274][ T7] device bridge_slave_1 left promiscuous mode [ 186.088694][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.096147][ T7] device bridge_slave_0 left promiscuous mode [ 186.102248][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.110442][ T7] device veth1_macvtap left promiscuous mode [ 186.116525][ T7] device veth0_vlan left promiscuous mode [ 186.122475][ T7] device veth1_macvtap left promiscuous mode [ 186.128481][ T7] device veth0_vlan left promiscuous mode [ 186.134456][ T7] device veth1_macvtap left promiscuous mode [ 186.140519][ T7] device veth0_vlan left promiscuous mode