Warning: Permanently added '10.128.10.49' (ECDSA) to the list of known hosts. 2021/11/25 13:46:25 parsed 1 programs [ 52.576993][ T1850] cgroup: Unknown subsys name 'net' [ 52.582712][ T1850] cgroup: Unknown subsys name 'net_prio' [ 52.588792][ T1850] cgroup: Unknown subsys name 'devices' [ 52.594769][ T1850] cgroup: Unknown subsys name 'blkio' [ 52.602442][ T1850] cgroup: Unknown subsys name 'hugetlb' [ 52.608381][ T1850] cgroup: Unknown subsys name 'rlimit' 2021/11/25 13:46:27 executed programs: 0 [ 85.316287][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 85.501489][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.611542][ T18] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.681768][ T1131] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.741875][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 87, changing to 10 [ 85.753168][ T5] usb 6-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=e6.98 [ 85.762427][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.773164][ T5] usb 6-1: config 0 descriptor?? [ 85.813599][ T5] ================================================================== [ 85.821861][ T5] BUG: KASAN: slab-out-of-bounds in usbnet_validate_endpoints+0x22a/0x260 [ 85.830392][ T5] Read of size 1 at addr ffff88810ded4223 by task kworker/0:0/5 [ 85.838018][ T5] [ 85.840360][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.15.0-syzkaller #0 [ 85.848169][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.858239][ T5] Workqueue: usb_hub_wq hub_event [ 85.861583][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 87, changing to 10 [ 85.863264][ T5] Call Trace: [ 85.863284][ T5] [ 85.863294][ T5] dump_stack_lvl+0xcd/0x134 [ 85.863330][ T5] print_address_description.constprop.0.cold+0x6c/0x309 [ 85.874359][ T36] usb 1-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=e6.98 [ 85.877697][ T5] ? usbnet_validate_endpoints+0x22a/0x260 [ 85.880624][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.885285][ T5] ? usbnet_validate_endpoints+0x22a/0x260 [ 85.885321][ T5] kasan_report.cold+0x83/0xdf [ 85.885349][ T5] ? usbnet_validate_endpoints+0x22a/0x260 [ 85.885378][ T5] usbnet_validate_endpoints+0x22a/0x260 [ 85.894677][ T36] usb 1-1: config 0 descriptor?? [ 85.901436][ T5] usbnet_probe+0x1ab9/0x2620 [ 85.901488][ T5] usb_probe_interface+0x315/0x7f0 [ 85.943383][ T36] cdc_subset: probe of 1-1:0.0 failed with error -12 [ 85.946950][ T5] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 85.964141][ T5] really_probe+0x245/0xcc0 [ 85.968678][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 85.974951][ T5] __driver_probe_device+0x338/0x4d0 [ 85.980349][ T5] driver_probe_device+0x4c/0x1a0 [ 85.985398][ T5] __device_attach_driver+0x20b/0x2f0 [ 85.990794][ T5] ? driver_allows_async_probing+0x150/0x150 [ 85.996819][ T5] bus_for_each_drv+0x15f/0x1e0 [ 86.001701][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 86.006754][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 86.011629][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 87, changing to 10 [ 86.012564][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 86.012598][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 86.012627][ T5] __device_attach+0x228/0x4a0 [ 86.012653][ T5] ? device_driver_attach+0x210/0x210 [ 86.023659][ T18] usb 2-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=e6.98 [ 86.028769][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 86.034649][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.039320][ T5] bus_probe_device+0x1e4/0x290 [ 86.048785][ T18] usb 2-1: config 0 descriptor?? [ 86.053871][ T5] device_add+0xc17/0x1ee0 [ 86.053906][ T5] ? mark_held_locks+0x9f/0xe0 [ 86.086187][ T5] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 86.092478][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 86.093053][ T18] cdc_subset: probe of 2-1:0.0 failed with error -12 [ 86.098301][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 86.111193][ T5] usb_set_configuration+0x113f/0x1910 [ 86.116698][ T5] usb_generic_driver_probe+0xba/0x100 [ 86.122183][ T5] usb_probe_device+0xd9/0x2c0 [ 86.126970][ T5] ? usb_driver_release_interface+0x180/0x180 [ 86.133152][ T5] really_probe+0x245/0xcc0 [ 86.137678][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 86.143941][ T5] __driver_probe_device+0x338/0x4d0 [ 86.149281][ T5] driver_probe_device+0x4c/0x1a0 [ 86.154323][ T5] __device_attach_driver+0x20b/0x2f0 [ 86.159825][ T5] ? driver_allows_async_probing+0x150/0x150 [ 86.165803][ T5] bus_for_each_drv+0x15f/0x1e0 [ 86.170909][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 86.175926][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 86.181720][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 86.186915][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 86.192735][ T5] __device_attach+0x228/0x4a0 [ 86.197488][ T5] ? device_driver_attach+0x210/0x210 [ 86.202847][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 86.208123][ T5] bus_probe_device+0x1e4/0x290 [ 86.212988][ T5] device_add+0xc17/0x1ee0 [ 86.217396][ T5] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 86.223691][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 86.229946][ T5] usb_new_device.cold+0x63f/0x108e [ 86.235154][ T5] ? hub_disconnect+0x510/0x510 [ 86.239998][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 86.245017][ T5] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.250226][ T5] hub_event+0x2357/0x4330 [ 86.255079][ T5] ? hub_port_debounce+0x3c0/0x3c0 [ 86.260196][ T5] ? lock_release+0x720/0x720 [ 86.265039][ T5] ? lock_downgrade+0x6e0/0x6e0 [ 86.269902][ T5] ? do_raw_spin_lock+0x120/0x2b0 [ 86.274926][ T5] process_one_work+0x9b2/0x1690 [ 86.279884][ T5] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 86.285264][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 86.290486][ T5] ? _raw_spin_lock_irq+0x41/0x50 [ 86.295693][ T5] worker_thread+0x658/0x11f0 [ 86.300381][ T5] ? process_one_work+0x1690/0x1690 [ 86.305595][ T5] kthread+0x40b/0x500 [ 86.309682][ T5] ? set_kthread_struct+0x130/0x130 [ 86.314868][ T5] ret_from_fork+0x1f/0x30 [ 86.319275][ T5] [ 86.322294][ T5] [ 86.324621][ T5] Allocated by task 0: [ 86.328710][ T5] (stack is not available) [ 86.333113][ T5] [ 86.335437][ T5] The buggy address belongs to the object at ffff88810ded4200 [ 86.335437][ T5] which belongs to the cache kmalloc-96 of size 96 [ 86.349563][ T5] The buggy address is located 35 bytes inside of [ 86.349563][ T5] 96-byte region [ffff88810ded4200, ffff88810ded4260) [ 86.362665][ T5] The buggy address belongs to the page: [ 86.368299][ T5] page:ffffea000437b500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ded4 [ 86.378547][ T5] flags: 0x200000000000200(slab|node=0|zone=2) [ 86.384897][ T5] raw: 0200000000000200 0000000000000000 dead000000000122 ffff888100041780 [ 86.393574][ T5] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 86.402680][ T5] page dumped because: kasan: bad access detected [ 86.409263][ T5] page_owner tracks the page as allocated [ 86.414982][ T5] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4546, ts 85619489521, free_ts 59365205543 [ 86.432469][ T5] get_page_from_freelist+0x1254/0x2980 [ 86.438034][ T5] __alloc_pages+0x1b2/0x500 [ 86.442640][ T5] alloc_pages+0x1a7/0x300 [ 86.447070][ T5] new_slab+0x319/0x490 [ 86.451260][ T5] ___slab_alloc+0x8b9/0xfa0 [ 86.455843][ T5] __slab_alloc.constprop.0+0x4d/0xa0 [ 86.461209][ T5] __kmalloc+0x2ee/0x310 [ 86.465458][ T5] tomoyo_encode2.part.0+0xe9/0x3a0 [ 86.470681][ T5] tomoyo_encode+0x28/0x50 [ 86.475094][ T5] tomoyo_realpath_from_path+0x186/0x620 [ 86.480717][ T5] tomoyo_path_perm+0x21b/0x400 [ 86.485560][ T5] security_inode_getattr+0xcf/0x140 [ 86.490853][ T5] vfs_statx+0x164/0x390 [ 86.495129][ T5] __do_sys_newfstatat+0x96/0x120 [ 86.500161][ T5] do_syscall_64+0x35/0xb0 [ 86.504581][ T5] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.510553][ T5] page last free stack trace: [ 86.515223][ T5] free_pcp_prepare+0x315/0x710 [ 86.520075][ T5] free_unref_page+0x19/0x580 [ 86.524774][ T5] qlist_free_all+0x5a/0xc0 [ 86.529280][ T5] kasan_quarantine_reduce+0x180/0x200 [ 86.534742][ T5] __kasan_slab_alloc+0x73/0x80 [ 86.539587][ T5] __kmalloc+0x1d9/0x310 [ 86.543903][ T5] tomoyo_realpath_from_path+0xc3/0x620 [ 86.549618][ T5] tomoyo_path_perm+0x21b/0x400 [ 86.554565][ T5] security_inode_getattr+0xcf/0x140 [ 86.559853][ T5] vfs_statx+0x164/0x390 [ 86.564141][ T5] __do_sys_newfstatat+0x96/0x120 [ 86.569163][ T5] do_syscall_64+0x35/0xb0 [ 86.573684][ T5] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.579610][ T5] [ 86.581951][ T5] Memory state around the buggy address: [ 86.587660][ T5] ffff88810ded4100: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 86.595711][ T5] ffff88810ded4180: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 86.603770][ T5] >ffff88810ded4200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.612101][ T5] ^ [ 86.617326][ T5] ffff88810ded4280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.625571][ T5] ffff88810ded4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.633645][ T5] ================================================================== [ 86.641695][ T5] Disabling lock debugging due to kernel taint [ 86.647921][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 86.654510][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.15.0-syzkaller #0 [ 86.663912][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.673967][ T5] Workqueue: usb_hub_wq hub_event [ 86.678987][ T5] Call Trace: [ 86.682279][ T5] [ 86.685210][ T5] dump_stack_lvl+0xcd/0x134 [ 86.689810][ T5] panic+0x2b0/0x6dd [ 86.693720][ T5] ? __warn_printk+0xf3/0xf3 [ 86.698474][ T5] ? usbnet_validate_endpoints+0x22a/0x260 [ 86.704280][ T5] ? trace_hardirqs_on+0x38/0x1c0 [ 86.709291][ T5] ? trace_hardirqs_on+0x51/0x1c0 [ 86.714305][ T5] ? usbnet_validate_endpoints+0x22a/0x260 [ 86.720123][ T5] ? usbnet_validate_endpoints+0x22a/0x260 [ 86.725954][ T5] end_report.cold+0x63/0x6f [ 86.730544][ T5] kasan_report.cold+0x71/0xdf [ 86.735418][ T5] ? usbnet_validate_endpoints+0x22a/0x260 [ 86.741276][ T5] usbnet_validate_endpoints+0x22a/0x260 [ 86.746920][ T5] usbnet_probe+0x1ab9/0x2620 [ 86.751594][ T5] usb_probe_interface+0x315/0x7f0 [ 86.756699][ T5] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 86.762170][ T5] really_probe+0x245/0xcc0 [ 86.766682][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 86.772907][ T5] __driver_probe_device+0x338/0x4d0 [ 86.778335][ T5] driver_probe_device+0x4c/0x1a0 [ 86.783511][ T5] __device_attach_driver+0x20b/0x2f0 [ 86.788916][ T5] ? driver_allows_async_probing+0x150/0x150 [ 86.794906][ T5] bus_for_each_drv+0x15f/0x1e0 [ 86.799765][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 86.804805][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 86.810608][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 86.815803][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 86.822040][ T5] __device_attach+0x228/0x4a0 [ 86.826898][ T5] ? device_driver_attach+0x210/0x210 [ 86.832368][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 86.837706][ T5] bus_probe_device+0x1e4/0x290 [ 86.842560][ T5] device_add+0xc17/0x1ee0 [ 86.846976][ T5] ? mark_held_locks+0x9f/0xe0 [ 86.851748][ T5] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 86.858069][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 86.863953][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 86.870203][ T5] usb_set_configuration+0x113f/0x1910 [ 86.875654][ T5] usb_generic_driver_probe+0xba/0x100 [ 86.881101][ T5] usb_probe_device+0xd9/0x2c0 [ 86.885854][ T5] ? usb_driver_release_interface+0x180/0x180 [ 86.891906][ T5] really_probe+0x245/0xcc0 [ 86.896393][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 86.902627][ T5] __driver_probe_device+0x338/0x4d0 [ 86.907998][ T5] driver_probe_device+0x4c/0x1a0 [ 86.913028][ T5] __device_attach_driver+0x20b/0x2f0 [ 86.918390][ T5] ? driver_allows_async_probing+0x150/0x150 [ 86.924362][ T5] bus_for_each_drv+0x15f/0x1e0 [ 86.929311][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 86.934365][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 86.940161][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 86.945363][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 86.951174][ T5] __device_attach+0x228/0x4a0 [ 86.955925][ T5] ? device_driver_attach+0x210/0x210 [ 86.961548][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 86.966829][ T5] bus_probe_device+0x1e4/0x290 [ 86.971680][ T5] device_add+0xc17/0x1ee0 [ 86.976115][ T5] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 86.982473][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 86.988942][ T5] usb_new_device.cold+0x63f/0x108e [ 86.994202][ T5] ? hub_disconnect+0x510/0x510 [ 86.999054][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 87.004159][ T5] ? _raw_spin_unlock_irq+0x1f/0x40 [ 87.009477][ T5] hub_event+0x2357/0x4330 [ 87.013919][ T5] ? hub_port_debounce+0x3c0/0x3c0 [ 87.019211][ T5] ? lock_release+0x720/0x720 [ 87.023883][ T5] ? lock_downgrade+0x6e0/0x6e0 [ 87.028913][ T5] ? do_raw_spin_lock+0x120/0x2b0 [ 87.033933][ T5] process_one_work+0x9b2/0x1690 [ 87.038891][ T5] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 87.044351][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 87.049463][ T5] ? _raw_spin_lock_irq+0x41/0x50 [ 87.054497][ T5] worker_thread+0x658/0x11f0 [ 87.059170][ T5] ? process_one_work+0x1690/0x1690 [ 87.064359][ T5] kthread+0x40b/0x500 [ 87.068431][ T5] ? set_kthread_struct+0x130/0x130 [ 87.073616][ T5] ret_from_fork+0x1f/0x30 [ 87.078048][ T5] [ 87.081438][ T5] Kernel Offset: disabled [ 87.085940][ T5] Rebooting in 86400 seconds..