last executing test programs: 1.066188614s ago: executing program 0 (id=3368): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 856.445279ms ago: executing program 3 (id=3372): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 818.78698ms ago: executing program 0 (id=3373): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0xf000000000000000) 771.183391ms ago: executing program 4 (id=3375): r0 = inotify_init() poll(&(0x7f0000000180)=[{r0, 0x8002}], 0x1, 0x3) 645.864144ms ago: executing program 3 (id=3376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@ipv6_deladdr={0x40, 0x15, 0x1f, 0x70bd29, 0x25dfdbfe, {0xa, 0x38, 0x22, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @IFA_ADDRESS={0x68, 0x1, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 628.216105ms ago: executing program 2 (id=3377): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x4) getdents(r0, &(0x7f00000016c0)=""/61, 0x21) 623.785225ms ago: executing program 4 (id=3378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002dc0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x20, 0x5, 0xfc, 0x1, 0xfd, 0x3, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x91}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x2, 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 591.669325ms ago: executing program 1 (id=3379): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/138, 0x8a) 530.312157ms ago: executing program 0 (id=3380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) 489.692898ms ago: executing program 4 (id=3381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x1, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xb, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 478.613608ms ago: executing program 2 (id=3382): r0 = socket(0xa, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000780)) 466.667249ms ago: executing program 1 (id=3383): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x128, 0x37f, 0x148, 0x128, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x23}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x6, 0xffffff19, 'pptp\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 426.99892ms ago: executing program 3 (id=3384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x40844) 382.555941ms ago: executing program 1 (id=3385): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 380.309801ms ago: executing program 0 (id=3386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20040844) 366.487522ms ago: executing program 4 (id=3387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}}, 0x40080) 356.907521ms ago: executing program 2 (id=3388): r0 = socket(0x1, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x1, 0x4) 286.055463ms ago: executing program 3 (id=3389): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsgid(0xee00) 285.200863ms ago: executing program 1 (id=3390): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) pipe(&(0x7f0000000600)) 246.060544ms ago: executing program 2 (id=3391): r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000003340)=[{&(0x7f0000002240)=""/223, 0xdf}], 0x1, 0x4, 0x9) 199.422095ms ago: executing program 0 (id=3392): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 184.800086ms ago: executing program 1 (id=3393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b80080003001900000008000100", @ANYRES32, @ANYBLOB='\a\x00\x00\x00', @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) 180.547126ms ago: executing program 4 (id=3394): r0 = fsopen(&(0x7f0000000540)='debugfs\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000d40), &(0x7f0000000d80), 0x18, 0x0) 168.295046ms ago: executing program 3 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_newnexthop={0x20, 0x68, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004) 131.675277ms ago: executing program 2 (id=3396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8942, &(0x7f0000000300)='veth0:') 76.178609ms ago: executing program 0 (id=3397): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) 66.574819ms ago: executing program 4 (id=3398): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c68285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") open(&(0x7f0000000040)='./file2\x00', 0x200, 0x0) 32.629ms ago: executing program 3 (id=3399): r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) 28.59901ms ago: executing program 1 (id=3400): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000480)=""/121, 0x79}, {0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/86, 0x56}], 0x8, 0x6, 0x80) 0s ago: executing program 2 (id=3401): keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) kernel console output (not intermixed with test programs): 495: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 138.003736][ T5223] EXT4-fs (loop1): mount failed [ 138.065291][ T313] usb 5-1: config 69 has an invalid descriptor of length 0, skipping remainder of the config [ 138.075823][ T313] usb 5-1: config 69 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 138.085742][ T313] usb 5-1: config 69 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 138.095637][ T313] usb 5-1: config 69 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.134399][ T311] usb 4-1: USB disconnect, device number 48 [ 138.255603][ T313] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 138.264754][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.273583][ T313] usb 5-1: Product: syz [ 138.277819][ T313] usb 5-1: Manufacturer: syz [ 138.282417][ T313] usb 5-1: SerialNumber: syz [ 138.306779][ T5236] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 138.320095][ T5236] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.332395][ T5236] F2FS-fs (loop0): invalid crc value [ 138.343953][ T5236] F2FS-fs (loop0): SIT is corrupted node# 5 vs 7 [ 138.350816][ T5236] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 138.446603][ T5255] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 138.465313][ T484] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 138.638102][ T5266] loop0: p1 < > p4 < > [ 138.671581][ T313] usb 5-1: USB disconnect, device number 43 [ 138.693475][ T484] usb 2-1: Using ep0 maxpacket: 8 [ 138.769915][ T484] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.769936][ T5283] futex_wake_op: syz.3.2251 tries to shift op by 32; fix this program [ 138.820811][ T5285] EXT4-fs (loop2): unsupported inode size: 143 [ 138.827425][ T5285] EXT4-fs (loop2): blocksize: 1024 [ 138.839159][ T5290] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 138.847682][ T5290] EXT4-fs (loop3): orphan cleanup on readonly fs [ 138.854248][ T5290] EXT4-fs error (device loop3): ext4_free_blocks:5690: comm syz.3.2254: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.855763][ T484] usb 2-1: config 2 has an invalid interface number: 58 but max is 0 [ 138.869720][ T5290] EXT4-fs (loop3): 1 orphan inode deleted [ 138.881879][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,journal_dev=0x0000000000000000,,errors=continue [ 138.908541][ T484] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 138.920157][ T484] usb 2-1: config 2 has no interface number 0 [ 138.926585][ T484] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 138.938119][ T484] usb 2-1: config 2 interface 58 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 138.948450][ T484] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 138.959700][ T484] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0xE has invalid wMaxPacketSize 0 [ 138.970353][ T484] usb 2-1: config 2 interface 58 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 138.981669][ T484] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0xB has invalid maxpacket 72, setting to 64 [ 138.992808][ T484] usb 2-1: config 2 interface 58 has no altsetting 0 [ 138.998528][ T425] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 139.080253][ T24] audit: type=1326 audit(2000000008.759:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.2260" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f274485d0d9 code=0x0 [ 139.127870][ T24] audit: type=1326 audit(2000000008.801:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.2260" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f274485d0d9 code=0x0 [ 139.169880][ T484] usb 2-1: New USB device found, idVendor=08e9, idProduct=0100, bcdDevice=74.53 [ 139.179149][ T484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.197297][ T484] usb 2-1: Product: syz [ 139.202185][ T484] usb 2-1: Manufacturer: syz [ 139.206812][ T484] usb 2-1: SerialNumber: syz [ 139.255330][ T5244] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.303159][ T20] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 139.426923][ T425] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.503008][ T425] usb 1-1: config 254 has an invalid interface number: 205 but max is 0 [ 139.511492][ T425] usb 1-1: config 254 has no interface number 0 [ 139.518011][ T425] usb 1-1: config 254 interface 205 has no altsetting 0 [ 139.555099][ T484] usb 2-1: USB disconnect, device number 45 [ 139.598204][ T15] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 139.665280][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.675531][ T20] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.751300][ T425] usb 1-1: string descriptor 0 read error: -22 [ 139.757531][ T425] usb 1-1: Dual-Role OTG device on HNP port [ 139.779329][ T425] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice= 1.2e [ 139.788465][ T425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.827615][ T425] usb_ehset_test: probe of 1-1:254.205 failed with error -32 [ 139.855183][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.864346][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.872453][ T20] usb 3-1: Product: syz [ 139.876991][ T20] usb 3-1: Manufacturer: syz [ 139.882080][ T20] usb 3-1: SerialNumber: syz [ 139.940932][ T311] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 139.978772][ T15] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.010824][ T5332] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 140.023826][ T5332] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 140.036978][ T425] usb 1-1: USB disconnect, device number 46 [ 140.042555][ T5332] exFAT-fs (loop1): Filesystem has been set read-only [ 140.050128][ T5332] exFAT-fs (loop1): failed to initialize root inode [ 140.064903][ T15] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 140.076339][ T15] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 140.164209][ T5335] EXT4-fs error (device loop1): ext4_xattr_inode_iget:397: comm syz.1.2275: Parent and EA inode have the same ino 15 [ 140.177902][ T5335] EXT4-fs (loop1): 1 orphan inode deleted [ 140.183805][ T5335] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x0000000000000022,noauto_da_alloc,quota,usrjquota=,resuid=0x000000000000ee01,,errors=continue [ 140.184855][ T20] usb 3-1: bad CDC descriptors [ 140.211035][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 140.220007][ T20] usb 3-1: USB disconnect, device number 51 [ 140.236191][ T15] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 140.248231][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.256553][ T15] usb 5-1: Product: syz [ 140.260814][ T15] usb 5-1: Manufacturer: syz [ 140.265567][ T15] usb 5-1: SerialNumber: syz [ 140.340689][ T311] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.349446][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.359866][ T311] usb 4-1: config 0 has no interface number 0 [ 140.366094][ T311] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.380658][ T311] usb 4-1: config 0 interface 184 has no altsetting 0 [ 140.388391][ T24] audit: type=1326 audit(2000000010.124:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.1.2283" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bf9af10d9 code=0x0 [ 140.550454][ T311] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.559858][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.567885][ T311] usb 4-1: Product: syz [ 140.572187][ T311] usb 4-1: Manufacturer: syz [ 140.576906][ T311] usb 4-1: SerialNumber: syz [ 140.582692][ T311] usb 4-1: config 0 descriptor?? [ 140.607684][ T15] usb 5-1: unit 4: unexpected type 0x03 [ 140.618879][ T311] smsc75xx v1.0.0 [ 140.623093][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 140.634718][ T311] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 140.648104][ T15] usb 5-1: unit 8 not found! [ 140.688285][ T15] usb 5-1: USB disconnect, device number 44 [ 140.695855][ T5382] EXT4-fs (loop0): Test dummy encryption mode enabled [ 140.721733][ T5382] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #11: comm syz.0.2297: casefold flag without casefold feature [ 140.743714][ T5382] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2297: couldn't read orphan inode 11 (err -117) [ 140.756659][ T5382] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue [ 140.813592][ T923] usb 4-1: USB disconnect, device number 49 [ 140.855504][ T5392] EXT4-fs (loop1): Invalid log block size: 2147483646 [ 140.883592][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 140.912125][ T5396] EXT4-fs (loop2): 1 truncate cleaned up [ 140.918008][ T5396] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 140.937146][ T5399] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 140.956248][ T5399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 141.098439][ T5403] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 141.106694][ T5411] 9pnet: Insufficient options for proto=fd [ 141.112580][ T5403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.135966][ T5415] binder: Unknown parameter 'context' [ 141.162054][ T5403] F2FS-fs (loop1): invalid crc value [ 141.168992][ T5403] F2FS-fs (loop1): Mismatch valid blocks 5 vs. 7 [ 141.189650][ T5403] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 141.330988][ T923] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 141.521454][ T24] audit: type=1326 audit(2000000011.321:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.4.2329" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21fcb6b0d9 code=0x0 [ 141.552314][ T15] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 141.568289][ T5459] fuse: blksize only supported for fuseblk [ 141.683179][ T20] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 141.693017][ T923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 141.702156][ T923] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 141.711824][ T923] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 141.721659][ T923] usb 3-1: config 1 interface 0 has no altsetting 0 [ 141.728270][ T923] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 141.737431][ T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.779061][ T923] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 141.797345][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 141.902110][ T311] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 141.911984][ T15] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 141.921156][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.929849][ T15] usb 1-1: config 0 descriptor?? [ 141.961119][ T425] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 141.997962][ T923] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 142.005671][ T923] usb 3-1: USB disconnect, device number 52 [ 142.035370][ T20] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 142.046468][ T20] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 142.206973][ T15] usb 1-1: string descriptor 0 read error: -71 [ 142.207104][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.222275][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.230363][ T20] usb 2-1: Product: syz [ 142.234535][ T20] usb 2-1: Manufacturer: syz [ 142.239198][ T20] usb 2-1: SerialNumber: syz [ 142.254772][ T5448] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 142.283348][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.311507][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 142.317572][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 142.324915][ T15] usb 1-1: USB disconnect, device number 47 [ 142.330966][ T425] usb 5-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 142.339846][ T425] usb 5-1: config 24 has an invalid descriptor of length 171, skipping remainder of the config [ 142.351597][ T425] usb 5-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 142.359569][ T311] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 142.371139][ T311] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.384201][ T311] usb 4-1: config 1 interface 0 has no altsetting 0 [ 142.502754][ T20] cdc_ncm 2-1:1.0: bind() failure [ 142.508665][ T20] cdc_ncm 2-1:1.1: bind() failure [ 142.516690][ T20] usb 2-1: USB disconnect, device number 46 [ 142.530649][ T425] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 142.540064][ T425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.540640][ T311] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 142.548057][ T425] usb 5-1: Product: syz [ 142.548076][ T425] usb 5-1: Manufacturer: syz [ 142.557584][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.562648][ T425] usb 5-1: SerialNumber: syz [ 142.581328][ T311] usb 4-1: Product: syz [ 142.585596][ T311] usb 4-1: Manufacturer: syz [ 142.590260][ T311] usb 4-1: SerialNumber: syz [ 142.606688][ T5473] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 142.677757][ T24] audit: type=1326 audit(2000000012.540:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.0.2345" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0913e7f0d9 code=0x0 [ 142.749686][ T484] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 142.854899][ T311] usblp0: Disabling reads from problematic bidirectional printer [ 142.873984][ T311] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 9 proto 1 vid 0x03F0 pid 0x0004 [ 142.895194][ T311] usb 4-1: USB disconnect, device number 50 [ 142.920480][ T311] usblp0: removed [ 142.930816][ T425] usb 5-1: 0:1 : does not exist [ 142.935988][ T425] usb 5-1: unit 80 not found! [ 142.944037][ T425] usb 5-1: USB disconnect, device number 45 [ 142.978023][ T484] usb 3-1: Using ep0 maxpacket: 16 [ 143.026278][ T5503] F2FS-fs (loop0): quotafile must be on filesystem root [ 143.092650][ T484] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.102863][ T484] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.169505][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:24.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.264173][ T484] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.273293][ T484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.282022][ T484] usb 3-1: Product: syz [ 143.286951][ T484] usb 3-1: Manufacturer: syz [ 143.291574][ T484] usb 3-1: SerialNumber: syz [ 143.301979][ T427] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 143.343411][ T24] audit: type=1400 audit(2000000013.233:191): avc: denied { write } for pid=5539 comm="syz.0.2370" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.375551][ T24] audit: type=1400 audit(2000000013.254:192): avc: denied { remove_name } for pid=5539 comm="syz.0.2370" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.400525][ T24] audit: type=1400 audit(2000000013.254:193): avc: denied { unlink } for pid=5539 comm="syz.0.2370" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.471998][ T5552] loop0: p1 < > p4 [ 143.477318][ T5552] loop0: p4 size 722688 extends beyond EOD, truncated [ 143.547423][ T1585] udevd[1585]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 143.559027][ T427] usb 2-1: Using ep0 maxpacket: 32 [ 143.561147][ T385] udevd[385]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 143.597101][ T923] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 143.606464][ T484] usb 3-1: 0:2 : does not exist [ 143.614382][ T5569] fuse: Bad value for 'fd' [ 143.648632][ T484] usb 3-1: USB disconnect, device number 53 [ 143.759474][ T427] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.863930][ T427] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 143.873836][ T427] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 143.884059][ T427] usb 2-1: config 1 interface 0 has no altsetting 0 [ 143.955591][ T5594] cgroup: Name too long [ 144.006441][ T425] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 144.082938][ T427] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 144.092172][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.100198][ T427] usb 2-1: Product: syz [ 144.104505][ T427] usb 2-1: Manufacturer: syz [ 144.109235][ T427] usb 2-1: SerialNumber: syz [ 144.130477][ T5508] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.137786][ T5508] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.158623][ T923] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 144.167799][ T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.175849][ T923] usb 4-1: Product: syz [ 144.180341][ T923] usb 4-1: Manufacturer: syz [ 144.184985][ T923] usb 4-1: SerialNumber: syz [ 144.254036][ T15] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 144.330244][ T484] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 144.358644][ T425] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 144.367614][ T425] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 144.378256][ T425] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 144.389117][ T425] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 144.400533][ T425] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 144.413659][ T427] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8 [ 144.425538][ T427] usb 2-1: USB disconnect, device number 47 [ 144.432372][ T427] usblp0: removed [ 144.501826][ T425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.511157][ T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.519139][ T425] usb 1-1: SerialNumber: syz [ 144.549363][ T923] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.558984][ T425] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 144.566845][ T425] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 144.576976][ T425] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 144.588828][ T923] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 144.597482][ T923] usb 4-1: USB disconnect, device number 51 [ 144.606387][ T15] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.616666][ T15] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.626636][ T15] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.643206][ T15] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 144.710986][ T484] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.721374][ T484] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 144.754408][ T427] usb 1-1: USB disconnect, device number 48 [ 144.796663][ T484] usb 3-1: string descriptor 0 read error: -71 [ 144.802971][ T484] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 144.807208][ T15] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 144.812478][ T484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.822169][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.839189][ T15] usb 5-1: Product: syz [ 144.843500][ T15] usb 5-1: Manufacturer: syz [ 144.848414][ T15] usb 5-1: SerialNumber: syz [ 144.870161][ T5610] fuse: Bad value for 'fd' [ 144.874919][ T484] usb 3-1: can't set config #1, error -71 [ 144.887044][ T484] usb 3-1: USB disconnect, device number 54 [ 144.893303][ T15] usb-storage 5-1:1.0: USB Mass Storage device detected [ 144.911362][ T15] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 144.921362][ T15] scsi host1: usb-storage 5-1:1.0 [ 144.947040][ T5614] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 144.972086][ T5614] EXT4-fs (loop1): mount failed [ 145.084988][ T25] usb 5-1: USB disconnect, device number 46 [ 145.282133][ T311] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 145.291627][ T427] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 145.510817][ T20] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 145.529716][ T484] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 145.634405][ T427] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 145.642910][ T427] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 145.651240][ T427] usb 2-1: config 0 has no interface number 0 [ 145.657582][ T427] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 145.667768][ T427] usb 2-1: config 0 interface 200 has no altsetting 0 [ 145.768170][ T484] usb 3-1: Using ep0 maxpacket: 32 [ 145.825233][ T427] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 145.834788][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.842806][ T427] usb 2-1: Product: syz [ 145.847470][ T427] usb 2-1: Manufacturer: syz [ 145.852206][ T427] usb 2-1: SerialNumber: syz [ 145.858255][ T427] usb 2-1: config 0 descriptor?? [ 145.863357][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.873855][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.883132][ T311] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 145.901282][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.909473][ T20] usb 1-1: config 1 has no interface number 0 [ 145.915682][ T484] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 145.926120][ T311] usb 4-1: Product: syz [ 145.930394][ T311] usb 4-1: Manufacturer: syz [ 145.935027][ T311] usb 4-1: SerialNumber: syz [ 145.939739][ T484] usb 3-1: config 0 has no interface number 0 [ 145.945978][ T484] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 145.958010][ T484] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.968385][ T484] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 145.986714][ T24] audit: type=1326 audit(2000000016.006:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.4.2425" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21fcb6b0d9 code=0x0 [ 146.056294][ T24] audit: type=1326 audit(2000000016.090:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.4.2427" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21fcb6b0d9 code=0x0 [ 146.148919][ T20] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 146.158285][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.162360][ T427] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input8 [ 146.167003][ T20] usb 1-1: Product: syz [ 146.182343][ T20] usb 1-1: Manufacturer: syz [ 146.186996][ T20] usb 1-1: SerialNumber: syz [ 146.205017][ T427] usb 2-1: USB disconnect, device number 48 [ 146.206446][ T484] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 146.234757][ T484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.242783][ T484] usb 3-1: Product: syz [ 146.247089][ T484] usb 3-1: Manufacturer: syz [ 146.251707][ T484] usb 3-1: SerialNumber: syz [ 146.257943][ T484] usb 3-1: config 0 descriptor?? [ 146.281903][ T5637] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 146.339402][ T311] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.367621][ T311] usb 4-1: unit 14 not found! [ 146.417438][ T311] usb 4-1: USB disconnect, device number 52 [ 146.530056][ T484] usb-storage 3-1:0.20: USB Mass Storage device detected [ 146.537503][ T20] usb 1-1: 1:0 : does not exist [ 146.543278][ T20] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 146.549628][ T20] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 146.559640][ T484] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 146.568235][ T20] usb 1-1: USB disconnect, device number 49 [ 146.587664][ T484] scsi host1: usb-storage 3-1:0.20 [ 146.607318][ T484] usb 3-1: USB disconnect, device number 55 [ 146.635113][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.653613][ T284] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 146.770858][ T24] audit: type=1326 audit(2000000016.835:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.3.2442" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f274485d0d9 code=0x0 [ 146.910398][ T311] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 146.918504][ T24] audit: type=1400 audit(2000000016.982:197): avc: denied { create } for pid=5711 comm="syz.3.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.939020][ T284] usb 5-1: Using ep0 maxpacket: 32 [ 146.973592][ T5718] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.985466][ T5718] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.2453: corrupted in-inode xattr [ 146.999005][ T5718] EXT4-fs (loop3): Remounting filesystem read-only [ 147.006059][ T5718] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2453: couldn't read orphan inode 15 (err -117) [ 147.018717][ T5718] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,bsddf,debug_want_extra_isize=0x000000000000006c,discard,nodioread_nolock,errors=remount-ro, [ 147.052979][ T24] audit: type=1400 audit(2000000017.130:198): avc: denied { read } for pid=5725 comm="syz.2.2457" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.076259][ T284] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 147.085665][ T24] audit: type=1400 audit(2000000017.151:199): avc: denied { open } for pid=5725 comm="syz.2.2457" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.109242][ T284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.119558][ T284] usb 5-1: config 0 has no interface number 0 [ 147.125785][ T284] usb 5-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.139659][ T284] usb 5-1: config 0 interface 196 has no altsetting 0 [ 147.149471][ T5728] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 2: comm syz.2.2459: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.168564][ T5728] EXT4-fs (loop2): Remounting filesystem read-only [ 147.175227][ T5728] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 48: comm syz.2.2459: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.189996][ T5728] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2459: Failed to acquire dquot type 0 [ 147.202295][ T5728] EXT4-fs (loop2): 1 orphan inode deleted [ 147.209936][ T5728] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity,norecovery,max_batch_time=0x0000000000000007,barrier,stripe=0x0000000000000004,noauto_da_alloc, [ 147.239679][ T5734] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 147.260058][ T280] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 147.274354][ T280] EXT4-fs (loop2): Remounting filesystem read-only [ 147.281422][ T280] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 147.291518][ T280] EXT4-fs error (device loop2): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 147.303064][ T284] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 147.312462][ T20] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 147.320354][ T284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 147.328541][ T284] usb 5-1: Product: syz [ 147.332836][ T284] usb 5-1: Manufacturer: syz [ 147.338454][ T284] usb 5-1: config 0 descriptor?? [ 147.377893][ T284] ipheth 5-1:0.196: Unable to find alternate settings interface [ 147.395807][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.434186][ T311] usb 2-1: not running at top speed; connect to a high speed hub [ 147.510087][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.520330][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.572045][ T284] usb 5-1: USB disconnect, device number 47 [ 147.624673][ T425] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 147.652879][ T427] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 147.662412][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 147.673850][ T311] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 147.683009][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 147.694447][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.702617][ T311] usb 2-1: Product: syz [ 147.706789][ T311] usb 2-1: Manufacturer: syz [ 147.711490][ T311] usb 2-1: SerialNumber: syz [ 147.786364][ T20] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 147.796893][ T20] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 147.805026][ T20] usb 1-1: Manufacturer: syz [ 147.811097][ T20] usb 1-1: config 0 descriptor?? [ 147.834086][ T5721] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 147.852952][ T425] usb 3-1: Using ep0 maxpacket: 8 [ 147.854577][ T20] uvcvideo: Found UVC 0.00 device (18ec:3288) [ 147.865572][ T20] uvcvideo: No valid video chain found. [ 147.890962][ T427] usb 4-1: Using ep0 maxpacket: 32 [ 148.015127][ T425] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.023857][ T427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 148.035883][ T427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 148.052057][ T20] usb 1-1: USB disconnect, device number 50 [ 148.058484][ T311] usb 2-1: unit 3 not found! [ 148.077948][ T311] usb 2-1: USB disconnect, device number 49 [ 148.116052][ T425] usb 3-1: config 127 has an invalid interface number: 233 but max is 0 [ 148.126603][ T425] usb 3-1: config 127 has no interface number 0 [ 148.133702][ T425] usb 3-1: config 127 interface 233 has no altsetting 0 [ 148.196178][ T427] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 148.205412][ T427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.213500][ T427] usb 4-1: Product: syz [ 148.217888][ T427] usb 4-1: Manufacturer: syz [ 148.222576][ T427] usb 4-1: SerialNumber: syz [ 148.228288][ T427] usb 4-1: config 0 descriptor?? [ 148.243825][ T5747] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 148.263369][ T427] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 148.290903][ T425] usb 3-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=a7.08 [ 148.300029][ T425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.308154][ T425] usb 3-1: Product: syz [ 148.312822][ T425] usb 3-1: Manufacturer: syz [ 148.317533][ T425] usb 3-1: SerialNumber: syz [ 148.443120][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 148.459850][ T427] usb 4-1: USB disconnect, device number 53 [ 148.625412][ T425] usb 3-1: USB disconnect, device number 56 [ 148.633299][ T5767] F2FS-fs (loop1): invalid crc value [ 148.651104][ T5767] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 148.677497][ T5767] F2FS-fs (loop1): Failed to read root inode [ 148.691027][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 148.834089][ T311] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 148.842327][ T5781] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.855803][ T5781] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.881532][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.957356][ T25] usb 5-1: config 127 has an invalid interface number: 215 but max is 0 [ 148.966137][ T25] usb 5-1: config 127 has no interface number 0 [ 148.972730][ T25] usb 5-1: config 127 interface 215 has no altsetting 0 [ 149.090989][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 149.128966][ T25] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 149.138563][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.146815][ T25] usb 5-1: Product: syz [ 149.151335][ T25] usb 5-1: Manufacturer: syz [ 149.155951][ T25] usb 5-1: SerialNumber: syz [ 149.186074][ T20] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 149.252563][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.253092][ T425] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 149.275293][ T5808] F2FS-fs (loop2): invalid crc value [ 149.281938][ T5808] F2FS-fs (loop2): Wrong journal entry on segno 989855755 [ 149.289291][ T5808] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 149.338597][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.420876][ T5824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.432714][ T5824] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #15: comm syz.2.2500: inline data xattr refers to an external xattr inode [ 149.447928][ T5824] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2500: couldn't read orphan inode 15 (err -117) [ 149.460314][ T5824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 149.472025][ T25] usb-storage 5-1:127.215: USB Mass Storage device detected [ 149.485487][ T25] usb-storage 5-1:127.215: Quirks match for vid 054c pid 002e: 1 [ 149.500383][ T311] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 149.509545][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.517679][ T311] usb 1-1: Product: 鿃䤪ហڐ̠齲旺⚼愰梺強⩻檿姺嚿匤觇輬㯢㪈岪쐱뀐檽ͦ톕┡䟹⪎짾ح໫㪮쯑퐰혞뙖ᘆ경ꌥ◵掝凗祖✞뇤톭淚傎驎况藦躎ꊻ㎆㴮栀耬㸟鱫ꖴ퓽롾豙퓬덗剟嚷㺥쨁묳秉皵䗉罷ិ瑶㻪쒤睡笐唸놻ඓ钷ﾅꦉ룒퉵驝饷⺲㩄〶ﰦ㞻䞵䂴﯀䣒ힴ珐橬ꑥ餔扤쳎哅ꥈ紾⊄㭋隸奊똱뿈 [ 149.527859][ T425] usb 4-1: Using ep0 maxpacket: 32 [ 149.554175][ T20] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 149.570103][ T311] usb 1-1: Manufacturer: 《 [ 149.575556][ T25] usb 5-1: USB disconnect, device number 48 [ 149.584641][ T20] usb 2-1: config 0 has no interface number 0 [ 149.633415][ T425] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.738549][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 149.747911][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.756100][ T20] usb 2-1: Product: syz [ 149.760447][ T20] usb 2-1: Manufacturer: syz [ 149.765333][ T20] usb 2-1: SerialNumber: syz [ 149.771292][ T20] usb 2-1: config 0 descriptor?? [ 149.824035][ T53] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 149.881941][ T425] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 149.891293][ T425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.903670][ T425] usb 4-1: Product: syz [ 149.907879][ T425] usb 4-1: Manufacturer: syz [ 149.912752][ T425] usb 4-1: SerialNumber: syz [ 149.941533][ T311] usb 1-1: USB disconnect, device number 51 [ 150.062116][ T53] usb 3-1: Using ep0 maxpacket: 8 [ 150.109587][ T20] uvcvideo: Found UVC 0.08 device syz (046d:0823) [ 150.116129][ T20] uvcvideo: No valid video chain found. [ 150.125036][ T20] usb 2-1: USB disconnect, device number 50 [ 150.138632][ T1587] udevd[1587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.167077][ T425] usb 4-1: selecting invalid altsetting 1 [ 150.173165][ T425] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 150.183320][ T425] usb 4-1: USB disconnect, device number 54 [ 150.190749][ T53] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 150.199281][ T923] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 150.208248][ T53] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 150.216900][ T53] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 150.227311][ T53] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 150.236381][ T53] usb 3-1: config 250 has no interface number 0 [ 150.242676][ T53] usb 3-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 150.257120][ T53] usb 3-1: config 250 interface 228 has no altsetting 0 [ 150.376316][ T53] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 150.385494][ T53] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 150.393748][ T53] usb 3-1: Product: syz [ 150.398209][ T53] usb 3-1: SerialNumber: syz [ 150.433883][ T53] hub 3-1:250.228: bad descriptor, ignoring hub [ 150.440305][ T53] hub: probe of 3-1:250.228 failed with error -5 [ 150.446722][ T923] usb 5-1: Using ep0 maxpacket: 8 [ 150.576385][ T15] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 150.595047][ T923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.671249][ T923] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.738257][ T53] usb 3-1: USB disconnect, device number 57 [ 150.794954][ T20] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 150.804541][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 150.909609][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 150.909659][ T923] usb 5-1: string descriptor 0 read error: -22 [ 150.923645][ T923] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 150.932719][ T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.957342][ T15] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.977210][ T923] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 151.033430][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 151.176285][ T923] usb 5-1: USB disconnect, device number 49 [ 151.186038][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.193055][ T15] usb 1-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 151.203871][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.212364][ T15] usb 1-1: Product: syz [ 151.216757][ T15] usb 1-1: Manufacturer: syz [ 151.221500][ T15] usb 1-1: SerialNumber: syz [ 151.280986][ T20] usb 2-1: config 1 has an invalid interface number: 2 but max is 0 [ 151.289023][ T20] usb 2-1: config 1 has no interface number 0 [ 151.295374][ T20] usb 2-1: config 1 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 151.306170][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.385749][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.395886][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.405175][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 151.423699][ T20] usb 2-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice=5a.00 [ 151.433400][ T20] usb 2-1: New USB device strings: Mfr=211, Product=0, SerialNumber=3 [ 151.441576][ T20] usb 2-1: Manufacturer: syz [ 151.446437][ T20] usb 2-1: SerialNumber: syz [ 151.480976][ T5846] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 151.575857][ T25] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 151.585041][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.593693][ T25] usb 4-1: Product: syz [ 151.598126][ T25] usb 4-1: Manufacturer: syz [ 151.602935][ T25] usb 4-1: SerialNumber: syz [ 151.646873][ T15] usb 1-1: USB disconnect, device number 52 [ 151.791104][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 151.791118][ T24] audit: type=1326 audit(2000000022.108:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.2520" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21fcb6b0d9 code=0x0 [ 151.821903][ T20] usb 2-1: MIDIStreaming interface descriptor not found [ 151.831907][ T20] usb 2-1: USB disconnect, device number 51 [ 151.867791][ T1587] udevd[1587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.976110][ T25] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 151.985494][ T25] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 151.992744][ T25] usb 4-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 152.000327][ T25] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 152.042713][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.058572][ T25] usb 4-1: unit 2 not found! [ 152.063475][ T25] usb 4-1: unit 0 not found! [ 152.081087][ T25] usb 4-1: USB disconnect, device number 55 [ 152.217761][ T284] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 152.234926][ T5856] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.282394][ T5856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.290918][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.339188][ T5904] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 152.356808][ T5904] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.502081][ T24] audit: type=1400 audit(2000000022.854:201): avc: denied { read } for pid=5914 comm="syz.1.2539" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.525443][ T5911] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 152.548080][ T5911] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.584987][ T284] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 152.595359][ T5909] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 152.602461][ T284] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.612027][ T284] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 152.623972][ T24] audit: type=1400 audit(2000000022.854:202): avc: denied { open } for pid=5914 comm="syz.1.2539" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.658293][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 152.785363][ T284] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 152.804420][ T284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.812723][ T284] usb 1-1: Product: syz [ 152.824039][ T284] usb 1-1: Manufacturer: syz [ 152.828735][ T284] usb 1-1: SerialNumber: syz [ 152.860180][ T5924] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 152.869537][ T5924] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.913220][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 153.149413][ T5951] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 153.158573][ T5951] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.194572][ T284] usb 1-1: Can't get UAC3 power state for id 10 [ 153.204109][ T53] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 153.232597][ T284] usb 1-1: 0:2 : does not exist [ 153.237487][ T284] usb 1-1: 0:3 : does not exist [ 153.242786][ T284] usb 1-1: 0:4 : does not exist [ 153.247642][ T284] usb 1-1: 0:5 : does not exist [ 153.252790][ T284] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 153.259310][ T284] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 153.270794][ T284] usb 1-1: USB disconnect, device number 53 [ 153.278743][ T5956] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 153.348805][ T5958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 153.575203][ T53] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.595237][ T53] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 153.623107][ T53] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.870443][ T53] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 153.889680][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.897700][ T53] usb 3-1: Product: syz [ 153.921643][ T53] usb 3-1: Manufacturer: syz [ 153.926287][ T53] usb 3-1: SerialNumber: syz [ 154.276933][ T5969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.317585][ T5969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.337002][ T53] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 154.355381][ T53] usb 3-1: USB disconnect, device number 58 [ 154.442549][ T5971] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.495973][ T5971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.631108][ T5973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.791712][ T5973] F2FS-fs (loop0): Mounted with checkpoint version = 1b41e955 [ 155.309383][ T5996] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.365703][ T5996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.470112][ T53] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 155.586822][ T6020] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 155.808374][ T6023] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2572: bg 0: block 127: padding at end of block bitmap is not set [ 155.826246][ T6023] EXT4-fs (loop0): Remounting filesystem read-only [ 155.833237][ T6023] EXT4-fs error (device loop0) in ext4_evict_inode:260: Readonly filesystem [ 155.842421][ T6023] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.2572: iget: bad extra_isize 58 (inode size 256) [ 155.856116][ T6023] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2572: error while reading EA inode 11 err=-117 [ 155.879771][ T53] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.890230][ T6023] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.2572: iget: bad extra_isize 58 (inode size 256) [ 155.905360][ T6023] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2572: error while reading EA inode 11 err=-117 [ 155.918199][ T53] usb 3-1: not running at top speed; connect to a high speed hub [ 155.926346][ T6023] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 155.940564][ T6023] EXT4-fs (loop0): 1 orphan inode deleted [ 155.949049][ T6023] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,noquota,stripe=0x0000000000000002,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000000,jqfmt=vfsv0,nodelalloc, [ 156.013055][ T53] usb 3-1: config 8 has an invalid interface number: 169 but max is 0 [ 156.032202][ T53] usb 3-1: config 8 has no interface number 0 [ 156.038344][ T53] usb 3-1: config 8 interface 169 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 156.060609][ T53] usb 3-1: config 8 interface 169 has no altsetting 0 [ 156.165341][ T25] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 156.222275][ T53] usb 3-1: New USB device found, idVendor=0eba, idProduct=1080, bcdDevice=3a.9f [ 156.241645][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.260110][ T53] usb 3-1: Product: syz [ 156.268771][ T53] usb 3-1: Manufacturer: syz [ 156.283919][ T53] usb 3-1: SerialNumber: syz [ 156.317484][ T6010] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.327127][ T284] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 156.461374][ T6044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2580'. [ 156.470608][ T6044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2580'. [ 156.555511][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.598590][ T6008] F2FS-fs (loop3): Found nat_bits in checkpoint [ 156.605670][ T53] pl2303 3-1:8.169: required endpoints missing [ 156.616066][ T53] usb 3-1: USB disconnect, device number 59 [ 156.631549][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.647679][ T25] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 156.672135][ T6008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 156.679815][ T284] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xCE, skipping [ 156.812748][ T25] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 156.812759][ T923] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 156.829862][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.838005][ T25] usb 2-1: Product: syz [ 156.842520][ T25] usb 2-1: Manufacturer: syz [ 156.847142][ T25] usb 2-1: SerialNumber: syz [ 156.860445][ T284] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 156.874585][ T284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.882775][ T284] usb 1-1: Product: syz [ 156.886959][ T284] usb 1-1: Manufacturer: syz [ 156.891709][ T284] usb 1-1: SerialNumber: syz [ 156.910743][ T25] usb 2-1: selecting invalid altsetting 1 [ 156.919164][ T25] usb 2-1: unit 6 not found! [ 156.924434][ T25] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 156.932322][ T25] usb 2-1: selecting invalid altsetting 1 [ 156.938316][ T25] usb 2-1: unit 6 not found! [ 156.943362][ T25] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 156.951420][ T25] usb 2-1: selecting invalid altsetting 1 [ 156.957517][ T25] usb 2-1: unit 6 not found! [ 156.962483][ T25] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 157.060319][ T923] usb 5-1: Using ep0 maxpacket: 16 [ 157.079540][ T6061] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 157.109737][ T427] usb 2-1: USB disconnect, device number 52 [ 157.148238][ T6063] loop3: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 157.148342][ T6063] loop3: p2 size 16128 extends beyond EOD, truncated [ 157.244344][ T6063] loop3: p5 size 16128 extends beyond EOD, truncated [ 157.251627][ T6063] loop3: p6 size 16128 extends beyond EOD, truncated [ 157.258893][ T6063] loop3: p7 size 16128 extends beyond EOD, truncated [ 157.266120][ T6063] loop3: p8 size 16128 extends beyond EOD, truncated [ 157.273428][ T6063] loop3: p9 size 16128 extends beyond EOD, truncated [ 157.280687][ T6063] loop3: p10 size 16128 extends beyond EOD, truncated [ 157.287889][ T6063] loop3: p11 size 16128 extends beyond EOD, truncated [ 157.288660][ T923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.300084][ T6063] loop3: p12 size 16128 extends beyond EOD, truncated [ 157.309751][ T6063] loop3: p13 size 16128 extends beyond EOD, truncated [ 157.317502][ T53] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 157.318051][ T6063] loop3: p14 size 16128 extends beyond EOD, truncated [ 157.332566][ T6063] loop3: p15 size 16128 extends beyond EOD, truncated [ 157.339995][ T6063] loop3: p16 size 16128 extends beyond EOD, truncated [ 157.347400][ T6063] loop3: p17 size 16128 extends beyond EOD, truncated [ 157.354738][ T6063] loop3: p18 size 16128 extends beyond EOD, truncated [ 157.362127][ T6063] loop3: p19 size 16128 extends beyond EOD, truncated [ 157.369433][ T284] usb 1-1: MIDIStreaming interface descriptor not found [ 157.371630][ T6063] loop3: p20 size 16128 extends beyond EOD, [ 157.376694][ T923] usb 5-1: config 4 has an invalid interface number: 226 but max is 0 [ 157.377573][ T6063] truncated [ 157.382735][ T923] usb 5-1: config 4 has no interface number 0 [ 157.400213][ T923] usb 5-1: config 4 interface 226 has no altsetting 0 [ 157.407231][ T284] usb 1-1: USB disconnect, device number 54 [ 157.415663][ T6063] loop3: p21 size 16128 extends beyond EOD, truncated [ 157.425087][ T6063] loop3: p22 size 16128 extends beyond EOD, truncated [ 157.432475][ T6063] loop3: p23 size 16128 extends beyond EOD, truncated [ 157.439837][ T6063] loop3: p24 size 16128 extends beyond EOD, truncated [ 157.447492][ T6063] loop3: p25 size 16128 extends beyond EOD, truncated [ 157.455042][ T6063] loop3: p26 size 16128 extends beyond EOD, truncated [ 157.462758][ T6063] loop3: p27 size 16128 extends beyond EOD, truncated [ 157.470378][ T6063] loop3: p28 size 16128 extends beyond EOD, truncated [ 157.477836][ T6063] loop3: p29 size 16128 extends beyond EOD, truncated [ 157.485324][ T6063] loop3: p30 size 16128 extends beyond EOD, truncated [ 157.492873][ T6063] loop3: p31 size 16128 extends beyond EOD, truncated [ 157.500401][ T6063] loop3: p32 size 16128 extends beyond EOD, truncated [ 157.507766][ T6063] loop3: p33 size 16128 extends beyond EOD, truncated [ 157.515086][ T6063] loop3: p34 size 16128 extends beyond EOD, truncated [ 157.522599][ T6063] loop3: p35 size 16128 extends beyond EOD, truncated [ 157.529986][ T6063] loop3: p36 size 16128 extends beyond EOD, truncated [ 157.537372][ T6063] loop3: p37 size 16128 extends beyond EOD, truncated [ 157.544607][ T6063] loop3: p38 size 16128 extends beyond EOD, truncated [ 157.552011][ T6063] loop3: p39 size 16128 extends beyond EOD, truncated [ 157.558912][ T923] usb 5-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=31.01 [ 157.560480][ T6063] loop3: p40 size 16128 extends beyond EOD, [ 157.568198][ T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.568892][ T6063] truncated [ 157.574243][ T923] usb 5-1: Product: syz [ 157.574258][ T923] usb 5-1: Manufacturer: syz [ 157.574351][ T53] usb 3-1: Using ep0 maxpacket: 32 [ 157.585818][ T6063] loop3: p41 size 16128 extends beyond EOD, truncated [ 157.599955][ T923] usb 5-1: SerialNumber: syz [ 157.617714][ T6063] loop3: p42 size 16128 extends beyond EOD, truncated [ 157.625850][ T6063] loop3: p43 size 16128 extends beyond EOD, truncated [ 157.635238][ T6063] loop3: p44 size 16128 extends beyond EOD, truncated [ 157.641334][ T24] audit: type=1400 audit(2000000028.252:203): avc: denied { write } for pid=6065 comm="syz.1.2588" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.665467][ T6063] loop3: p45 size 16128 extends beyond EOD, truncated [ 157.675130][ T24] audit: type=1400 audit(2000000028.252:204): avc: denied { open } for pid=6065 comm="syz.1.2588" path="/dev/input/event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.705249][ T6063] loop3: p46 size 16128 extends beyond EOD, truncated [ 157.717089][ T6063] loop3: p47 size 16128 extends beyond EOD, truncated [ 157.731486][ T6063] loop3: p48 size 16128 extends beyond EOD, truncated [ 157.738950][ T6063] loop3: p49 size 16128 extends beyond EOD, truncated [ 157.746025][ T53] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.757084][ T6063] loop3: p50 size 16128 extends beyond EOD, truncated [ 157.765416][ T53] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 157.776070][ T6063] loop3: p51 size 16128 extends beyond EOD, truncated [ 157.783327][ T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 157.793695][ T6063] loop3: p52 size 16128 extends beyond EOD, truncated [ 157.801243][ T6063] loop3: p53 size 16128 extends beyond EOD, truncated [ 157.808834][ T6063] loop3: p54 size 16128 extends beyond EOD, truncated [ 157.816257][ T6063] loop3: p55 size 16128 extends beyond EOD, truncated [ 157.823648][ T6063] loop3: p56 size 16128 extends beyond EOD, truncated [ 157.831074][ T6063] loop3: p57 size 16128 extends beyond EOD, truncated [ 157.843781][ T6063] loop3: p58 size 16128 extends beyond EOD, truncated [ 157.851587][ T6063] loop3: p59 size 16128 extends beyond EOD, truncated [ 157.859147][ T6063] loop3: p60 size 16128 extends beyond EOD, truncated [ 157.870240][ T6063] loop3: p61 size 16128 extends beyond EOD, truncated [ 157.884400][ T6076] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2592'. [ 157.889727][ T6063] loop3: p62 size 16128 extends beyond EOD, truncated [ 157.908742][ T6063] loop3: p63 size 16128 extends beyond EOD, truncated [ 157.916095][ T6063] loop3: p64 size 16128 extends beyond EOD, truncated [ 157.923662][ T6063] loop3: p65 size 16128 extends beyond EOD, truncated [ 157.950501][ T24] audit: type=1400 audit(2000000028.578:205): avc: denied { write } for pid=6077 comm="syz.0.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.951999][ T6063] loop3: p66 size 16128 extends beyond EOD, [ 157.974330][ T53] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 157.991077][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.001944][ T6080] TCP: TCP_TX_DELAY enabled [ 158.006595][ T53] usb 3-1: Product: syz [ 158.010790][ T53] usb 3-1: Manufacturer: syz [ 158.016713][ T6063] truncated [ 158.020817][ T6063] loop3: p67 size 16128 extends beyond EOD, truncated [ 158.027118][ T53] usb 3-1: SerialNumber: syz [ 158.029330][ T6082] xt_hashlimit: size too large, truncated to 1048576 [ 158.032794][ T24] audit: type=1400 audit(2000000028.662:206): avc: denied { setopt } for pid=6081 comm="syz.0.2595" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.059784][ T6063] loop3: p68 size 16128 extends beyond EOD, truncated [ 158.069915][ T923] uvcvideo: Found UVC 0.00 device syz (05a9:7670) [ 158.076542][ T923] uvcvideo: No valid video chain found. [ 158.083737][ T6063] loop3: p69 size 16128 extends beyond EOD, truncated [ 158.096270][ T923] usb 5-1: USB disconnect, device number 50 [ 158.110085][ T6063] loop3: p70 size 16128 extends beyond EOD, truncated [ 158.125626][ T6063] loop3: p71 size 16128 extends beyond EOD, truncated [ 158.145049][ T6063] loop3: p72 size 16128 extends beyond EOD, truncated [ 158.162274][ T6063] loop3: p73 size 16128 extends beyond EOD, truncated [ 158.171768][ T6063] loop3: p74 size 16128 extends beyond EOD, truncated [ 158.182965][ T6063] loop3: p75 size 16128 extends beyond EOD, truncated [ 158.191058][ T6063] loop3: p76 size 16128 extends beyond EOD, truncated [ 158.199931][ T6063] loop3: p77 size 16128 extends beyond EOD, truncated [ 158.212618][ T6063] loop3: p78 size 16128 extends beyond EOD, truncated [ 158.222716][ T6063] loop3: p79 size 16128 extends beyond EOD, truncated [ 158.230800][ T6063] loop3: p80 size 16128 extends beyond EOD, truncated [ 158.238827][ T6063] loop3: p81 size 16128 extends beyond EOD, truncated [ 158.252869][ T6063] loop3: p82 size 16128 extends beyond EOD, truncated [ 158.260468][ T6063] loop3: p83 size 16128 extends beyond EOD, truncated [ 158.267941][ T6063] loop3: p84 size 16128 extends beyond EOD, truncated [ 158.275435][ T6063] loop3: p85 size 16128 extends beyond EOD, truncated [ 158.282781][ T6063] loop3: p86 size 16128 extends beyond EOD, truncated [ 158.290143][ T6063] loop3: p87 size 16128 extends beyond EOD, truncated [ 158.297488][ T6063] loop3: p88 size 16128 extends beyond EOD, truncated [ 158.304905][ T6063] loop3: p89 size 16128 extends beyond EOD, truncated [ 158.312292][ T6063] loop3: p90 size 16128 extends beyond EOD, truncated [ 158.320174][ T6063] loop3: p91 size 16128 extends beyond EOD, truncated [ 158.327751][ T6063] loop3: p92 size 16128 extends beyond EOD, truncated [ 158.335097][ T6063] loop3: p93 size 16128 extends beyond EOD, truncated [ 158.342691][ T6063] loop3: p94 size 16128 extends beyond EOD, truncated [ 158.350655][ T6063] loop3: p95 size 16128 extends beyond EOD, truncated [ 158.358486][ T6063] loop3: p96 size 16128 extends beyond EOD, truncated [ 158.365784][ T6063] loop3: p97 size 16128 extends beyond EOD, truncated [ 158.373219][ T6063] loop3: p98 size 16128 extends beyond EOD, truncated [ 158.380741][ T6063] loop3: p99 size 16128 extends beyond EOD, truncated [ 158.389178][ T6063] loop3: p100 size 16128 extends beyond EOD, truncated [ 158.396553][ T6063] loop3: p101 size 16128 extends beyond EOD, truncated [ 158.403574][ T311] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 158.412011][ T6063] loop3: p102 size 16128 extends beyond EOD, truncated [ 158.419668][ T6063] loop3: p103 size 16128 extends beyond EOD, truncated [ 158.427232][ T6063] loop3: p104 size 16128 extends beyond EOD, truncated [ 158.435138][ T6063] loop3: p105 size 16128 extends beyond EOD, truncated [ 158.443763][ T6063] loop3: p106 size 16128 extends beyond EOD, truncated [ 158.451422][ T6063] loop3: p107 size 16128 extends beyond EOD, truncated [ 158.458841][ T6063] loop3: p108 size 16128 extends beyond EOD, truncated [ 158.466419][ T425] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 158.474284][ T53] usb 3-1: MIDIStreaming interface descriptor not found [ 158.481883][ T6063] loop3: p109 size 16128 extends beyond EOD, truncated [ 158.491207][ T53] usb 3-1: USB disconnect, device number 60 [ 158.502026][ T6063] loop3: p110 size 16128 extends beyond EOD, truncated [ 158.512626][ T6063] loop3: p111 size 16128 extends beyond EOD, truncated [ 158.527074][ T6063] loop3: p112 size 16128 extends beyond EOD, truncated [ 158.534481][ T6063] loop3: p113 size 16128 extends beyond EOD, truncated [ 158.542224][ T6063] loop3: p114 size 16128 extends beyond EOD, truncated [ 158.551065][ T6063] loop3: p115 size 16128 extends beyond EOD, truncated [ 158.558665][ T6063] loop3: p116 size 16128 extends beyond EOD, truncated [ 158.567700][ T6063] loop3: p117 size 16128 extends beyond EOD, truncated [ 158.577984][ T6063] loop3: p118 size 16128 extends beyond EOD, truncated [ 158.590419][ T6063] loop3: p119 size 16128 extends beyond EOD, truncated [ 158.597885][ T6063] loop3: p120 size 16128 extends beyond EOD, truncated [ 158.605511][ T6063] loop3: p121 size 16128 extends beyond EOD, truncated [ 158.613008][ T6063] loop3: p122 size 16128 extends beyond EOD, truncated [ 158.620605][ T6063] loop3: p123 size 16128 extends beyond EOD, truncated [ 158.632128][ T24] audit: type=1400 audit(2000000029.292:207): avc: denied { create } for pid=6105 comm="syz.4.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.632583][ T6063] loop3: p124 size 16128 extends beyond EOD, truncated [ 158.660980][ T6063] loop3: p125 size 16128 extends beyond EOD, truncated [ 158.668807][ T6063] loop3: p126 size 16128 extends beyond EOD, truncated [ 158.676495][ T24] audit: type=1400 audit(2000000029.323:208): avc: denied { write } for pid=6105 comm="syz.4.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.698484][ T1585] udevd[1585]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.699670][ T6063] loop3: p127 size 16128 extends beyond EOD, truncated [ 158.731140][ T6063] loop3: p128 size 16128 extends beyond EOD, truncated [ 158.741856][ T6063] loop3: p129 size 16128 extends beyond EOD, truncated [ 158.749765][ T6063] loop3: p130 size 16128 extends beyond EOD, truncated [ 158.757764][ T6063] loop3: p131 size 16128 extends beyond EOD, truncated [ 158.766011][ T6063] loop3: p132 size 16128 extends beyond EOD, truncated [ 158.773496][ T6063] loop3: p133 size 16128 extends beyond EOD, truncated [ 158.780486][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.791263][ T6063] loop3: p134 size 16128 extends beyond EOD, truncated [ 158.798239][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.802899][ T6063] loop3: p135 size 16128 extends beyond EOD, [ 158.808018][ T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.808292][ T6063] truncated [ 158.830679][ T6063] loop3: p136 size 16128 extends beyond EOD, truncated [ 158.837734][ T425] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.848239][ T6063] loop3: p137 size 16128 extends beyond EOD, truncated [ 158.857756][ T425] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.868334][ T6063] loop3: p138 size 16128 extends beyond EOD, truncated [ 158.886191][ T6063] loop3: p139 size 16128 extends beyond EOD, truncated [ 158.894502][ T6112] xt_hashlimit: invalid interval [ 158.899183][ T6063] loop3: p140 size 16128 extends beyond EOD, truncated [ 158.906825][ T6063] loop3: p141 size 16128 extends beyond EOD, truncated [ 158.917256][ T6063] loop3: p142 size 16128 extends beyond EOD, truncated [ 158.930132][ T6063] loop3: p143 size 16128 extends beyond EOD, truncated [ 158.953832][ T6063] loop3: p144 size 16128 extends beyond EOD, truncated [ 158.962528][ T6063] loop3: p145 size 16128 extends beyond EOD, truncated [ 158.970084][ T6063] loop3: p146 size 16128 extends beyond EOD, truncated [ 158.981378][ T6063] loop3: p147 size 16128 extends beyond EOD, truncated [ 158.988923][ T6063] loop3: p148 size 16128 extends beyond EOD, truncated [ 158.993184][ T311] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 158.998047][ T6063] loop3: p149 size 16128 extends beyond EOD, truncated [ 159.008532][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.027021][ T311] usb 1-1: Product: syz [ 159.031531][ T425] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 159.040680][ T425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.045135][ T311] usb 1-1: Manufacturer: syz [ 159.053460][ T311] usb 1-1: SerialNumber: syz [ 159.057987][ T6063] loop3: p150 size 16128 extends beyond EOD, truncated [ 159.069738][ T6063] loop3: p151 size 16128 extends beyond EOD, truncated [ 159.079559][ T24] audit: type=1400 audit(2000000029.764:209): avc: granted { setsecparam } for pid=6119 comm="syz.2.2614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 159.084479][ T6063] loop3: p152 size 16128 extends beyond EOD, truncated [ 159.106937][ T425] usb 2-1: Product: syz [ 159.110629][ T6063] loop3: p153 size 16128 extends beyond EOD, truncated [ 159.120442][ T425] usb 2-1: Manufacturer: syz [ 159.124867][ T6063] loop3: p154 size 16128 extends beyond EOD, truncated [ 159.125618][ T425] usb 2-1: SerialNumber: syz [ 159.141421][ T6063] loop3: p155 size 16128 extends beyond EOD, truncated [ 159.149373][ T6063] loop3: p156 size 16128 extends beyond EOD, truncated [ 159.157332][ T6063] loop3: p157 size 16128 extends beyond EOD, truncated [ 159.165407][ T6063] loop3: p158 size 16128 extends beyond EOD, truncated [ 159.174674][ T425] ums-karma 2-1:1.0: USB Mass Storage device detected [ 159.177531][ T6126] syz.2.2617 (6126): /proc/6125/oom_adj is deprecated, please use /proc/6125/oom_score_adj instead. [ 159.183041][ T6063] loop3: p159 size 16128 extends beyond EOD, truncated [ 159.201141][ T6063] loop3: p160 size 16128 extends beyond EOD, truncated [ 159.208616][ T425] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 159.208616][ T425] Please send a copy of this message to and [ 159.240606][ T6063] loop3: p161 size 16128 extends beyond EOD, truncated [ 159.248633][ T6063] loop3: p162 size 16128 extends beyond EOD, truncated [ 159.256386][ T6063] loop3: p163 size 16128 extends beyond EOD, truncated [ 159.265345][ T6063] loop3: p164 size 16128 extends beyond EOD, truncated [ 159.274121][ T6063] loop3: p165 size 16128 extends beyond EOD, truncated [ 159.282088][ T425] ums-karma: probe of 2-1:1.0 failed with error -5 [ 159.284453][ T6063] loop3: p166 size 16128 extends beyond EOD, truncated [ 159.296158][ T6063] loop3: p167 size 16128 extends beyond EOD, truncated [ 159.303704][ T6063] loop3: p168 size 16128 extends beyond EOD, truncated [ 159.312894][ T6063] loop3: p169 size 16128 extends beyond EOD, truncated [ 159.320401][ T6063] loop3: p170 size 16128 extends beyond EOD, truncated [ 159.328043][ T6063] loop3: p171 size 16128 extends beyond EOD, truncated [ 159.335431][ T6063] loop3: p172 size 16128 extends beyond EOD, truncated [ 159.343058][ T6063] loop3: p173 size 16128 extends beyond EOD, truncated [ 159.350508][ T6063] loop3: p174 size 16128 extends beyond EOD, truncated [ 159.357945][ T6063] loop3: p175 size 16128 extends beyond EOD, truncated [ 159.365687][ T6063] loop3: p176 size 16128 extends beyond EOD, truncated [ 159.373309][ T6063] loop3: p177 size 16128 extends beyond EOD, truncated [ 159.380687][ T425] usb 2-1: USB disconnect, device number 53 [ 159.381922][ T6063] loop3: p178 size 16128 extends beyond EOD, truncated [ 159.394714][ T923] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 159.403001][ T6063] loop3: p179 size 16128 extends beyond EOD, truncated [ 159.410555][ T6063] loop3: p180 size 16128 extends beyond EOD, truncated [ 159.417990][ T6063] loop3: p181 size 16128 extends beyond EOD, truncated [ 159.425281][ T311] snd-usb-audio: probe of 1-1:1.0 failed with error -12 [ 159.426250][ T6063] loop3: p182 size 16128 extends beyond EOD, [ 159.433177][ T311] usb 1-1: USB disconnect, device number 55 [ 159.442659][ T6063] truncated [ 159.449928][ T6063] loop3: p183 size 16128 extends beyond EOD, truncated [ 159.457366][ T6063] loop3: p184 size 16128 extends beyond EOD, truncated [ 159.465209][ T6063] loop3: p185 size 16128 extends beyond EOD, truncated [ 159.472804][ T6063] loop3: p186 size 16128 extends beyond EOD, truncated [ 159.480677][ T6063] loop3: p187 size 16128 extends beyond EOD, truncated [ 159.488111][ T6063] loop3: p188 size 16128 extends beyond EOD, truncated [ 159.495559][ T6063] loop3: p189 size 16128 extends beyond EOD, truncated [ 159.503040][ T6063] loop3: p190 size 16128 extends beyond EOD, truncated [ 159.510764][ T6063] loop3: p191 size 16128 extends beyond EOD, truncated [ 159.518664][ T6063] loop3: p192 size 16128 extends beyond EOD, truncated [ 159.526141][ T6063] loop3: p193 size 16128 extends beyond EOD, truncated [ 159.533576][ T6063] loop3: p194 size 16128 extends beyond EOD, truncated [ 159.540977][ T6063] loop3: p195 size 16128 extends beyond EOD, truncated [ 159.548448][ T6063] loop3: p196 size 16128 extends beyond EOD, truncated [ 159.555890][ T6063] loop3: p197 size 16128 extends beyond EOD, truncated [ 159.563231][ T6063] loop3: p198 size 16128 extends beyond EOD, truncated [ 159.570662][ T6063] loop3: p199 size 16128 extends beyond EOD, truncated [ 159.578219][ T6063] loop3: p200 size 16128 extends beyond EOD, truncated [ 159.585639][ T6063] loop3: p201 size 16128 extends beyond EOD, truncated [ 159.593168][ T6063] loop3: p202 size 16128 extends beyond EOD, truncated [ 159.600475][ T6063] loop3: p203 size 16128 extends beyond EOD, truncated [ 159.608045][ T6063] loop3: p204 size 16128 extends beyond EOD, truncated [ 159.615552][ T6063] loop3: p205 size 16128 extends beyond EOD, truncated [ 159.623165][ T6063] loop3: p206 size 16128 extends beyond EOD, truncated [ 159.632263][ T6063] loop3: p207 size 16128 extends beyond EOD, truncated [ 159.641783][ T6063] loop3: p208 size 16128 extends beyond EOD, truncated [ 159.649297][ T6063] loop3: p209 size 16128 extends beyond EOD, truncated [ 159.656716][ T6063] loop3: p210 size 16128 extends beyond EOD, truncated [ 159.664139][ T6063] loop3: p211 size 16128 extends beyond EOD, truncated [ 159.671538][ T6063] loop3: p212 size 16128 extends beyond EOD, truncated [ 159.679073][ T6063] loop3: p213 size 16128 extends beyond EOD, truncated [ 159.686546][ T6063] loop3: p214 size 16128 extends beyond EOD, truncated [ 159.694004][ T6063] loop3: p215 size 16128 extends beyond EOD, truncated [ 159.701443][ T6063] loop3: p216 size 16128 extends beyond EOD, truncated [ 159.708886][ T6063] loop3: p217 size 16128 extends beyond EOD, truncated [ 159.716230][ T6063] loop3: p218 size 16128 extends beyond EOD, truncated [ 159.723769][ T6063] loop3: p219 size 16128 extends beyond EOD, truncated [ 159.731364][ T6063] loop3: p220 size 16128 extends beyond EOD, truncated [ 159.738920][ T6063] loop3: p221 size 16128 extends beyond EOD, truncated [ 159.745246][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.748077][ T6063] loop3: p222 size 16128 extends beyond EOD, truncated [ 159.757766][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.767255][ T6063] loop3: p223 size 16128 extends beyond EOD, [ 159.774318][ T923] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 159.783973][ T6063] truncated [ 159.790078][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.797497][ T6063] loop3: p224 size 16128 extends beyond EOD, truncated [ 159.808074][ T6063] loop3: p225 size 16128 extends beyond EOD, truncated [ 159.818155][ T6063] loop3: p226 size 16128 extends beyond EOD, truncated [ 159.818975][ T923] usb 5-1: config 0 descriptor?? [ 159.847388][ T6063] loop3: p227 size 16128 extends beyond EOD, truncated [ 159.855226][ T6063] loop3: p228 size 16128 extends beyond EOD, truncated [ 159.873564][ T6063] loop3: p229 size 16128 extends beyond EOD, truncated [ 159.881138][ T923] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 159.897624][ T923] usbhid 5-1:0.0: can't add hid device: -22 [ 159.899008][ T6063] loop3: p230 size 16128 extends beyond EOD, truncated [ 159.910551][ T923] usbhid: probe of 5-1:0.0 failed with error -22 [ 159.925534][ T6141] capability: warning: `syz.0.2623' uses deprecated v2 capabilities in a way that may be insecure [ 159.954407][ T6063] loop3: p231 size 16128 extends beyond EOD, truncated [ 159.983710][ T6063] loop3: p232 size 16128 extends beyond EOD, truncated [ 160.003943][ T6063] loop3: p233 size 16128 extends beyond EOD, truncated [ 160.011960][ T24] audit: type=1400 audit(2000000030.741:210): avc: denied { getopt } for pid=6153 comm="syz.0.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.035228][ T6063] loop3: p234 size 16128 extends beyond EOD, truncated [ 160.058821][ T6063] loop3: p235 size 16128 extends beyond EOD, truncated [ 160.072704][ T6063] loop3: p236 size 16128 extends beyond EOD, truncated [ 160.088419][ T24] audit: type=1326 audit(2000000030.825:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.1.2633" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf9af10d9 code=0x7ffc0000 [ 160.116227][ T6063] loop3: p237 size 16128 extends beyond EOD, truncated [ 160.126716][ T923] usb 5-1: USB disconnect, device number 51 [ 160.134000][ T6063] loop3: p238 size 16128 extends beyond EOD, truncated [ 160.144975][ T24] audit: type=1326 audit(2000000030.825:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.1.2633" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf9af10d9 code=0x7ffc0000 [ 160.174648][ T6063] loop3: p239 size 16128 extends beyond EOD, truncated [ 160.187307][ T6063] loop3: p240 size 16128 extends beyond EOD, truncated [ 160.204064][ T6063] loop3: p241 size 16128 extends beyond EOD, truncated [ 160.223427][ T6063] loop3: p242 size 16128 extends beyond EOD, truncated [ 160.233591][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2636'. [ 160.259780][ T6063] loop3: p243 size 16128 extends beyond EOD, truncated [ 160.272221][ T6063] loop3: p244 size 16128 extends beyond EOD, truncated [ 160.290133][ T6168] usb usb9: usbfs: process 6168 (syz.2.2638) did not claim interface 0 before use [ 160.306605][ T6063] loop3: p245 size 16128 extends beyond EOD, truncated [ 160.334630][ T6063] loop3: p246 size 16128 extends beyond EOD, truncated [ 160.356774][ T6063] loop3: p247 size 16128 extends beyond EOD, truncated [ 160.381471][ T6063] loop3: p248 size 16128 extends beyond EOD, truncated [ 160.396725][ T6063] loop3: p249 size 16128 extends beyond EOD, truncated [ 160.418159][ T6063] loop3: p250 size 16128 extends beyond EOD, truncated [ 160.427817][ T6063] loop3: p251 size 16128 extends beyond EOD, truncated [ 160.453215][ T6063] loop3: p252 size 16128 extends beyond EOD, truncated [ 160.479047][ T6063] loop3: p253 size 16128 extends beyond EOD, truncated [ 160.507598][ T6063] loop3: p254 size 16128 extends beyond EOD, truncated [ 160.517986][ T6063] loop3: p255 size 16128 extends beyond EOD, truncated [ 160.550604][ T6180] xt_hashlimit: max too large, truncated to 1048576 [ 160.700432][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2649'. [ 160.830611][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 161.160542][ T6214] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 161.278714][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.383182][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.408461][ T25] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.433472][ T25] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 161.468737][ T25] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 161.540642][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 161.564999][ T25] usb 3-1: config 1 interface 1 has no altsetting 0 [ 161.840259][ T25] usb 3-1: string descriptor 0 read error: -22 [ 161.849484][ T25] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 161.878272][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.106008][ T1583] udevd[1583]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 162.149468][ T1585] udevd[1585]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 162.166896][ T385] udevd[385]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 162.185864][ T384] udevd[384]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 162.199141][ T327] udevd[327]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 162.252634][ T1587] udevd[1587]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 162.280818][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 162.310170][ T526] udevd[526]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 162.321112][ T1586] udevd[1586]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory [ 162.363796][ T25] usb 3-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4 [ 162.388379][ T25] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 162.415148][ T24] kauditd_printk_skb: 294 callbacks suppressed [ 162.415164][ T24] audit: type=1400 audit(2000000033.262:507): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.417179][ T25] usb 3-1: USB disconnect, device number 61 [ 162.430501][ T24] audit: type=1400 audit(2000000033.262:508): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.531981][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 162.536849][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.583308][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.593746][ T24] audit: type=1400 audit(2000000033.304:509): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.706572][ T24] audit: type=1400 audit(2000000033.377:510): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.772723][ T24] audit: type=1400 audit(2000000033.377:511): avc: denied { read write open } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.827666][ T24] audit: type=1400 audit(2000000033.377:512): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.944491][ T24] audit: type=1400 audit(2000000033.388:513): avc: denied { create } for pid=6284 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.021358][ T24] audit: type=1400 audit(2000000033.388:514): avc: denied { write } for pid=6284 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.051607][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 163.089554][ T24] audit: type=1400 audit(2000000033.419:515): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.130378][ T279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.552982][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 163.610818][ T6353] erofs: (device loop3): mounted with root inode @ nid 36. [ 163.629671][ T1583] udevd[1583]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory [ 163.779619][ T710] udevd[710]: inotify_add_watch(7, /dev/loop3p22, 10) failed: No such file or directory [ 163.784315][ T1585] udevd[1585]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory [ 163.818853][ T1584] udevd[1584]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 163.829206][ T385] udevd[385]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 163.842169][ T327] udevd[327]: inotify_add_watch(7, /dev/loop3p19, 10) failed: No such file or directory [ 163.854849][ T384] udevd[384]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 163.855920][ T526] udevd[526]: inotify_add_watch(7, /dev/loop3p20, 10) failed: No such file or directory [ 163.880070][ T1586] udevd[1586]: inotify_add_watch(7, /dev/loop3p24, 10) failed: No such file or directory [ 163.893407][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p21, 10) failed: No such file or directory [ 163.972699][ T6365] xt_CONNSECMARK: invalid mode: 66 [ 164.146281][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2740'. [ 164.449597][ T6391] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 164.485652][ T6404] x_tables: duplicate entry at hook 2 [ 164.707067][ T6417] overlayfs: unrecognized mount option "\" or missing value [ 165.680052][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 165.699254][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 165.709453][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2793'. [ 165.773545][ T6491] FAT-fs (loop0): Directory bread(block 64) failed [ 165.783132][ T6491] FAT-fs (loop0): Directory bread(block 65) failed [ 165.789781][ T6491] FAT-fs (loop0): Directory bread(block 66) failed [ 165.796635][ T6491] FAT-fs (loop0): Directory bread(block 67) failed [ 165.803435][ T6491] FAT-fs (loop0): Directory bread(block 68) failed [ 165.810068][ T6491] FAT-fs (loop0): Directory bread(block 69) failed [ 165.816716][ T6491] FAT-fs (loop0): Directory bread(block 70) failed [ 165.823353][ T6491] FAT-fs (loop0): Directory bread(block 71) failed [ 165.830025][ T6491] FAT-fs (loop0): Directory bread(block 72) failed [ 165.836639][ T6491] FAT-fs (loop0): Directory bread(block 73) failed [ 166.189539][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2809'. [ 166.211508][ T6521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.518525][ T6515] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 166.535843][ T6515] FAT-fs (loop1): Filesystem has been set read-only [ 166.577385][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 166.886445][ T6549] ------------[ cut here ]------------ [ 166.891958][ T6549] trace type BPF program uses run-time allocation [ 166.936623][ T6551] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2823'. [ 166.946935][ T6549] WARNING: CPU: 1 PID: 6549 at kernel/bpf/verifier.c:10518 check_map_prog_compatibility+0x5d8/0x740 [ 166.981918][ T6551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.990882][ T6549] Modules linked in: [ 167.028401][ T6549] CPU: 0 PID: 6549 Comm: syz.2.2820 Tainted: G W syzkaller #0 [ 167.052430][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.085832][ T6549] RIP: 0010:check_map_prog_compatibility+0x5d8/0x740 [ 167.100521][ T6549] Code: 85 e9 14 fe ff ff e8 07 dc ef ff 31 c0 e9 15 fe ff ff e8 fb db ef ff c6 05 65 c7 4b 05 01 48 c7 c7 c0 d9 25 85 e8 88 21 04 03 <0f> 0b e9 7d fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fa ff [ 167.171963][ T6549] RSP: 0018:ffffc90000e27430 EFLAGS: 00010246 [ 167.185989][ T24] kauditd_printk_skb: 572 callbacks suppressed [ 167.186002][ T24] audit: type=1400 audit(2000000038.272:1059): avc: denied { create } for pid=6557 comm="syz.3.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.228448][ T6549] RAX: e1c3dfe93a59f700 RBX: 0000000000000001 RCX: 0000000000080000 [ 167.246916][ T6549] RDX: ffffc900024ef000 RSI: 000000000001cfae RDI: 000000000001cfaf [ 167.261210][ T6549] RBP: ffffc90000e27470 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 167.270334][ T24] audit: type=1400 audit(2000000038.282:1060): avc: denied { write } for pid=6557 comm="syz.3.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.295555][ T6549] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: ffff888110fd4000 [ 167.313712][ T6549] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888105f99000 [ 167.350618][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 167.362029][ T24] audit: type=1400 audit(2000000038.335:1061): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.391423][ T6549] FS: 00007fc417d2d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 167.422778][ T6549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.494115][ T6549] CR2: 00007f21fd925060 CR3: 000000012830b000 CR4: 00000000003506b0 [ 167.536067][ T24] audit: type=1400 audit(2000000038.335:1062): avc: denied { read write open } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.561819][ T6549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.600428][ T6549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.608622][ T6549] Call Trace: [ 167.623652][ T24] audit: type=1400 audit(2000000038.335:1063): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.638704][ T6549] ? __fdget+0x1a1/0x230 [ 167.695646][ T6549] resolve_pseudo_ldimm64+0x557/0x10b0 [ 167.701313][ T6549] ? bpf_check+0xdce0/0xdce0 [ 167.707658][ T24] audit: type=1400 audit(2000000038.387:1064): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.740272][ T24] audit: type=1400 audit(2000000038.461:1065): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.743401][ T6549] ? kvmalloc_node+0x88/0x130 [ 167.779916][ T24] audit: type=1400 audit(2000000038.461:1066): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.831859][ T6580] netlink: 'syz.0.2837': attribute type 1 has an invalid length. [ 167.839881][ T24] audit: type=1400 audit(2000000038.513:1067): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.867271][ T6549] bpf_check+0x91f9/0xdce0 [ 167.871733][ T6549] ? get_page_from_freelist+0x225f/0x23f0 [ 167.920739][ T6549] ? __alloc_pages_nodemask+0x29a/0x640 [ 167.926358][ T24] audit: type=1400 audit(2000000038.513:1068): avc: denied { read write open } for pid=281 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.051633][ T6549] ? bpf_get_btf_vmlinux+0x60/0x60 [ 168.076424][ T6549] ? is_bpf_text_address+0x177/0x190 [ 168.092160][ T6549] ? selinux_bpf_prog_alloc+0x51/0x140 [ 168.097928][ T6549] ? __kernel_text_address+0xa0/0x100 [ 168.121883][ T6549] ? unwind_get_return_address+0x4d/0x90 [ 168.147602][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.152795][ T6549] ? stack_trace_save+0xf0/0xf0 [ 168.171750][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.184535][ T6549] ? arch_stack_walk+0xee/0x140 [ 168.189421][ T6549] ? stack_trace_save+0xa6/0xf0 [ 168.210011][ T6549] ? stack_trace_snprint+0xe0/0xe0 [ 168.216907][ T6549] ? selinux_bpf_prog_alloc+0x51/0x140 [ 168.222818][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.238278][ T6549] ? selinux_bpf_prog_alloc+0x51/0x140 [ 168.243793][ T6549] ? __kasan_kmalloc+0xe6/0x100 [ 168.248797][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.276530][ T6549] ? __kasan_kmalloc+0xd4/0x100 [ 168.281450][ T6549] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 168.285179][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.289542][ T6549] ? selinux_bpf_prog_alloc+0x51/0x140 [ 168.301473][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.314848][ T6549] ? security_bpf_prog_alloc+0x62/0x90 [ 168.314894][ T6549] ? bpf_prog_load+0x9fa/0x14e0 [ 168.320700][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.331464][ T6549] ? __se_sys_bpf+0x49a/0x740 [ 168.352604][ T6549] ? __x64_sys_bpf+0x7b/0x90 [ 168.357264][ T6549] ? do_syscall_64+0x31/0x40 [ 168.361885][ T6549] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 168.368131][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.390740][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 168.399790][ T6549] ? memset+0x35/0x40 [ 168.403814][ T6549] ? bpf_obj_name_cpy+0x193/0x1e0 [ 168.408860][ T6549] bpf_prog_load+0x1004/0x14e0 [ 168.429175][ T6549] ? avc_has_perm+0x215/0x3d0 [ 168.435748][ T6549] ? map_freeze+0x330/0x330 [ 168.466879][ T6549] ? selinux_bpf+0xc7/0xf0 [ 168.472119][ T6549] ? security_bpf+0x82/0xa0 [ 168.495456][ T6549] __se_sys_bpf+0x49a/0x740 [ 168.500028][ T6549] ? __x64_sys_bpf+0x90/0x90 [ 168.504871][ T6549] ? __kasan_check_read+0x11/0x20 [ 168.529507][ T6549] __x64_sys_bpf+0x7b/0x90 [ 168.548013][ T6549] do_syscall_64+0x31/0x40 [ 168.562087][ T6549] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 168.590657][ T6549] RIP: 0033:0x7fc4192d40d9 [ 168.595180][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.667621][ T6549] RSP: 002b:00007fc417d2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.676122][ T6549] RAX: ffffffffffffffda RBX: 00007fc41955bfa0 RCX: 00007fc4192d40d9 [ 168.695418][ T6549] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 168.714606][ T6549] RBP: 00007fc41936b024 R08: 0000000000000000 R09: 0000000000000000 [ 168.722642][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.738410][ T6619] netlink: 'syz.3.2855': attribute type 11 has an invalid length. [ 168.758117][ T6621] usb usb8: usbfs: process 6621 (syz.1.2857) did not claim interface 0 before use [ 168.772372][ T6549] R13: 00007fc41955c038 R14: 00007fc41955bfa0 R15: 00007ffccb6a6438 [ 168.780395][ T6549] ---[ end trace c60a6849d6a7e9bf ]--- [ 168.800196][ T923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.865582][ T1583] udevd[1583]: inotify_add_watch(7, /dev/loop3p63, 10) failed: No such file or directory [ 168.903144][ T1587] udevd[1587]: inotify_add_watch(7, /dev/loop3p66, 10) failed: No such file or directory [ 168.931470][ T526] udevd[526]: inotify_add_watch(7, /dev/loop3p68, 10) failed: No such file or directory [ 168.946545][ T1585] udevd[1585]: inotify_add_watch(7, /dev/loop3p65, 10) failed: No such file or directory [ 168.965211][ T327] udevd[327]: inotify_add_watch(7, /dev/loop3p67, 10) failed: No such file or directory [ 168.990409][ T1584] udevd[1584]: inotify_add_watch(7, /dev/loop3p74, 10) failed: No such file or directory [ 169.007751][ T384] udevd[384]: inotify_add_watch(7, /dev/loop3p71, 10) failed: No such file or directory [ 169.028968][ T385] udevd[385]: inotify_add_watch(7, /dev/loop3p64, 10) failed: No such file or directory [ 169.041777][ T710] udevd[710]: inotify_add_watch(7, /dev/loop3p70, 10) failed: No such file or directory [ 169.059943][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p69, 10) failed: No such file or directory [ 169.291207][ T6647] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.423083][ T6659] device bridge_slave_1 left promiscuous mode [ 169.438225][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.460640][ T6659] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 169.494182][ T6665] netlink: 'syz.1.2875': attribute type 10 has an invalid length. [ 169.718044][ T6679] ipt_REJECT: TCP_RESET invalid for non-tcp [ 170.927569][ T6762] netlink: 'syz.4.2926': attribute type 12 has an invalid length. [ 171.848802][ T6803] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 171.891194][ T6811] netlink: 'syz.4.2948': attribute type 24 has an invalid length. [ 171.922677][ T6803] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue [ 171.954840][ T24] kauditd_printk_skb: 481 callbacks suppressed [ 171.954856][ T24] audit: type=1400 audit(2000000043.281:1550): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.971615][ T6803] ext4 filesystem being mounted at /606/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.037859][ T6815] ip_tables: iptables: counters copy to user failed while replacing table [ 172.103629][ T24] audit: type=1400 audit(2000000043.292:1551): avc: denied { mount } for pid=6801 comm="syz.1.2944" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 172.163792][ T6803] EXT4-fs error (device loop1): __ext4_new_inode:1079: comm syz.1.2944: reserved inode found cleared - inode=1 [ 172.183453][ T24] audit: type=1400 audit(2000000043.344:1552): avc: denied { read write open } for pid=281 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.274776][ T24] audit: type=1400 audit(2000000043.344:1553): avc: denied { ioctl } for pid=281 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.380053][ T24] audit: type=1400 audit(2000000043.418:1554): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.454523][ T24] audit: type=1400 audit(2000000043.418:1555): avc: denied { read write open } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.521515][ T24] audit: type=1400 audit(2000000043.418:1556): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.599370][ T24] audit: type=1400 audit(2000000043.428:1557): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.642005][ T24] audit: type=1400 audit(2000000043.428:1558): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.667376][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.692482][ T24] audit: type=1400 audit(2000000043.428:1559): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.718878][ T6837] erofs: (device loop3): mounted with root inode @ nid 36. [ 172.933075][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.940525][ T6851] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 173.192412][ T6873] __nla_validate_parse: 16 callbacks suppressed [ 173.192421][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 173.325314][ T6885] netlink: 'syz.4.2982': attribute type 16 has an invalid length. [ 173.360814][ T6885] netlink: 'syz.4.2982': attribute type 17 has an invalid length. [ 173.721891][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.946023][ T6906] xt_TCPMSS: Only works on TCP SYN packets [ 174.118257][ T6910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2994'. [ 174.141373][ T6910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2994'. [ 174.344631][ T6924] netlink: 'syz.4.3001': attribute type 8 has an invalid length. [ 174.663708][ T1583] udevd[1583]: inotify_add_watch(7, /dev/loop3p111, 10) failed: No such file or directory [ 174.678571][ T385] udevd[385]: inotify_add_watch(7, /dev/loop3p112, 10) failed: No such file or directory [ 174.682214][ T1587] udevd[1587]: inotify_add_watch(7, /dev/loop3p114, 10) failed: No such file or directory [ 174.699953][ T1585] udevd[1585]: inotify_add_watch(7, /dev/loop3p113, 10) failed: No such file or directory [ 174.765392][ T526] udevd[526]: inotify_add_watch(7, /dev/loop3p116, 10) failed: No such file or directory [ 174.766725][ T327] udevd[327]: inotify_add_watch(7, /dev/loop3p115, 10) failed: No such file or directory [ 174.794927][ T303] udevd[303]: inotify_add_watch(7, /dev/loop3p121, 10) failed: No such file or directory [ 174.814850][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p117, 10) failed: No such file or directory [ 174.830232][ T1586] udevd[1586]: inotify_add_watch(7, /dev/loop3p120, 10) failed: No such file or directory [ 174.846408][ T1584] udevd[1584]: inotify_add_watch(7, /dev/loop3p122, 10) failed: No such file or directory [ 175.050220][ T6959] device xfrm0 entered promiscuous mode [ 175.174431][ T6971] x_tables: unsorted underflow at hook 4 [ 175.287556][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3028'. [ 175.475049][ T6994] kernel profiling enabled (shift: 63) [ 175.503338][ T6994] profiling shift: 63 too large [ 175.695967][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 175.799607][ T7020] netlink: 'syz.1.3048': attribute type 9 has an invalid length. [ 175.810557][ T7020] netlink: 'syz.1.3048': attribute type 7 has an invalid length. [ 175.818933][ T7020] netlink: 'syz.1.3048': attribute type 8 has an invalid length. [ 176.124854][ T7038] device gretap1 entered promiscuous mode [ 176.162739][ T7033] EXT4-fs (loop1): Ignoring removed oldalloc option [ 176.195843][ T7033] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 176.244324][ T7047] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.252176][ T7047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.259446][ T7047] IPv6: NLM_F_CREATE should be set when creating new route [ 176.266689][ T7047] IPv6: NLM_F_CREATE should be set when creating new route [ 176.280892][ T7033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 176.293840][ T7033] EXT4-fs (loop1): orphan cleanup on readonly fs [ 176.300225][ T7033] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.3054: bad orphan inode 267 [ 176.385874][ T7033] EXT4-fs (loop1): Remounting filesystem read-only [ 176.397795][ T7033] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime [ 176.439761][ T7033] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.3054: dx entry: limit 0 != root limit 125 [ 176.464469][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3065'. [ 176.503031][ T7033] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.3054: Corrupt directory, running e2fsck is recommended [ 176.511815][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3065'. [ 176.560774][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3065'. [ 176.570980][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3065'. [ 176.580196][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3065'. [ 176.722209][ T24] kauditd_printk_skb: 461 callbacks suppressed [ 176.722224][ T24] audit: type=1400 audit(2000000048.291:2021): avc: denied { read write open } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.799033][ T7072] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 176.825356][ T24] audit: type=1400 audit(2000000048.291:2022): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.912102][ T24] audit: type=1400 audit(2000000048.323:2023): avc: denied { read write } for pid=280 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.985553][ T24] audit: type=1400 audit(2000000048.323:2024): avc: denied { read write open } for pid=280 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.054957][ T24] audit: type=1400 audit(2000000048.323:2025): avc: denied { ioctl } for pid=280 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.140041][ T24] audit: type=1400 audit(2000000048.333:2026): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.238698][ T24] audit: type=1400 audit(2000000048.333:2027): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.328292][ T24] audit: type=1400 audit(2000000048.333:2028): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.412108][ T24] audit: type=1400 audit(2000000048.333:2029): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.478847][ T24] audit: type=1400 audit(2000000048.333:2030): avc: denied { read write open } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.024916][ T7138] __nla_validate_parse: 15 callbacks suppressed [ 178.024927][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'. [ 178.540537][ T7181] netlink: 'syz.1.3127': attribute type 15 has an invalid length. [ 178.723512][ T7196] device veth0 entered promiscuous mode [ 178.902194][ T425] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 179.037558][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'. [ 179.151702][ T7219] device syz_tun entered promiscuous mode [ 179.169492][ T7219] syz_tun: refused to change device tx_queue_len [ 179.176049][ T7219] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 179.283526][ T425] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.350337][ T425] usb 5-1: not running at top speed; connect to a high speed hub [ 179.426335][ T425] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.450841][ T425] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.473499][ T425] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.511673][ T425] usb 5-1: config 1 interface 0 has no altsetting 1 [ 179.518323][ T425] usb 5-1: config 1 interface 1 has no altsetting 0 [ 179.693048][ T425] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 179.717455][ T425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.737117][ T425] usb 5-1: Product: syz [ 179.748284][ T425] usb 5-1: Manufacturer: syz [ 179.758892][ T425] usb 5-1: SerialNumber: syz [ 180.015031][ T526] udevd[526]: inotify_add_watch(7, /dev/loop3p164, 10) failed: No such file or directory [ 180.028247][ T1585] udevd[1585]: inotify_add_watch(7, /dev/loop3p161, 10) failed: No such file or directory [ 180.029316][ T1587] udevd[1587]: inotify_add_watch(7, /dev/loop3p162, 10) failed: No such file or directory [ 180.056252][ T385] udevd[385]: inotify_add_watch(7, /dev/loop3p160, 10) failed: No such file or directory [ 180.064642][ T1586] udevd[1586]: inotify_add_watch(7, /dev/loop3p168, 10) failed: No such file or directory [ 180.078710][ T1583] udevd[1583]: inotify_add_watch(7, /dev/loop3p159, 10) failed: No such file or directory [ 180.091230][ T425] usb 5-1: selecting invalid altsetting 0 [ 180.095482][ T303] udevd[303]: inotify_add_watch(7, /dev/loop3p169, 10) failed: No such file or directory [ 180.118042][ T384] udevd[384]: inotify_add_watch(7, /dev/loop3p167, 10) failed: No such file or directory [ 180.146101][ T710] udevd[710]: inotify_add_watch(7, /dev/loop3p166, 10) failed: No such file or directory [ 180.158722][ T425] usb 5-1: USB disconnect, device number 52 [ 180.158869][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p165, 10) failed: No such file or directory [ 180.191819][ T7267] FAT-fs (loop1): Directory bread(block 64) failed [ 180.209263][ T7267] FAT-fs (loop1): Directory bread(block 65) failed [ 180.223585][ T7274] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3173'. [ 180.244478][ T7267] FAT-fs (loop1): Directory bread(block 66) failed [ 180.271590][ T7267] FAT-fs (loop1): Directory bread(block 67) failed [ 180.294736][ T7267] FAT-fs (loop1): Directory bread(block 68) failed [ 180.311375][ T7267] FAT-fs (loop1): Directory bread(block 69) failed [ 180.317973][ T7267] FAT-fs (loop1): Directory bread(block 70) failed [ 180.340180][ T7267] FAT-fs (loop1): Directory bread(block 71) failed [ 180.358658][ T7267] FAT-fs (loop1): Directory bread(block 72) failed [ 180.365472][ T7267] FAT-fs (loop1): Directory bread(block 73) failed [ 180.635333][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3179'. [ 180.817026][ T7302] syz.1.3186 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.958418][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.506767][ T24] kauditd_printk_skb: 472 callbacks suppressed [ 181.506783][ T24] audit: type=1400 audit(2000000053.312:2503): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.642788][ T7341] netlink: 'syz.0.3207': attribute type 3 has an invalid length. [ 181.671270][ T24] audit: type=1400 audit(2000000053.364:2504): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.690853][ T7341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3207'. [ 181.759109][ T24] audit: type=1400 audit(2000000053.469:2505): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.807689][ T24] audit: type=1400 audit(2000000053.469:2506): avc: denied { read write open } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.834974][ T24] audit: type=1400 audit(2000000053.469:2507): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.862205][ T24] audit: type=1400 audit(2000000053.543:2508): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.869975][ T7279] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 181.889652][ T24] audit: type=1400 audit(2000000053.543:2509): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.920548][ T24] audit: type=1400 audit(2000000053.543:2510): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.947027][ T24] audit: type=1400 audit(2000000053.564:2511): avc: denied { read write } for pid=7277 comm="syz.2.3176" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.976143][ T7279] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 181.991276][ T24] audit: type=1400 audit(2000000053.564:2512): avc: denied { read write open } for pid=7277 comm="syz.2.3176" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.019680][ T7279] F2FS-fs (loop2): invalid crc value [ 182.061079][ T7356] netlink: 'syz.1.3213': attribute type 11 has an invalid length. [ 182.069796][ T7279] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.101161][ T7363] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3215'. [ 182.227554][ T7279] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.253425][ T7279] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 182.490611][ T7387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3226'. [ 182.510336][ T7387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.518679][ T7387] IPv6: NLM_F_CREATE should be set when creating new route [ 182.525945][ T7387] IPv6: NLM_F_CREATE should be set when creating new route [ 182.662002][ T7394] netlink: 37 bytes leftover after parsing attributes in process `syz.4.3231'. [ 183.311442][ T7433] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 183.680715][ T7466] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 183.701086][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 183.785805][ T7473] 8021q: VLANs not supported on wg2 [ 183.948995][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 184.426195][ T7515] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3291'. [ 184.755542][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3302'. [ 185.140922][ T7579] tc_dump_action: action bad kind [ 185.352821][ T7597] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3330'. [ 185.391878][ T1587] udevd[1587]: inotify_add_watch(7, /dev/loop3p210, 10) failed: No such file or directory [ 185.453212][ T1585] udevd[1585]: inotify_add_watch(7, /dev/loop3p209, 10) failed: No such file or directory [ 185.480642][ T1583] udevd[1583]: inotify_add_watch(7, /dev/loop3p207, 10) failed: No such file or directory [ 185.480660][ T385] udevd[385]: inotify_add_watch(7, /dev/loop3p208, 10) failed: No such file or directory [ 185.501546][ T327] udevd[327]: inotify_add_watch(7, /dev/loop3p211, 10) failed: No such file or directory [ 185.515296][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p213, 10) failed: No such file or directory [ 185.584337][ T303] udevd[303]: inotify_add_watch(7, /dev/loop3p217, 10) failed: No such file or directory [ 185.591520][ T710] udevd[710]: inotify_add_watch(7, /dev/loop3p214, 10) failed: No such file or directory [ 185.598353][ T526] udevd[526]: inotify_add_watch(7, /dev/loop3p212, 10) failed: No such file or directory [ 185.617599][ T384] udevd[384]: inotify_add_watch(7, /dev/loop3p215, 10) failed: No such file or directory [ 185.977584][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3343'. [ 186.033730][ T7628] netlink: 'syz.4.3343': attribute type 3 has an invalid length. [ 186.053773][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3343'. [ 186.300115][ T24] kauditd_printk_skb: 489 callbacks suppressed [ 186.300130][ T24] audit: type=1400 audit(2000000058.342:3002): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.388272][ T24] audit: type=1400 audit(2000000058.384:3003): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.481345][ T24] audit: type=1400 audit(2000000058.384:3004): avc: denied { read write open } for pid=281 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.542153][ T7667] device gre1 entered promiscuous mode [ 186.551436][ T7668] netlink: 'syz.4.3364': attribute type 3 has an invalid length. [ 186.557631][ T24] audit: type=1400 audit(2000000058.384:3005): avc: denied { ioctl } for pid=281 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.625635][ T24] audit: type=1400 audit(2000000058.405:3006): avc: denied { read write open } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.721017][ T24] audit: type=1400 audit(2000000058.405:3007): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.935422][ T24] audit: type=1400 audit(2000000058.405:3008): avc: denied { read write } for pid=280 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.010198][ T24] audit: type=1400 audit(2000000058.405:3009): avc: denied { read write open } for pid=280 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.094208][ T24] audit: type=1400 audit(2000000058.405:3010): avc: denied { ioctl } for pid=280 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.167192][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3376'. [ 187.185258][ T281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 187.410691][ T7714] device veth5 entered promiscuous mode [ 187.563504][ T7726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.700781][ T7737] ================================================================== [ 187.708941][ T7737] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 187.717378][ T7737] Read of size 4 at addr ffff888127305470 by task syz.0.3397/7737 [ 187.725193][ T7737] [ 187.727544][ T7737] CPU: 1 PID: 7737 Comm: syz.0.3397 Tainted: G W syzkaller #0 [ 187.736320][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.746409][ T7737] Call Trace: [ 187.749727][ T7737] __dump_stack+0x21/0x24 [ 187.754086][ T7737] dump_stack_lvl+0x1a7/0x208 [ 187.758819][ T7737] ? show_regs_print_info+0x18/0x18 [ 187.764118][ T7737] ? thaw_kernel_threads+0x220/0x220 [ 187.769448][ T7737] print_address_description+0x7f/0x2c0 [ 187.775040][ T7737] ? unaccount_page_cache_page+0x9dc/0xac0 [ 187.780879][ T7737] kasan_report+0x100/0x140 [ 187.785411][ T7737] ? xas_store+0xd0c/0x18d0 [ 187.789944][ T7737] ? unaccount_page_cache_page+0x9dc/0xac0 [ 187.795954][ T7737] __asan_report_load4_noabort+0x14/0x20 [ 187.801633][ T7737] unaccount_page_cache_page+0x9dc/0xac0 [ 187.807298][ T7737] __delete_from_page_cache+0xc3/0x470 [ 187.812919][ T7737] ? memset+0x35/0x40 [ 187.817090][ T7737] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 187.824147][ T7737] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 187.829638][ T7737] ? __kasan_check_read+0x11/0x20 [ 187.834698][ T7737] ? workingset_eviction+0x3dc/0x940 [ 187.840014][ T7737] __remove_mapping+0x581/0x6b0 [ 187.844898][ T7737] shrink_page_list+0x21ee/0x4160 [ 187.849969][ T7737] ? shrink_page_list+0x1ec1/0x4160 [ 187.856852][ T7737] ? reclaim_clean_pages_from_list+0x740/0x740 [ 187.863033][ T7737] ? shrink_inactive_list+0xef0/0xef0 [ 187.868424][ T7737] ? _raw_spin_lock_irq+0x95/0xf0 [ 187.873477][ T7737] ? __count_memcg_events+0x89/0x210 [ 187.878788][ T7737] shrink_inactive_list+0x90c/0xef0 [ 187.884120][ T7737] ? shrink_active_list+0xe00/0xe00 [ 187.889339][ T7737] ? blk_flush_plug_list+0x40b/0x450 [ 187.894649][ T7737] ? __kasan_check_read+0x11/0x20 [ 187.899694][ T7737] ? __kasan_check_read+0x11/0x20 [ 187.904743][ T7737] ? lruvec_lru_size+0x230/0x250 [ 187.909715][ T7737] ? blk_start_plug+0x5a/0x170 [ 187.914499][ T7737] shrink_lruvec+0x2806/0x2d70 [ 187.919288][ T7737] ? __kasan_check_write+0x14/0x20 [ 187.924420][ T7737] ? down_read_trylock+0x106/0x160 [ 187.929548][ T7737] ? __init_rwsem+0x1c0/0x1c0 [ 187.934241][ T7737] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 187.939810][ T7737] ? __kasan_check_write+0x14/0x20 [ 187.944942][ T7737] ? up_read+0x12/0x50 [ 187.949037][ T7737] ? shrink_slab+0x671/0x830 [ 187.953647][ T7737] ? cgroup_file_open+0x8a/0x2a0 [ 187.958611][ T7737] ? __kasan_check_read+0x11/0x20 [ 187.963650][ T7737] ? inactive_is_low+0x17a/0x2f0 [ 187.968609][ T7737] ? __kasan_check_write+0x14/0x20 [ 187.973740][ T7737] shrink_node+0xee0/0x2690 [ 187.978273][ T7737] ? ktime_get+0x10e/0x140 [ 187.982743][ T7737] do_try_to_free_pages+0x602/0x1590 [ 187.988054][ T7737] ? try_to_free_pages+0xc20/0xc20 [ 187.993194][ T7737] try_to_free_mem_cgroup_pages+0x261/0x610 [ 187.999112][ T7737] ? shrink_lruvec+0x2d70/0x2d70 [ 188.004070][ T7737] mem_cgroup_resize_max+0x309/0x3e0 [ 188.009376][ T7737] mem_cgroup_write+0x1ed/0x230 [ 188.014253][ T7737] ? mem_cgroup_reset+0x130/0x130 [ 188.019331][ T7737] ? mem_cgroup_reset+0x130/0x130 [ 188.024381][ T7737] cgroup_file_write+0x294/0x560 [ 188.029340][ T7737] ? cgroup_seqfile_stop+0xc0/0xc0 [ 188.034467][ T7737] ? mutex_lock+0x92/0xf0 [ 188.038848][ T7737] ? mutex_trylock+0xb0/0xb0 [ 188.043551][ T7737] ? __kasan_check_write+0x14/0x20 [ 188.048684][ T7737] ? cgroup_seqfile_stop+0xc0/0xc0 [ 188.053821][ T7737] kernfs_fop_write_iter+0x2bd/0x400 [ 188.059132][ T7737] vfs_write+0x770/0xd70 [ 188.063530][ T7737] ? kernel_write+0x3c0/0x3c0 [ 188.068234][ T7737] ? mutex_trylock+0xb0/0xb0 [ 188.072845][ T7737] ? __fget_files+0x2e1/0x340 [ 188.077550][ T7737] ? __fdget_pos+0x2d2/0x380 [ 188.082158][ T7737] ? ksys_write+0x70/0x260 [ 188.086691][ T7737] ksys_write+0x14a/0x260 [ 188.091045][ T7737] ? __ia32_sys_read+0x90/0x90 [ 188.095838][ T7737] ? __kasan_check_read+0x11/0x20 [ 188.100901][ T7737] __x64_sys_write+0x7b/0x90 [ 188.105518][ T7737] do_syscall_64+0x31/0x40 [ 188.109973][ T7737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 188.116056][ T7737] RIP: 0033:0x7f0913e7f0d9 [ 188.120501][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.140138][ T7737] RSP: 002b:00007f09128d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.148589][ T7737] RAX: ffffffffffffffda RBX: 00007f0914106fa0 RCX: 00007f0913e7f0d9 [ 188.156596][ T7737] RDX: 0000000000000050 RSI: 0000200000002580 RDI: 0000000000000003 [ 188.164642][ T7737] RBP: 00007f0913f16024 R08: 0000000000000000 R09: 0000000000000000 [ 188.172644][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.180648][ T7737] R13: 00007f0914107038 R14: 00007f0914106fa0 R15: 00007ffd8f2909d8 [ 188.188764][ T7737] [ 188.191118][ T7737] Allocated by task 281: [ 188.195395][ T7737] __kasan_kmalloc+0xd4/0x100 [ 188.200221][ T7737] __kmalloc+0x19f/0x330 [ 188.204489][ T7737] kvmalloc_node+0x88/0x130 [ 188.209045][ T7737] alloc_fdtable+0xea/0x2a0 [ 188.213568][ T7737] dup_fd+0x7a2/0xab0 [ 188.217568][ T7737] copy_files+0xcf/0x170 [ 188.221834][ T7737] copy_process+0x12d6/0x3320 [ 188.226541][ T7737] kernel_clone+0x233/0x950 [ 188.231064][ T7737] __x64_sys_clone+0x198/0x210 [ 188.235844][ T7737] do_syscall_64+0x31/0x40 [ 188.240288][ T7737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 188.246191][ T7737] [ 188.248537][ T7737] Freed by task 7106: [ 188.252537][ T7737] kasan_set_track+0x4a/0x70 [ 188.257156][ T7737] kasan_set_free_info+0x23/0x40 [ 188.262116][ T7737] ____kasan_slab_free+0x125/0x160 [ 188.267336][ T7737] __kasan_slab_free+0x11/0x20 [ 188.272126][ T7737] slab_free_freelist_hook+0xc5/0x190 [ 188.277526][ T7737] kfree+0xc0/0x270 [ 188.281365][ T7737] kvfree+0x35/0x40 [ 188.285193][ T7737] put_files_struct+0x275/0x310 [ 188.290068][ T7737] exit_files+0x80/0xa0 [ 188.294263][ T7737] do_exit+0xa45/0x24e0 [ 188.298441][ T7737] do_group_exit+0x149/0x310 [ 188.303052][ T7737] get_signal+0xfb1/0x1300 [ 188.307491][ T7737] arch_do_signal_or_restart+0xe7/0x11b0 [ 188.313157][ T7737] exit_to_user_mode_loop+0xa2/0xe0 [ 188.318373][ T7737] exit_to_user_mode_prepare+0x76/0xa0 [ 188.323862][ T7737] syscall_exit_to_user_mode+0x1d/0x40 [ 188.329352][ T7737] do_syscall_64+0x3d/0x40 [ 188.333792][ T7737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 188.339695][ T7737] [ 188.342037][ T7737] Last potentially related work creation: [ 188.347782][ T7737] kasan_save_stack+0x3a/0x60 [ 188.352490][ T7737] __kasan_record_aux_stack+0xd2/0x100 [ 188.357978][ T7737] kasan_record_aux_stack_noalloc+0xb/0x10 [ 188.363821][ T7737] call_rcu+0x11a/0x1090 [ 188.368094][ T7737] netlink_release+0x128f/0x16d0 [ 188.373058][ T7737] sock_close+0xb8/0x200 [ 188.377326][ T7737] __fput+0x2dc/0x730 [ 188.381330][ T7737] ____fput+0x15/0x20 [ 188.385374][ T7737] task_work_run+0x127/0x190 [ 188.389985][ T7737] exit_to_user_mode_loop+0xcb/0xe0 [ 188.395211][ T7737] exit_to_user_mode_prepare+0x76/0xa0 [ 188.400693][ T7737] syscall_exit_to_user_mode+0x1d/0x40 [ 188.406170][ T7737] do_syscall_64+0x3d/0x40 [ 188.410621][ T7737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 188.416529][ T7737] [ 188.418880][ T7737] Second to last potentially related work creation: [ 188.425500][ T7737] kasan_save_stack+0x3a/0x60 [ 188.430203][ T7737] __kasan_record_aux_stack+0xd2/0x100 [ 188.435689][ T7737] kasan_record_aux_stack_noalloc+0xb/0x10 [ 188.441520][ T7737] insert_work+0x51/0x320 [ 188.445877][ T7737] __queue_work+0x91f/0xca0 [ 188.450406][ T7737] rcu_work_rcufn+0x47/0x50 [ 188.454933][ T7737] rcu_do_batch+0x488/0xaf0 [ 188.459459][ T7737] rcu_core+0x50a/0xca0 [ 188.463638][ T7737] rcu_core_si+0x9/0x10 [ 188.467814][ T7737] __do_softirq+0x255/0x563 [ 188.472332][ T7737] [ 188.474687][ T7737] The buggy address belongs to the object at ffff888127305000 [ 188.474687][ T7737] which belongs to the cache kmalloc-2k of size 2048 [ 188.488862][ T7737] The buggy address is located 1136 bytes inside of [ 188.488862][ T7737] 2048-byte region [ffff888127305000, ffff888127305800) [ 188.502501][ T7737] The buggy address belongs to the page: [ 188.508443][ T7737] page:ffffea00049cc000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127300 [ 188.518972][ T7737] head:ffffea00049cc000 order:3 compound_mapcount:0 compound_pincount:0 [ 188.527413][ T7737] flags: 0x4000000000010200(slab|head) [ 188.533627][ T7737] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 188.542244][ T7737] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 188.550850][ T7737] page dumped because: kasan: bad access detected [ 188.557291][ T7737] page_owner tracks the page as allocated [ 188.563128][ T7737] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 279, ts 23942637046, free_ts 0 [ 188.580860][ T7737] prep_new_page+0x176/0x190 [ 188.585484][ T7737] get_page_from_freelist+0x225f/0x23f0 [ 188.591052][ T7737] __alloc_pages_nodemask+0x29a/0x640 [ 188.596454][ T7737] new_slab+0x84/0x3f0 [ 188.600652][ T7737] ___slab_alloc+0x2f8/0x4c0 [ 188.605373][ T7737] __slab_alloc+0x63/0xa0 [ 188.609718][ T7737] __kmalloc_track_caller+0x1e4/0x310 [ 188.615197][ T7737] pskb_expand_head+0x123/0x11c0 [ 188.620157][ T7737] netlink_trim+0x193/0x230 [ 188.624684][ T7737] netlink_broadcast_filtered+0x75/0x12c0 [ 188.630600][ T7737] nlmsg_notify+0xe9/0x1a0 [ 188.635249][ T7737] rtmsg_ifinfo+0xea/0x130 [ 188.639720][ T7737] __dev_notify_flags+0xe0/0x5b0 [ 188.644683][ T7737] rtnl_configure_link+0x221/0x340 [ 188.650514][ T7737] rtnl_newlink+0x1428/0x1830 [ 188.655686][ T7737] rtnetlink_rcv_msg+0x9e9/0xca0 [ 188.661869][ T7737] page_owner free stack trace missing [ 188.667256][ T7737] [ 188.669603][ T7737] Memory state around the buggy address: [ 188.675254][ T7737] ffff888127305300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.683343][ T7737] ffff888127305380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.691426][ T7737] >ffff888127305400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.699501][ T7737] ^ [ 188.707246][ T7737] ffff888127305480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.715337][ T7737] ffff888127305500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 188.723411][ T7737] ================================================================== [ 188.731490][ T7737] Disabling lock debugging due to kernel taint [ 192.421097][ T1587] udevd[1587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 194.028630][ T526] udevd[526]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.202018][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!