last executing test programs: 1.01908379s ago: executing program 0 (id=6464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="40010000100013070000000000000000ff010000000000000000000000000001fe88000000000000000000000000010100000000200100"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000"], 0x140}}, 0x0) 986.581053ms ago: executing program 0 (id=6468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0xe0, 0x43, 0xa0, 0x0, 0x98, 0x278, 0x178, 0x178, 0x278, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@empty, [], @ipv4=@local, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x79}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 944.481966ms ago: executing program 0 (id=6472): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x240}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x2}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 886.9882ms ago: executing program 0 (id=6477): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@nat={'nat\x00', 0x62, 0x5, 0x548, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x1a8, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {}, {}, 0x0, 0x0, 0x11}, 0x0, 0xb8, 0xf0, 0x0, {0x22e}, [@common=@unspec=@limit={{0x48}, {0xea6a, 0x9, 0x100000001, 0x6, 0x7fffffff, 0x5, 0x8001}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv6=@mcast1, @ipv4=@multicast2, @icmp_id=0x65, @gre_key=0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x1a0, 0x1d8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@recent1={{0x108}, {0x4, 0x80000000, 0x1, 0x0, 'syz1\x00', 0x86, [0xff000000, 0xffffff00, 0xffffff00, 0xff]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) 834.948194ms ago: executing program 0 (id=6485): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) 288.770317ms ago: executing program 2 (id=6533): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x270, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x73, 0x6e7, 0x1000000, 0x1, 0x7fffffff, 0x0, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x0, [0x0, 0x3, 0x7, 0x6, 0x5, 0x8, 0x3ff, 0x8001, 0x200, 0x1, 0xc, 0x7ff, 0xfff, 0x8, 0x81, 0x7], 0xf}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 237.951301ms ago: executing program 1 (id=6537): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) accept(0xffffffffffffffff, 0x0, 0x0) 220.749822ms ago: executing program 3 (id=6539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0x0, 0x160, 0x160, 0x0, 0x0, 0x1c0, 0x280, 0x280, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty}}}, {{@ipv6={@mcast2, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x1}, {0x4, 0x6, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 183.210056ms ago: executing program 3 (id=6541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 171.267057ms ago: executing program 1 (id=6542): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1e, 0x4, 0x126, 0x0}) 168.402887ms ago: executing program 4 (id=6543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x8000, 0x28}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 141.061789ms ago: executing program 1 (id=6544): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgid() 133.615129ms ago: executing program 4 (id=6545): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40}}], 0x2, 0x408b1) 133.371979ms ago: executing program 3 (id=6546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78269}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x482e}]}, 0x44}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 116.970581ms ago: executing program 2 (id=6547): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f0000010140)=[{r0, 0x2046}], 0x1, 0x0, 0x0, 0x0) 104.190111ms ago: executing program 2 (id=6548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) 96.588472ms ago: executing program 1 (id=6549): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002a80)=@newtaction={0x80, 0x13, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_sample={0x68, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x181fbfb9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xd, 0x4, 0x6, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x80}}, 0x20094) 93.539533ms ago: executing program 3 (id=6550): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000002700)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3ff800, 0x3a, '\\', 0x3a, '])(*', 0x3a, './file0'}, 0x2c) 92.142113ms ago: executing program 4 (id=6551): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x30000, 0x0, 0x0) 87.850543ms ago: executing program 2 (id=6552): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getegid() 67.267075ms ago: executing program 3 (id=6553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x14060}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 66.066875ms ago: executing program 1 (id=6554): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="e254f77358d0b68e60dcd68090f25a798c9aa11941294a031c8ec13c911e980127d1cb7f5b964b5f650a59f0a76cb6b6dd07a3977db4e9dbd34b779b7ffda7eef21ee043887861df0807749d8c6b45e141742e785c62c7508bbef6f81b5d67", 0x5f}], 0x1) 65.307205ms ago: executing program 4 (id=6555): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000010) 63.004645ms ago: executing program 2 (id=6556): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) 30.332028ms ago: executing program 2 (id=6557): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x9f, 0x4, 0x7c2, 0xfd, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x80000, [0x4, 0xfffffde]}}) 30.031188ms ago: executing program 3 (id=6558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f0000000040)) 23.183838ms ago: executing program 4 (id=6559): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast1={0xff, 0x5}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x3, 0x0, 0x700, 0x529e}) 19.112278ms ago: executing program 0 (id=6560): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000400)='8', 0x1}, {&(0x7f0000000440)="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", 0x1000}], 0x2) 18.159638ms ago: executing program 1 (id=6561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x1170, 0x1170, 0x148, 0x1170, 0x218, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0x322, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'veth0_vlan\x00', 'veth1_macvtap\x00', {}, {}, 0x6}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e21, 0x40, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1], 0xfe}}, @common=@hl={{0x28}, {0x0, 0x20}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4dc8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 0s ago: executing program 4 (id=6562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) kernel console output (not intermixed with test programs): 24] usb 3-1: USB disconnect, device number 75 [ 160.805391][ T1031] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 161.012497][ T1031] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 161.021759][ T1031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.033987][ T1031] usb 4-1: config 0 descriptor?? [ 161.041562][ T1031] usb-storage 4-1:0.0: USB Mass Storage device detected [ 161.055019][ T1031] usb-storage 4-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 161.055019][ T1031] Please send a copy of this message to and [ 161.122252][ T7018] loop2: detected capacity change from 0 to 512 [ 161.129797][ T7020] loop1: detected capacity change from 0 to 2048 [ 161.150744][ T7018] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.159756][ T7018] EXT4-fs error (device loop2): ext4_find_extent:936: inode #4: comm syz.2.3205: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 161.186957][ T7020] loop1: p2 p3 p7 [ 161.196604][ T7018] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 161.211521][ T7018] EXT4-fs warning (device loop2): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 161.229168][ T7018] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 161.236218][ T7018] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.258336][ T1031] usb 4-1: USB disconnect, device number 80 [ 161.301351][ T336] udevd[336]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 161.313080][ T421] udevd[421]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 161.315105][ T285] EXT4-fs (loop2): unmounting filesystem. [ 161.629629][ T344] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 161.639739][ T303] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 161.710023][ T7077] loop4: detected capacity change from 0 to 128 [ 161.727263][ T336] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.737164][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 161.845477][ T303] usb 3-1: Using ep0 maxpacket: 16 [ 161.851993][ T344] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 161.862627][ T303] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 161.871199][ T344] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.884680][ T303] usb 3-1: config 0 has no interface number 0 [ 161.896331][ T303] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 161.905633][ T344] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 161.914945][ T303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.923096][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.931147][ T303] usb 3-1: Product: syz [ 161.935403][ T303] usb 3-1: Manufacturer: syz [ 161.940023][ T303] usb 3-1: SerialNumber: syz [ 161.943007][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 161.945320][ T344] usb 2-1: Product: syz [ 161.952290][ T24] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 161.953964][ T344] usb 2-1: Manufacturer: syz [ 161.962710][ T24] usb 1-1: config 0 has no interface number 0 [ 161.967686][ T303] usb 3-1: config 0 descriptor?? [ 161.978095][ T24] usb 1-1: config 0 interface 190 has no altsetting 0 [ 161.978283][ T344] usb 2-1: SerialNumber: syz [ 161.987026][ T24] usb 1-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 161.990546][ T303] usb 3-1: bad CDC descriptors [ 161.999351][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.005185][ T344] rtl8150 2-1:1.0: couldn't find required endpoints [ 162.018502][ T24] usb 1-1: Product: syz [ 162.019581][ T344] rtl8150: probe of 2-1:1.0 failed with error -5 [ 162.029656][ T1031] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 162.037581][ T24] usb 1-1: Manufacturer: syz [ 162.042325][ T24] usb 1-1: SerialNumber: syz [ 162.047874][ T24] usb 1-1: config 0 descriptor?? [ 162.216153][ T290] usb 3-1: USB disconnect, device number 76 [ 162.224682][ T988] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 162.228310][ T344] usb 2-1: USB disconnect, device number 75 [ 162.239710][ T1031] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 162.248098][ T1031] usb 5-1: config 0 has no interface number 0 [ 162.254199][ T1031] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.264623][ T1031] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 162.273812][ T1031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.282470][ T24] usb-storage 1-1:0.190: USB Mass Storage device detected [ 162.290355][ T1031] usb 5-1: config 0 descriptor?? [ 162.295586][ T7079] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 162.303224][ T24] usb-storage 1-1:0.190: Quirks match for vid 0781 pid 0001: 1 [ 162.311424][ T1031] pl2303 5-1:0.183: required endpoints missing [ 162.334866][ T24] usb 1-1: USB disconnect, device number 80 [ 162.430525][ T988] usb 4-1: Using ep0 maxpacket: 32 [ 162.436934][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.448539][ T988] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 162.457627][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.465693][ T988] usb 4-1: Product: syz [ 162.469870][ T988] usb 4-1: Manufacturer: syz [ 162.474494][ T988] usb 4-1: SerialNumber: syz [ 162.479779][ T988] usb 4-1: config 0 descriptor?? [ 162.485536][ T988] usb 4-1: bad CDC descriptors [ 162.490478][ T988] usb 4-1: unsupported MDLM descriptors [ 162.524680][ T988] usb 5-1: USB disconnect, device number 78 [ 162.706673][ T630] usb 4-1: USB disconnect, device number 81 [ 162.808014][ T7111] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:0:5efe:253.127.26.154 [ 163.022659][ T28] audit: type=1326 audit(2000527180.669:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.0.3265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff26038f749 code=0x0 [ 163.091394][ T344] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 163.210572][ T290] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 163.286400][ T344] usb 2-1: Using ep0 maxpacket: 32 [ 163.293159][ T344] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 163.301543][ T344] usb 2-1: config 0 has no interface number 0 [ 163.307692][ T344] usb 2-1: config 0 interface 195 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.319081][ T344] usb 2-1: config 0 interface 195 has no altsetting 0 [ 163.329275][ T344] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01d5, bcdDevice=ec.a1 [ 163.338708][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.346854][ T344] usb 2-1: Product: syz [ 163.351107][ T344] usb 2-1: Manufacturer: syz [ 163.355758][ T344] usb 2-1: SerialNumber: syz [ 163.361094][ T344] usb 2-1: config 0 descriptor?? [ 163.367067][ T344] ftdi_sio 2-1:0.195: FTDI USB Serial Device converter detected [ 163.375057][ T344] ftdi_sio ttyUSB0: unknown device type: 0xeca1 [ 163.394763][ T630] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 163.416449][ T290] usb 3-1: Using ep0 maxpacket: 16 [ 163.422705][ T290] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 163.430867][ T290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.441118][ T290] usb 3-1: config 0 has no interface number 0 [ 163.447242][ T290] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 163.457165][ T290] usb 3-1: config 0 interface 83 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 163.467715][ T290] usb 3-1: config 0 interface 83 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 163.480824][ T290] usb 3-1: New USB device found, idVendor=0499, idProduct=4613, bcdDevice=9a.8e [ 163.490015][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.498844][ T290] usb 3-1: config 0 descriptor?? [ 163.504168][ T7133] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.588860][ T344] usb 2-1: USB disconnect, device number 76 [ 163.595200][ T344] ftdi_sio 2-1:0.195: device disconnected [ 163.601006][ T630] usb 5-1: Using ep0 maxpacket: 16 [ 163.607479][ T630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 163.619473][ T630] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 163.628666][ T630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.636700][ T630] usb 5-1: Product: syz [ 163.640855][ T630] usb 5-1: Manufacturer: syz [ 163.645479][ T630] usb 5-1: SerialNumber: syz [ 163.650621][ T630] usb 5-1: config 0 descriptor?? [ 163.656635][ T630] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 163.664377][ T630] usb 5-1: Detected FT232R [ 163.665656][ T24] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 163.736054][ T988] usb 3-1: USB disconnect, device number 77 [ 163.872558][ T24] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 163.880262][ T24] usb 4-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.883598][ T630] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 163.894062][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 163.900615][ T630] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 163.909127][ T24] usb 4-1: string descriptor 0 read error: -22 [ 163.913847][ T630] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 163.922102][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 163.927597][ T630] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.935408][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.945805][ T630] usb 5-1: USB disconnect, device number 79 [ 163.958842][ T630] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 163.968648][ T630] ftdi_sio 5-1:0.0: device disconnected [ 164.188962][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 164.194964][ T24] usbhid: probe of 4-1:1.0 failed with error -71 [ 164.203237][ T24] usb 4-1: USB disconnect, device number 82 [ 164.326570][ T19] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 164.485558][ T7195] loop2: detected capacity change from 0 to 40427 [ 164.493243][ T7195] F2FS-fs (loop2): fault_injection options not supported [ 164.500594][ T7195] F2FS-fs (loop2): fault_type options not supported [ 164.507243][ T7195] F2FS-fs (loop2): Image doesn't support compression [ 164.514725][ T7195] F2FS-fs (loop2): invalid crc value [ 164.520955][ T7195] F2FS-fs (loop2): SIT is corrupted node# 0 vs 7 [ 164.527755][ T7195] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 164.538208][ T19] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 164.546370][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.556527][ T19] usb 1-1: config 1 has no interface number 0 [ 164.562614][ T19] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 164.573446][ T19] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 164.584422][ T19] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 164.594180][ T19] usb 1-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 164.608468][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.617518][ T19] usb 1-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 164.628250][ T630] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 164.635893][ T19] usb 1-1: Manufacturer: syz [ 164.640576][ T19] usb 1-1: SerialNumber: syz [ 164.749101][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 164.835716][ T630] usb 2-1: Using ep0 maxpacket: 32 [ 164.841931][ T630] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 164.850276][ T630] usb 2-1: config 0 has no interface number 0 [ 164.856859][ T630] usb 2-1: config 0 interface 217 has no altsetting 0 [ 164.865215][ T630] usb 2-1: New USB device found, idVendor=5372, idProduct=2303, bcdDevice=a1.0d [ 164.873178][ T1031] usb 1-1: USB disconnect, device number 81 [ 164.874328][ T630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.888216][ T630] usb 2-1: Product: syz [ 164.892406][ T630] usb 2-1: Manufacturer: syz [ 164.897018][ T630] usb 2-1: SerialNumber: syz [ 164.902405][ T630] usb 2-1: config 0 descriptor?? [ 164.908171][ T630] pl2303 2-1:0.217: required interrupt-in endpoint missing [ 164.944088][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 164.950296][ T24] usb 5-1: config 2 has an invalid interface number: 194 but max is 0 [ 164.958523][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 164.968808][ T24] usb 5-1: config 2 has no interface number 0 [ 164.974990][ T24] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 164.985957][ T24] usb 5-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 164.999119][ T290] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 165.006796][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 165.016016][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.074077][ T988] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 165.131662][ T1031] usb 2-1: USB disconnect, device number 77 [ 165.204073][ T290] usb 3-1: Using ep0 maxpacket: 8 [ 165.210417][ T290] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 165.218638][ T290] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.228767][ T290] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.237791][ T290] usb 3-1: config 1 has no interface number 0 [ 165.244005][ T290] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.255149][ T24] usb 5-1: string descriptor 0 read error: -71 [ 165.261365][ T290] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.272448][ T988] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 165.281268][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.291882][ T988] usb 4-1: config 0 has no interface number 0 [ 165.299536][ T24] usb 5-1: USB disconnect, device number 80 [ 165.307069][ T290] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.316230][ T290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.324763][ T988] usb 4-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 165.333832][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.342141][ T290] usb 3-1: Product: syz [ 165.347571][ T290] usb 3-1: Manufacturer: syz [ 165.348636][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.352201][ T290] usb 3-1: SerialNumber: syz [ 165.352641][ T988] usb 4-1: Product: syz [ 165.378192][ T290] cdc_wdm 3-1:1.128: skipping garbage [ 165.384108][ T988] usb 4-1: Manufacturer: syz [ 165.389163][ T290] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 165.396152][ T988] usb 4-1: SerialNumber: syz [ 165.401825][ T988] usb 4-1: config 0 descriptor?? [ 165.408055][ T988] cdc_acm 4-1:0.123: More than one union descriptor, skipping ... [ 165.597157][ T19] usb 3-1: USB disconnect, device number 78 [ 165.627118][ T630] usb 4-1: USB disconnect, device number 83 [ 165.908349][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 166.059986][ T290] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 166.103350][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 166.109667][ T24] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 166.118017][ T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 166.126343][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.136461][ T24] usb 1-1: config 0 has no interface number 0 [ 166.144031][ T24] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 166.153239][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.163966][ T24] usb 1-1: Product: syz [ 166.168212][ T24] usb 1-1: Manufacturer: syz [ 166.173584][ T24] usb 1-1: SerialNumber: syz [ 166.179493][ T24] usb 1-1: config 0 descriptor?? [ 166.185435][ T24] usb 1-1: Found UVC 0.00 device syz (046c:14e0) [ 166.191870][ T24] usb 1-1: No valid video chain found. [ 166.250428][ T290] usb 2-1: not running at top speed; connect to a high speed hub [ 166.252638][ T28] audit: type=1326 audit(2000527951.664:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.3.3334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x0 [ 166.281581][ T290] usb 2-1: config 2 has an invalid interface number: 237 but max is 0 [ 166.289886][ T290] usb 2-1: config 2 has no interface number 0 [ 166.296074][ T290] usb 2-1: config 2 interface 237 has no altsetting 0 [ 166.297338][ T19] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 166.315108][ T290] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=95.59 [ 166.324432][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.332606][ T290] usb 2-1: Product: syz [ 166.336971][ T290] usb 2-1: Manufacturer: syz [ 166.341595][ T290] usb 2-1: SerialNumber: syz [ 166.380116][ T988] usb 1-1: USB disconnect, device number 82 [ 166.449378][ T1031] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 166.489659][ T19] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 166.500525][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 166.509920][ T19] usb 5-1: string descriptor 0 read error: -22 [ 166.516357][ T19] usb 5-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 166.525750][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.535169][ T7264] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 166.547252][ T290] usb 2-1: USB disconnect, device number 78 [ 166.622317][ T1031] usb 3-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 166.632676][ T1031] usb 3-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 166.643666][ T1031] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 166.656832][ T1031] usb 3-1: config 1 interface 0 has no altsetting 0 [ 166.664236][ T1031] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.673337][ T1031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.681410][ T1031] usb 3-1: SerialNumber: syz [ 166.687827][ T1031] cdc_acm 3-1:1.0: invalid descriptor buffer length [ 166.694430][ T1031] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 166.702359][ T1031] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 166.708873][ T1031] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 166.737527][ T19] usbhid 5-1:1.0: can't add hid device: -71 [ 166.743490][ T19] usbhid: probe of 5-1:1.0 failed with error -71 [ 166.745942][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.237/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.753476][ T19] usb 5-1: USB disconnect, device number 81 [ 166.801712][ T533] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 166.880530][ T303] usb 3-1: USB disconnect, device number 79 [ 166.974607][ T533] usb 4-1: not running at top speed; connect to a high speed hub [ 166.983200][ T533] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 166.994073][ T533] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 167.006380][ T533] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.015480][ T533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.023502][ T533] usb 4-1: Product: syz [ 167.027695][ T533] usb 4-1: Manufacturer: syz [ 167.032347][ T533] usb 4-1: SerialNumber: syz [ 167.144567][ T1031] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 167.230937][ T533] cdc_ncm 4-1:1.0: bind() failure [ 167.239147][ T533] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 167.249816][ T533] cdc_ncm 4-1:1.1: bind() failure [ 167.260760][ T533] usb 4-1: USB disconnect, device number 84 [ 167.316174][ T1031] usb 1-1: Using ep0 maxpacket: 16 [ 167.322451][ T1031] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.338918][ T1031] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 167.348026][ T1031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.356056][ T1031] usb 1-1: Product: syz [ 167.360233][ T1031] usb 1-1: Manufacturer: syz [ 167.364868][ T1031] usb 1-1: SerialNumber: syz [ 167.370254][ T1031] usb 1-1: config 0 descriptor?? [ 167.373263][ T303] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 167.376827][ T1031] dm9601: probe of 1-1:0.0 failed with error -22 [ 167.391975][ T1031] sr9700: probe of 1-1:0.0 failed with error -22 [ 167.448824][ T7348] loop2: detected capacity change from 0 to 512 [ 167.455610][ T7348] FAT-fs (loop2): Unrecognized mount option "smackf" or missing value [ 167.544639][ T19] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 167.555371][ T303] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 167.564561][ T303] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 167.575160][ T303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.580706][ T533] usb 1-1: USB disconnect, device number 83 [ 167.596298][ T303] usb 2-1: config 1 has no interface number 0 [ 167.604029][ T303] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 167.615015][ T303] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 167.636385][ T303] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.645802][ T303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.658892][ T303] usb 2-1: Product: syz [ 167.663137][ T303] usb 2-1: Manufacturer: syz [ 167.672504][ T303] usb 2-1: SerialNumber: syz [ 167.679191][ T303] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 167.686060][ T303] cdc_ncm 2-1:1.1: bind() failure [ 167.717421][ T19] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 167.725750][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.736438][ T19] usb 5-1: config 0 has no interface number 0 [ 167.746554][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 167.755900][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.764154][ T19] usb 5-1: Product: syz [ 167.768582][ T19] usb 5-1: Manufacturer: syz [ 167.773340][ T19] usb 5-1: SerialNumber: syz [ 167.782144][ T19] usb 5-1: config 0 descriptor?? [ 167.838936][ T7394] futex_wake_op: syz.3.3391 tries to shift op by -1; fix this program [ 167.872118][ T533] usb 2-1: USB disconnect, device number 79 [ 167.936675][ T290] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 167.985258][ T19] usb 5-1: USB disconnect, device number 82 [ 168.047733][ T28] audit: type=1400 audit(2000527953.544:240): avc: denied { create } for pid=7427 comm="syz.3.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.135134][ T290] usb 3-1: Using ep0 maxpacket: 16 [ 168.141811][ T290] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.160212][ T290] usb 3-1: config 1 has an invalid interface number: 206 but max is 0 [ 168.174087][ T290] usb 3-1: config 1 has no interface number 0 [ 168.193547][ T290] usb 3-1: string descriptor 0 read error: -22 [ 168.199884][ T290] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 168.212122][ T290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.360809][ T7482] cgroup: No subsys list or none specified [ 168.420946][ T24] usb 3-1: USB disconnect, device number 80 [ 168.611779][ T290] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 168.668897][ T533] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 168.764075][ T303] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 168.783857][ T290] usb 4-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice= 0.7f [ 168.793004][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.801779][ T290] usb 4-1: config 0 descriptor?? [ 168.807631][ T290] usb-storage 4-1:0.0: USB Mass Storage device detected [ 168.815467][ T290] usb-storage 4-1:0.0: Quirks match for vid 357d pid 7788: 4800000 [ 168.830873][ T19] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 168.840253][ T533] usb 1-1: Using ep0 maxpacket: 16 [ 168.846514][ T533] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.856782][ T533] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.868623][ T533] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.877711][ T533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.885763][ T533] usb 1-1: Product: syz [ 168.889949][ T533] usb 1-1: Manufacturer: syz [ 168.894546][ T533] usb 1-1: SerialNumber: syz [ 168.935696][ T303] usb 5-1: Using ep0 maxpacket: 32 [ 168.943364][ T303] usb 5-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 168.957478][ T303] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 168.966765][ T303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.975077][ T303] usb 5-1: Product: syz [ 168.979459][ T303] usb 5-1: Manufacturer: syz [ 168.984288][ T303] usb 5-1: SerialNumber: syz [ 168.989621][ T303] usb 5-1: config 0 descriptor?? [ 168.999779][ T7520] 9pnet: Unknown protocol version 9p20\++} [ 169.004141][ T344] usb 4-1: USB disconnect, device number 85 [ 169.013351][ T303] usb 5-1: bad CDC descriptors [ 169.021164][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.031498][ T303] usb 5-1: unsupported MDLM descriptors [ 169.039919][ T19] usb 2-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 169.052134][ T19] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.068334][ T19] usb 2-1: config 1 interface 0 has no altsetting 0 [ 169.085809][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.095220][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.095374][ T533] usb 1-1: 0:2 : does not exist [ 169.103668][ T19] usb 2-1: Product: syz [ 169.117625][ T533] usb 1-1: USB disconnect, device number 84 [ 169.120377][ T19] usb 2-1: Manufacturer: syz [ 169.130865][ T19] usb 2-1: SerialNumber: syz [ 169.191885][ T303] usb 5-1: USB disconnect, device number 83 [ 169.336355][ T19] cdc_ether 2-1:1.0: skipping garbage [ 169.341822][ T19] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 169.349664][ T19] usb 2-1: USB disconnect, device number 80 [ 169.401986][ T290] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 169.574934][ T290] usb 3-1: No LPM exit latency info found, disabling LPM. [ 169.583188][ T290] usb 3-1: config 1 interface 0 altsetting 248 endpoint 0x82 is Bulk; changing to Interrupt [ 169.598909][ T290] usb 3-1: config 1 interface 0 altsetting 248 endpoint 0x3 is Bulk; changing to Interrupt [ 169.609240][ T290] usb 3-1: config 1 interface 0 has no altsetting 0 [ 169.625082][ T290] usb 3-1: string descriptor 0 read error: -22 [ 169.635313][ T290] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.647146][ T290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.661756][ T7532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.669392][ T7532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.677445][ T290] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 169.811607][ T24] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 169.873218][ T7569] IPv6: addrconf: prefix option has invalid lifetime [ 169.894473][ T344] usb 3-1: USB disconnect, device number 81 [ 169.928806][ T7566] loop1: detected capacity change from 0 to 8192 [ 169.976022][ T336] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.997191][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 170.011852][ T19] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 170.025073][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.045163][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.064683][ T24] usb 4-1: config 1 has no interface number 1 [ 170.074511][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 170.104480][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 170.126903][ T7585] loop1: detected capacity change from 0 to 256 [ 170.133421][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.156125][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.165226][ T7585] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa6c8c8ab, utbl_chksum : 0xe619d30d) [ 170.173816][ T24] usb 4-1: Product: syz [ 170.191033][ T24] usb 4-1: Manufacturer: syz [ 170.196212][ T7585] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 170.196658][ T24] usb 4-1: SerialNumber: syz [ 170.206690][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 170.217238][ T7585] exFAT-fs (loop1): failed to initialize root inode [ 170.217621][ T19] usb 5-1: config index 0 descriptor too short (expected 4132, got 249) [ 170.233433][ T19] usb 5-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 170.243966][ T19] usb 5-1: config 166 has 1 interface, different from the descriptor's value: 11 [ 170.253303][ T19] usb 5-1: config 166 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 170.263383][ T19] usb 5-1: config 166 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 170.273415][ T19] usb 5-1: config 166 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 170.303659][ T19] usb 5-1: config 166 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 170.326588][ T19] usb 5-1: config 166 interface 0 has no altsetting 0 [ 170.333550][ T19] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 170.345200][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.381439][ T28] audit: type=1326 audit(2000527955.990:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.1.3490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f440158f749 code=0x0 [ 170.412847][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 170.442397][ T24] usb 4-1: USB disconnect, device number 86 [ 170.468975][ T290] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 170.564569][ T19] usb 5-1: string descriptor 0 read error: -71 [ 170.571237][ T19] ums-sddr09 5-1:166.0: USB Mass Storage device detected [ 170.622349][ T19] ums-sddr09: probe of 5-1:166.0 failed with error -22 [ 170.629504][ T7629] loop2: detected capacity change from 0 to 256 [ 170.633719][ T19] usb 5-1: USB disconnect, device number 84 [ 170.647363][ T7629] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 170.659943][ T7629] exFAT-fs (loop2): failed to load alloc-bitmap [ 170.666338][ T7629] exFAT-fs (loop2): failed to recognize exfat type [ 170.673763][ T599] udevd[599]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 170.673767][ T290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.674510][ T290] usb 1-1: config 255 has an invalid interface number: 154 but max is 0 [ 170.710025][ T290] usb 1-1: config 255 has no interface number 0 [ 170.716384][ T290] usb 1-1: config 255 interface 154 has no altsetting 0 [ 170.726285][ T290] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=9a.6f [ 170.735399][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.743500][ T290] usb 1-1: Product: syz [ 170.747751][ T290] usb 1-1: Manufacturer: syz [ 170.752371][ T290] usb 1-1: SerialNumber: syz [ 170.794391][ T7635] loop2: detected capacity change from 0 to 512 [ 170.802701][ T7635] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 170.812864][ T7635] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3509: iget: bad extended attribute block 851968 [ 170.826125][ T7635] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3509: couldn't read orphan inode 15 (err -117) [ 170.838377][ T7635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 170.849851][ T303] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 170.858043][ T285] EXT4-fs (loop2): unmounting filesystem. [ 170.959554][ T290] usb 1-1: USB disconnect, device number 85 [ 170.969898][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.154/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.032582][ T303] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 171.046871][ T303] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 171.058486][ T303] usb 2-1: config 0 has no interface number 0 [ 171.071028][ T303] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=a1.f1 [ 171.080415][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.089344][ T303] usb 2-1: config 0 descriptor?? [ 171.098167][ T303] usb 2-1: NDI device with a latency value of 1 [ 171.287075][ T303] ftdi_sio 2-1:0.145: FTDI USB Serial Device converter detected [ 171.297021][ T303] ftdi_sio ttyUSB0: unknown device type: 0xa1f1 [ 171.304656][ T303] usb 2-1: USB disconnect, device number 81 [ 171.316749][ T303] ftdi_sio 2-1:0.145: device disconnected [ 171.331777][ T7685] loop4: detected capacity change from 0 to 40427 [ 171.339237][ T7685] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9) [ 171.347783][ T630] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 171.355493][ T7685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 171.364176][ T7685] F2FS-fs (loop4): Should set mode=lfs with 1024KB-sized IO [ 171.395418][ T7695] loop4: detected capacity change from 0 to 512 [ 171.405074][ T7695] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.414995][ T7695] EXT4-fs error (device loop4): __ext4_fill_super:5391: inode #2: comm syz.4.3538: inode has both inline data and extents flags [ 171.428625][ T7695] EXT4-fs (loop4): get root inode failed [ 171.434474][ T7695] EXT4-fs (loop4): mount failed [ 171.478410][ T290] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 171.535583][ T630] usb 4-1: Using ep0 maxpacket: 32 [ 171.542540][ T630] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.551066][ T630] usb 4-1: config 0 has no interface number 0 [ 171.557490][ T630] usb 4-1: config 0 interface 184 has no altsetting 0 [ 171.566085][ T630] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.581231][ T630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.589540][ T630] usb 4-1: Product: syz [ 171.601346][ T630] usb 4-1: Manufacturer: syz [ 171.606029][ T630] usb 4-1: SerialNumber: syz [ 171.611361][ T630] usb 4-1: config 0 descriptor?? [ 171.617147][ T630] smsc75xx v1.0.0 [ 171.620865][ T630] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 171.631760][ T630] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 171.670134][ T290] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 171.679300][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.687910][ T290] usb 3-1: config 0 descriptor?? [ 171.693951][ T290] usb 3-1: unknown interface protocol 0xe6, assuming v1 [ 171.700970][ T290] usb 3-1: cannot find UAC_HEADER [ 171.706993][ T19] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 171.707538][ T290] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 171.726972][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.816976][ T630] usb 4-1: USB disconnect, device number 87 [ 171.859640][ T290] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 171.886501][ T344] usb 3-1: USB disconnect, device number 82 [ 171.898792][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.908499][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 171.920671][ T19] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.929768][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.938202][ T19] usb 5-1: Product: syz [ 171.942401][ T19] usb 5-1: Manufacturer: syz [ 171.947043][ T19] usb 5-1: SerialNumber: syz [ 171.952271][ T19] usb 5-1: config 0 descriptor?? [ 171.958270][ T19] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress 0d [ 172.032168][ T290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.040734][ T290] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.049799][ T290] usb 1-1: config 1 has no interface number 1 [ 172.055970][ T290] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.068931][ T533] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 172.077993][ T290] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.087114][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.095185][ T290] usb 1-1: Product: syz [ 172.099386][ T290] usb 1-1: Manufacturer: syz [ 172.104005][ T290] usb 1-1: SerialNumber: syz [ 172.153907][ T19] usb 5-1: USB disconnect, device number 85 [ 172.240177][ T533] usb 2-1: Using ep0 maxpacket: 32 [ 172.246719][ T533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.255205][ T533] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 172.263597][ T533] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 172.273940][ T533] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 172.283098][ T533] usb 2-1: config 128 has no interface number 0 [ 172.289428][ T533] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 172.300736][ T533] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.311428][ T533] usb 2-1: config 128 interface 127 has no altsetting 0 [ 172.320312][ T290] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 172.327371][ T533] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 172.337264][ T533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.347472][ T290] usb 1-1: USB disconnect, device number 86 [ 172.353977][ T533] usb 2-1: Product: syz [ 172.358350][ T533] usb 2-1: Manufacturer: syz [ 172.363113][ T533] usb 2-1: SerialNumber: syz [ 172.369757][ T599] udevd[599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 172.583638][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 172.602742][ T630] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 172.621391][ T533] usb 2-1: USB disconnect, device number 82 [ 172.682643][ T7741] loop4: detected capacity change from 0 to 512 [ 172.689410][ T7741] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 172.727701][ T421] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.774711][ T630] usb 4-1: config 234 has no interfaces? [ 172.780743][ T630] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 172.819262][ T630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.832557][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.048976][ T303] usb 4-1: USB disconnect, device number 88 [ 173.135987][ T630] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 173.174118][ T290] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 173.190588][ T7761] loop2: detected capacity change from 0 to 32768 [ 173.252228][ T7761] loop2: p3 < > [ 173.309433][ T336] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.326025][ T336] udevd[336]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 173.327467][ T630] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.355410][ T630] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.366317][ T630] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.376055][ T290] usb 5-1: not running at top speed; connect to a high speed hub [ 173.385479][ T630] usb 1-1: too many endpoints for config 1 interface 0 altsetting 2: 64, using maximum allowed: 30 [ 173.398039][ T630] usb 1-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 173.420098][ T290] usb 5-1: config 9 has an invalid interface number: 139 but max is 0 [ 173.422578][ T630] usb 1-1: config 1 interface 0 has no altsetting 0 [ 173.448696][ T290] usb 5-1: config 9 has no interface number 0 [ 173.454468][ T630] usb 1-1: config 1 interface 0 has no altsetting 1 [ 173.464405][ T290] usb 5-1: config 9 interface 139 has no altsetting 0 [ 173.476025][ T630] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.492202][ T290] usb 5-1: New USB device found, idVendor=12d1, idProduct=5437, bcdDevice=7b.f0 [ 173.495506][ T630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.505135][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.518153][ T290] usb 5-1: Product: syz [ 173.522481][ T630] usb 1-1: Product: syz [ 173.527006][ T290] usb 5-1: Manufacturer: syz [ 173.539840][ T290] usb 5-1: SerialNumber: syz [ 173.551289][ T630] usb 1-1: Manufacturer: syz [ 173.554553][ T7807] loop1: detected capacity change from 0 to 512 [ 173.557060][ T7809] loop2: detected capacity change from 0 to 512 [ 173.569728][ T7809] EXT4-fs (loop2): Test dummy encryption mode enabled [ 173.583457][ T630] usb 1-1: SerialNumber: syz [ 173.590421][ T7809] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.603332][ T7809] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 173.622756][ T7807] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.3594: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0) [ 173.643660][ T7807] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3594: couldn't read orphan inode 16 (err -117) [ 173.663485][ T7807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.673424][ T7807] ext4 filesystem being mounted at /716/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.713511][ T283] EXT4-fs (loop1): unmounting filesystem. [ 173.737302][ T7828] cgroup: noprefix used incorrectly [ 173.764917][ T290] usb 5-1: USB disconnect, device number 86 [ 173.796485][ T630] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 173.829964][ T630] usb 1-1: USB disconnect, device number 87 [ 174.050039][ T1031] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 174.126143][ T533] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 174.193198][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 174.222777][ T1031] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.230954][ T1031] usb 4-1: not running at top speed; connect to a high speed hub [ 174.239614][ T1031] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.249601][ T1031] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 174.262945][ T1031] usb 4-1: config 1 interface 0 has no altsetting 0 [ 174.273916][ T1031] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.283153][ T1031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.291226][ T1031] usb 4-1: Product: syz [ 174.295389][ T1031] usb 4-1: Manufacturer: syz [ 174.300091][ T533] usb 2-1: Using ep0 maxpacket: 16 [ 174.305366][ T1031] usb 4-1: SerialNumber: syz [ 174.310895][ T533] usb 2-1: config 3 has an invalid interface number: 208 but max is 0 [ 174.319654][ T533] usb 2-1: config 3 has no interface number 0 [ 174.325862][ T7837] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.333178][ T533] usb 2-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=60.76 [ 174.344483][ T1031] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 174.352858][ T533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.362612][ T533] usb 2-1: bad CDC descriptors [ 174.374071][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 174.380462][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.396330][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 174.406216][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 174.419269][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.428388][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.437766][ T7860] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 174.445487][ T24] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 174.549083][ T303] usb 4-1: USB disconnect, device number 89 [ 174.559362][ T290] usb 2-1: USB disconnect, device number 83 [ 174.611792][ T1031] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 174.639527][ T24] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 174.646588][ T24] usb 3-1: USB disconnect, device number 83 [ 174.649955][ T630] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 174.783588][ T1031] usb 1-1: Using ep0 maxpacket: 16 [ 174.789925][ T1031] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 174.800316][ T1031] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 174.809565][ T1031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.817589][ T1031] usb 1-1: Product: syz [ 174.821958][ T1031] usb 1-1: Manufacturer: syz [ 174.826565][ T1031] usb 1-1: SerialNumber: syz [ 174.832042][ T1031] usb 1-1: config 0 descriptor?? [ 174.838000][ T1031] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 174.846177][ T1031] usb 1-1: Detected FT232R [ 174.852915][ T630] usb 5-1: Using ep0 maxpacket: 32 [ 174.859291][ T630] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 174.867474][ T630] usb 5-1: config 0 has no interface number 0 [ 174.875107][ T630] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 174.884263][ T630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.892698][ T630] usb 5-1: Product: syz [ 174.896882][ T630] usb 5-1: Manufacturer: syz [ 174.901524][ T630] usb 5-1: SerialNumber: syz [ 174.906873][ T630] usb 5-1: config 0 descriptor?? [ 174.912647][ T630] smsc95xx v2.0.0 [ 175.029521][ T1031] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 175.037564][ T1031] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 175.054575][ T1031] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 175.063864][ T1031] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 175.085998][ T1031] usb 1-1: USB disconnect, device number 88 [ 175.098648][ T1031] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 175.105477][ T630] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 175.113371][ T1031] ftdi_sio 1-1:0.0: device disconnected [ 175.118414][ T630] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 175.176519][ T630] usb 5-1: USB disconnect, device number 87 [ 175.256262][ T7902] cgroup: name respecified [ 175.292975][ T7908] loop1: detected capacity change from 0 to 16 [ 175.302529][ T7908] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.382684][ T7920] loop1: detected capacity change from 0 to 512 [ 175.393666][ T7920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.408934][ T283] EXT4-fs (loop1): unmounting filesystem. [ 175.468980][ T7931] loop1: detected capacity change from 0 to 512 [ 175.475452][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 175.490174][ T7931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.507302][ T290] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 175.515530][ T283] EXT4-fs (loop1): unmounting filesystem. [ 175.531743][ T7935] loop1: detected capacity change from 0 to 512 [ 175.573855][ T7935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.604286][ T283] EXT4-fs (loop1): unmounting filesystem. [ 175.645121][ T7947] loop1: detected capacity change from 0 to 1024 [ 175.675715][ T7947] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.678767][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 175.691762][ T290] usb 4-1: Using ep0 maxpacket: 16 [ 175.696120][ T7947] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 175.710075][ T290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.720780][ T7947] EXT4-fs (loop1): invalid journal inode [ 175.721850][ T7953] loop4: detected capacity change from 0 to 1024 [ 175.733251][ T7947] EXT4-fs (loop1): can't get journal size [ 175.735717][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 175.754599][ T7947] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.765523][ T24] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 175.781963][ T24] usb 3-1: config 0 has no interface number 0 [ 175.788568][ T24] usb 3-1: config 0 interface 200 has no altsetting 0 [ 175.794575][ T283] EXT4-fs (loop1): unmounting filesystem. [ 175.796417][ T7953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.809934][ T290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.831963][ T24] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 175.842599][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.850815][ T24] usb 3-1: Product: syz [ 175.855044][ T24] usb 3-1: Manufacturer: syz [ 175.859901][ T24] usb 3-1: SerialNumber: syz [ 175.865441][ T290] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 175.874931][ T24] usb 3-1: config 0 descriptor?? [ 175.875235][ T284] EXT4-fs (loop4): unmounting filesystem. [ 175.880006][ T290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.906215][ T290] usb 4-1: Product: syz [ 175.910585][ T290] usb 4-1: Manufacturer: syz [ 175.915820][ T290] usb 4-1: SerialNumber: syz [ 175.930905][ T290] usb 4-1: config 0 descriptor?? [ 175.955802][ T7972] loop1: detected capacity change from 0 to 512 [ 175.971396][ T7971] loop4: detected capacity change from 0 to 512 [ 175.983957][ T7972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.011551][ T7971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.038404][ T283] EXT4-fs (loop1): unmounting filesystem. [ 176.044674][ T284] EXT4-fs (loop4): unmounting filesystem. [ 176.071733][ T7980] loop1: detected capacity change from 0 to 512 [ 176.093958][ T24] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input21 [ 176.117433][ T24] usb 3-1: USB disconnect, device number 84 [ 176.126731][ T7980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.147052][ T1031] usb 4-1: USB disconnect, device number 90 [ 176.164546][ T283] EXT4-fs (loop1): unmounting filesystem. [ 176.214788][ T7992] loop1: detected capacity change from 0 to 512 [ 176.238128][ T7992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.252354][ T7992] ext4 filesystem being mounted at /749/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.277957][ T283] EXT4-fs (loop1): unmounting filesystem. [ 176.355058][ T290] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 176.537182][ T290] usb 5-1: config 67 has an invalid interface number: 177 but max is 0 [ 176.554861][ T290] usb 5-1: config 67 has no interface number 0 [ 176.561191][ T290] usb 5-1: config 67 interface 177 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 176.583826][ T290] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=eb.17 [ 176.612389][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.637300][ T8001] loop2: detected capacity change from 0 to 512 [ 176.643962][ T7982] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 176.666878][ T290] usb 5-1: bad CDC descriptors [ 176.672124][ T290] cdc_acm 5-1:67.177: Zero length descriptor references [ 176.688169][ T290] cdc_acm: probe of 5-1:67.177 failed with error -22 [ 176.695771][ T8001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.727557][ T285] EXT4-fs (loop2): unmounting filesystem. [ 176.866111][ T290] usb 5-1: USB disconnect, device number 88 [ 177.090162][ T7997] loop1: detected capacity change from 0 to 131072 [ 177.134399][ T7997] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.224497][ T7997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.391147][ T8014] loop4: detected capacity change from 0 to 512 [ 177.428099][ T8014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 177.469290][ T290] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 177.489869][ T284] EXT4-fs (loop4): unmounting filesystem. [ 177.546321][ T8018] loop4: detected capacity change from 0 to 512 [ 177.614686][ T8020] loop1: detected capacity change from 0 to 512 [ 177.638528][ T8022] loop4: detected capacity change from 0 to 256 [ 177.659853][ T290] usb 1-1: Using ep0 maxpacket: 16 [ 177.666436][ T290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.689849][ T290] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 177.716848][ T290] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 177.745318][ T8025] loop4: detected capacity change from 0 to 128 [ 177.754607][ T290] usb 1-1: config 13 has no interface number 0 [ 177.774044][ T290] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 177.812412][ T290] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.815719][ T8028] loop4: detected capacity change from 0 to 2048 [ 177.840795][ T290] usb 1-1: config 13 interface 50 has no altsetting 0 [ 177.865555][ T290] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 177.892912][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.917058][ T290] usb 1-1: Product: syz [ 177.917613][ T8030] loop4: detected capacity change from 0 to 2048 [ 177.926540][ T290] usb 1-1: Manufacturer: syz [ 177.932232][ T290] usb 1-1: SerialNumber: syz [ 177.956182][ T8011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.993323][ T630] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 178.158159][ T290] usb 1-1: MIDIStreaming interface descriptor not found [ 178.175019][ T630] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 178.179890][ T290] usb 1-1: USB disconnect, device number 89 [ 178.183230][ T630] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 178.239435][ T630] usb 2-1: config 8 has no interface number 0 [ 178.249250][ T630] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 178.278429][ T630] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.309010][ T630] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 178.326746][ T630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.329767][ T8032] loop4: detected capacity change from 0 to 32768 [ 178.344979][ T630] usb 2-1: Product: syz [ 178.349401][ T630] usb 2-1: Manufacturer: syz [ 178.354023][ T630] usb 2-1: SerialNumber: syz [ 178.422564][ T421] udevd[421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.451709][ T8034] loop4: detected capacity change from 0 to 2048 [ 178.531155][ T8036] loop4: detected capacity change from 0 to 256 [ 178.575802][ T630] usb 2-1: USB disconnect, device number 84 [ 178.672462][ T8006] loop2: detected capacity change from 0 to 262144 [ 178.717128][ T8006] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.806783][ T8006] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.155100][ T1031] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 179.336392][ T19] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 179.345539][ T1031] usb 1-1: Using ep0 maxpacket: 32 [ 179.351761][ T1031] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 179.389917][ T1031] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 179.409545][ T1031] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 179.420110][ T1031] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 179.440407][ T1031] usb 1-1: config 9 has no interface number 0 [ 179.450241][ T1031] usb 1-1: config 9 interface 221 has no altsetting 0 [ 179.468564][ T1031] usb 1-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 179.490111][ T1031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.507989][ T1031] usb 1-1: Product: syz [ 179.517519][ T1031] usb 1-1: Manufacturer: syz [ 179.526477][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 179.527154][ T1031] usb 1-1: SerialNumber: syz [ 179.533611][ T19] usb 2-1: config index 0 descriptor too short (expected 28826, got 36) [ 179.564549][ T19] usb 2-1: config 58 has too many interfaces: 66, using maximum allowed: 32 [ 179.582851][ T19] usb 2-1: config 58 has an invalid interface descriptor of length 4, skipping [ 179.607436][ T19] usb 2-1: config 58 has an invalid descriptor of length 0, skipping remainder of the config [ 179.627622][ T19] usb 2-1: config 58 has 0 interfaces, different from the descriptor's value: 66 [ 179.659216][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 179.676786][ T19] usb 2-1: New USB device strings: Mfr=0, Product=127, SerialNumber=0 [ 179.680044][ T8067] loop4: detected capacity change from 0 to 128 [ 179.687038][ T19] usb 2-1: Product: syz [ 179.757482][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.221/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.775286][ T1031] usb 1-1: USB disconnect, device number 90 [ 179.795880][ T8073] loop4: detected capacity change from 0 to 128 [ 179.885010][ T8081] netlink: 'syz.4.3716': attribute type 4 has an invalid length. [ 179.905898][ T8081] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3716'. [ 179.918010][ T19] usb 2-1: USB disconnect, device number 85 [ 179.956011][ T8085] loop4: detected capacity change from 0 to 4096 [ 179.994422][ T8085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.062125][ T284] EXT4-fs (loop4): unmounting filesystem. [ 180.103700][ T28] audit: type=1400 audit(2000527966.206:242): avc: denied { create } for pid=8096 comm="syz.4.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.129398][ T28] audit: type=1400 audit(2000527966.227:243): avc: denied { write } for pid=8096 comm="syz.4.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.159322][ T8101] netlink: 'syz.4.3725': attribute type 2 has an invalid length. [ 180.167591][ T8101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.220890][ T8109] xt_TCPMSS: Only works on TCP SYN packets [ 180.308674][ T28] audit: type=1400 audit(2000527966.426:244): avc: denied { bind } for pid=8120 comm="syz.0.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.353853][ T28] audit: type=1400 audit(2000527966.437:245): avc: denied { create } for pid=8122 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.384124][ T28] audit: type=1400 audit(2000527966.437:246): avc: denied { write } for pid=8122 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.404420][ T28] audit: type=1400 audit(2000527966.437:247): avc: denied { nlmsg_write } for pid=8122 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.476683][ T8135] loop1: detected capacity change from 0 to 512 [ 180.499289][ T8135] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.535872][ T8135] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #17: comm syz.1.3739: inode has both inline data and extents flags [ 180.568552][ T8135] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3739: couldn't read orphan inode 17 (err -117) [ 180.598122][ T8135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 180.618130][ T28] audit: type=1400 audit(2000527966.741:248): avc: denied { append } for pid=8152 comm="syz.3.3750" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.641536][ T8153] random: crng reseeded on system resumption [ 180.686932][ T283] EXT4-fs (loop1): unmounting filesystem. [ 180.717352][ T1031] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 180.792718][ T8167] x_tables: duplicate underflow at hook 3 [ 180.798633][ T28] audit: type=1400 audit(2000527966.920:249): avc: denied { create } for pid=8164 comm="syz.4.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.927546][ T8187] netlink: 'syz.1.3766': attribute type 13 has an invalid length. [ 180.935525][ T8057] loop2: detected capacity change from 0 to 262144 [ 180.947395][ T1031] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.975858][ T1031] usb 1-1: config index 0 descriptor too short (expected 33540, got 36) [ 180.983124][ T8057] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.005579][ T1031] usb 1-1: config 108 has too many interfaces: 60, using maximum allowed: 32 [ 181.020037][ T1031] usb 1-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config [ 181.044776][ T1031] usb 1-1: config 108 has 1 interface, different from the descriptor's value: 60 [ 181.054094][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.061377][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.071955][ T8057] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.072328][ T1031] usb 1-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.118500][ T1031] usb 1-1: config 108 interface 0 has no altsetting 0 [ 181.134580][ T1031] usb 1-1: string descriptor 0 read error: -22 [ 181.141749][ T1031] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 181.151114][ T1031] usb 1-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2 [ 181.218796][ T8197] xt_hashlimit: size too large, truncated to 1048576 [ 181.241299][ T8197] xt_hashlimit: invalid rate [ 181.281036][ T8187] syz.1.3766 (8187) used greatest stack depth: 21760 bytes left [ 181.358803][ T8205] loop1: detected capacity change from 0 to 16 [ 181.376234][ T1031] usb 1-1: USB disconnect, device number 91 [ 181.393546][ T8205] erofs: (device loop1): mounted with root inode @ nid 36. [ 181.692123][ T8219] device vlan0 entered promiscuous mode [ 181.893517][ T28] audit: type=1400 audit(2000527968.085:250): avc: denied { setopt } for pid=8232 comm="syz.2.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.945264][ T28] audit: type=1400 audit(2000527968.117:251): avc: denied { name_bind } for pid=8237 comm="syz.0.3790" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 182.028783][ T8245] Illegal XDP return value 4294967274 on prog (id 398) dev N/A, expect packet loss! [ 182.050516][ T1031] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 182.111127][ T8255] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 182.250902][ T1031] usb 2-1: Using ep0 maxpacket: 16 [ 182.257465][ T1031] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.280136][ T1031] usb 2-1: config 200 has an invalid interface number: 170 but max is 0 [ 182.281226][ T8201] loop4: detected capacity change from 0 to 131072 [ 182.295693][ T1031] usb 2-1: config 200 has no interface number 0 [ 182.321952][ T1031] usb 2-1: config 200 interface 170 has no altsetting 0 [ 182.344717][ T1031] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=ed.86 [ 182.364049][ T1031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.373500][ T8201] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.376126][ T1031] usb 2-1: Product: syz [ 182.403303][ T19] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 182.416568][ T1031] usb 2-1: Manufacturer: syz [ 182.422066][ T1031] usb 2-1: SerialNumber: syz [ 182.475787][ T8201] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 182.584917][ T19] usb 3-1: config 9 has an invalid interface number: 81 but max is 0 [ 182.604240][ T19] usb 3-1: config 9 has no interface number 0 [ 182.623335][ T19] usb 3-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 182.635694][ T1031] usb 2-1: unknown interface protocol 0x37, assuming v1 [ 182.644573][ T19] usb 3-1: config 9 interface 81 has no altsetting 0 [ 182.644968][ T1031] usb 2-1: cannot find UAC_HEADER [ 182.663655][ T19] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 182.672028][ T1031] snd-usb-audio: probe of 2-1:200.170 failed with error -22 [ 182.679534][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.701573][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:200.170/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.703779][ T1031] usb 2-1: USB disconnect, device number 86 [ 182.717762][ T19] usb 3-1: Product: syz [ 182.745959][ T19] usb 3-1: Manufacturer: syz [ 182.750638][ T19] usb 3-1: SerialNumber: syz [ 182.775118][ T8257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 182.783275][ T8287] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 182.987706][ T19] usbserial_generic 3-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 183.015632][ T19] usbserial_generic 3-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 183.038776][ T19] usbserial_generic 3-1:9.81: generic converter detected [ 183.057229][ T19] usb 3-1: generic converter now attached to ttyUSB0 [ 183.071001][ T19] usb 3-1: generic converter now attached to ttyUSB1 [ 183.103506][ T19] usb 3-1: USB disconnect, device number 85 [ 183.115831][ T19] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 183.132918][ T19] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 183.143321][ T19] usbserial_generic 3-1:9.81: device disconnected [ 183.446850][ T8353] raw_sendmsg: syz.0.3844 forgot to set AF_INET. Fix it! [ 183.483621][ T8357] netlink: 'syz.4.3847': attribute type 4 has an invalid length. [ 183.492566][ T8357] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3847'. [ 183.596027][ T8370] IPv6: NLM_F_REPLACE set, but no existing node found! [ 183.798881][ T8397] loop1: detected capacity change from 0 to 1024 [ 183.818162][ T8397] EXT4-fs: Ignoring removed bh option [ 183.852878][ T8397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 183.870035][ T8397] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.3868: lblock 2 mapped to illegal pblock 2 (length 1) [ 183.888870][ T8397] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.3868: lblock 0 mapped to illegal pblock 48 (length 1) [ 183.907997][ T8397] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.3868: Failed to acquire dquot type 0 [ 183.927114][ T8397] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 183.947727][ T8397] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.3868: mark_inode_dirty error [ 183.971133][ T8397] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 184.030616][ T8397] EXT4-fs (loop1): 1 orphan inode deleted [ 184.048529][ T8397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.057907][ T10] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.115120][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 0 [ 184.125336][ T8397] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm syz.1.3868: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.154380][ T8424] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3880'. [ 184.176382][ T283] EXT4-fs (loop1): unmounting filesystem. [ 184.198792][ T283] EXT4-fs error (device loop1): __ext4_get_inode_loc:4515: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 184.215851][ T283] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 184.234621][ T283] EXT4-fs error (device loop1): ext4_quota_off:7109: inode #3: comm syz-executor: mark_inode_dirty error [ 184.536881][ T8483] overlayfs: empty lowerdir [ 184.569727][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3909'. [ 184.850047][ T8508] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 185.614561][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 185.614579][ T28] audit: type=1400 audit(2000527971.991:267): avc: denied { read } for pid=8554 comm="syz.1.3930" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 185.679867][ T28] audit: type=1400 audit(2000527972.033:268): avc: denied { open } for pid=8554 comm="syz.1.3930" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 185.711520][ T8568] netlink: 2056 bytes leftover after parsing attributes in process `syz.0.3949'. [ 185.811751][ T8583] netlink: 'syz.4.3957': attribute type 3 has an invalid length. [ 185.885262][ T8410] loop2: detected capacity change from 0 to 262144 [ 185.938770][ T8410] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.958987][ T28] audit: type=1400 audit(2000527972.348:269): avc: denied { getopt } for pid=8607 comm="syz.4.3967" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.022805][ T28] audit: type=1400 audit(2000527972.421:270): avc: denied { read write } for pid=8612 comm="syz.0.3970" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.057322][ T8410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.082993][ T8613] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 186.110258][ T28] audit: type=1400 audit(2000527972.421:271): avc: denied { open } for pid=8612 comm="syz.0.3970" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.137558][ T28] audit: type=1400 audit(2000527972.453:272): avc: denied { ioctl } for pid=8612 comm="syz.0.3970" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.383301][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3982'. [ 186.404837][ T28] audit: type=1400 audit(2000527972.820:273): avc: denied { setopt } for pid=8644 comm="syz.0.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.441361][ T8643] device vlan0 entered promiscuous mode [ 186.464033][ T8649] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.499532][ T28] audit: type=1400 audit(2000527972.925:274): avc: denied { ioctl } for pid=8650 comm="syz.3.3986" path="socket:[39728]" dev="sockfs" ino=39728 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.578357][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3990'. [ 186.780580][ T28] audit: type=1326 audit(2000527973.209:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad478f749 code=0x7ffc0000 [ 186.811686][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4002'. [ 186.866691][ T28] audit: type=1326 audit(2000527973.219:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.2.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad478f749 code=0x7ffc0000 [ 186.919352][ T8707] xt_CONNSECMARK: invalid mode: 66 [ 186.957295][ T8710] netlink: 'syz.4.4012': attribute type 46 has an invalid length. [ 186.965156][ T8710] netlink: 'syz.4.4012': attribute type 19 has an invalid length. [ 186.986656][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4012'. [ 187.016599][ T8725] netlink: 'syz.2.4022': attribute type 32 has an invalid length. [ 187.092750][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 187.121185][ T8741] netlink: 'syz.0.4030': attribute type 2 has an invalid length. [ 187.143451][ T8750] netlink: 'syz.2.4034': attribute type 12 has an invalid length. [ 187.166417][ T8755] netlink: 'syz.0.4036': attribute type 3 has an invalid length. [ 187.174269][ T8755] netlink: 'syz.0.4036': attribute type 3 has an invalid length. [ 187.203222][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'. [ 187.313212][ T8777] netlink: 'syz.2.4046': attribute type 46 has an invalid length. [ 187.333090][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 187.365206][ T8777] netlink: 'syz.2.4046': attribute type 46 has an invalid length. [ 187.382859][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 187.470399][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4058'. [ 189.184709][ C1] sched: RT throttling activated [ 196.448267][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.455559][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.669252][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 196.669267][ T28] audit: type=1400 audit(2000527983.592:283): avc: denied { sys_module } for pid=8859 comm="syz.0.4089" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 196.669984][ T8860] kernel read not supported for file /policy (pid: 8860 comm: syz.0.4089) [ 196.678150][ T28] audit: type=1400 audit(2000527983.592:284): avc: denied { module_load } for pid=8859 comm="syz.0.4089" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 196.786079][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4095'. [ 196.799441][ T8875] xt_TCPMSS: Only works on TCP SYN packets [ 196.937950][ T28] audit: type=1400 audit(2000527983.886:285): avc: denied { audit_write } for pid=8898 comm="syz.4.4108" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 196.979186][ T8904] validate_nla: 1 callbacks suppressed [ 196.979206][ T8904] netlink: 'syz.1.4110': attribute type 19 has an invalid length. [ 196.988792][ T28] audit: type=1107 audit(2000527983.907:286): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 197.053889][ T28] audit: type=1400 audit(2000527984.002:287): avc: denied { nlmsg_write } for pid=8918 comm="syz.2.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 197.075321][ T8904] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4110'. [ 197.085793][ T8915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.187423][ T8939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4127'. [ 197.214032][ T8941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.221402][ T8941] IPv6: NLM_F_CREATE should be set when creating new route [ 197.228666][ T8941] IPv6: NLM_F_CREATE should be set when creating new route [ 197.241417][ T28] audit: type=1400 audit(2000527984.191:288): avc: denied { write } for pid=8942 comm="syz.0.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.265235][ T8945] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4130'. [ 197.325787][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4137'. [ 197.414103][ T8967] netlink: 'syz.2.4142': attribute type 49 has an invalid length. [ 197.422230][ T8967] netlink: 'syz.2.4142': attribute type 49 has an invalid length. [ 197.458290][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4146'. [ 197.557552][ T8990] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 197.586763][ T8994] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.661082][ T28] audit: type=1400 audit(2000527984.632:289): avc: denied { read write } for pid=9004 comm="syz.1.4161" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 197.732549][ T28] audit: type=1400 audit(2000527984.632:290): avc: denied { open } for pid=9004 comm="syz.1.4161" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 197.778448][ T28] audit: type=1400 audit(2000527984.663:291): avc: denied { ioctl } for pid=9004 comm="syz.1.4161" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 197.844869][ T9026] netlink: 'syz.3.4173': attribute type 15 has an invalid length. [ 197.900022][ T9034] netlink: 'syz.2.4176': attribute type 9 has an invalid length. [ 197.971798][ T9045] device batadv_slave_0 entered promiscuous mode [ 197.989893][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4181'. [ 198.038946][ T9045] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 198.237539][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4203'. [ 198.296693][ T9099] binfmt_misc: register: failed to install interpreter file ./file0 [ 198.299686][ T9101] overlayfs: missing 'lowerdir' [ 198.311358][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.327041][ T9091] device bridge_slave_0 left promiscuous mode [ 198.337670][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.452615][ T9119] loop2: detected capacity change from 0 to 256 [ 198.480933][ T8930] loop4: detected capacity change from 0 to 131072 [ 198.494117][ T9119] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 198.534705][ T8930] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.551537][ T28] audit: type=1400 audit(2000527985.566:292): avc: denied { write } for pid=9117 comm="syz.2.4219" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.662508][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4231'. [ 198.694903][ T8930] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.699634][ T9154] netlink: 'syz.3.4233': attribute type 13 has an invalid length. [ 198.744303][ T9154] gretap0: refused to change device tx_queue_len [ 198.762867][ T9154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.794614][ T9167] device macsec0 entered promiscuous mode [ 198.976229][ T9197] xt_ecn: cannot match TCP bits for non-tcp packets [ 199.172613][ T9228] x_tables: unsorted entry at hook 2 [ 199.282493][ T9237] loop1: detected capacity change from 0 to 4096 [ 199.300747][ T9237] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 199.331133][ T283] EXT4-fs (loop1): unmounting filesystem. [ 199.372530][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4285'. [ 199.445605][ T9269] netlink: 'syz.0.4289': attribute type 1 has an invalid length. [ 199.450264][ T9272] syz.4.4288 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.513930][ T9283] xt_bpf: check failed: parse error [ 199.570246][ T9293] device ip6gretap3 entered promiscuous mode [ 200.197698][ T9417] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.482038][ T9462] netlink: 'syz.2.4383': attribute type 5 has an invalid length. [ 200.780175][ T9483] xt_TCPMSS: Only works on TCP SYN packets [ 200.799722][ T9486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.965235][ T9516] netlink: 'syz.2.4410': attribute type 2 has an invalid length. [ 201.045932][ T9530] netlink: 'syz.3.4417': attribute type 24 has an invalid length. [ 201.217241][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.237620][ T9561] device bridge_slave_0 left promiscuous mode [ 201.280919][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.397709][ T9590] loop2: detected capacity change from 0 to 256 [ 201.426955][ T9590] FAT-fs (loop2): Directory bread(block 64) failed [ 201.463076][ T9590] FAT-fs (loop2): Directory bread(block 65) failed [ 201.472755][ T9590] FAT-fs (loop2): Directory bread(block 66) failed [ 201.479659][ T9590] FAT-fs (loop2): Directory bread(block 67) failed [ 201.507482][ T9590] FAT-fs (loop2): Directory bread(block 68) failed [ 201.537018][ T9590] FAT-fs (loop2): Directory bread(block 69) failed [ 201.543405][ T28] kauditd_printk_skb: 323 callbacks suppressed [ 201.543424][ T28] audit: type=1400 audit(2000527988.706:616): avc: denied { write } for pid=9604 comm="syz.0.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.562452][ T9590] FAT-fs (loop2): Directory bread(block 70) failed [ 201.611600][ T9590] FAT-fs (loop2): Directory bread(block 71) failed [ 201.632054][ T9590] FAT-fs (loop2): Directory bread(block 72) failed [ 201.645714][ T9590] FAT-fs (loop2): Directory bread(block 73) failed [ 201.728364][ T28] audit: type=1400 audit(2000527988.905:617): avc: denied { write } for pid=9623 comm="syz.0.4464" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.773075][ T9630] ipt_REJECT: ECHOREPLY no longer supported. [ 201.968171][ T9665] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 202.098987][ T9685] __nla_validate_parse: 9 callbacks suppressed [ 202.099008][ T9685] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4493'. [ 202.206429][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4505'. [ 202.207722][ T9707] netlink: 'syz.4.4504': attribute type 10 has an invalid length. [ 202.229590][ T9707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.292198][ T9721] netlink: 'syz.2.4511': attribute type 21 has an invalid length. [ 202.415645][ T28] audit: type=1326 audit(2000527989.629:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9746 comm="syz.3.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 202.455638][ T28] audit: type=1326 audit(2000527989.629:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9746 comm="syz.3.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 202.479737][ T28] audit: type=1326 audit(2000527989.661:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9746 comm="syz.3.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 202.504065][ T28] audit: type=1326 audit(2000527989.661:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9746 comm="syz.3.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 202.530477][ T28] audit: type=1400 audit(2000527989.703:622): avc: denied { read append } for pid=9758 comm="syz.3.4530" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 202.555320][ T28] audit: type=1400 audit(2000527989.703:623): avc: denied { open } for pid=9758 comm="syz.3.4530" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 202.796395][ T9815] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.806618][ T9815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.813886][ T9815] IPv6: NLM_F_CREATE should be set when creating new route [ 202.820287][ T9821] Zero length message leads to an empty skb [ 202.822462][ T9819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.928874][ T9839] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 202.960037][ T28] audit: type=1326 audit(2000527990.196:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2158f749 code=0x7ffc0000 [ 202.960160][ T28] audit: type=1326 audit(2000527990.196:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.4.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2158f749 code=0x7ffc0000 [ 203.050464][ T9860] mmap: syz.4.4581 (9860): VmData 167489536 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 203.070650][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.238391][ T9885] tc_dump_action: action bad kind [ 203.313630][ T9898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4600'. [ 203.423586][ T1031] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 203.527122][ T9936] loop4: detected capacity change from 0 to 256 [ 203.614141][ T1031] usb 4-1: Using ep0 maxpacket: 16 [ 203.620752][ T1031] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 203.647507][ T9956] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4627'. [ 203.656935][ T1031] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 203.675067][ T1031] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 203.685166][ T9956] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 203.713729][ T1031] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 203.734751][ T1031] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 203.781847][ T1031] usb 4-1: config 1 interface 0 has no altsetting 0 [ 203.803272][ T1031] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 203.837057][ T1031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.840920][ T9979] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4639'. [ 203.873838][ T1031] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 203.967585][T10005] x_tables: unsorted underflow at hook 4 [ 204.078039][ T1031] scsi host1: usb-storage 4-1:1.0 [ 204.192328][T10048] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 204.264956][ T303] usb 4-1: USB disconnect, device number 91 [ 204.283266][T10063] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4679'. [ 204.483096][T10105] netlink: 'syz.0.4698': attribute type 12 has an invalid length. [ 204.634504][T10132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4712'. [ 204.744231][T10151] netlink: 'syz.1.4722': attribute type 3 has an invalid length. [ 204.753535][T10151] netlink: 'syz.1.4722': attribute type 3 has an invalid length. [ 204.894197][T10185] x_tables: unsorted underflow at hook 4 [ 204.948986][T10193] netlink: 'syz.2.4742': attribute type 5 has an invalid length. [ 205.008730][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4748'. [ 205.078194][T10219] xt_TCPMSS: Only works on TCP SYN packets [ 205.146823][T10231] netlink: 'syz.3.4761': attribute type 21 has an invalid length. [ 205.158641][T10233] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4762'. [ 205.427700][T10288] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4788'. [ 205.520438][T10303] xt_l2tp: unknown flags: 17 [ 205.804371][T10351] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.188390][ T1031] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 207.397743][ T1031] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.421423][ T1031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.438038][ T1031] usb 1-1: config 0 descriptor?? [ 207.443595][T10387] netlink: 'syz.3.4839': attribute type 4 has an invalid length. [ 207.454289][T10389] netlink: 'syz.1.4838': attribute type 49 has an invalid length. [ 207.550073][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 207.550108][ T28] audit: type=1400 audit(2000527995.026:648): avc: denied { bind } for pid=10408 comm="syz.2.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.610047][T10417] netlink: 'syz.3.4855': attribute type 3 has an invalid length. [ 207.624015][ T28] audit: type=1400 audit(2000527995.079:649): avc: denied { connect } for pid=10420 comm="syz.4.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.655358][ T1031] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 207.740307][T10439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.847332][ T1031] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 207.866766][ T1031] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 207.877160][ T28] audit: type=1400 audit(2000527995.362:650): avc: denied { ioctl } for pid=10467 comm="syz.4.4879" path="socket:[46596]" dev="sockfs" ino=46596 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.912316][ T1031] asix: probe of 1-1:0.0 failed with error -71 [ 207.919901][ T1031] usb 1-1: USB disconnect, device number 92 [ 208.024946][T10496] __nla_validate_parse: 1 callbacks suppressed [ 208.024966][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4892'. [ 208.221125][ T28] audit: type=1400 audit(2000527995.719:651): avc: denied { ioctl } for pid=10537 comm="syz.4.4913" path="socket:[46742]" dev="sockfs" ino=46742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.263052][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4915'. [ 208.457030][T10532] loop1: detected capacity change from 0 to 40427 [ 208.500783][T10532] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 208.518896][T10532] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 208.556443][T10532] F2FS-fs (loop1): invalid crc value [ 208.594978][T10532] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.598261][T10579] xt_socket: unknown flags 0x58 [ 208.708547][T10532] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 208.718688][T10532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.852908][ T28] audit: type=1326 audit(2000527996.391:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.0.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26038f749 code=0x7ffc0000 [ 208.932227][T10603] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 208.950768][ T28] audit: type=1326 audit(2000527996.391:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.0.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26038f749 code=0x7ffc0000 [ 209.024077][ T28] audit: type=1326 audit(2000527996.412:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.0.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff26038f749 code=0x7ffc0000 [ 209.067914][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4952'. [ 209.081269][ T28] audit: type=1326 audit(2000527996.412:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.0.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26038f749 code=0x7ffc0000 [ 209.136452][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4952'. [ 209.159321][ T28] audit: type=1326 audit(2000527996.412:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.0.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26038f749 code=0x7ffc0000 [ 209.239876][ T533] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.252705][ T533] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.289899][ T533] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.367102][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4969'. [ 209.457969][ T28] audit: type=1400 audit(2000527997.021:657): avc: denied { read } for pid=10663 comm="syz.1.4974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.641015][T10687] netlink: 'syz.4.4985': attribute type 1 has an invalid length. [ 209.710135][ T533] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.710538][T10691] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4987'. [ 209.843468][ T533] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.931516][T10714] device macsec0 entered promiscuous mode [ 209.976694][T10723] device ip6tnl1 entered promiscuous mode [ 211.743908][T10729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5006'. [ 211.942205][T10769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5026'. [ 211.959264][T10774] xt_hashlimit: max too large, truncated to 1048576 [ 212.024464][ T290] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 212.048504][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5036'. [ 212.159648][T10811] xt_CT: No such helper "snmp" [ 212.225667][ T290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.245634][ T290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.277546][ T290] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.296627][T10835] xt_socket: unknown flags 0x40 [ 212.308330][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.334257][ T290] usb 2-1: SerialNumber: syz [ 212.362008][T10849] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5067'. [ 212.549437][ T290] usb 2-1: 0:2 : does not exist [ 212.557471][ T290] usb 2-1: USB disconnect, device number 87 [ 212.665113][T10905] netlink: 'syz.3.5094': attribute type 11 has an invalid length. [ 212.763132][T10925] device sit0 entered promiscuous mode [ 212.772920][T10925] netlink: 'syz.0.5105': attribute type 1 has an invalid length. [ 212.827525][T10937] loop4: detected capacity change from 0 to 512 [ 212.837806][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 212.837823][ T28] audit: type=1400 audit(2000528000.570:670): avc: denied { validate_trans } for pid=10938 comm="syz.3.5111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 212.838335][T10937] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.883835][T10937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.899903][T10937] EXT4-fs error (device loop4): __ext4_iget:5093: inode #11: block 1: comm syz.4.5110: invalid block [ 212.912947][ T28] audit: type=1400 audit(2000528000.654:671): avc: denied { write } for pid=10948 comm="syz.0.5115" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 212.913169][T10937] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.5110: couldn't read orphan inode 11 (err -117) [ 212.951951][T10937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.024602][ T284] EXT4-fs (loop4): unmounting filesystem. [ 213.172098][T10990] netlink: 'syz.2.5136': attribute type 5 has an invalid length. [ 213.272291][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 213.371192][T11028] __nla_validate_parse: 10 callbacks suppressed [ 213.371211][T11028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5152'. [ 213.515115][T11056] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 213.641478][ T28] audit: type=1326 audit(2000528001.399:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.3.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 213.666824][ T28] audit: type=1326 audit(2000528001.399:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.3.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 213.690479][ T28] audit: type=1326 audit(2000528001.399:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.3.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 213.715441][ T28] audit: type=1326 audit(2000528001.399:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.3.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 213.740516][ T28] audit: type=1326 audit(2000528001.399:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.3.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 213.765777][ T28] audit: type=1326 audit(2000528001.399:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.3.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 213.789485][ T28] audit: type=1326 audit(2000528001.399:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.3.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5690f8f749 code=0x7ffc0000 [ 213.891955][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'. [ 213.916510][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5196'. [ 213.927829][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5196'. [ 213.940864][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5196'. [ 213.972520][T11128] device macsec0 left promiscuous mode [ 214.164706][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'. [ 214.180397][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5223'. [ 214.208648][T11172] netlink: 'syz.1.5224': attribute type 5 has an invalid length. [ 214.313226][ T28] audit: type=1400 audit(2000528002.124:679): avc: denied { ioctl } for pid=11198 comm="syz.4.5238" path="pid:[4026532290]" dev="nsfs" ino=4026532290 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.487634][T11235] device bridge_slave_1 left promiscuous mode [ 214.487677][T11233] loop2: detected capacity change from 0 to 512 [ 214.496722][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.514964][T11235] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 214.536879][T11233] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.540576][T11243] syz.4.5259 (11243): /proc/11243/oom_adj is deprecated, please use /proc/11243/oom_score_adj instead. [ 214.553570][T11233] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.5255: Directory block failed checksum [ 214.586675][ T285] EXT4-fs (loop2): unmounting filesystem. [ 214.626959][T11251] netlink: 'syz.2.5261': attribute type 3 has an invalid length. [ 214.703775][T11266] netlink: 'syz.1.5270': attribute type 32 has an invalid length. [ 214.787709][T11282] netlink: 3260 bytes leftover after parsing attributes in process `syz.3.5279'. [ 215.072254][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 215.258229][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.292948][ T24] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 215.306680][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.334539][ T24] usb 5-1: Product: syz [ 215.346548][ T24] usb 5-1: Manufacturer: syz [ 215.363401][ T24] usb 5-1: SerialNumber: syz [ 215.382422][ T24] usb 5-1: config 0 descriptor?? [ 215.469857][T11399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.558709][T11410] x_tables: duplicate underflow at hook 4 [ 215.594427][ T24] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 215.615505][T11419] netlink: 'syz.3.5347': attribute type 1 has an invalid length. [ 215.619324][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.723246][T11432] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5353'. [ 215.782625][ T24] usb 5-1: USB disconnect, device number 89 [ 215.805131][T11445] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 216.137749][T11501] netlink: 'syz.1.5387': attribute type 1 has an invalid length. [ 216.244545][T11517] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5396'. [ 216.486237][T11571] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 216.548105][T11583] netlink: 'syz.1.5427': attribute type 12 has an invalid length. [ 216.646586][T11605] xt_limit: Overflow, try lower: 2147483649/3300 [ 216.772403][T11628] netlink: 'syz.3.5449': attribute type 1 has an invalid length. [ 217.053155][ T533] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 217.089011][T11698] xt_ecn: cannot match TCP bits for non-tcp packets [ 217.253161][ T533] usb 1-1: Using ep0 maxpacket: 32 [ 217.259697][ T533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.300736][ T533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.332036][ T533] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.349867][ T533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.372712][ T533] usb 1-1: config 0 descriptor?? [ 217.393501][ T533] hub 1-1:0.0: USB hub found [ 217.448025][T11760] loop1: detected capacity change from 0 to 256 [ 217.473592][T11760] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 217.500220][T11760] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 217.519811][T11760] exFAT-fs (loop1): Filesystem has been set read-only [ 217.575621][T11781] device macsec0 left promiscuous mode [ 217.586034][ T533] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 217.603436][T11781] device ip6tnl1 left promiscuous mode [ 217.617987][T11784] device ipip0 entered promiscuous mode [ 217.677330][T11794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.752398][T11808] validate_nla: 8 callbacks suppressed [ 217.752417][T11808] netlink: 'syz.1.5538': attribute type 7 has an invalid length. [ 217.772813][T11808] netlink: 'syz.1.5538': attribute type 8 has an invalid length. [ 217.784071][T11808] netlink: 'syz.1.5538': attribute type 13 has an invalid length. [ 217.792296][ T533] usbhid 1-1:0.0: can't add hid device: -71 [ 217.798457][ T533] usbhid: probe of 1-1:0.0 failed with error -71 [ 217.835062][ T533] usb 1-1: USB disconnect, device number 93 [ 218.027801][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 218.027818][ T28] audit: type=1400 audit(2000528006.019:714): avc: denied { connect } for pid=11849 comm="syz.1.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.120191][T11866] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 218.225590][T11884] xt_connbytes: Forcing CT accounting to be enabled [ 218.296382][T11896] __nla_validate_parse: 14 callbacks suppressed [ 218.296402][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5583'. [ 218.387869][ T533] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 218.434563][ T28] audit: type=1326 audit(2000528006.439:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.2.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad478f749 code=0x7ffc0000 [ 218.458279][ T28] audit: type=1326 audit(2000528006.449:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.2.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fdad478f749 code=0x7ffc0000 [ 218.485714][ T28] audit: type=1326 audit(2000528006.449:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.2.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad478f749 code=0x7ffc0000 [ 218.597244][ T533] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.626499][ T533] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 218.646467][ T533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.663474][ T533] usb 2-1: Product: syz [ 218.669134][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5609'. [ 218.676470][ T533] usb 2-1: Manufacturer: syz [ 218.683168][ T533] usb 2-1: SerialNumber: syz [ 218.714250][ T533] usb 2-1: config 0 descriptor?? [ 218.786222][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5622'. [ 218.803871][ T28] audit: type=1400 audit(2000528006.827:718): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.861294][ T28] audit: type=1400 audit(2000528006.827:719): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.903907][ T28] audit: type=1400 audit(2000528006.827:720): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.931076][ T533] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 218.936248][ T28] audit: type=1400 audit(2000528006.880:721): avc: denied { create } for pid=11976 comm="syz.0.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.977661][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.007351][ T28] audit: type=1400 audit(2000528006.943:722): avc: denied { ioctl } for pid=11861 comm="syz.1.5565" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.072486][ T28] audit: type=1400 audit(2000528007.111:723): avc: denied { create } for pid=12004 comm="syz.3.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 219.119415][ T533] usb 2-1: USB disconnect, device number 88 [ 219.214137][T12025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.504526][T12084] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 219.550039][T12096] IPv6: Can't replace route, no match found [ 219.678054][T12121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.743151][T12132] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5697'. [ 219.758186][T12135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.917055][T12166] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 220.150848][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5741'. [ 220.178437][T12220] IPv6: NLM_F_REPLACE set, but no existing node found! [ 220.279546][T12243] netlink: 'syz.4.5753': attribute type 11 has an invalid length. [ 220.333304][T12255] loop4: detected capacity change from 0 to 256 [ 220.651852][T12310] netlink: 'syz.2.5785': attribute type 4 has an invalid length. [ 220.705577][T12310] netlink: 'syz.2.5785': attribute type 5 has an invalid length. [ 220.726574][T12319] netlink: 'syz.1.5791': attribute type 30 has an invalid length. [ 220.736374][T12310] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5785'. [ 220.766100][T12329] cgroup: noprefix used incorrectly [ 221.168227][T12399] loop4: detected capacity change from 0 to 512 [ 221.216696][T12399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 221.235187][T12399] ext4 filesystem being mounted at /1201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.264750][ T284] EXT4-fs (loop4): unmounting filesystem. [ 221.354781][T12434] sock: sock_timestamping_bind_phc: sock not bind to device [ 221.587221][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 221.609995][T12488] xt_CT: No such helper "pptp" [ 221.767462][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5887'. [ 221.839533][T12532] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 221.873893][T12540] netlink: 'syz.1.5898': attribute type 41 has an invalid length. [ 221.915282][T12548] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5902'. [ 221.969425][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5907'. [ 222.000172][T12566] netlink: 'syz.1.5911': attribute type 7 has an invalid length. [ 222.057433][T12582] netlink: 'syz.4.5919': attribute type 5 has an invalid length. [ 222.068259][T12582] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5919'. [ 222.097261][T12590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.145546][T12602] xt_CT: No such helper "syz0" [ 222.553352][T12714] xt_l2tp: invalid flags combination: 8 [ 222.668233][T12745] netlink: 'syz.0.5999': attribute type 46 has an invalid length. [ 222.799358][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 222.799376][ T28] audit: type=1400 audit(2000528011.027:958): avc: denied { read write } for pid=284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.841451][ T28] audit: type=1400 audit(2000528011.027:959): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.905880][ T28] audit: type=1400 audit(2000528011.069:960): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.912500][T12786] ipt_REJECT: TCP_RESET invalid for non-tcp [ 222.931485][ T28] audit: type=1400 audit(2000528011.069:961): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.006284][ T28] audit: type=1400 audit(2000528011.079:962): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.057762][ T28] audit: type=1400 audit(2000528011.111:963): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.085358][T12815] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 223.104893][ T28] audit: type=1400 audit(2000528011.132:964): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.171708][ T28] audit: type=1400 audit(2000528011.132:965): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.238827][ T28] audit: type=1400 audit(2000528011.226:966): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.316292][ T28] audit: type=1400 audit(2000528011.237:967): avc: denied { read write } for pid=284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.439434][T12879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.814264][T12953] __nla_validate_parse: 6 callbacks suppressed [ 223.814284][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6103'. [ 223.959848][T12987] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6117'. [ 224.099156][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6132'. [ 224.388506][T13063] xt_limit: Overflow, try lower: 65536/2147483648 [ 224.388515][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6146'. [ 224.410346][T13067] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 224.553695][T13087] x_tables: unsorted entry at hook 1 [ 224.776565][T13138] xt_l2tp: wrong L2TP version: 0 [ 224.823669][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6201'. [ 224.872496][T13167] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6207'. [ 224.969233][T13191] xt_TCPMSS: Only works on TCP SYN packets [ 224.993035][T13197] ip6t_REJECT: ECHOREPLY is not supported [ 225.021625][T13201] xt_policy: output policy not valid in PREROUTING and INPUT [ 225.244871][T13253] netlink: 'syz.3.6253': attribute type 4 has an invalid length. [ 225.281755][T13253] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6253'. [ 225.392931][T13293] xt_hashlimit: max too large, truncated to 1048576 [ 225.638874][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'. [ 225.907704][T13420] netlink: 'syz.4.6334': attribute type 49 has an invalid length. [ 226.614068][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6392'. [ 226.923217][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6429'. [ 227.080829][T13662] netlink: 'syz.1.6452': attribute type 13 has an invalid length. [ 227.207512][T13691] netlink: 'syz.1.6467': attribute type 7 has an invalid length. [ 227.225843][T13691] netlink: 'syz.1.6467': attribute type 8 has an invalid length. [ 227.283325][T13709] netlink: 'syz.1.6476': attribute type 12 has an invalid length. [ 227.308956][T13714] xt_connbytes: Forcing CT accounting to be enabled [ 227.565810][T13776] xt_socket: unknown flags 0x4c [ 227.570868][ T28] kauditd_printk_skb: 594 callbacks suppressed [ 227.570883][ T28] audit: type=1400 audit(2000528016.045:1562): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.617601][ T28] audit: type=1400 audit(2000528016.066:1563): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.642125][ T28] audit: type=1400 audit(2000528016.087:1564): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.699775][ T28] audit: type=1400 audit(2000528016.119:1565): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.740955][ T28] audit: type=1400 audit(2000528016.140:1566): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.780274][ T28] audit: type=1400 audit(2000528016.150:1567): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.811236][ T28] audit: type=1400 audit(2000528016.161:1568): avc: denied { create } for pid=13788 comm="syz.1.6516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 227.846192][ T28] audit: type=1400 audit(2000528016.161:1569): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.909217][ T28] audit: type=1400 audit(2000528016.171:1570): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.909319][T13827] xt_hashlimit: max too large, truncated to 1048576 [ 227.952316][T13827] xt_hashlimit: invalid interval [ 227.954792][ T28] audit: type=1400 audit(2000528016.182:1571): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 228.130279][ T916] ------------[ cut here ]------------ [ 228.135923][ T916] kernel BUG at fs/buffer.c:2714! [ 228.178543][ T916] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 228.184676][ T916] CPU: 1 PID: 916 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 228.193560][ T916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.203655][ T916] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 228.209079][ T916] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 08 36 e8 ff e9 b0 fe ff ff e8 ae bb a3 ff 0f 0b e8 a7 bb a3 ff <0f> 0b e8 a0 bb a3 ff 0f 0b e8 99 bb a3 ff 0f 0b e8 92 bb a3 ff 0f [ 228.228719][ T916] RSP: 0018:ffffc90011ac7ca0 EFLAGS: 00010293 [ 228.234797][ T916] RAX: ffffffff81cc6e19 RBX: 0000000000000000 RCX: ffff88811440bcc0 [ 228.242772][ T916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.250759][ T916] RBP: ffffc90011ac7cf0 R08: dffffc0000000000 R09: ffffed1022c37d90 [ 228.258737][ T916] R10: ffffed1022c37d90 R11: 1ffff11022c37d8f R12: 0000000000000000 [ 228.266708][ T916] R13: 1ffff11022c37d8f R14: ffff8881161bec78 R15: 0000000000003801 [ 228.274691][ T916] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 228.283639][ T916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.290237][ T916] CR2: 00007f44024b2f98 CR3: 00000001302df000 CR4: 00000000003506a0 [ 228.298214][ T916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.306191][ T916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.314174][ T916] Call Trace: [ 228.317472][ T916] [ 228.320405][ T916] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 228.326222][ T916] submit_bh+0x1f/0x30 [ 228.330296][ T916] write_mmp_block_thawed+0x34a/0x4c0 [ 228.335677][ T916] ? read_mmp_block+0x6d0/0x6d0 [ 228.340539][ T916] ? __cfi_process_timeout+0x10/0x10 [ 228.345830][ T916] write_mmp_block+0x138/0x2b0 [ 228.350599][ T916] kmmpd+0x3ce/0x950 [ 228.354515][ T916] kthread+0x281/0x320 [ 228.358604][ T916] ? __cfi_kmmpd+0x10/0x10 [ 228.363044][ T916] ? __cfi_kthread+0x10/0x10 [ 228.367642][ T916] ret_from_fork+0x1f/0x30 [ 228.372066][ T916] [ 228.375096][ T916] Modules linked in: [ 228.397151][ T916] ---[ end trace 0000000000000000 ]--- [ 228.402725][ T916] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 228.408667][ T916] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 08 36 e8 ff e9 b0 fe ff ff e8 ae bb a3 ff 0f 0b e8 a7 bb a3 ff <0f> 0b e8 a0 bb a3 ff 0f 0b e8 99 bb a3 ff 0f 0b e8 92 bb a3 ff 0f [ 228.428421][ T916] RSP: 0018:ffffc90011ac7ca0 EFLAGS: 00010293 [ 228.428455][ T916] RAX: ffffffff81cc6e19 RBX: 0000000000000000 RCX: ffff88811440bcc0 [ 228.428470][ T916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.428481][ T916] RBP: ffffc90011ac7cf0 R08: dffffc0000000000 R09: ffffed1022c37d90 [ 228.428496][ T916] R10: ffffed1022c37d90 R11: 1ffff11022c37d8f R12: 0000000000000000 [ 228.428511][ T916] R13: 1ffff11022c37d8f R14: ffff8881161bec78 R15: 0000000000003801 [ 228.428525][ T916] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 228.428542][ T916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.428555][ T916] CR2: 00007f44017b7198 CR3: 000000010d175000 CR4: 00000000003506a0 [ 228.428572][ T916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.428584][ T916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.428599][ T916] Kernel panic - not syncing: Fatal exception [ 228.428999][ T916] Kernel Offset: disabled [ 228.524756][ T916] Rebooting in 86400 seconds..