last executing test programs: 21m28.035936839s ago: executing program 0 (id=586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x30, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 21m27.790071066s ago: executing program 0 (id=587): pipe2$9p(&(0x7f0000000300), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) fchdir(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) 21m27.43006991s ago: executing program 0 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000001cc0)=""/4096, &(0x7f0000000440)=0x1000) 21m27.246905092s ago: executing program 0 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) 21m26.948113542s ago: executing program 0 (id=590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x8800) 21m25.824604528s ago: executing program 0 (id=592): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000400)=""/198}, 0x20) 21m25.824408848s ago: executing program 32 (id=592): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000400)=""/198}, 0x20) 8m53.570021636s ago: executing program 2 (id=1812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8m53.409352166s ago: executing program 2 (id=1814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9e", 0x50}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8m53.118693006s ago: executing program 2 (id=1816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x2, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20001]], '\x00', [{}, {}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x200000}, {}, {0x0, 0x4}, {0x400005, 0x2}, {0xd, 0x400000}, {0xe}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 8m53.008438693s ago: executing program 2 (id=1817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 8m52.857211323s ago: executing program 2 (id=1818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) mknodat(r3, &(0x7f0000000140)='./file1\x00', 0x400, 0x2) fchdir(r3) r5 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x4d9b6eaf) 8m30.42482514s ago: executing program 2 (id=1841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$alg(0x26, 0x5, 0x0) 7m45.370537447s ago: executing program 33 (id=1841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$alg(0x26, 0x5, 0x0) 10.481055021s ago: executing program 1 (id=2285): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) 10.370611999s ago: executing program 1 (id=2286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "a0"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 10.270506395s ago: executing program 1 (id=2287): r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0xffffffb5) 10.20052878s ago: executing program 1 (id=2288): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) 10.100193587s ago: executing program 1 (id=2289): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) 9.989597864s ago: executing program 1 (id=2290): io_uring_setup(0x1fc1, &(0x7f00000002c0)={0x0, 0xfc95, 0x0, 0x0, 0x157}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a80)={0x2020}, 0x2020) 880.918421ms ago: executing program 3 (id=2291): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 590.272681ms ago: executing program 3 (id=2292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) 481.077228ms ago: executing program 3 (id=2293): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x6, 0x9, 0x20, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40001c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x1000003, 0x0, 0x1, 0x1ff]}, 0x45c) 240.745294ms ago: executing program 3 (id=2294): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040)) 130.107542ms ago: executing program 3 (id=2295): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000240)={{0xc, 0x1, 0x9, 0x2, '\x00', 0x9}, 0x0, [0x9, 0x7, 0x1, 0x5, 0x3, 0x4, 0x7, 0x400, 0x103, 0x8, 0xfffffdfc, 0x401, 0x20ef, 0x7ff, 0xdd, 0x0, 0x0, 0x1e13e124, 0x7fff, 0x7, 0x2, 0x5, 0xfffffffd, 0x2d1, 0x45ba, 0x8, 0xd, 0x4, 0x4, 0x1, 0x2, 0x4, 0x0, 0x2, 0x200, 0x7f, 0x3, 0xc00, 0xdf91, 0x401, 0x9, 0x7f, 0x0, 0xfff, 0xfeee, 0x7, 0x7ff, 0x4, 0x3, 0xfffffff8, 0xa, 0x80000001, 0x800, 0xdf, 0xffff, 0x101, 0xd9d, 0xfffffffc, 0xbc, 0x7fe, 0x3, 0x5, 0x7, 0xffffffff, 0xfffffffb, 0x5512, 0x1, 0x2004, 0x4, 0x9, 0x7fff, 0x10000009, 0x8, 0x9, 0x7, 0x4b60ef72, 0x2, 0x0, 0x0, 0xfff7fffb, 0x3fe, 0x2, 0x4, 0x88e, 0x1, 0x37, 0x7, 0x9, 0x8, 0xc3, 0x8000, 0x8003, 0x7, 0x4, 0x3, 0x80000001, 0x3e5c245, 0xb2, 0x20002, 0x7, 0x67, 0x2, 0xffff, 0x1, 0xfffffffe, 0x7, 0xc4e, 0x8, 0x3, 0x1, 0x6, 0xd3, 0x0, 0x8, 0x5, 0x2, 0x1, 0x4, 0xd, 0x6, 0xfffeffff, 0x5, 0x2, 0x1, 0x5, 0x80000001, 0x400, 0x80000001]}) r0 = syz_io_uring_setup(0x42c4, &(0x7f00000007c0)={0x0, 0xa56e, 0x13500, 0xfffffffe, 0x389}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 0s ago: executing program 3 (id=2296): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}], 0x1, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0088471327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001800)={{0x9, 0x4, 0x4, 0x10000, 'syz0\x00', 0x6}, 0x3, 0x20, 0x6, 0x0, 0x2, 0x6, 'syz0\x00', &(0x7f0000000180)=['/dev/snd/pcmC#D6\x03\xf2\xfd2\xe7\xb3\xe9+L}\x84J\x8a\x04#p\x00', '\x00'], 0x22}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x21, 0x7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x9, 0xe1cb, 0x4, 0x4, 0x3, 0x395, 0x80000089, 0x2, 0x4, 0xa, 0xffffeadb, 0x1, 0x80000000, 0x8, 0x7ffffffd, 0x8000000, 0x1]}) kernel console output (not intermixed with test programs): ng 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.924723][ T1806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 665.937357][ T1806] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 665.938503][ T1806] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 665.939618][ T1806] usb 2-1: Manufacturer: syz [ 665.947215][ T1806] usb 2-1: config 0 descriptor?? [ 666.401156][ T1806] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 666.422514][ T1806] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 668.447470][ T3698] usb 2-1: USB disconnect, device number 35 [ 669.381403][ T7570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.382243][ T7570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.781727][ T29] audit: type=1400 audit(675.690:592): avc: denied { map } for pid=7579 comm="syz.2.935" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 669.792270][ T29] audit: type=1400 audit(675.710:593): avc: denied { call } for pid=7579 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 669.866277][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.869102][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.002123][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.010303][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.035366][ T1806] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 671.202980][ T1806] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 671.203284][ T1806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.205878][ T1806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.205950][ T1806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 671.220952][ T1806] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 671.221170][ T1806] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 671.221737][ T1806] usb 2-1: Manufacturer: syz [ 671.227063][ T1806] usb 2-1: config 0 descriptor?? [ 671.662936][ T1806] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 671.677487][ T1806] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 673.314986][ T1806] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 673.322402][ T1806] usb 2-1: device reset changed ep0 maxpacket size! [ 673.331105][ T45] usb 2-1: USB disconnect, device number 36 [ 673.525738][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 673.706500][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 673.728563][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 673.729034][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.732980][ T45] usb 2-1: config 1 interface 1 has no altsetting 0 [ 673.770560][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 673.770890][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.774027][ T45] usb 2-1: Product: syz [ 673.774541][ T45] usb 2-1: Manufacturer: syz [ 673.774717][ T45] usb 2-1: SerialNumber: syz [ 674.252961][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 674.673681][ T45] usb 2-1: USB disconnect, device number 37 [ 674.811605][ T29] audit: type=1400 audit(680.720:594): avc: denied { setopt } for pid=7650 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 675.845107][ T1806] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 676.014911][ T1806] usb 2-1: Using ep0 maxpacket: 8 [ 676.039857][ T1806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.040214][ T1806] usb 2-1: config 0 has no interfaces? [ 676.063540][ T1806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.063829][ T1806] usb 2-1: config 0 has no interfaces? [ 676.080504][ T1806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.080825][ T1806] usb 2-1: config 0 has no interfaces? [ 676.101058][ T1806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.101395][ T1806] usb 2-1: config 0 has no interfaces? [ 676.101782][ T1806] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 676.101855][ T1806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.111924][ T1806] usb 2-1: config 0 descriptor?? [ 676.603984][ T3699] usb 2-1: USB disconnect, device number 38 [ 680.006093][ T3699] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 680.160652][ T3699] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 680.160844][ T3699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.165557][ T3699] usb 2-1: config 0 descriptor?? [ 680.173984][ T3699] cp210x 2-1:0.0: cp210x converter detected [ 680.390956][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.391726][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.600457][ T3699] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 680.607924][ T3699] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 680.609811][ T3699] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 680.620380][ T3699] usb 2-1: cp210x converter now attached to ttyUSB0 [ 680.645048][ T3699] usb 2-1: USB disconnect, device number 39 [ 680.666583][ T3699] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 680.671249][ T3699] cp210x 2-1:0.0: device disconnected [ 682.025022][ T1806] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 682.199503][ T1806] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 682.200021][ T1806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.202733][ T1806] usb 2-1: config 0 has no interfaces? [ 682.205988][ T1806] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 682.213160][ T1806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.222536][ T1806] usb 2-1: config 0 descriptor?? [ 685.303489][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.307494][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.419011][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.420282][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.758156][ T7713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.952'. [ 685.759750][ T7713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.952'. [ 685.940080][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.942397][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.173999][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.176969][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.147365][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 689.169505][ T29] audit: type=1804 audit(695.090:595): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.969" name="/newroot/239/file1" dev="fuse" ino=1 res=1 errno=0 [ 689.719118][ T7767] netlink: 124 bytes leftover after parsing attributes in process `syz.2.973'. [ 693.767299][ T7779] vxcan1: entered promiscuous mode [ 695.719561][ T97] usb 2-1: USB disconnect, device number 40 [ 696.597805][ T97] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 696.866493][ T97] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 696.866951][ T97] usb 2-1: config 0 has no interface number 1 [ 696.867050][ T97] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 696.867162][ T97] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 696.955391][ T97] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 696.955621][ T97] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 696.955780][ T97] usb 2-1: SerialNumber: syz [ 697.003847][ T97] usb 2-1: config 0 descriptor?? [ 697.276413][ T3698] usb 2-1: USB disconnect, device number 41 [ 697.713386][ T7822] netlink: 'syz.2.987': attribute type 10 has an invalid length. [ 697.717348][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.987'. [ 697.729416][ T7822] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 700.614164][ T7844] binfmt_misc: register: failed to install interpreter file ./file1 [ 703.185430][ T7872] binfmt_misc: register: failed to install interpreter file ./file1 [ 705.602376][ T29] audit: type=1400 audit(711.510:596): avc: denied { write } for pid=7888 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 709.243649][ T7906] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 709.362488][ T7906] bond2: entered promiscuous mode [ 709.385170][ T7906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.477286][ T7906] bond2: (slave veth3): making interface the new active one [ 709.485192][ T7906] veth3: entered promiscuous mode [ 709.489005][ T7906] bond2: (slave veth3): Enslaving as an active interface with an up link [ 709.959345][ T29] audit: type=1400 audit(713.877:597): avc: denied { create } for pid=7959 comm="syz.2.1024" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 710.032196][ T29] audit: type=1400 audit(713.947:598): avc: denied { mounton } for pid=7959 comm="syz.2.1024" path="/276/file0" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 710.065055][ T7961] fuse: Bad value for 'fd' [ 710.189948][ T29] audit: type=1400 audit(714.107:599): avc: denied { append } for pid=7959 comm="syz.2.1024" name="file0" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 710.194613][ T29] audit: type=1400 audit(714.107:600): avc: denied { open } for pid=7959 comm="syz.2.1024" path="/276/file0" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 710.314914][ T29] audit: type=1400 audit(714.227:601): avc: denied { unlink } for pid=6112 comm="syz-executor" name="file0" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 711.069334][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 711.277692][ T29] audit: type=1400 audit(715.197:602): avc: denied { getopt } for pid=7971 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 713.950238][ T10] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 714.230418][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 714.235306][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 714.251010][ T10] usb 2-1: config 4 has an invalid interface number: 186 but max is 0 [ 714.251511][ T10] usb 2-1: config 4 has no interface number 0 [ 714.251652][ T10] usb 2-1: config 4 interface 186 has no altsetting 0 [ 714.368338][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice= 9.d9 [ 714.368705][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.368772][ T10] usb 2-1: Product: syz [ 714.368888][ T10] usb 2-1: Manufacturer: syz [ 714.368933][ T10] usb 2-1: SerialNumber: syz [ 714.602768][ T10] usb 2-1: bad CDC descriptors [ 714.624622][ T10] usb 2-1: USB disconnect, device number 42 [ 715.230071][ T29] audit: type=1400 audit(719.147:603): avc: denied { create } for pid=8011 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 716.420821][ T29] audit: type=1400 audit(720.337:604): avc: denied { bind } for pid=8011 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 716.429086][ T29] audit: type=1400 audit(720.347:605): avc: denied { setopt } for pid=8011 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 716.476346][ T29] audit: type=1400 audit(720.397:606): avc: denied { read } for pid=8011 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 731.427050][ T8024] cgroup: Need name or subsystem set [ 735.861760][ T29] audit: type=1400 audit(739.777:607): avc: denied { bind } for pid=8079 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 735.868149][ T29] audit: type=1400 audit(739.787:608): avc: denied { setopt } for pid=8079 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 736.508159][ T29] audit: type=1326 audit(740.427:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 736.525578][ T29] audit: type=1326 audit(740.437:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=40000028 syscall=55 compat=0 ip=0x132360 code=0x7ffc0000 [ 736.529989][ T29] audit: type=1326 audit(740.447:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1071" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 737.766113][ T8102] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1076'. [ 744.002006][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1090'. [ 744.032055][ T8136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8136 comm=syz.1.1090 [ 785.495088][ T3698] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 785.655239][ T3698] usb 2-1: Using ep0 maxpacket: 16 [ 785.688983][ T3698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 785.723746][ T3698] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 785.725587][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.730967][ T3698] usb 2-1: Product: syz [ 785.733500][ T3698] usb 2-1: Manufacturer: syz [ 785.735171][ T3698] usb 2-1: SerialNumber: syz [ 785.741167][ T3698] usb 2-1: config 0 descriptor?? [ 795.968245][ T41] usb 2-1: USB disconnect, device number 43 [ 796.523265][ T8342] syzkaller0: entered promiscuous mode [ 796.525430][ T8342] syzkaller0: entered allmulticast mode [ 797.715250][ T7321] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 797.899828][ T7321] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 797.900685][ T7321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.901258][ T7321] usb 2-1: Product: syz [ 797.901639][ T7321] usb 2-1: Manufacturer: syz [ 797.902095][ T7321] usb 2-1: SerialNumber: syz [ 797.987487][ T7321] r8152-cfgselector 2-1: Unknown version 0x0000 [ 797.988085][ T7321] r8152-cfgselector 2-1: config 0 descriptor?? [ 805.560970][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 808.259014][ T7321] r8152-cfgselector 2-1: USB disconnect, device number 44 [ 808.541628][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 808.639594][ T8412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.738255][ T8412] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 808.748972][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'. [ 809.606881][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'. [ 816.296374][ T8477] mmap: syz.1.1195 (8477): VmData 28983296 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 825.304108][ T29] audit: type=1400 audit(829.217:612): avc: denied { map } for pid=8486 comm="syz.2.1199" path="socket:[13328]" dev="sockfs" ino=13328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 825.309753][ T29] audit: type=1400 audit(829.227:613): avc: denied { read accept } for pid=8486 comm="syz.2.1199" path="socket:[13328]" dev="sockfs" ino=13328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 827.658327][ T29] audit: type=1400 audit(831.577:614): avc: denied { read } for pid=8511 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 831.755988][ T29] audit: type=1400 audit(835.677:615): avc: denied { getopt } for pid=8531 comm="syz.1.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 832.328958][ T8542] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1221'. [ 836.155299][ T7321] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 836.328422][ T7321] usb 2-1: Using ep0 maxpacket: 16 [ 836.384887][ T7321] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 836.386037][ T7321] usb 2-1: config 0 has no interface number 0 [ 836.387057][ T7321] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 836.388171][ T7321] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 836.397544][ T7321] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 836.399120][ T7321] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 836.400133][ T7321] usb 2-1: Product: syz [ 836.401328][ T7321] usb 2-1: SerialNumber: syz [ 836.409992][ T7321] usb 2-1: config 0 descriptor?? [ 836.431281][ T7321] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 836.436057][ T7321] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9 [ 836.677605][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.678613][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.679080][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.679474][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.679908][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.680327][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.680751][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.681169][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.681711][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.682132][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 836.682984][ T10] usb 2-1: USB disconnect, device number 45 [ 836.683033][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 836.688737][ T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 854.259716][ T8636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1249'. [ 865.647746][ T29] audit: type=1326 audit(869.567:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.1254" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x0 [ 871.689630][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1266'. [ 874.884995][ T1806] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 875.093138][ T1806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.114908][ T1806] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 875.195255][ T1806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.196754][ T1806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 875.197744][ T1806] usb 2-1: SerialNumber: syz [ 875.258104][ T1806] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 875.259389][ T1806] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 875.263286][ T1806] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 875.452159][ T1806] usb 2-1: USB disconnect, device number 46 [ 879.575120][ T1806] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 879.814013][ T1806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.847476][ T1806] usb 2-1: config 0 has no interfaces? [ 879.885481][ T1806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.886845][ T1806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 879.888079][ T1806] usb 2-1: SerialNumber: syz [ 879.895679][ T1806] usb 2-1: config 0 descriptor?? [ 880.165649][ T1806] usb 2-1: USB disconnect, device number 47 [ 880.845617][ T41] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 881.011399][ T41] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.011730][ T41] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.037659][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 881.038086][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.040174][ T41] usb 2-1: Product: syz [ 881.040416][ T41] usb 2-1: Manufacturer: syz [ 881.040638][ T41] usb 2-1: SerialNumber: syz [ 881.310428][ T41] cdc_ncm 2-1:1.0: bind() failure [ 881.319372][ T41] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 881.319707][ T41] cdc_ncm 2-1:1.1: bind() failure [ 881.357478][ T41] usb 2-1: USB disconnect, device number 48 [ 881.622385][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1279'. [ 882.075432][ T7321] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 882.237892][ T7321] usb 2-1: no configurations [ 882.238163][ T7321] usb 2-1: can't read configurations, error -22 [ 882.375485][ T7321] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 882.528671][ T7321] usb 2-1: no configurations [ 882.529056][ T7321] usb 2-1: can't read configurations, error -22 [ 882.530242][ T7321] usb usb2-port1: attempt power cycle [ 882.865123][ T7321] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 882.891056][ T7321] usb 2-1: no configurations [ 882.891407][ T7321] usb 2-1: can't read configurations, error -22 [ 883.035624][ T7321] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 883.059178][ T7321] usb 2-1: no configurations [ 883.059428][ T7321] usb 2-1: can't read configurations, error -22 [ 883.062813][ T7321] usb usb2-port1: unable to enumerate USB device [ 887.468406][ T29] audit: type=1326 audit(891.387:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.2.1285" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x0 [ 892.232940][ T8786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 903.308442][ T8865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1320'. [ 911.035584][ T7321] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 911.241405][ T7321] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 911.241763][ T7321] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 911.245650][ T7321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 911.245987][ T7321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 911.246229][ T7321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 911.281248][ T7321] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 911.281554][ T7321] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 911.283078][ T7321] usb 2-1: Product: syz [ 911.283347][ T7321] usb 2-1: Manufacturer: syz [ 911.317744][ T7321] cdc_wdm 2-1:1.0: skipping garbage [ 911.318295][ T7321] cdc_wdm 2-1:1.0: skipping garbage [ 911.326126][ T7321] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 911.538913][ T7321] usb 2-1: USB disconnect, device number 53 [ 921.475541][ T29] audit: type=1400 audit(925.387:618): avc: denied { create } for pid=8938 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 921.485122][ T29] audit: type=1400 audit(925.397:619): avc: denied { ioctl } for pid=8938 comm="syz.2.1344" path="socket:[13740]" dev="sockfs" ino=13740 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 921.933980][ T8949] netlink: 'syz.2.1348': attribute type 10 has an invalid length. [ 924.196693][ T8966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.919413][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1359'. [ 925.920211][ T8973] bridge_slave_0: default FDB implementation only supports local addresses [ 927.135888][ T10] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 927.376584][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.377880][ T10] usb 2-1: config 0 has no interfaces? [ 927.404823][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.405176][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.405235][ T10] usb 2-1: SerialNumber: syz [ 927.430699][ T10] usb 2-1: config 0 descriptor?? [ 927.687400][ T10] usb 2-1: USB disconnect, device number 54 [ 945.652315][ T29] audit: type=1400 audit(949.567:620): avc: denied { setopt } for pid=9058 comm="syz.2.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 952.736795][ T29] audit: type=1326 audit(956.657:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.1.1399" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x0 [ 955.625024][ T29] audit: type=1326 audit(959.537:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.1.1400" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 955.628466][ T29] audit: type=1326 audit(959.547:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.1.1400" exe="/syz-executor" sig=0 arch=40000028 syscall=286 compat=0 ip=0x132360 code=0x7ffc0000 [ 955.645444][ T29] audit: type=1326 audit(959.567:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.1.1400" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 961.345963][ T7321] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 961.582072][ T7321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 961.595996][ T7321] usb 2-1: not running at top speed; connect to a high speed hub [ 961.602964][ T7321] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 961.604593][ T7321] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 961.604653][ T7321] usb 2-1: config 17 has no interface number 0 [ 961.604828][ T7321] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 961.604911][ T7321] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 164, setting to 64 [ 961.604957][ T7321] usb 2-1: config 17 interface 8 has no altsetting 0 [ 961.621337][ T7321] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 961.621667][ T7321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.621812][ T7321] usb 2-1: Product: syz [ 961.621851][ T7321] usb 2-1: Manufacturer: syz [ 961.621880][ T7321] usb 2-1: SerialNumber: syz [ 961.680489][ T9110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 961.998878][ T7321] usb 2-1: selecting invalid altsetting 0 [ 962.051568][ T7321] usb 2-1: USB disconnect, device number 55 [ 967.875886][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 967.956068][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.961268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.969055][ T12] bond0 (unregistering): Released all slaves [ 967.988657][ T12] bond1 (unregistering): Released all slaves [ 968.016138][ T12] bond2 (unregistering): (slave veth3): Releasing backup interface [ 968.016405][ T12] veth3: left promiscuous mode [ 968.021714][ T12] bond2 (unregistering): Released all slaves [ 968.035373][ T12] bond3 (unregistering): (slave veth5): Releasing backup interface [ 968.042297][ T12] bond3 (unregistering): Released all slaves [ 968.135102][ T12] hsr_slave_0: left promiscuous mode [ 968.137069][ T12] hsr_slave_1: left promiscuous mode [ 970.103329][ T9152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.125749][ T9152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.989636][ T9152] hsr_slave_0: entered promiscuous mode [ 970.992253][ T9152] hsr_slave_1: entered promiscuous mode [ 970.995703][ T9152] debugfs: 'hsr0' already exists in 'hsr' [ 970.996550][ T9152] Cannot create hsr debugfs directory [ 971.592627][ T9152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 971.605093][ T9152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 971.623012][ T9152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 971.632632][ T9152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 972.941348][ T9152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.432596][ T9505] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1425'. [ 975.080399][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 976.715507][ T9152] veth0_vlan: entered promiscuous mode [ 976.733545][ T9152] veth1_vlan: entered promiscuous mode [ 976.811177][ T9152] veth0_macvtap: entered promiscuous mode [ 976.829673][ T9152] veth1_macvtap: entered promiscuous mode [ 976.927032][ T2267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.928079][ T2267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.928218][ T2267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.928295][ T2267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.117076][ T29] audit: type=1400 audit(981.037:625): avc: denied { write } for pid=9152 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 977.126435][ T29] audit: type=1400 audit(981.037:626): avc: denied { open } for pid=9152 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 980.655017][ T7321] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 980.816844][ T7321] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 980.817137][ T7321] usb 2-1: config 0 has no interface number 0 [ 980.817953][ T7321] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 980.818011][ T7321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.835401][ T7321] usb 2-1: config 0 descriptor?? [ 983.222281][ T9] usb 2-1: USB disconnect, device number 56 [ 993.195151][ T41] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 993.402358][ T41] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 993.403634][ T41] usb 2-1: config 0 has no interface number 0 [ 993.416032][ T41] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 993.416993][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.417756][ T41] usb 2-1: Product: syz [ 993.418162][ T41] usb 2-1: Manufacturer: syz [ 993.418744][ T41] usb 2-1: SerialNumber: syz [ 993.423667][ T41] usb 2-1: config 0 descriptor?? [ 993.671219][ T41] usb 2-1: USB disconnect, device number 57 syzkaller syzkaller login: [ 1012.718577][ T3698] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1012.868733][ T3698] usb 2-1: Using ep0 maxpacket: 8 [ 1012.965476][ T3698] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1012.965821][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.969162][ T3698] usb 2-1: Product: syz [ 1012.969539][ T3698] usb 2-1: Manufacturer: syz [ 1012.969601][ T3698] usb 2-1: SerialNumber: syz [ 1012.982972][ T3698] usb 2-1: config 0 descriptor?? [ 1013.029262][ T3698] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1021.203255][ T9757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.246268][ T10] usb 2-1: USB disconnect, device number 58 [ 1023.661314][ T29] audit: type=1400 audit(1027.577:627): avc: denied { map } for pid=9778 comm="syz.1.1498" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1024.320637][ T29] audit: type=1400 audit(1028.237:628): avc: denied { mounton } for pid=9784 comm="syz.2.1500" path="/543/file0" dev="tmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1025.153156][ T29] audit: type=1400 audit(1029.067:629): avc: denied { mount } for pid=9798 comm="syz.2.1506" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1028.551050][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 1030.223086][ T9878] comedi: valid board names for 8255 driver are: [ 1030.223427][ T9878] 8255 [ 1030.226956][ T9878] comedi: valid board names for vmk80xx driver are: [ 1030.228915][ T9878] vmk80xx [ 1030.229539][ T9878] comedi: valid board names for usbduxsigma driver are: [ 1030.230419][ T9878] usbduxsigma [ 1030.231177][ T9878] comedi: valid board names for usbduxfast driver are: [ 1030.233483][ T9878] usbduxfast [ 1030.240174][ T9878] comedi: valid board names for usbdux driver are: [ 1030.240968][ T9878] usbdux [ 1030.241549][ T9878] comedi: valid board names for ni6501 driver are: [ 1030.242727][ T9878] ni6501 [ 1030.244816][ T9878] comedi: valid board names for dt9812 driver are: [ 1030.245709][ T9878] dt9812 [ 1030.246391][ T9878] comedi: valid board names for ni_labpc_cs driver are: [ 1030.247254][ T9878] ni_labpc_cs [ 1030.247909][ T9878] comedi: valid board names for ni_daq_700 driver are: [ 1030.248904][ T9878] ni_daq_700 [ 1030.249526][ T9878] comedi: valid board names for labpc_pci driver are: [ 1030.250489][ T9878] labpc_pci [ 1030.251115][ T9878] comedi: valid board names for adl_pci9118 driver are: [ 1030.252130][ T9878] pci9118dg [ 1030.253170][ T9878] pci9118hg [ 1030.253861][ T9878] pci9118hr [ 1030.255521][ T9878] comedi: valid board names for 8255_pci driver are: [ 1030.256466][ T9878] 8255_pci [ 1030.257117][ T9878] comedi: valid board names for comedi_parport driver are: [ 1030.258225][ T9878] comedi_parport [ 1030.258928][ T9878] comedi: valid board names for comedi_test driver are: [ 1030.259918][ T9878] comedi_test [ 1030.260677][ T9878] comedi: valid board names for comedi_bond driver are: [ 1030.261713][ T9878] comedi_bond [ 1030.855277][ T7321] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1031.014812][ T7321] usb 2-1: Using ep0 maxpacket: 8 [ 1031.033286][ T7321] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1031.033901][ T7321] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1031.043192][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1031.043510][ T7321] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1031.043626][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1031.043714][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1031.043809][ T7321] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1031.043843][ T7321] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1031.059623][ T7321] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1031.060047][ T7321] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1031.061043][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1031.061130][ T7321] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1031.061561][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1031.061615][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1031.061662][ T7321] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1031.061706][ T7321] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1031.075946][ T7321] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1031.076246][ T7321] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1031.076444][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1031.076674][ T7321] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1031.076743][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1031.076788][ T7321] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1031.076841][ T7321] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1031.076906][ T7321] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1031.107314][ T7321] usb 2-1: string descriptor 0 read error: -22 [ 1031.107667][ T7321] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1031.107837][ T7321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.131296][ T7321] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1031.333995][ T7321] usb 2-1: USB disconnect, device number 59 [ 1032.463335][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 1034.888359][ T9941] tmpfs: Unsupported parameter 'huge' [ 1035.421085][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1545'. [ 1036.375642][ T9976] comedi: valid board names for 8255 driver are: [ 1036.377384][ T9976] 8255 [ 1036.395185][ T9976] comedi: valid board names for vmk80xx driver are: [ 1036.396492][ T9976] vmk80xx [ 1036.397337][ T9976] comedi: valid board names for usbduxsigma driver are: [ 1036.398887][ T9976] usbduxsigma [ 1036.401692][ T9976] comedi: valid board names for usbduxfast driver are: [ 1036.402983][ T9976] usbduxfast [ 1036.404643][ T9976] comedi: valid board names for usbdux driver are: [ 1036.405554][ T9976] usbdux [ 1036.409729][ T9976] comedi: valid board names for ni6501 driver are: [ 1036.425017][ T9976] ni6501 [ 1036.439852][ T9976] comedi: valid board names for dt9812 driver are: [ 1036.440240][ T9976] dt9812 [ 1036.440379][ T9976] comedi: valid board names for ni_labpc_cs driver are: [ 1036.440510][ T9976] ni_labpc_cs [ 1036.440549][ T9976] comedi: valid board names for ni_daq_700 driver are: [ 1036.440568][ T9976] ni_daq_700 [ 1036.440584][ T9976] comedi: valid board names for labpc_pci driver are: [ 1036.440599][ T9976] labpc_pci [ 1036.440612][ T9976] comedi: valid board names for adl_pci9118 driver are: [ 1036.440628][ T9976] pci9118dg [ 1036.440703][ T9976] pci9118hg [ 1036.440721][ T9976] pci9118hr [ 1036.440737][ T9976] comedi: valid board names for 8255_pci driver are: [ 1036.440754][ T9976] 8255_pci [ 1036.440767][ T9976] comedi: valid board names for comedi_parport driver are: [ 1036.440782][ T9976] comedi_parport [ 1036.440798][ T9976] comedi: valid board names for comedi_test driver are: [ 1036.440813][ T9976] comedi_test [ 1036.440837][ T9976] comedi: valid board names for comedi_bond driver are: [ 1036.440853][ T9976] comedi_bond [ 1038.978069][ T9993] geneve2: entered promiscuous mode [ 1038.978320][ T9993] geneve2: entered allmulticast mode [ 1039.505556][ T29] audit: type=1400 audit(1043.417:630): avc: denied { remount } for pid=9998 comm="syz.2.1556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1040.293651][ T9980] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1053.205085][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1053.365173][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1053.379902][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1053.380958][ T10] usb 2-1: config 0 has no interface number 0 [ 1053.398966][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1053.400076][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.401415][ T10] usb 2-1: Product: syz [ 1053.402124][ T10] usb 2-1: Manufacturer: syz [ 1053.403014][ T10] usb 2-1: SerialNumber: syz [ 1053.408045][ T10] usb 2-1: config 0 descriptor?? [ 1053.789513][ T41] usb 2-1: USB disconnect, device number 60 [ 1054.057465][T10141] syzkaller1: entered promiscuous mode [ 1054.061279][T10141] syzkaller1: entered allmulticast mode [ 1054.647348][ T139] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.741300][ T139] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.856431][ T139] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.991866][ T139] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.024872][ T9563] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1055.206717][ T9563] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.207647][ T9563] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1055.209754][ T9563] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1055.211368][ T9563] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1055.211541][ T9563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.237597][T10154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1055.252321][ T9563] hub 2-1:1.0: bad descriptor, ignoring hub [ 1055.252875][ T9563] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1055.255994][ T9563] cdc_wdm 2-1:1.0: skipping garbage [ 1055.257127][ T9563] cdc_wdm 2-1:1.0: skipping garbage [ 1055.265025][ T9563] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1055.590418][ T10] usb 2-1: USB disconnect, device number 61 [ 1055.991670][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.006778][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.011714][ T139] bond0 (unregistering): Released all slaves [ 1056.139722][ T139] hsr_slave_0: left promiscuous mode [ 1056.145080][ T139] hsr_slave_1: left promiscuous mode [ 1056.160193][ T139] veth1_macvtap: left promiscuous mode [ 1056.165542][ T139] veth1_vlan: left promiscuous mode [ 1056.366016][ T41] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1056.596752][ T41] usb 2-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1056.598045][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1056.601374][ T41] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1056.603837][ T41] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1056.603941][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.729131][T10154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1056.753213][ T41] hub 2-1:1.0: bad descriptor, ignoring hub [ 1056.753629][ T41] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1056.766597][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 1056.767303][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 1056.769443][ T41] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1057.093262][ T9563] usb 2-1: USB disconnect, device number 62 [ 1059.405067][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1059.686612][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.687665][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.687781][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1059.687820][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.732335][ T10] usb 2-1: config 0 descriptor?? [ 1060.412863][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1060.624999][ T10] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 1060.833148][ T10] usb 2-1: USB disconnect, device number 63 [ 1061.404940][ T3739] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1061.590243][ T3739] usb 2-1: config 162 has an invalid interface number: 125 but max is 1 [ 1061.591655][ T3739] usb 2-1: config 162 has an invalid interface number: 22 but max is 1 [ 1061.592745][ T3739] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.594934][ T3739] usb 2-1: config 162 has no interface number 0 [ 1061.595948][ T3739] usb 2-1: config 162 has no interface number 1 [ 1061.596982][ T3739] usb 2-1: config 162 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1061.607142][ T3739] usb 2-1: config 162 interface 22 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1061.608869][ T3739] usb 2-1: config 162 interface 22 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1061.610274][ T3739] usb 2-1: config 162 interface 22 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1061.611533][ T3739] usb 2-1: config 162 interface 22 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1061.615034][ T3739] usb 2-1: config 162 interface 125 has no altsetting 0 [ 1061.616190][ T3739] usb 2-1: config 162 interface 22 has no altsetting 0 [ 1061.624967][ T3739] usb 2-1: New USB device found, idVendor=19ff, idProduct=0239, bcdDevice=70.6e [ 1061.635028][ T3739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.636309][ T3739] usb 2-1: Product: syz [ 1061.638754][ T3739] usb 2-1: Manufacturer: syz [ 1061.639663][ T3739] usb 2-1: SerialNumber: syz [ 1061.791756][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.820697][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.921422][ T3739] usb 2-1: USB disconnect, device number 64 [ 1063.985245][ T7321] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1064.145294][ T7321] usb 2-1: Using ep0 maxpacket: 32 [ 1064.199675][ T7321] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1064.201266][ T7321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.207770][ T7321] usb 2-1: config 0 descriptor?? [ 1064.586666][T10151] hsr_slave_0: entered promiscuous mode [ 1064.606241][T10151] hsr_slave_1: entered promiscuous mode [ 1065.832159][T10151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1065.858155][T10151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1065.869032][T10151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1065.877848][T10151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1068.088494][T10151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.157183][T10151] veth0_vlan: entered promiscuous mode [ 1073.181829][T10151] veth1_vlan: entered promiscuous mode [ 1073.268525][T10151] veth0_macvtap: entered promiscuous mode [ 1073.289354][T10151] veth1_macvtap: entered promiscuous mode [ 1073.353554][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.357162][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.360278][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.361410][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.015442][ T9563] usb 2-1: USB disconnect, device number 65 [ 1075.328299][ T29] audit: type=1400 audit(1079.247:631): avc: denied { bind } for pid=10660 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1075.395306][ T9563] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1075.568642][ T9563] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1075.573084][ T9563] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1075.577064][ T9563] usb 2-1: can't read configurations, error -71 [ 1076.694071][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.696954][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.901521][T10694] netlink: 'syz.1.1622': attribute type 4 has an invalid length. [ 1083.137931][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.143103][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.159420][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 1091.684882][ T9] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1091.846544][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.846963][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1091.851528][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1091.856224][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1091.860503][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.879811][T10720] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1091.893901][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1091.895366][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1091.900605][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1091.903947][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1091.916889][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1092.216995][ T45] usb 2-1: USB disconnect, device number 68 [ 1092.554980][ T45] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1092.720836][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.721175][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1092.722851][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1092.724044][ T45] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1092.725468][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.763432][T10720] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1092.773476][ T45] hub 2-1:1.0: bad descriptor, ignoring hub [ 1092.777449][ T45] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1092.780669][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 1092.783111][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 1092.787897][ T45] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1093.087709][ T45] usb 2-1: USB disconnect, device number 69 [ 1093.824818][ T3739] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1093.980523][ T3739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.981526][ T3739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1093.981734][ T3739] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1093.981906][ T3739] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1093.982019][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.995260][T10766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1094.002234][ T3739] hub 2-1:1.0: bad descriptor, ignoring hub [ 1094.002588][ T3739] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1094.003418][ T3739] cdc_wdm 2-1:1.0: skipping garbage [ 1094.003453][ T3739] cdc_wdm 2-1:1.0: skipping garbage [ 1094.008528][ T3739] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1094.208388][T10766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.209493][T10766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.336176][ T45] usb 2-1: USB disconnect, device number 70 [ 1094.672472][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.673562][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.690417][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.692910][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.155127][ T45] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1097.322680][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.322912][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1097.323262][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1097.323406][ T45] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1097.323545][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.352705][T10813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1097.400477][ T45] hub 2-1:1.0: bad descriptor, ignoring hub [ 1097.400875][ T45] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1097.402066][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 1097.402117][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 1097.409265][ T45] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1097.603733][T10813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.606449][T10813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.726883][ T45] usb 2-1: USB disconnect, device number 71 [ 1098.335975][ T29] audit: type=1400 audit(1102.247:632): avc: denied { unmount } for pid=9152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1099.004815][ T3698] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1099.162659][ T3698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1099.163118][ T3698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.163282][ T3698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1099.163386][ T3698] usb 2-1: New USB device found, idVendor=6a6a, idProduct=49ee, bcdDevice= 0.09 [ 1099.163468][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.184916][ T3698] usb 2-1: config 0 descriptor?? [ 1099.673140][ T3698] hid-generic 0003:6A6A:49EE.0011: unbalanced collection at end of report description [ 1099.673889][ T3698] hid-generic 0003:6A6A:49EE.0011: probe with driver hid-generic failed with error -22 [ 1099.915055][ T8159] usb 2-1: USB disconnect, device number 72 [ 1100.475100][ T8159] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1100.735949][ T8159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.742790][ T8159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1100.754662][ T8159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1100.755931][ T8159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1100.757006][ T8159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.764776][T10862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1100.767953][ T8159] hub 2-1:1.0: bad descriptor, ignoring hub [ 1100.768036][ T8159] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1100.768665][ T8159] cdc_wdm 2-1:1.0: skipping garbage [ 1100.768696][ T8159] cdc_wdm 2-1:1.0: skipping garbage [ 1100.771972][ T8159] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1101.076037][ T3698] usb 2-1: USB disconnect, device number 73 [ 1101.426605][ T3698] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1101.590154][ T3698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.590520][ T3698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1101.593464][ T3698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1101.599292][ T3698] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1101.599554][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.629423][T10862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1101.636777][ T3698] hub 2-1:1.0: bad descriptor, ignoring hub [ 1101.636978][ T3698] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1101.637506][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 1101.637576][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 1101.646382][ T3698] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1101.956034][ T3698] usb 2-1: USB disconnect, device number 74 [ 1103.044790][ T3698] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1103.253929][ T3698] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1103.254661][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.256294][ T3698] usb 2-1: Product: syz [ 1103.256359][ T3698] usb 2-1: Manufacturer: syz [ 1103.256389][ T3698] usb 2-1: SerialNumber: syz [ 1103.262437][ T3698] usb 2-1: config 0 descriptor?? [ 1113.365164][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1658'. [ 1113.365581][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1658'. [ 1113.423715][T10914] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1113.434019][T10914] bond1 (unregistering): Released all slaves [ 1113.547444][ T45] usb 2-1: USB disconnect, device number 75 [ 1113.831390][T10994] syzkaller0: entered promiscuous mode [ 1113.831763][T10994] syzkaller0: entered allmulticast mode [ 1113.842985][T10989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.847474][T10989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.775151][ T45] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1114.960643][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1114.965552][ T45] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1114.965869][ T45] usb 2-1: can't read configurations, error -71 [ 1115.216335][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1669'. [ 1115.605422][ T45] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1115.765082][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 1115.781454][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1115.781776][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1115.800220][ T45] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1115.800508][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.806201][ T45] usb 2-1: Product: syz [ 1115.806525][ T45] usb 2-1: Manufacturer: syz [ 1115.806705][ T45] usb 2-1: SerialNumber: syz [ 1115.814050][ T45] usb 2-1: config 0 descriptor?? [ 1126.057795][ T8159] usb 2-1: USB disconnect, device number 77 [ 1126.635048][ T45] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1126.802385][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1126.806518][ T45] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1126.806814][ T45] usb 2-1: can't read configurations, error -71 [ 1129.505804][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'. [ 1129.923139][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.930413][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.140610][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.147105][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.355693][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.357202][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.569392][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.570833][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.644924][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.645387][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.125879][ T3698] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1141.309285][ T3698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.312380][ T3698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1141.317546][ T3698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.318893][ T3698] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1141.319925][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.348266][ T3698] hub 2-1:1.0: bad descriptor, ignoring hub [ 1141.349259][ T3698] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1141.352906][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 1141.356605][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 1141.357790][ T3698] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1141.666139][ T3698] usb 2-1: USB disconnect, device number 80 [ 1142.004853][ T3698] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1142.173800][ T3698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.176559][ T3698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.179750][ T3698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.180973][ T3698] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1142.182041][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.203252][ T3698] hub 2-1:1.0: bad descriptor, ignoring hub [ 1142.204773][ T3698] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1142.208684][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 1142.209482][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 1142.213036][ T3698] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1142.525803][ T3698] usb 2-1: USB disconnect, device number 81 [ 1145.202043][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.207941][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.503870][T11154] syz.2.1693 (11154): drop_caches: 2 [ 1145.660424][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.662802][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.879975][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.882779][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.442365][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.446286][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.542639][T11170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.543693][T11170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.779278][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.780971][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.408447][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.412609][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.491340][ T29] audit: type=1400 audit(1156.407:633): avc: denied { ioctl } for pid=11200 comm="syz.1.1706" path="socket:[17244]" dev="sockfs" ino=17244 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1153.154682][ T41] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1153.285001][ T41] usb 2-1: device descriptor read/64, error -71 [ 1153.525094][ T41] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1153.664859][ T41] usb 2-1: device descriptor read/64, error -71 [ 1153.775530][ T41] usb usb2-port1: attempt power cycle [ 1154.115401][ T41] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1154.137039][ T41] usb 2-1: device descriptor read/8, error -71 [ 1154.374770][ T41] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1154.396374][ T41] usb 2-1: device descriptor read/8, error -71 [ 1154.507586][ T41] usb usb2-port1: unable to enumerate USB device [ 1159.736458][T11208] comedi: valid board names for 8255 driver are: [ 1159.738214][T11208] 8255 [ 1159.740615][T11208] comedi: valid board names for vmk80xx driver are: [ 1159.742602][T11208] vmk80xx [ 1159.745206][T11208] comedi: valid board names for usbduxsigma driver are: [ 1159.747251][T11208] usbduxsigma [ 1159.749078][T11208] comedi: valid board names for usbduxfast driver are: [ 1159.751131][T11208] usbduxfast [ 1159.752873][T11208] comedi: valid board names for usbdux driver are: [ 1159.755301][T11208] usbdux [ 1159.756961][T11208] comedi: valid board names for ni6501 driver are: [ 1159.758864][T11208] ni6501 [ 1159.760556][T11208] comedi: valid board names for dt9812 driver are: [ 1159.762766][T11208] dt9812 [ 1159.763530][T11208] comedi: valid board names for ni_labpc_cs driver are: [ 1159.765358][T11208] ni_labpc_cs [ 1159.765981][T11208] comedi: valid board names for ni_daq_700 driver are: [ 1159.766934][T11208] ni_daq_700 [ 1159.767609][T11208] comedi: valid board names for labpc_pci driver are: [ 1159.768501][T11208] labpc_pci [ 1159.769268][T11208] comedi: valid board names for adl_pci9118 driver are: [ 1159.770812][T11208] pci9118dg [ 1159.771611][T11208] pci9118hg [ 1159.772293][T11208] pci9118hr [ 1159.773247][T11208] comedi: valid board names for 8255_pci driver are: [ 1159.774742][T11208] 8255_pci [ 1159.775418][T11208] comedi: valid board names for comedi_parport driver are: [ 1159.776332][T11208] comedi_parport [ 1159.776992][T11208] comedi: valid board names for comedi_test driver are: [ 1159.777988][T11208] comedi_test [ 1159.778699][T11208] comedi: valid board names for comedi_bond driver are: [ 1159.779532][T11208] comedi_bond [ 1159.874123][T11210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.878931][T11210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.623543][ T29] audit: type=1400 audit(1165.537:634): avc: denied { nlmsg_read } for pid=11222 comm="syz.2.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1161.627011][T11223] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1714'. [ 1162.873945][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.880542][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.095142][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.097981][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.213234][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.216438][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.547804][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.549620][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.775452][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.779012][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.455557][ T7321] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1174.685609][ T7321] usb 2-1: device descriptor read/64, error -71 [ 1174.925309][ T7321] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1175.054956][ T7321] usb 2-1: device descriptor read/64, error -71 [ 1175.167423][ T7321] usb usb2-port1: attempt power cycle [ 1175.504952][ T7321] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1175.529603][ T7321] usb 2-1: device descriptor read/8, error -71 [ 1175.765489][ T7321] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1175.789965][ T7321] usb 2-1: device descriptor read/8, error -71 [ 1175.897734][ T7321] usb usb2-port1: unable to enumerate USB device [ 1184.566630][ T3698] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1184.747508][ T3698] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1184.747868][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.751089][ T3698] usb 2-1: Product: syz [ 1184.751340][ T3698] usb 2-1: Manufacturer: syz [ 1184.751598][ T3698] usb 2-1: SerialNumber: syz [ 1184.762906][ T3698] usb 2-1: config 0 descriptor?? [ 1185.379488][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.380508][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.592306][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.598569][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.736030][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 1185.936227][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.939496][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.153259][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.156862][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.085311][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.086326][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.425031][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.428675][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.617101][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.617889][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.828569][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.829441][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.220884][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.221788][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.439272][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.440252][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.008963][ T8159] usb 2-1: USB disconnect, device number 90 [ 1195.120264][T11404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.124124][T11404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.585326][ T8159] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1195.743743][ T8159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.744056][ T8159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1195.744141][ T8159] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.746035][ T8159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1195.746216][ T8159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.787030][ T8159] hub 2-1:1.0: bad descriptor, ignoring hub [ 1195.787386][ T8159] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1195.788231][ T8159] cdc_wdm 2-1:1.0: skipping garbage [ 1195.788377][ T8159] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1196.117263][ T41] usb 2-1: USB disconnect, device number 91 [ 1196.455088][ T41] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1196.637278][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.637921][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1196.638026][ T41] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1196.638125][ T41] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1196.638166][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.659023][ T41] hub 2-1:1.0: bad descriptor, ignoring hub [ 1196.659488][ T41] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1196.660907][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 1196.660991][ T41] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1196.966647][ T41] usb 2-1: USB disconnect, device number 92 [ 1198.007917][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'. [ 1198.185512][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.189063][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.401882][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.403142][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.604056][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.606670][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.054818][ T41] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1199.216983][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.217186][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1199.219919][ T41] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1199.219980][ T41] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1199.220002][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.242071][ T41] hub 2-1:1.0: bad descriptor, ignoring hub [ 1199.242393][ T41] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1199.243463][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 1199.243788][ T41] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1199.555930][ T41] usb 2-1: USB disconnect, device number 93 [ 1199.895499][ T41] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1200.068331][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.068670][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1200.071037][ T41] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1200.071552][ T41] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1200.071828][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.105904][ T41] hub 2-1:1.0: bad descriptor, ignoring hub [ 1200.106278][ T41] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1200.107419][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 1200.107505][ T41] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1200.426893][ T3698] usb 2-1: USB disconnect, device number 94 [ 1203.604938][ T7321] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1203.782553][ T7321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.783782][ T7321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1203.784110][ T7321] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1203.784825][ T7321] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1203.785021][ T7321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.803959][ T7321] hub 2-1:1.0: bad descriptor, ignoring hub [ 1203.805791][ T7321] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1203.816148][ T7321] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1204.116358][ T7321] usb 2-1: USB disconnect, device number 95 [ 1204.479379][ T7321] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1204.688111][ T7321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.689892][ T7321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1204.691292][ T7321] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.692621][ T7321] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1204.693610][ T7321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.718022][ T7321] hub 2-1:1.0: bad descriptor, ignoring hub [ 1204.719099][ T7321] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1204.720946][ T7321] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1205.028927][ T3698] usb 2-1: USB disconnect, device number 96 [ 1205.294978][ T3698] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1205.444995][ T3698] usb 2-1: Using ep0 maxpacket: 8 [ 1205.463741][ T3698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1205.478254][ T3698] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1205.479497][ T3698] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 511 [ 1205.482253][ T3698] usb 2-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.483902][ T3698] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1205.508579][ T3698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1205.510521][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.511675][ T3698] usb 2-1: Product: syz [ 1205.512368][ T3698] usb 2-1: Manufacturer: syz [ 1205.513096][ T3698] usb 2-1: SerialNumber: syz [ 1205.526274][T11554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1205.529054][T11554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1205.765259][ T3698] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1205.777003][ T3698] usb 2-1: USB disconnect, device number 97 [ 1209.005349][ T41] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1209.160590][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.160887][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1209.175077][ T41] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1209.175406][ T41] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1209.175602][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.191407][ T41] hub 2-1:1.0: bad descriptor, ignoring hub [ 1209.191783][ T41] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1209.192991][ T41] cdc_wdm 2-1:1.0: skipping garbage [ 1209.193321][ T41] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1209.520728][ T3698] usb 2-1: USB disconnect, device number 98 [ 1209.855113][ T3698] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1210.042133][ T3698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.043365][ T3698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1210.043555][ T3698] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1210.043690][ T3698] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1210.043781][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.061506][ T3698] hub 2-1:1.0: bad descriptor, ignoring hub [ 1210.068619][ T3698] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1210.076025][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 1210.077657][ T3698] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1210.342065][ T3698] usb 2-1: USB disconnect, device number 99 [ 1210.448038][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.452306][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.575040][ T9563] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1211.749911][ T9563] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.751166][ T9563] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1211.755714][ T9563] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1211.757431][ T9563] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1211.758722][ T9563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.899463][ T9563] hub 2-1:1.0: bad descriptor, ignoring hub [ 1211.899899][ T9563] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1211.901020][ T9563] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1212.237571][ T9563] usb 2-1: USB disconnect, device number 100 [ 1212.261309][T11641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.302700][T11641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.685279][ T9] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1212.890733][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.907622][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1212.919454][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1212.919873][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1212.919988][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.009719][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1213.010159][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1213.011502][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1213.287719][ T9] usb 2-1: USB disconnect, device number 101 [ 1213.920067][T11668] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1213.920067][T11668] The task syz.2.1804 (11668) triggered the difference, watch for misbehavior. [ 1215.775016][ T7321] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1215.961837][ T7321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.962248][ T7321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1215.962567][ T7321] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1215.962680][ T7321] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1215.962724][ T7321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.993514][ T7321] hub 2-1:1.0: bad descriptor, ignoring hub [ 1215.993800][ T7321] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1215.995632][ T7321] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1216.326113][ T41] usb 2-1: USB disconnect, device number 102 [ 1216.464910][ T29] audit: type=1400 audit(1220.377:635): avc: denied { accept } for pid=11684 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1217.015204][ T3739] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1217.196399][ T3739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.196892][ T3739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1217.197397][ T3739] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.197524][ T3739] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1217.197622][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.225284][ T3739] hub 2-1:1.0: bad descriptor, ignoring hub [ 1217.225622][ T3739] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1217.226504][ T3739] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1217.526263][ T3739] usb 2-1: USB disconnect, device number 103 [ 1221.435162][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1221.590411][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1221.591959][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.599001][ T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1221.600044][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1221.604766][ T10] usb 2-1: Manufacturer: syz [ 1221.617131][ T10] usb 2-1: config 0 descriptor?? [ 1222.095099][ T10] rc_core: IR keymap rc-hauppauge not found [ 1222.096265][ T10] Registered IR keymap rc-empty [ 1222.099096][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1222.107115][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 1222.322878][ C0] igorplugusb 2-1:0.0: receive overflow invalid: 5 [ 1222.629755][ T3739] usb 2-1: USB disconnect, device number 104 [ 1226.085187][ T8159] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1226.278673][ T8159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.279898][ T8159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1226.281031][ T8159] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.282967][ T8159] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1226.287675][ T8159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.339826][ T8159] hub 2-1:1.0: bad descriptor, ignoring hub [ 1226.340865][ T8159] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1226.342770][ T8159] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1226.655906][ T8159] usb 2-1: USB disconnect, device number 105 [ 1228.745009][ T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1228.949278][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1228.950749][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1228.952017][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1228.953196][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.975435][T11785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1228.982328][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1229.679774][ T9] usb 2-1: USB disconnect, device number 106 [ 1233.667667][T11830] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1832'. [ 1234.571230][ T29] audit: type=1804 audit(1238.487:636): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1837" name="/newroot/195/file0" dev="tmpfs" ino=1011 res=1 errno=0 [ 1275.787135][T11900] netlink: 'syz.1.1857': attribute type 3 has an invalid length. [ 1275.788574][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 1275.792375][T11900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1275.792762][T11900] IPv6: NLM_F_CREATE should be set when creating new route [ 1275.793150][T11900] IPv6: NLM_F_CREATE should be set when creating new route [ 1278.228179][ T29] audit: type=1400 audit(1282.147:637): avc: denied { unmount } for pid=11903 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1289.145594][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.166631][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.438263][T11909] hsr_slave_0: entered promiscuous mode [ 1290.441076][T11909] hsr_slave_1: entered promiscuous mode [ 1290.443981][T11909] debugfs: 'hsr0' already exists in 'hsr' [ 1290.446212][T11909] Cannot create hsr debugfs directory [ 1290.916736][T11909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1290.927792][T11909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1290.938818][T11909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1290.950564][T11909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1292.105105][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.474908][ T8159] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1294.638680][ T8159] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1294.651750][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.652677][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.656938][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.657851][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.667441][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.668464][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.671513][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.672036][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.675345][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.675998][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.678720][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.679350][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.681929][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.682599][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.696150][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.697538][ T8159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1294.721725][ T8159] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1294.722846][ T8159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.725974][ T8159] usb 2-1: Product: syz [ 1294.727809][ T8159] usb 2-1: Manufacturer: syz [ 1294.729543][ T8159] usb 2-1: SerialNumber: syz [ 1294.737899][ T8159] usb 2-1: config 0 descriptor?? [ 1295.769242][T11909] veth0_vlan: entered promiscuous mode [ 1295.790327][T11909] veth1_vlan: entered promiscuous mode [ 1295.871063][T11909] veth0_macvtap: entered promiscuous mode [ 1295.880094][T11909] veth1_macvtap: entered promiscuous mode [ 1295.989060][T12061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.989529][T12061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.989642][T12061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.989710][T12061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.228360][ T29] audit: type=1400 audit(1300.147:638): avc: denied { mount } for pid=12298 comm="syz.3.1860" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1303.106277][ T9563] usb 2-1: USB disconnect, device number 107 [ 1308.528376][T12318] syzkaller0: entered promiscuous mode [ 1309.916039][ T29] audit: type=1400 audit(1313.837:639): avc: denied { bind } for pid=12330 comm="syz.1.1875" laddr=fe80::13 lport=22365 faddr=fe80::bb fport=19998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1309.924738][ T29] audit: type=1400 audit(1313.837:640): avc: denied { node_bind } for pid=12330 comm="syz.1.1875" saddr=fc02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1314.337278][T12072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.600223][T12072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.712391][T12072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.879871][T12072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.470871][T12368] netlink: 'syz.3.1886': attribute type 3 has an invalid length. [ 1315.472192][T12368] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1886'. [ 1315.473628][T12368] block nbd0: not configured, cannot reconfigure [ 1315.718719][T12072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.739276][T12072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.743624][T12072] bond0 (unregistering): Released all slaves [ 1315.886412][T12072] hsr_slave_0: left promiscuous mode [ 1315.888024][T12072] hsr_slave_1: left promiscuous mode [ 1315.898620][T12072] veth1_macvtap: left promiscuous mode [ 1315.899018][T12072] veth0_macvtap: left promiscuous mode [ 1315.901961][T12072] veth1_vlan: left promiscuous mode [ 1315.902287][T12072] veth0_vlan: left promiscuous mode [ 1330.942554][T12412] snd_aloop snd_aloop.0: control 4:4:65536:syz0:6 is already present [ 1332.125238][T10125] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1332.294764][T10125] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 1332.296628][T10125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.300081][T10125] usb 2-1: Product: syz [ 1332.302235][T10125] usb 2-1: Manufacturer: syz [ 1332.305128][T10125] usb 2-1: SerialNumber: syz [ 1332.312820][T10125] usb 2-1: config 0 descriptor?? [ 1332.323431][T10125] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1332.329846][T10125] usb 2-1: Detected FT4232HP [ 1332.530480][T10125] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1332.541778][T10125] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1332.591746][ T29] audit: type=1400 audit(1336.507:641): avc: denied { sqpoll } for pid=12440 comm="syz.3.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1332.743423][T10125] usb 2-1: USB disconnect, device number 108 [ 1332.761440][T10125] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1332.766882][T10125] ftdi_sio 2-1:0.0: device disconnected [ 1334.970016][ T29] audit: type=1400 audit(1338.887:642): avc: denied { override_creds } for pid=12473 comm="syz.3.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1359.845082][T10653] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1360.012742][T10653] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1360.012972][T10653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.015241][T10653] usb 2-1: config 0 has no interface number 0 [ 1360.027534][T10653] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1360.027866][T10653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.028066][T10653] usb 2-1: Product: syz [ 1360.028119][T10653] usb 2-1: Manufacturer: syz [ 1360.028150][T10653] usb 2-1: SerialNumber: syz [ 1360.037065][T10653] usb 2-1: config 0 descriptor?? [ 1360.048230][T10653] ims_pcu 2-1:0.41: Zero length descriptor [ 1360.048497][T10653] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 1360.250287][ T8159] usb 2-1: USB disconnect, device number 109 [ 1360.878667][ T29] audit: type=1400 audit(1364.797:643): avc: denied { bind } for pid=12555 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1366.337735][T12602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.340848][T12602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.717283][T12608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1938'. [ 1369.733436][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 1378.280766][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.281851][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.075444][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1380.244936][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1380.252654][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1380.254050][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1380.255280][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1380.256242][ T9] usb 2-1: config 1 has no interface number 0 [ 1380.257038][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1380.260667][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1380.262987][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1380.267776][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.289146][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1380.522267][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1380.536812][T12664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.540077][T12664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.938634][T12320] usb 2-1: USB disconnect, device number 110 [ 1380.940961][T12320] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1381.347958][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.348817][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.364117][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.367258][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.607804][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.611417][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.269097][T12779] *** NOT YET: opcode db *** [ 1412.242022][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.257376][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.882675][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.900183][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.771420][T12855] binder_alloc: 12852: binder_alloc_buf, no vma [ 1429.035014][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1429.215661][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1429.223388][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.228383][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1429.230019][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1429.237103][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1429.238160][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1429.240783][ T10] usb 2-1: Manufacturer: syz [ 1429.247686][ T10] usb 2-1: config 0 descriptor?? [ 1429.470039][ T10] usb 2-1: USB disconnect, device number 111 [ 1431.755153][T12893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.759717][T12893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.129478][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.131941][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.180982][T12972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2043'. [ 1456.186764][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 1456.643448][ T29] audit: type=1400 audit(1460.557:644): avc: denied { getopt } for pid=12980 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1457.166008][ T10] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1457.323596][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.337223][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1457.338074][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1457.338907][ T10] usb 2-1: Manufacturer: syz [ 1457.347337][ T10] usb 2-1: config 0 descriptor?? [ 1457.562326][ T10] usb 2-1: USB disconnect, device number 112 [ 1464.687325][ T8159] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1464.863583][ T8159] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 1464.863972][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.865678][ T8159] usb 2-1: config 0 has no interface number 0 [ 1464.875495][ T8159] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1464.875920][ T8159] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1464.876223][ T8159] usb 2-1: Manufacturer: syz [ 1464.884017][ T8159] usb 2-1: config 0 descriptor?? [ 1465.475343][ T10] usb 2-1: USB disconnect, device number 113 [ 1465.765298][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1465.982257][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1465.982457][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.984892][ T10] usb 2-1: Product: syz [ 1465.985610][ T10] usb 2-1: Manufacturer: syz [ 1465.985641][ T10] usb 2-1: SerialNumber: syz [ 1465.989041][ T10] usb 2-1: config 0 descriptor?? [ 1476.241533][T12320] usb 2-1: USB disconnect, device number 114 [ 1476.523162][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.527183][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.555410][ T8159] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1489.705291][ T8159] usb 2-1: Using ep0 maxpacket: 32 [ 1489.716359][ T8159] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1489.716675][ T8159] usb 2-1: config 0 has no interface number 0 [ 1489.716969][ T8159] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1489.743460][ T8159] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1489.743728][ T8159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.746464][ T8159] usb 2-1: Product: syz [ 1489.746806][ T8159] usb 2-1: Manufacturer: syz [ 1489.746971][ T8159] usb 2-1: SerialNumber: syz [ 1489.751020][ T8159] usb 2-1: config 0 descriptor?? [ 1491.875633][ T8159] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1491.876206][ T8159] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1491.876285][ T8159] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1491.876608][ T8159] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1491.897969][ T8159] usb 2-1: USB disconnect, device number 115 [ 1504.707536][T13151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2090'. [ 1505.432109][T13155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.435975][T13155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.064955][T13159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2093'. [ 1510.212773][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.236962][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.642101][ T29] audit: type=1400 audit(1516.557:645): avc: denied { shutdown } for pid=13189 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1527.812690][ T29] audit: type=1400 audit(1531.727:646): avc: denied { getopt } for pid=13226 comm="syz.1.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1537.839430][ T29] audit: type=1400 audit(1541.757:647): avc: denied { listen } for pid=13244 comm="syz.1.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1538.165838][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 1541.181489][T13266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'. [ 1550.499520][T13277] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 1550.579497][T13277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1550.608002][ T29] audit: type=1400 audit(1554.527:648): avc: denied { ioctl } for pid=13276 comm="syz.1.2132" path="socket:[21125]" dev="sockfs" ino=21125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1550.786780][T13277] macvlan2: entered promiscuous mode [ 1550.787001][T13277] macvlan2: entered allmulticast mode [ 1551.715316][ T8159] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1551.866443][ T8159] usb 2-1: Using ep0 maxpacket: 8 [ 1551.919527][ T8159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1551.919896][ T8159] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1551.923003][ T8159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.931855][ T8159] usb 2-1: config 0 descriptor?? [ 1552.172417][ T8159] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1557.778947][ T29] audit: type=1400 audit(1561.697:649): avc: denied { create } for pid=13340 comm="syz.3.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1562.389385][T10653] usb 2-1: USB disconnect, device number 116 [ 1571.585559][ T8159] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1571.735309][ T8159] usb 2-1: Using ep0 maxpacket: 32 [ 1571.749215][ T8159] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1571.749586][ T8159] usb 2-1: config 0 has no interface number 0 [ 1571.774939][ T8159] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1571.775459][ T8159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.777308][ T8159] usb 2-1: Product: syz [ 1571.777565][ T8159] usb 2-1: Manufacturer: syz [ 1571.777733][ T8159] usb 2-1: SerialNumber: syz [ 1571.783584][ T8159] usb 2-1: config 0 descriptor?? [ 1571.799795][ T8159] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1572.056903][ T8159] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1572.093954][ T8159] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1572.468128][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1572.470988][ T8159] usb 2-1: USB disconnect, device number 117 [ 1572.490274][ T8159] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1572.502139][ T8159] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1572.509986][ T8159] quatech2 2-1:0.51: device disconnected [ 1573.268280][ T29] audit: type=1400 audit(1577.187:650): avc: denied { nlmsg_write } for pid=13413 comm="syz.1.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1573.675032][T10653] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1573.847392][T10653] usb 2-1: Using ep0 maxpacket: 32 [ 1573.868419][T10653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.869780][T10653] usb 2-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 1573.871125][T10653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.881250][T10653] usb 2-1: config 0 descriptor?? [ 1574.340799][T10653] logitech-hidpp-device 0003:046D:C094.0012: unknown main item tag 0x0 [ 1574.350023][T10653] logitech-hidpp-device 0003:046D:C094.0012: unknown main item tag 0x0 [ 1574.352636][T10653] logitech-hidpp-device 0003:046D:C094.0012: unknown main item tag 0x0 [ 1574.353817][T10653] logitech-hidpp-device 0003:046D:C094.0012: unknown main item tag 0x0 [ 1574.355397][T10653] logitech-hidpp-device 0003:046D:C094.0012: unknown main item tag 0x0 [ 1574.356434][T10653] logitech-hidpp-device 0003:046D:C094.0012: unknown main item tag 0x0 [ 1574.357701][T10653] logitech-hidpp-device 0003:046D:C094.0012: unknown main item tag 0x0 [ 1574.363319][T10653] logitech-hidpp-device 0003:046D:C094.0012: hidraw0: USB HID v0.00 Device [HID 046d:c094] on usb-dummy_hcd.1-1/input0 [ 1574.545928][T10653] usb 2-1: USB disconnect, device number 118 [ 1586.155315][T10653] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1586.305515][T10653] usb 2-1: Using ep0 maxpacket: 32 [ 1586.313597][T10653] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1586.313929][T10653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.328170][T10653] usb 2-1: config 0 descriptor?? [ 1589.744015][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 1596.579625][T10653] usb 2-1: USB disconnect, device number 119 [ 1597.085789][T13509] comedi comedi1: comedi_parport: I/O port conflict (0xffffffff,3) [ 1597.745386][ T8159] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1597.915233][ T8159] usb 2-1: Using ep0 maxpacket: 32 [ 1597.941969][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.944018][ T8159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1597.945649][ T8159] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.996562][ T8159] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 1597.997842][ T8159] usb 2-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 1597.999838][ T8159] usb 2-1: Product: syz [ 1598.001008][ T8159] usb 2-1: Manufacturer: syz [ 1598.001780][ T8159] usb 2-1: SerialNumber: syz [ 1598.009138][ T8159] usb 2-1: config 0 descriptor?? [ 1598.913862][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.916829][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.618942][ T29] audit: type=1400 audit(1603.537:651): avc: denied { map } for pid=13516 comm="syz.1.2177" path="/dev/snd/pcmC0D0p" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1599.627721][ T8159] usb 2-1: USB disconnect, device number 120 [ 1599.934961][T13551] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 1600.825096][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1600.984629][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1600.990905][ T10] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1600.992067][ T10] usb 2-1: config 0 has no interface number 0 [ 1600.992831][ T10] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1601.008781][ T10] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1601.009793][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.010869][ T10] usb 2-1: Product: syz [ 1601.012167][ T10] usb 2-1: Manufacturer: syz [ 1601.012836][ T10] usb 2-1: SerialNumber: syz [ 1601.027714][ T10] usb 2-1: config 0 descriptor?? [ 1601.039725][ T10] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1601.092995][ T10] ums-usbat 2-1:0.230: USB Mass Storage not supported on this host controller [ 1601.152138][ T10] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -22 [ 1611.318560][ T10] usb 2-1: USB disconnect, device number 121 [ 1613.406436][ T41] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1613.584034][ T41] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1613.587915][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.591520][ T41] usb 2-1: Product: syz [ 1613.594846][ T41] usb 2-1: Manufacturer: syz [ 1613.596208][ T41] usb 2-1: SerialNumber: syz [ 1613.604018][ T41] usb 2-1: config 0 descriptor?? [ 1623.845176][T10653] usb 2-1: USB disconnect, device number 122 [ 1633.377561][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2205'. [ 1634.315001][ T3698] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1634.464964][ T3698] usb 2-1: Using ep0 maxpacket: 16 [ 1634.500193][ T3698] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1634.500603][ T3698] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1634.535577][ T3698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.535910][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.536158][ T3698] usb 2-1: Product: syz [ 1634.536306][ T3698] usb 2-1: Manufacturer: syz [ 1634.536352][ T3698] usb 2-1: SerialNumber: syz [ 1634.565980][ T3698] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1634.566340][ T3698] cdc_ncm 2-1:1.0: bind() failure [ 1634.581982][ T3698] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1634.582378][ T3698] cdc_ncm 2-1:1.1: bind() failure [ 1634.776737][ T3698] usb 2-1: USB disconnect, device number 123 [ 1636.159359][ T8159] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1636.375856][ T8159] usb 2-1: Using ep0 maxpacket: 32 [ 1636.406409][ T8159] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1636.407027][ T8159] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1636.407517][ T8159] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1636.408093][ T8159] usb 2-1: config 1 has no interface number 0 [ 1636.408564][ T8159] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1636.409143][ T8159] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1636.409870][ T8159] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1636.410419][ T8159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.432405][ T8159] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1636.643323][ T8159] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1637.048939][T10653] usb 2-1: USB disconnect, device number 124 [ 1637.051603][T10653] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1637.709426][ T8159] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1637.897387][ T8159] usb 2-1: Using ep0 maxpacket: 16 [ 1637.961203][ T8159] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1637.961599][ T8159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.962072][ T8159] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1637.962206][ T8159] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1637.962297][ T8159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.971384][ T8159] usb 2-1: config 0 descriptor?? [ 1638.617730][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.618349][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.618473][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.618565][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.618664][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.618759][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.618857][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.618954][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.619159][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.619281][ T8159] nti 0003:0757:0A00.0013: unknown main item tag 0x0 [ 1638.649058][ T8159] nti 0003:0757:0A00.0013: hidraw0: USB HID vff.fa Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0 [ 1638.798895][T10653] usb 2-1: USB disconnect, device number 125 [ 1639.619201][ T8159] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1639.836138][ T8159] usb 2-1: Using ep0 maxpacket: 8 [ 1639.976840][ T8159] usb 2-1: config index 0 descriptor too short (expected 1332, got 52) [ 1639.977206][ T8159] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1639.977494][ T8159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.977591][ T8159] usb 2-1: config 0 has no interface number 0 [ 1639.977656][ T8159] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1639.977707][ T8159] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.977751][ T8159] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.977792][ T8159] usb 2-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1640.069953][ T8159] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.cd [ 1640.070356][ T8159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.070540][ T8159] usb 2-1: Product: syz [ 1640.070645][ T8159] usb 2-1: Manufacturer: syz [ 1640.070700][ T8159] usb 2-1: SerialNumber: syz [ 1640.090414][ T8159] usb 2-1: config 0 descriptor?? [ 1640.182610][ T8159] iowarrior 2-1:0.186: no interrupt-out endpoint found [ 1640.383397][ T8159] usb 2-1: USB disconnect, device number 126 [ 1640.955558][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1641.134853][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1641.144997][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.145315][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1641.145515][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1641.145576][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.158979][ T9] usb 2-1: config 0 descriptor?? [ 1641.650384][ T9] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1642.593753][ T9563] usb 2-1: USB disconnect, device number 127 [ 1651.431057][ T29] audit: type=1400 audit(1655.347:652): avc: denied { mounton } for pid=13767 comm="syz.3.2222" path="/139/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1651.436753][T13768] ======================================================= [ 1651.436753][T13768] WARNING: The mand mount option has been deprecated and [ 1651.436753][T13768] and is ignored by this kernel. Remove the mand [ 1651.436753][T13768] option from the mount to silence this warning. [ 1651.436753][T13768] ======================================================= [ 1651.571596][T13770] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2223'. [ 1651.611644][T13770] bond1 (unregistering): Released all slaves [ 1653.769235][T13847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13847 comm=syz.1.2226 [ 1654.535757][ T3698] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1654.715633][ T3698] usb 2-1: Using ep0 maxpacket: 8 [ 1654.723768][ T3698] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1654.726393][ T3698] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1654.728314][ T3698] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1654.729621][ T3698] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1654.731224][ T3698] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1654.732534][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.956627][ T3698] usb 2-1: GET_CAPABILITIES returned 0 [ 1654.957505][ T3698] usbtmc 2-1:16.0: can't read capabilities [ 1655.170603][ T10] usb 2-1: USB disconnect, device number 2 [ 1673.166134][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.168336][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.105266][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1675.273288][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.273654][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1675.273804][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1675.273850][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1675.273963][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1675.274008][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.281452][ T10] usb 2-1: config 0 descriptor?? [ 1675.517285][ T10] usb 2-1: USB disconnect, device number 3 [ 1685.085359][T13942] trusted_key: syz.1.2248 sent an empty control message without MSG_MORE. [ 1688.442357][T13948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.447445][T13948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.295378][T12320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1694.448420][T12320] usb 2-1: Using ep0 maxpacket: 16 [ 1694.484107][T12320] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1694.513779][T12320] usb 2-1: New USB device found, idVendor=0409, idProduct=0073, bcdDevice=83.4b [ 1694.515813][T12320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.519545][T12320] usb 2-1: Product: syz [ 1694.520400][T12320] usb 2-1: Manufacturer: syz [ 1694.522783][T12320] usb 2-1: SerialNumber: syz [ 1694.736413][T12320] usb 2-1: USB disconnect, device number 4 [ 1709.413788][ T29] audit: type=1400 audit(1713.327:653): avc: denied { create } for pid=14003 comm="syz.1.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1749.937599][T14097] random: crng reseeded on system resumption [ 1750.171929][T14101] 8<--- cut here --- [ 1750.172213][T14101] Unable to handle kernel paging request at virtual address fee04f2a when write [ 1750.180246][ T29] audit: type=1400 audit(1754.097:654): avc: denied { read } for pid=2904 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1750.185556][ T29] audit: type=1400 audit(1754.097:655): avc: denied { search } for pid=2904 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1750.186546][T14101] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 1750.187482][T14101] Internal error: Oops: a06 [#1] SMP ARM [ 1750.188987][T14101] Modules linked in: [ 1750.189415][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.3.2296 Tainted: G L syzkaller #0 PREEMPT [ 1750.189712][T14101] Tainted: [L]=SOFTLOCKUP [ 1750.189841][T14101] Hardware name: ARM-Versatile Express [ 1750.189995][T14101] PC is at subdev_8255_io+0x60/0x6c [ 1750.190149][T14101] LR is at subdev_8255_io+0x4c/0x6c [ 1750.190369][T14101] pc : [<81415c6c>] lr : [<81415c58>] psr: 60000013 [ 1750.190542][T14101] sp : dfc95cb0 ip : dfc95cb0 fp : dfc95ccc [ 1750.190689][T14101] r10: 00000001 r9 : 00000084 r8 : dfc95d9c [ 1750.190860][T14101] r7 : 00004f27 r6 : 0000009b r5 : 844da180 r4 : 00004f2a [ 1750.191052][T14101] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 844da180 [ 1750.191287][T14101] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 1750.191496][T14101] Control: 30c5387d Table: 85d1ea40 DAC: fffffffd [ 1750.191696][T14101] Register r0 information: slab kmalloc-192 start 844da180 pointer offset 0 size 192 [ 1750.192411][T14101] Register r1 information: non-paged memory [ 1750.192735][T14101] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1750.193191][T14101] Register r3 information: non-paged memory [ 1750.193346][T14101] Register r4 information: non-paged memory [ 1750.193490][T14101] Register r5 information: slab kmalloc-192 start 844da180 pointer offset 0 size 192 [ 1750.193755][T14101] Register r6 information: non-paged memory [ 1750.193958][T14101] Register r7 information: non-paged memory [ 1750.194121][T14101] Register r8 information: 2-page vmalloc region starting at 0xdfc94000 allocated at kernel_clone+0xac/0x3ec [ 1750.194645][T14101] Register r9 information: non-paged memory [ 1750.194992][T14101] Register r10 information: non-paged memory [ 1750.195144][T14101] Register r11 information: 2-page vmalloc region starting at 0xdfc94000 allocated at kernel_clone+0xac/0x3ec [ 1750.195461][T14101] Register r12 information: 2-page vmalloc region starting at 0xdfc94000 allocated at kernel_clone+0xac/0x3ec [ 1750.195766][T14101] Process syz.3.2296 (pid: 14101, stack limit = 0xdfc94000) [ 1750.195986][T14101] Stack: (0xdfc95cb0 to 0xdfc96000) [ 1750.196129][T14101] 5ca0: 81415c0c 844da180 00004f27 00004f27 [ 1750.196335][T14101] 5cc0: dfc95cec dfc95cd0 81415944 81415c18 00004f27 80514fcc 85f67800 85f67800 [ 1750.196567][T14101] 5ce0: dfc95d0c dfc95cf0 81415d04 814158f8 844da180 00000000 85f67800 00004f27 [ 1750.196745][T14101] 5d00: dfc95d4c dfc95d10 81415eb0 81415c84 8280cc60 84594680 828217b0 00000000 [ 1750.196948][T14101] 5d20: 00000000 829d46a0 844da180 844da1c4 dfc95d88 844da180 00000000 82b28ad8 [ 1750.197154][T14101] 5d40: dfc95d84 dfc95d50 814049e0 81415e48 844da1b0 00000000 dfc95d74 200000c0 [ 1750.197360][T14101] 5d60: 844da180 b5403587 844da1b0 86df3c00 40946400 00000003 dfc95e44 dfc95d88 [ 1750.197573][T14101] 5d80: 81400338 814048e4 35353238 00000000 00000000 00000000 00000000 00004f27 [ 1750.197776][T14101] 5da0: 00000005 00000002 00000401 00000021 00000007 00000fff 5c952399 00000005 [ 1750.197982][T14101] 5dc0: 000003ff 00000000 00000005 00000001 00000000 00000009 0000e1cb 00000004 [ 1750.198223][T14101] 5de0: 00000004 00000003 00000395 80000089 00000002 00000004 0000000a ffffeadb [ 1750.198536][T14101] 5e00: 00000001 80000000 00000008 7ffffffd 08000000 00000001 00000000 d5e762ba [ 1750.198865][T14101] 5e20: 00000000 864d8f00 844da180 200000c0 844da1b0 86df3c00 dfc95f14 dfc95e48 [ 1750.199086][T14101] 5e40: 8140132c 81400244 00000000 00000000 00000000 00000000 00000000 d5e762ba [ 1750.199308][T14101] 5e60: 00000000 00000000 824a35ec 0000005f 84043210 00000064 8463eef4 86df3c00 [ 1750.199565][T14101] 5e80: dfc95ee4 dfc95e90 807b7f80 807ae4a4 00000064 00000001 00000000 dfc95eac [ 1750.199845][T14101] 5ea0: 85d0c910 834ef000 00006400 0000000b dfc95ea0 00000000 00000000 d5e762ba [ 1750.200057][T14101] 5ec0: 864d8f00 40946400 200000c0 200000c0 864d8f00 00000003 dfc95ef4 dfc95ee8 [ 1750.200281][T14101] 5ee0: 807b80a0 d5e762ba dfc95f14 40946400 00000000 864d8f01 200000c0 864d8f00 [ 1750.200486][T14101] 5f00: 00000003 86df3c00 dfc95fa4 dfc95f18 80585608 81400d7c ecac8b10 86df3c00 [ 1750.200688][T14101] 5f20: dfc95f3c dfc95f30 81aaf9ac 81aaf87c dfc95f54 dfc95f40 8025bcbc 8028e0c4 [ 1750.200893][T14101] 5f40: dfc95fb0 40000000 dfc95f84 dfc95f58 80221a38 8025bc78 00000000 8281d17c [ 1750.201110][T14101] 5f60: dfc95fb0 0014c8c0 ecac8b10 8022198c 00000000 d5e762ba dfc95fac 00000000 [ 1750.201298][T14101] 5f80: 00000000 00326310 00000036 8020029c 86df3c00 00000036 00000000 dfc95fa8 [ 1750.201478][T14101] 5fa0: 80200060 805854e4 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1750.201645][T14101] 5fc0: 00000000 00000000 00326310 00000036 00310000 00000000 00006364 76f3b0bc [ 1750.201818][T14101] 5fe0: 76f3aec0 76f3aeb0 000192bc 00132360 60000010 00000003 00000000 00000000 [ 1750.202005][T14101] Call trace: [ 1750.202123][T14101] [<81415c0c>] (subdev_8255_io) from [<81415944>] (subdev_8255_do_config+0x58/0x60) [ 1750.202576][T14101] r7:00004f27 r6:00004f27 r5:844da180 r4:81415c0c [ 1750.202746][T14101] [<814158ec>] (subdev_8255_do_config) from [<81415d04>] (subdev_8255_io_init+0x8c/0x9c) [ 1750.203045][T14101] r4:85f67800 [ 1750.203138][T14101] [<81415c78>] (subdev_8255_io_init) from [<81415eb0>] (dev_8255_attach+0x74/0x120) [ 1750.203373][T14101] r7:00004f27 r6:85f67800 r5:00000000 r4:844da180 [ 1750.203522][T14101] [<81415e3c>] (dev_8255_attach) from [<814049e0>] (comedi_device_attach+0x108/0x250) [ 1750.203793][T14101] r10:82b28ad8 r9:00000000 r8:844da180 r7:dfc95d88 r6:844da1c4 r5:844da180 [ 1750.204031][T14101] r4:829d46a0 [ 1750.204117][T14101] [<814048d8>] (comedi_device_attach) from [<81400338>] (do_devconfig_ioctl+0x100/0x220) [ 1750.204653][T14101] r10:00000003 r9:40946400 r8:86df3c00 r7:844da1b0 r6:b5403587 r5:844da180 [ 1750.204876][T14101] r4:200000c0 [ 1750.204974][T14101] [<81400238>] (do_devconfig_ioctl) from [<8140132c>] (comedi_unlocked_ioctl+0x5bc/0x1c2c) [ 1750.205273][T14101] r8:86df3c00 r7:844da1b0 r6:200000c0 r5:844da180 r4:864d8f00 [ 1750.205445][T14101] [<81400d70>] (comedi_unlocked_ioctl) from [<80585608>] (sys_ioctl+0x130/0xba0) [ 1750.205828][T14101] r10:86df3c00 r9:00000003 r8:864d8f00 r7:200000c0 r6:864d8f01 r5:00000000 [ 1750.206041][T14101] r4:40946400 [ 1750.206136][T14101] [<805854d8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1750.206390][T14101] Exception stack(0xdfc95fa8 to 0xdfc95ff0) [ 1750.206551][T14101] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 1750.206767][T14101] 5fc0: 00000000 00000000 00326310 00000036 00310000 00000000 00006364 76f3b0bc [ 1750.206979][T14101] 5fe0: 76f3aec0 76f3aeb0 000192bc 00132360 [ 1750.207138][T14101] r10:00000036 r9:86df3c00 r8:8020029c r7:00000036 r6:00326310 r5:00000000 [ 1750.207335][T14101] r4:00000000 [ 1750.207716][T14101] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1750.209218][T14101] ---[ end trace 0000000000000000 ]--- [ 1750.210452][ T29] audit: type=1400 audit(1754.127:656): avc: denied { search } for pid=2904 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1750.210939][ T29] audit: type=1400 audit(1754.127:657): avc: denied { add_name } for pid=2904 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1750.215407][ T29] audit: type=1400 audit(1754.127:658): avc: denied { create } for pid=2904 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1750.216744][ T29] audit: type=1400 audit(1754.137:659): avc: denied { append open } for pid=2904 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1750.244845][ T29] audit: type=1400 audit(1754.137:660): avc: denied { getattr } for pid=2904 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1750.299363][T14101] Kernel panic - not syncing: Fatal exception [ 1750.301336][T14101] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:48:47 Registers: info registers vcpu 0 CPU#0 R00=00000024 R01=767ac008 R02=00040000 R03=00000000 R04=00000000 R05=00000000 R06=00000000 R07=00000003 R08=01f0dac0 R09=00000000 R10=00000001 R11=7efed2bc R12=00000001 R13=df945ff8 R14=7693a590 R15=7693a590 PSR=40010093 -Z-- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=7effffff R02=00000000 R03=00000002 R04=df971e14 R05=df971ee0 R06=201fec00 R07=df971e0c R08=85878780 R09=83f0b000 R10=00010106 R11=df971dfc R12=00000000 R13=df971db0 R14=80999a64 R15=81599bc0 PSR=80000013 N--- A S svc32 s00=20800800 s01=00000001 d00=0000000120800800 s02=08000000 s03=03000300 d01=0300030008000000 s04=080606b0 s05=01000004 d02=01000004080606b0 s06=0806b803 s07=06000a4e d03=06000a4e0806b803 s08=11020800 s09=00010000 d04=0001000011020800 s10=50003000 s11=0a001180 d05=0a00118050003000 s12=e3be4a00 s13=ee4e0839 d06=ee4e0839e3be4a00 s14=24166ff1 s15=0000f471 d07=0000f47124166ff1 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=386c6e01 s33=31313230 d16=31313230386c6e01 s34=00708200 s35=2c800204 d17=2c80020400708200 s36=b2010800 s37=0006026d d18=0006026db2010800 s38=08002008 s39=20080006 d19=2008000608002008 s40=08158003 s41=ffffffdf d20=ffffffdf08158003 s42=ffffffff s43=6c7701ff d21=6c7701ffffffffff s44=00306e61 s45=00000000 d22=0000000000306e61 s46=00000000 s47=37ec0000 d23=37ec000000000000 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=a8ade400 s53=c16b41eb d26=c16b41eba8ade400 s54=dbca1687 s55=777195d5 d27=777195d5dbca1687 s56=0d59d982 s57=012e8700 d28=012e87000d59d982 s58=613172b5 s59=3d29198e d29=3d29198e613172b5 s60=e93105d2 s61=1b4b36c7 d30=1b4b36c7e93105d2 s62=cd171b66 s63=85ffba30 d31=85ffba30cd171b66 FPSCR: 00000000