last executing test programs: 3m0.296311456s ago: executing program 1 (id=7783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x20003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10002}, {0x3, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) 3m0.001092969s ago: executing program 1 (id=7784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2m58.708695497s ago: executing program 1 (id=7789): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) 2m58.568116867s ago: executing program 1 (id=7790): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0xffff) sendmmsg$inet(r0, 0x0, 0x0, 0x40088c0) 2m52.827708843s ago: executing program 1 (id=7791): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000001, 0xc3072, 0xffffffffffffffff, 0x1f9000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 2m52.34676133s ago: executing program 1 (id=7792): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m7.078813603s ago: executing program 32 (id=7792): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 56.577914049s ago: executing program 2 (id=7879): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 56.340095747s ago: executing program 2 (id=7880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r0) 56.128149204s ago: executing program 2 (id=7881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 32.70639874s ago: executing program 2 (id=7892): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') 32.099501135s ago: executing program 2 (id=7893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000010900020073797a30000000000900010073797a300000000014000380080002400000000008000140000001"], 0x68}}, 0x4000000) 31.600189603s ago: executing program 2 (id=7894): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ff80000000000000000a0000000000000000002000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 20.659414313s ago: executing program 0 (id=7904): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2b, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x8, 0x1d, 0x66, 0x0, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, "fd210b23208fd96f4a"}}}}, 0x0) 20.578743069s ago: executing program 0 (id=7905): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380100, @rand_addr=' \x01\x00'}, 0x1c) 20.401156132s ago: executing program 0 (id=7906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket(0x10, 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r8 = gettid() r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0x5, &(0x7f0000000400)={0x2, 0xffffffff}) 1.421801432s ago: executing program 0 (id=7907): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x40, 0x5, 0x86, 0x3c, @time={0x9, 0x8}, {0x8, 0x4}, {0x6, 0x9a}, @ext={0x80, &(0x7f0000000380)="d8db7089811b92ee30334353ef6467d9b223da718983d0357858c0bcd55336f077d176b30ed6127c72713423469c125bd37f0334aab3e6c11ea752b169e58a3cd2d74915ec98edee3067e2ffda2eb829058a1b9331deae8e91e5d05cc7aace18b9a2c963e602f15d8e8b33f88949c26ebc2393434be5082a9991d70a6df477b1"}}], 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 124.98716ms ago: executing program 0 (id=7908): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x9, 0x3a, 0xfff, 0xf84, 0x3}, 0x1c) 0s ago: executing program 0 (id=7909): syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0x4b, 0xfd, 0xf2, 0x20, 0x424, 0xcf30, 0xd3ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0xa0, 0x1, [{{0x9, 0x4, 0x96, 0x3, 0x0, 0x62, 0xbf, 0x2c, 0xab}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): 0 r6:85189900 r5:eaa35f20 [ 9371.614924][T19592] r4:00000000 [ 9371.614932][T19592] [<81555548>] (___sys_sendmsg) from [<81555a7c>] (__sys_sendmsg+0x8c/0xe0) [ 9371.614967][T19592] r10:00000128 r9:84bb6000 r8:8619a480 r7:20000010 r6:200002c0 r5:8619a481 [ 9371.614977][T19592] r4:00000004 [ 9371.614985][T19592] [<815559f0>] (__sys_sendmsg) from [<81555ae4>] (sys_sendmsg+0x14/0x18) [ 9371.615018][T19592] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 9371.615026][T19592] [<81555ad0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9371.615054][T19592] Exception stack(0xeaa35fa8 to 0xeaa35ff0) [ 9371.615078][T19592] 5fa0: 00000000 00000000 00000004 200002c0 20000010 00000000 [ 9371.615097][T19592] 5fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76fe30bc [ 9371.615111][T19592] 5fe0: 76fe2ec0 76fe2eb0 000195a4 00132510 [ 9374.004593][T19595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59153 sclass=netlink_route_socket pid=19595 comm=syz.0.6276 [ 9377.225213][T19601] FAULT_INJECTION: forcing a failure. [ 9377.225213][T19601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9377.225443][T19601] CPU: 1 UID: 0 PID: 19601 Comm: syz.1.6278 Not tainted syzkaller #0 PREEMPT [ 9377.225498][T19601] Hardware name: ARM-Versatile Express [ 9377.225512][T19601] Call trace: [ 9377.225544][T19601] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9377.225609][T19601] r7:ea901e20 r6:00000000 r5:60000013 r4:8224dfd0 [ 9377.225619][T19601] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9377.225647][T19601] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9377.225676][T19601] r5:854f9800 r4:8294f510 [ 9377.225684][T19601] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9377.225714][T19601] [<809855f4>] (should_fail_ex) from [<80985830>] (should_fail+0x14/0x18) [ 9377.225749][T19601] r8:20004040 r7:ea901e20 r6:20000200 r5:00000000 r4:ea901f20 [ 9377.225758][T19601] [<8098581c>] (should_fail) from [<80985850>] (should_fail_usercopy+0x1c/0x20) [ 9377.225786][T19601] [<80985834>] (should_fail_usercopy) from [<81555468>] (copy_msghdr_from_user+0x50/0x130) [ 9377.225816][T19601] [<81555418>] (copy_msghdr_from_user) from [<815555c0>] (___sys_sendmsg+0x78/0xd0) [ 9377.225847][T19601] r8:20004040 r7:00000000 r6:85187400 r5:ea901f20 r4:ea901e64 [ 9377.225855][T19601] [<81555548>] (___sys_sendmsg) from [<81555a7c>] (__sys_sendmsg+0x8c/0xe0) [ 9377.225889][T19601] r10:00000128 r9:854f9800 r8:86620180 r7:20004040 r6:20000200 r5:86620181 [ 9377.225901][T19601] r4:00000004 [ 9377.225909][T19601] [<815559f0>] (__sys_sendmsg) from [<81555ae4>] (sys_sendmsg+0x14/0x18) [ 9377.226012][T19601] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 9377.226038][T19601] [<81555ad0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9377.226282][T19601] Exception stack(0xea901fa8 to 0xea901ff0) [ 9377.226345][T19601] 1fa0: 00000000 00000000 00000004 20000200 20004040 00000000 [ 9377.226499][T19601] 1fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76fe30bc [ 9377.226569][T19601] 1fe0: 76fe2ec0 76fe2eb0 000195a4 00132510 [ 9388.796536][T19618] FAULT_INJECTION: forcing a failure. [ 9388.796536][T19618] name failslab, interval 1, probability 0, space 0, times 0 [ 9388.854438][T19618] CPU: 0 UID: 0 PID: 19618 Comm: syz.0.6285 Not tainted syzkaller #0 PREEMPT [ 9388.854611][T19618] Hardware name: ARM-Versatile Express [ 9388.854637][T19618] Call trace: [ 9388.854689][T19618] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9388.854813][T19618] r7:00000000 r6:00000000 r5:60000113 r4:8224dfd0 [ 9388.854836][T19618] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9388.854895][T19618] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9388.854958][T19618] r5:854fd400 r4:82918790 [ 9388.854975][T19618] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9388.855045][T19618] [<809855f4>] (should_fail_ex) from [<8052e594>] (should_failslab+0x6c/0x94) [ 9388.855124][T19618] r8:854fd400 r7:00000000 r6:00400cc0 r5:ffffffff r4:830a7c00 [ 9388.855146][T19618] [<8052e528>] (should_failslab) from [<8050eac0>] (kmem_cache_alloc_node_noprof+0x50/0x448) [ 9388.855210][T19618] [<8050ea70>] (kmem_cache_alloc_node_noprof) from [<81560664>] (__alloc_skb+0x138/0x160) [ 9388.855314][T19618] r10:eab65d18 r9:00000000 r8:00400cc0 r7:00000000 r6:830a7c00 r5:ffffffff [ 9388.855347][T19618] r4:828060c0 [ 9388.855366][T19618] [<8156052c>] (__alloc_skb) from [<81568810>] (alloc_skb_with_frags+0x44/0x1ec) [ 9388.855445][T19618] r8:802c0b9c r7:eab65cc4 r6:00000000 r5:00001000 r4:00000003 [ 9388.855464][T19618] [<815687cc>] (alloc_skb_with_frags) from [<815590fc>] (sock_alloc_send_pskb+0x1f4/0x228) [ 9388.855539][T19618] r10:eab65d18 r9:00000000 r8:802c0b9c r7:eab65cc4 r6:854fd400 r5:00000000 [ 9388.855564][T19618] r4:85e6da00 [ 9388.855581][T19618] [<81558f08>] (sock_alloc_send_pskb) from [<81835094>] (unix_dgram_sendmsg+0x124/0x720) [ 9388.855660][T19618] r10:00000060 r9:eab65dc4 r8:854fd400 r7:85e6da00 r6:00000060 r5:00000000 [ 9388.855681][T19618] r4:eab65f20 [ 9388.855698][T19618] [<81834f70>] (unix_dgram_sendmsg) from [<818356d4>] (unix_seqpacket_sendmsg+0x44/0x84) [ 9388.855768][T19618] r10:00000000 r9:eab65dc4 r8:eab65dc4 r7:00000000 r6:85189680 r5:eab65f20 [ 9388.855790][T19618] r4:00000000 [ 9388.855806][T19618] [<81835690>] (unix_seqpacket_sendmsg) from [<81552e54>] (__sock_sendmsg+0x44/0x78) [ 9388.855862][T19618] r5:eab65f20 r4:00000000 [ 9388.855879][T19618] [<81552e10>] (__sock_sendmsg) from [<8155361c>] (____sys_sendmsg+0x298/0x2cc) [ 9388.855934][T19618] r7:00000000 r6:85189680 r5:20004040 r4:eab65f20 [ 9388.855950][T19618] [<81553384>] (____sys_sendmsg) from [<815555e4>] (___sys_sendmsg+0x9c/0xd0) [ 9388.856012][T19618] r10:eab65e24 r9:20000200 r8:20004040 r7:00000000 r6:85189680 r5:eab65f20 [ 9388.856032][T19618] r4:00000000 [ 9388.856047][T19618] [<81555548>] (___sys_sendmsg) from [<81555a7c>] (__sys_sendmsg+0x8c/0xe0) [ 9388.856107][T19618] r10:00000128 r9:854fd400 r8:8619acc0 r7:20004040 r6:20000200 r5:8619acc1 [ 9388.856126][T19618] r4:00000004 [ 9388.856141][T19618] [<815559f0>] (__sys_sendmsg) from [<81555ae4>] (sys_sendmsg+0x14/0x18) [ 9388.856200][T19618] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 9388.856216][T19618] [<81555ad0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9388.856261][T19618] Exception stack(0xeab65fa8 to 0xeab65ff0) [ 9388.856303][T19618] 5fa0: 00000000 00000000 00000004 20000200 20004040 00000000 [ 9388.856337][T19618] 5fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76fcf0bc [ 9388.856364][T19618] 5fe0: 76fceec0 76fceeb0 000195a4 00132510 [ 9400.894474][T19735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19735 comm=syz.0.6293 [ 9403.067477][T19741] FAULT_INJECTION: forcing a failure. [ 9403.067477][T19741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9403.124303][T19741] CPU: 1 UID: 0 PID: 19741 Comm: syz.0.6294 Not tainted syzkaller #0 PREEMPT [ 9403.124440][T19741] Hardware name: ARM-Versatile Express [ 9403.124458][T19741] Call trace: [ 9403.124484][T19741] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9403.124550][T19741] r7:00000000 r6:00000000 r5:60000113 r4:8224dfd0 [ 9403.124560][T19741] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9403.124588][T19741] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9403.124618][T19741] r5:854f9800 r4:8294f510 [ 9403.124625][T19741] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9403.124695][T19741] [<809855f4>] (should_fail_ex) from [<80985830>] (should_fail+0x14/0x18) [ 9403.124763][T19741] r8:76fcef30 r7:00000000 r6:00000000 r5:eabf5f68 r4:00000002 [ 9403.124782][T19741] [<8098581c>] (should_fail) from [<80985850>] (should_fail_usercopy+0x1c/0x20) [ 9403.124823][T19741] [<80985834>] (should_fail_usercopy) from [<80599584>] (simple_read_from_buffer+0x80/0x13c) [ 9403.124856][T19741] [<80599504>] (simple_read_from_buffer) from [<80615688>] (proc_fail_nth_read+0xb8/0x108) [ 9403.124895][T19741] r10:00000001 r9:806155d0 r8:00000002 r7:eabf5f68 r6:0000000f r5:76fcef30 [ 9403.124913][T19741] r4:854f9800 r3:eabf5e9f [ 9403.124921][T19741] [<806155d0>] (proc_fail_nth_read) from [<8055e534>] (vfs_read+0x98/0x324) [ 9403.124957][T19741] r8:76fcef30 r7:eabf5f68 r6:854f9800 r5:0000000f r4:8619ad80 [ 9403.124965][T19741] [<8055e49c>] (vfs_read) from [<8055f244>] (ksys_read+0x74/0xe8) [ 9403.124999][T19741] r10:00000003 r9:854f9800 r8:8020029c r7:00000000 r6:00000000 r5:8619ad80 [ 9403.125009][T19741] r4:8619ad83 [ 9403.125017][T19741] [<8055f1d0>] (ksys_read) from [<8055f2c8>] (sys_read+0x10/0x14) [ 9403.125048][T19741] r7:00000003 r6:00000006 r5:76fcef30 r4:0000000f [ 9403.125056][T19741] [<8055f2b8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9403.125082][T19741] Exception stack(0xeabf5fa8 to 0xeabf5ff0) [ 9403.125104][T19741] 5fa0: 0000000f 76fcef30 00000006 76fcef30 0000000f 00000000 [ 9403.125122][T19741] 5fc0: 0000000f 76fcef30 00000006 00000003 00300000 00000000 00006364 76fcf0bc [ 9403.125136][T19741] 5fe0: 00000158 76fceed0 000d81d0 001303dc [ 9421.384974][T19867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19867 comm=syz.0.6303 [ 9423.800259][T18361] hid (null): invalid report_size -646791967 [ 9423.801618][T18361] hid (null): global environment stack underflow [ 9423.802118][T18361] hid (null): unknown global tag 0xc [ 9423.807828][T18361] hid (null): usage index exceeded [ 9423.816062][T18361] hid-generic 0003:F9AD:0003.0008: invalid report_size -646791967 [ 9423.817196][T18361] hid-generic 0003:F9AD:0003.0008: item 0 4 1 7 parsing failed [ 9423.818733][T18361] hid-generic 0003:F9AD:0003.0008: probe with driver hid-generic failed with error -22 [ 9447.139604][ T31] audit: type=1400 audit(134227175.037:490): avc: denied { read } for pid=20003 comm="syz.0.6314" name="rtc0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tetex_data_t:s0" [ 9447.141085][ T31] audit: type=1400 audit(134227175.037:491): avc: denied { open } for pid=20003 comm="syz.0.6314" path="/dev/rtc0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tetex_data_t:s0" [ 9447.246190][ T31] audit: type=1400 audit(134227175.147:492): avc: denied { ioctl } for pid=20003 comm="syz.0.6314" path="/dev/rtc0" dev="devtmpfs" ino=698 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tetex_data_t:s0" [ 9450.166758][T20085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20085 comm=syz.0.6315 [ 9464.445907][ T31] audit: type=1400 audit(134227192.347:493): avc: denied { mounton } for pid=20327 comm="syz.0.6324" path="/3176/file0" dev="tmpfs" ino=16767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 9464.447898][T20329] fuse: Bad value for 'group_id' [ 9464.448830][T20329] fuse: Bad value for 'group_id' [ 9479.854706][T20358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20358 comm=syz.0.6333 [ 9480.537635][T20360] FAULT_INJECTION: forcing a failure. [ 9480.537635][T20360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9480.577714][T20360] CPU: 0 UID: 0 PID: 20360 Comm: syz.1.6334 Not tainted syzkaller #0 PREEMPT [ 9480.577872][T20360] Hardware name: ARM-Versatile Express [ 9480.577898][T20360] Call trace: [ 9480.577946][T20360] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9480.578066][T20360] r7:eb3f5e20 r6:00000000 r5:60000013 r4:8224dfd0 [ 9480.578086][T20360] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9480.578139][T20360] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9480.578198][T20360] r5:8321a400 r4:8294f510 [ 9480.578213][T20360] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9480.578270][T20360] [<809855f4>] (should_fail_ex) from [<80985830>] (should_fail+0x14/0x18) [ 9480.578344][T20360] r8:00000100 r7:eb3f5e20 r6:20069680 r5:00000000 r4:eb3f5f20 [ 9480.578360][T20360] [<8098581c>] (should_fail) from [<80985850>] (should_fail_usercopy+0x1c/0x20) [ 9480.578416][T20360] [<80985834>] (should_fail_usercopy) from [<81555468>] (copy_msghdr_from_user+0x50/0x130) [ 9480.578477][T20360] [<81555418>] (copy_msghdr_from_user) from [<815555c0>] (___sys_sendmsg+0x78/0xd0) [ 9480.578540][T20360] r8:00000100 r7:00000000 r6:85188a00 r5:eb3f5f20 r4:eb3f5e64 [ 9480.578558][T20360] [<81555548>] (___sys_sendmsg) from [<81555a7c>] (__sys_sendmsg+0x8c/0xe0) [ 9480.578620][T20360] r10:00000128 r9:8321a400 r8:8619a9c0 r7:00000100 r6:20069680 r5:8619a9c1 [ 9480.578654][T20360] r4:00000003 [ 9480.578672][T20360] [<815559f0>] (__sys_sendmsg) from [<81555ae4>] (sys_sendmsg+0x14/0x18) [ 9480.578734][T20360] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 9480.578748][T20360] [<81555ad0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9480.578799][T20360] Exception stack(0xeb3f5fa8 to 0xeb3f5ff0) [ 9480.578841][T20360] 5fa0: 00000000 00000000 00000003 20069680 00000100 00000000 [ 9480.578876][T20360] 5fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76fe30bc [ 9480.578903][T20360] 5fe0: 76fe2ec0 76fe2eb0 000195a4 00132510 [ 9483.496475][T20365] FAULT_INJECTION: forcing a failure. [ 9483.496475][T20365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9483.496678][T20365] CPU: 1 UID: 0 PID: 20365 Comm: syz.0.6336 Not tainted syzkaller #0 PREEMPT [ 9483.496727][T20365] Hardware name: ARM-Versatile Express [ 9483.496740][T20365] Call trace: [ 9483.496772][T20365] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9483.496830][T20365] r7:00000000 r6:00000000 r5:60000013 r4:8224dfd0 [ 9483.496840][T20365] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9483.496868][T20365] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9483.496897][T20365] r5:84fb9800 r4:8294f510 [ 9483.496905][T20365] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9483.496936][T20365] [<809855f4>] (should_fail_ex) from [<80985830>] (should_fail+0x14/0x18) [ 9483.496970][T20365] r8:84fb9800 r7:00000000 r6:00000003 r5:00001000 r4:20000000 [ 9483.496979][T20365] [<8098581c>] (should_fail) from [<80985850>] (should_fail_usercopy+0x1c/0x20) [ 9483.497007][T20365] [<80985834>] (should_fail_usercopy) from [<8098b8b4>] (strncpy_from_user+0x20/0x1a0) [ 9483.497034][T20365] [<8098b894>] (strncpy_from_user) from [<80596594>] (path_removexattrat+0x58/0x290) [ 9483.497078][T20365] r10:000000ed r9:84fb9800 r8:84fb9800 r7:00000000 r6:00000003 r5:00001000 [ 9483.497103][T20365] r4:20000000 [ 9483.497244][T20365] [<8059653c>] (path_removexattrat) from [<80597974>] (sys_fremovexattr+0x1c/0x20) [ 9483.497395][T20365] r9:84fb9800 r8:8020029c r7:000000ed r6:001304b8 r5:00000000 r4:00000000 [ 9483.497561][T20365] [<80597958>] (sys_fremovexattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9483.497651][T20365] Exception stack(0xeb449fa8 to 0xeb449ff0) [ 9483.497757][T20365] 9fa0: 00000000 00000000 00000003 20000000 00000000 00000000 [ 9483.497918][T20365] 9fc0: 00000000 00000000 001304b8 000000ed 00300000 00000000 00006364 76fcf0bc [ 9483.498036][T20365] 9fe0: 76fceec0 76fceeb0 000195a4 00132510 [ 9489.266138][T20374] FAULT_INJECTION: forcing a failure. [ 9489.266138][T20374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9489.364709][T20374] CPU: 0 UID: 0 PID: 20374 Comm: syz.0.6339 Not tainted syzkaller #0 PREEMPT [ 9489.364807][T20374] Hardware name: ARM-Versatile Express [ 9489.364820][T20374] Call trace: [ 9489.364845][T20374] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9489.364914][T20374] r7:200695c0 r6:00000000 r5:60000113 r4:8224dfd0 [ 9489.364924][T20374] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9489.364952][T20374] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9489.364981][T20374] r5:8320e000 r4:8294f510 [ 9489.364988][T20374] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9489.365019][T20374] [<809855f4>] (should_fail_ex) from [<80985830>] (should_fail+0x14/0x18) [ 9489.365053][T20374] r8:b5403587 r7:200695c0 r6:eb1f5e64 r5:0000000c r4:0000000c [ 9489.365061][T20374] [<8098581c>] (should_fail) from [<80985850>] (should_fail_usercopy+0x1c/0x20) [ 9489.365088][T20374] [<80985834>] (should_fail_usercopy) from [<81553684>] (move_addr_to_kernel+0x34/0xf8) [ 9489.365119][T20374] [<81553650>] (move_addr_to_kernel) from [<815553ec>] (__copy_msghdr+0xe4/0x110) [ 9489.365149][T20374] r7:eb1f5e20 r6:20069680 r5:eb1f5dd0 r4:eb1f5f20 [ 9489.365158][T20374] [<81555308>] (__copy_msghdr) from [<815554c4>] (copy_msghdr_from_user+0xac/0x130) [ 9489.365185][T20374] r5:00000000 r4:eb1f5f20 [ 9489.365192][T20374] [<81555418>] (copy_msghdr_from_user) from [<815555c0>] (___sys_sendmsg+0x78/0xd0) [ 9489.365223][T20374] r8:00000100 r7:00000000 r6:85188c80 r5:eb1f5f20 r4:eb1f5e64 [ 9489.365233][T20374] [<81555548>] (___sys_sendmsg) from [<81555a7c>] (__sys_sendmsg+0x8c/0xe0) [ 9489.365266][T20374] r10:00000128 r9:8320e000 r8:8619af00 r7:00000100 r6:20069680 r5:8619af01 [ 9489.365278][T20374] r4:00000003 [ 9489.365285][T20374] [<815559f0>] (__sys_sendmsg) from [<81555ae4>] (sys_sendmsg+0x14/0x18) [ 9489.365317][T20374] r8:8020029c r7:00000128 r6:001304b8 r5:00000000 r4:00000000 [ 9489.365325][T20374] [<81555ad0>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9489.365350][T20374] Exception stack(0xeb1f5fa8 to 0xeb1f5ff0) [ 9489.365372][T20374] 5fa0: 00000000 00000000 00000003 20069680 00000100 00000000 [ 9489.365390][T20374] 5fc0: 00000000 00000000 001304b8 00000128 00300000 00000000 00006364 76fcf0bc [ 9489.365404][T20374] 5fe0: 76fceec0 76fceeb0 000195a4 00132510 [ 9490.937964][T20377] FAULT_INJECTION: forcing a failure. [ 9490.937964][T20377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9491.004528][T20377] CPU: 1 UID: 0 PID: 20377 Comm: syz.0.6341 Not tainted syzkaller #0 PREEMPT [ 9491.004688][T20377] Hardware name: ARM-Versatile Express [ 9491.004713][T20377] Call trace: [ 9491.004756][T20377] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9491.004869][T20377] r7:00000000 r6:00000000 r5:60000113 r4:8224dfd0 [ 9491.004887][T20377] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9491.004939][T20377] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9491.004996][T20377] r5:832f1800 r4:8294f510 [ 9491.005012][T20377] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9491.005073][T20377] [<809855f4>] (should_fail_ex) from [<80985830>] (should_fail+0x14/0x18) [ 9491.005146][T20377] r8:76fcef30 r7:00000000 r6:00000000 r5:eb509f68 r4:00000002 [ 9491.005166][T20377] [<8098581c>] (should_fail) from [<80985850>] (should_fail_usercopy+0x1c/0x20) [ 9491.005218][T20377] [<80985834>] (should_fail_usercopy) from [<80599584>] (simple_read_from_buffer+0x80/0x13c) [ 9491.005279][T20377] [<80599504>] (simple_read_from_buffer) from [<80615688>] (proc_fail_nth_read+0xb8/0x108) [ 9491.005348][T20377] r10:00000001 r9:806155d0 r8:00000002 r7:eb509f68 r6:0000000f r5:76fcef30 [ 9491.005372][T20377] r4:832f1800 r3:eb509e9f [ 9491.005389][T20377] [<806155d0>] (proc_fail_nth_read) from [<8055e534>] (vfs_read+0x98/0x324) [ 9491.005468][T20377] r8:76fcef30 r7:eb509f68 r6:832f1800 r5:0000000f r4:8619a9c0 [ 9491.005485][T20377] [<8055e49c>] (vfs_read) from [<8055f244>] (ksys_read+0x74/0xe8) [ 9491.005553][T20377] r10:00000003 r9:832f1800 r8:8020029c r7:00000000 r6:00000000 r5:8619a9c0 [ 9491.005573][T20377] r4:8619a9c3 [ 9491.005588][T20377] [<8055f1d0>] (ksys_read) from [<8055f2c8>] (sys_read+0x10/0x14) [ 9491.005652][T20377] r7:00000003 r6:00000004 r5:76fcef30 r4:0000000f [ 9491.005669][T20377] [<8055f2b8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9491.005721][T20377] Exception stack(0xeb509fa8 to 0xeb509ff0) [ 9491.005762][T20377] 9fa0: 0000000f 76fcef30 00000004 76fcef30 0000000f 00000000 [ 9491.005798][T20377] 9fc0: 0000000f 76fcef30 00000004 00000003 00300000 00000000 00006364 76fcf0bc [ 9491.005826][T20377] 9fe0: 00000158 76fceed0 000d81d0 001303dc [ 9495.805389][T20386] FAULT_INJECTION: forcing a failure. [ 9495.805389][T20386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 9495.806447][T20386] CPU: 0 UID: 0 PID: 20386 Comm: syz.1.6345 Not tainted syzkaller #0 PREEMPT [ 9495.806518][T20386] Hardware name: ARM-Versatile Express [ 9495.806531][T20386] Call trace: [ 9495.806555][T20386] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 9495.806622][T20386] r7:00000000 r6:00000000 r5:60000013 r4:8224dfd0 [ 9495.806631][T20386] [<80201b08>] (show_stack) from [<8021f91c>] (dump_stack_lvl+0x70/0x7c) [ 9495.806659][T20386] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [ 9495.806688][T20386] r5:832f6c00 r4:8294f510 [ 9495.806696][T20386] [<8021f928>] (dump_stack) from [<809857b8>] (should_fail_ex+0x1c4/0x228) [ 9495.806727][T20386] [<809855f4>] (should_fail_ex) from [<80985830>] (should_fail+0x14/0x18) [ 9495.806762][T20386] r8:76fe2f30 r7:00000000 r6:00000000 r5:eb1f5f68 r4:00000002 [ 9495.806771][T20386] [<8098581c>] (should_fail) from [<80985850>] (should_fail_usercopy+0x1c/0x20) [ 9495.806799][T20386] [<80985834>] (should_fail_usercopy) from [<80599584>] (simple_read_from_buffer+0x80/0x13c) [ 9495.806830][T20386] [<80599504>] (simple_read_from_buffer) from [<80615688>] (proc_fail_nth_read+0xb8/0x108) [ 9495.806869][T20386] r10:00000001 r9:806155d0 r8:00000002 r7:eb1f5f68 r6:0000000f r5:76fe2f30 [ 9495.806884][T20386] r4:832f6c00 r3:eb1f5e9f [ 9495.806892][T20386] [<806155d0>] (proc_fail_nth_read) from [<8055e534>] (vfs_read+0x98/0x324) [ 9495.806928][T20386] r8:76fe2f30 r7:eb1f5f68 r6:832f6c00 r5:0000000f r4:8619a000 [ 9495.806937][T20386] [<8055e49c>] (vfs_read) from [<8055f244>] (ksys_read+0x74/0xe8) [ 9495.806982][T20386] r10:00000003 r9:832f6c00 r8:8020029c r7:00000000 r6:00000000 r5:8619a000 [ 9495.807004][T20386] r4:8619a003 [ 9495.807020][T20386] [<8055f1d0>] (ksys_read) from [<8055f2c8>] (sys_read+0x10/0x14) [ 9495.807075][T20386] r7:00000003 r6:00000005 r5:76fe2f30 r4:0000000f [ 9495.807089][T20386] [<8055f2b8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 9495.807137][T20386] Exception stack(0xeb1f5fa8 to 0xeb1f5ff0) [ 9495.807178][T20386] 5fa0: 0000000f 76fe2f30 00000005 76fe2f30 0000000f 00000000 [ 9495.807212][T20386] 5fc0: 0000000f 76fe2f30 00000005 00000003 00300000 00000000 00006364 76fe30bc [ 9495.807237][T20386] 5fe0: 00000158 76fe2ed0 000d81d0 001303dc [ 9503.434821][T20406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20406 comm=syz.1.6350 [ 9534.696419][T20538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=20538 comm=syz.0.6361 [ 9556.517432][ T31] audit: type=1400 audit(134227284.417:494): avc: denied { mount } for pid=20670 comm="syz.0.6372" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 9561.635936][T20676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9561.638414][T20676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9572.786045][T20795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20795 comm=syz.0.6380 [ 9587.654397][T17243] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 9587.905113][T17243] usb 2-1: not running at top speed; connect to a high speed hub [ 9587.954907][T17243] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 9587.955217][T17243] usb 2-1: can't read configurations, error -22 [ 9588.084585][T17243] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 9588.297121][T17243] usb 2-1: not running at top speed; connect to a high speed hub [ 9588.314860][T17243] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 9588.315006][T17243] usb 2-1: can't read configurations, error -22 [ 9588.315631][T17243] usb usb2-port1: attempt power cycle [ 9588.664118][T17243] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 9588.755445][T17243] usb 2-1: not running at top speed; connect to a high speed hub [ 9588.770346][T17243] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 9588.770596][T17243] usb 2-1: can't read configurations, error -22 [ 9588.895100][T17243] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 9589.056930][T17243] usb 2-1: not running at top speed; connect to a high speed hub [ 9589.148389][T17243] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 9589.148552][T17243] usb 2-1: can't read configurations, error -22 [ 9589.151178][T17243] usb usb2-port1: unable to enumerate USB device [ 9606.131267][ T31] audit: type=1400 audit(134227334.027:495): avc: denied { setcheckreqprot } for pid=20995 comm="syz.0.6391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 9616.090224][T21112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21112 comm=syz.0.6397 [ 9620.255565][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9620.305210][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9620.366312][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9620.437389][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9620.786164][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9620.801768][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9620.807934][ T12] bond0 (unregistering): Released all slaves [ 9620.945885][ T12] hsr_slave_0: left promiscuous mode [ 9620.948879][ T12] hsr_slave_1: left promiscuous mode [ 9620.977094][ T12] veth0_macvtap: left promiscuous mode [ 9620.977607][ T12] veth1_vlan: left promiscuous mode [ 9620.977903][ T12] veth0_vlan: left promiscuous mode [ 9622.569623][T21118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9622.578392][T21118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9623.627570][T21118] hsr_slave_0: entered promiscuous mode [ 9623.629686][T21118] hsr_slave_1: entered promiscuous mode [ 9623.630303][T21118] debugfs: 'hsr0' already exists in 'hsr' [ 9623.630411][T21118] Cannot create hsr debugfs directory [ 9624.756791][T21118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 9624.767094][T21118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 9624.776303][T21118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 9624.786763][T21118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 9625.897726][T21118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9629.756763][T21118] veth0_vlan: entered promiscuous mode [ 9629.795393][T21118] veth1_vlan: entered promiscuous mode [ 9629.908337][T21118] veth0_macvtap: entered promiscuous mode [ 9629.922487][T21118] veth1_macvtap: entered promiscuous mode [ 9630.027992][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9630.028450][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9630.029049][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9630.029286][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9630.195182][ T31] audit: type=1400 audit(134227358.087:496): avc: denied { mounton } for pid=21118 comm="syz-executor" path="/syzkaller.YGkLXO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 9630.208259][ T31] audit: type=1400 audit(134227358.107:497): avc: denied { mounton } for pid=21118 comm="syz-executor" path="/syzkaller.YGkLXO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=64117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 9630.230287][ T31] audit: type=1400 audit(134227358.127:498): avc: denied { mounton } for pid=21118 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 9630.788370][T21548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21548 comm=syz.1.6402 [ 9631.348859][ T31] audit: type=1400 audit(134227359.247:499): avc: denied { write } for pid=21554 comm="syz.1.6404" name="ttynull" dev="devtmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:semanage_store_t:s0" [ 9633.065196][ T31] audit: type=1400 audit(134227360.967:500): avc: denied { bind } for pid=21580 comm="syz.1.6409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 9633.066693][ T31] audit: type=1400 audit(134227360.967:501): avc: denied { name_bind } for pid=21580 comm="syz.1.6409" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 9633.067247][ T31] audit: type=1400 audit(134227360.967:502): avc: denied { node_bind } for pid=21580 comm="syz.1.6409" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 9634.459412][ T31] audit: type=1400 audit(134227362.357:503): avc: denied { mount } for pid=21607 comm="syz.1.6418" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 9634.515936][ T31] audit: type=1400 audit(134227362.407:504): avc: denied { unmount } for pid=21118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 9634.518717][T18598] usb 1-1: USB disconnect, device number 120 [ 9635.499077][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9635.530298][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9635.589070][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9635.666396][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 9635.796126][T15462] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 9635.932956][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 9635.958504][T15462] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 9635.958804][T15462] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 9635.959090][T15462] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 9635.959274][T15462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9635.970540][T21640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 9635.985587][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 9635.986746][T15462] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 9635.990971][ T12] bond0 (unregistering): Released all slaves [ 9636.151639][ T12] hsr_slave_0: left promiscuous mode [ 9636.161664][ T12] hsr_slave_1: left promiscuous mode [ 9636.180319][ T12] veth1_vlan: left promiscuous mode [ 9636.180837][ T12] veth0_vlan: left promiscuous mode [ 9636.225115][ T31] audit: type=1326 audit(134227364.117:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21639 comm="syz.1.6421" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x0 [ 9637.680422][T18598] usb 2-1: USB disconnect, device number 67 [ 9639.255261][T21603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9639.275567][T21603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9641.543021][T21603] hsr_slave_0: entered promiscuous mode [ 9641.568256][T21603] hsr_slave_1: entered promiscuous mode [ 9643.402905][T21603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 9643.456295][T21603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 9643.526554][T21603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 9643.543078][T21603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 9645.068505][T21603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9647.648423][T21603] veth0_vlan: entered promiscuous mode [ 9647.671136][T21603] veth1_vlan: entered promiscuous mode [ 9647.771602][T21603] veth0_macvtap: entered promiscuous mode [ 9647.803081][T21603] veth1_macvtap: entered promiscuous mode [ 9647.920168][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9647.920880][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9647.921060][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9647.921139][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9648.101068][ T31] audit: type=1400 audit(134227375.987:506): avc: denied { write } for pid=21603 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 9648.101314][ T31] audit: type=1400 audit(134227375.987:507): avc: denied { open } for pid=21603 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 9648.171991][T22096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 9648.470932][T22103] comedi: valid board names for 8255 driver are: [ 9648.493098][T22103] 8255 [ 9648.494827][T22103] comedi: valid board names for vmk80xx driver are: [ 9648.495754][T22103] vmk80xx [ 9648.496413][T22103] comedi: valid board names for usbduxsigma driver are: [ 9648.497281][T22103] usbduxsigma [ 9648.497915][T22103] comedi: valid board names for usbduxfast driver are: [ 9648.498705][T22103] usbduxfast [ 9648.499334][T22103] comedi: valid board names for usbdux driver are: [ 9648.500103][T22103] usbdux [ 9648.500723][T22103] comedi: valid board names for ni6501 driver are: [ 9648.501607][T22103] ni6501 [ 9648.502369][T22103] comedi: valid board names for dt9812 driver are: [ 9648.503133][T22103] dt9812 [ 9648.504477][T22103] comedi: valid board names for ni_labpc_cs driver are: [ 9648.505792][T22103] ni_labpc_cs [ 9648.507939][T22103] comedi: valid board names for ni_daq_700 driver are: [ 9648.517701][T22103] ni_daq_700 [ 9648.518507][T22103] comedi: valid board names for labpc_pci driver are: [ 9648.519356][T22103] labpc_pci [ 9648.520049][T22103] comedi: valid board names for adl_pci9118 driver are: [ 9648.521323][T22103] pci9118dg [ 9648.521984][T22103] pci9118hg [ 9648.522547][T22103] pci9118hr [ 9648.523252][T22103] comedi: valid board names for 8255_pci driver are: [ 9648.524808][T22103] 8255_pci [ 9648.525670][T22103] comedi: valid board names for comedi_parport driver are: [ 9648.526584][T22103] comedi_parport [ 9648.528041][T22103] comedi: valid board names for comedi_test driver are: [ 9648.534479][T22103] comedi_test [ 9648.535235][T22103] comedi: valid board names for comedi_bond driver are: [ 9648.536014][T22103] comedi_bond [ 9648.575277][T22092] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 9648.770874][T22092] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 9648.775732][T22092] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 9648.778263][T22092] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 9648.779699][T22092] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 9648.781173][T22092] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 9648.802071][T22092] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 9648.803246][T22092] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 9648.807027][T22092] usb 1-1: Product: syz [ 9648.811528][T22092] usb 1-1: Manufacturer: syz [ 9648.840667][T22092] cdc_wdm 1-1:1.0: skipping garbage [ 9648.841547][T22092] cdc_wdm 1-1:1.0: skipping garbage [ 9648.857129][T22092] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 9649.062027][T22092] usb 1-1: USB disconnect, device number 121 [ 9652.553358][T22142] comedi: valid board names for 8255 driver are: [ 9652.584724][T22142] 8255 [ 9652.584987][T22142] comedi: valid board names for vmk80xx driver are: [ 9652.585134][T22142] vmk80xx [ 9652.585265][T22142] comedi: valid board names for usbduxsigma driver are: [ 9652.585388][T22142] usbduxsigma [ 9652.585429][T22142] comedi: valid board names for usbduxfast driver are: [ 9652.585484][T22142] usbduxfast [ 9652.585502][T22142] comedi: valid board names for usbdux driver are: [ 9652.585516][T22142] usbdux [ 9652.585527][T22142] comedi: valid board names for ni6501 driver are: [ 9652.585541][T22142] ni6501 [ 9652.585555][T22142] comedi: valid board names for dt9812 driver are: [ 9652.585570][T22142] dt9812 [ 9652.585584][T22142] comedi: valid board names for ni_labpc_cs driver are: [ 9652.585597][T22142] ni_labpc_cs [ 9652.585610][T22142] comedi: valid board names for ni_daq_700 driver are: [ 9652.585626][T22142] ni_daq_700 [ 9652.585639][T22142] comedi: valid board names for labpc_pci driver are: [ 9652.585715][T22142] labpc_pci [ 9652.585737][T22142] comedi: valid board names for adl_pci9118 driver are: [ 9652.585756][T22142] pci9118dg [ 9652.585771][T22142] pci9118hg [ 9652.585783][T22142] pci9118hr [ 9652.585798][T22142] comedi: valid board names for 8255_pci driver are: [ 9652.585813][T22142] 8255_pci [ 9652.585869][T22142] comedi: valid board names for comedi_parport driver are: [ 9652.585890][T22142] comedi_parport [ 9652.585905][T22142] comedi: valid board names for comedi_test driver are: [ 9652.585919][T22142] comedi_test [ 9652.585965][T22142] comedi: valid board names for comedi_bond driver are: [ 9652.585984][T22142] comedi_bond [ 9653.483438][ T31] audit: type=1400 audit(134227381.377:508): avc: denied { mount } for pid=22147 comm="syz.0.6438" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 9653.548171][ T31] audit: type=1400 audit(134227381.447:509): avc: denied { unmount } for pid=21603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 9654.079725][ T31] audit: type=1400 audit(134227381.977:510): avc: denied { read } for pid=22156 comm="syz.0.6440" name="ttyprintk" dev="devtmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 9654.098100][ T31] audit: type=1400 audit(134227381.977:511): avc: denied { open } for pid=22156 comm="syz.0.6440" path="/dev/ttyprintk" dev="devtmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 9654.100665][ T31] audit: type=1400 audit(134227381.997:512): avc: denied { ioctl } for pid=22156 comm="syz.0.6440" path="/dev/ttyprintk" dev="devtmpfs" ino=610 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 9654.813505][ T31] audit: type=1400 audit(134227382.707:513): avc: denied { write } for pid=22161 comm="syz.0.6442" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 9655.124864][T18598] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 9655.307125][T18598] usb 1-1: config 0 has no interfaces? [ 9655.347117][T18598] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 9655.348181][T18598] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 9655.350041][T18598] usb 1-1: Product: syz [ 9655.351401][T18598] usb 1-1: Manufacturer: syz [ 9655.352722][T18598] usb 1-1: SerialNumber: syz [ 9655.358282][T18598] usb 1-1: config 0 descriptor?? [ 9655.572365][T15462] usb 1-1: USB disconnect, device number 122 [ 9656.005338][T15462] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 9656.185696][T15462] usb 1-1: Using ep0 maxpacket: 32 [ 9656.380918][T22162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9656.383387][T22162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9656.401268][T15462] usb 1-1: unable to get BOS descriptor or descriptor too short [ 9656.405450][T15462] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 9656.405681][T15462] usb 1-1: can't read configurations, error -71 [ 9657.986088][ T31] audit: type=1400 audit(134227385.887:514): avc: denied { create } for pid=22214 comm="syz.1.6454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 9661.666187][T22247] netlink: 'syz.0.6462': attribute type 5 has an invalid length. [ 9661.768558][T22248] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 9666.021306][T22278] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 9666.218700][T22278] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 9666.239034][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.239441][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.239645][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.255401][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.255695][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.255888][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.276101][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.276438][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.276619][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.334518][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.334879][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.335109][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.347527][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.347918][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.348132][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.352977][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.353068][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.353140][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.447668][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.448023][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.448228][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.494394][T22278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 9666.494789][T22278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 9666.495010][T22278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 9666.519252][T22278] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 9666.520852][T22278] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 9666.521098][T22278] usb 2-1: Product: syz [ 9666.521280][T22278] usb 2-1: Manufacturer: syz [ 9666.521450][T22278] usb 2-1: SerialNumber: syz [ 9666.601632][T22278] usb 2-1: config 0 descriptor?? [ 9666.732853][T22278] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 9666.856299][T22228] usb 2-1: USB disconnect, device number 68 [ 9666.860760][T22228] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 9667.916900][ T31] audit: type=1400 audit(134227395.787:515): avc: denied { unmount } for pid=22314 comm="syz.0.6477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 9668.128752][T22318] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6480'. [ 9668.129706][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6480'. [ 9669.398629][ T31] audit: type=1400 audit(134227397.297:516): avc: denied { create } for pid=22339 comm="syz.1.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9669.407459][ T31] audit: type=1400 audit(134227397.307:517): avc: denied { bind } for pid=22339 comm="syz.1.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9669.417148][ T31] audit: type=1400 audit(134227397.317:518): avc: denied { listen } for pid=22339 comm="syz.1.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9669.430360][ T31] audit: type=1400 audit(134227397.327:519): avc: denied { connect } for pid=22339 comm="syz.1.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9669.441704][ T31] audit: type=1400 audit(134227397.337:520): avc: denied { write } for pid=22339 comm="syz.1.6488" path="socket:[65763]" dev="sockfs" ino=65763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9669.456173][ T31] audit: type=1400 audit(134227397.347:521): avc: denied { accept } for pid=22339 comm="syz.1.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9669.472968][ T31] audit: type=1400 audit(134227397.367:522): avc: denied { read } for pid=22339 comm="syz.1.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9670.047428][T22338] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 9670.444474][T22338] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 9670.444782][T22338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 9670.445092][T22338] usb 2-1: Product: syz [ 9670.445187][T22338] usb 2-1: Manufacturer: syz [ 9670.445216][T22338] usb 2-1: SerialNumber: syz [ 9670.473422][T22338] usb 2-1: config 0 descriptor?? [ 9670.720780][ T31] audit: type=1400 audit(134227398.597:523): avc: denied { append } for pid=22344 comm="syz.1.6490" name="i2c-2" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 9670.764969][T22345] i2c i2c-0: died at extended address code [ 9670.864598][T10077] usb 2-1: USB disconnect, device number 69 [ 9671.210072][ T31] audit: type=1400 audit(134227399.107:524): avc: denied { load_policy } for pid=22363 comm="syz.1.6493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 9671.216800][T22365] SELinux: ebitmap start bit (16777215) is not a multiple of the map unit size (64) [ 9671.218420][T22365] SELinux: failed to load policy [ 9675.074737][T22405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 9675.776689][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 9675.777020][ T31] audit: type=1400 audit(134227403.677:526): avc: denied { map } for pid=22420 comm="syz.0.6511" path="/dev/comedi4" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 9675.777332][ T31] audit: type=1400 audit(134227403.677:527): avc: denied { execute } for pid=22420 comm="syz.0.6511" path="/dev/comedi4" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 9677.025693][T22433] devpts: Unknown parameter '/dev/cuse' [ 9683.483866][ T31] audit: type=1400 audit(134227411.377:528): avc: denied { watch_reads } for pid=22451 comm="syz.0.6523" path="/proc/126/fd" dev="proc" ino=65893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 9707.594923][T22540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6556'. [ 9707.612582][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6556'. [ 9714.620391][T22614] sit0: entered allmulticast mode [ 9714.642735][T22614] sit0: entered promiscuous mode [ 9717.994934][ T31] audit: type=1400 audit(134227445.897:529): avc: denied { relabelfrom } for pid=22657 comm="syz.1.6594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 9717.995332][ T31] audit: type=1400 audit(134227445.897:530): avc: denied { relabelto } for pid=22657 comm="syz.1.6594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 9729.895791][T22799] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 9729.896747][T22799] syzkaller0: linktype set to 805 [ 9754.845867][T22934] bond1: down delay (65664) is not a multiple of miimon (7), value rounded to 65660 ms [ 9754.846729][T22934] bond1: entered allmulticast mode [ 9757.668248][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6703'. [ 9758.828727][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6704'. [ 9758.979790][ T31] audit: type=1400 audit(134227486.877:531): avc: denied { accept } for pid=22985 comm="syz.0.6704" path="socket:[67643]" dev="sockfs" ino=67643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 9779.905558][T22194] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 9780.097012][T22194] usb 1-1: config 0 has no interfaces? [ 9780.104050][T22194] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 9780.104202][T22194] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 9780.104292][T22194] usb 1-1: Product: syz [ 9780.104373][T22194] usb 1-1: Manufacturer: syz [ 9780.104454][T22194] usb 1-1: SerialNumber: syz [ 9780.109007][T22194] usb 1-1: config 0 descriptor?? [ 9780.395623][T22194] usb 1-1: USB disconnect, device number 125 [ 9780.834702][T22194] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 9781.029806][T22194] usb 1-1: unable to get BOS descriptor or descriptor too short [ 9781.031521][T22194] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 9781.031657][T22194] usb 1-1: can't read configurations, error -71 [ 9782.544704][T22194] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 9782.713452][T22194] usb 1-1: config 0 has no interfaces? [ 9782.728992][T22194] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 9782.729249][T22194] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 9782.729443][T22194] usb 1-1: Product: syz [ 9782.729602][T22194] usb 1-1: Manufacturer: syz [ 9782.729648][T22194] usb 1-1: SerialNumber: syz [ 9782.735400][T22194] usb 1-1: config 0 descriptor?? [ 9783.005382][T23134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9783.008395][T23134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9783.037980][T23134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9783.044634][T23134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9793.093484][T22186] usb 1-1: USB disconnect, device number 2 [ 9795.892137][T23178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6763'. [ 9797.006635][ T31] audit: type=1400 audit(134227524.907:532): avc: denied { read } for pid=23183 comm="syz.0.6765" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 9797.007679][ T31] audit: type=1400 audit(134227524.907:533): avc: denied { open } for pid=23183 comm="syz.0.6765" path="/187/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 9797.019090][ T31] audit: type=1400 audit(134227524.917:534): avc: denied { ioctl } for pid=23183 comm="syz.0.6765" path="/187/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 9797.837650][T23204] tmpfs: Unsupported parameter 'huge' [ 9798.801049][T23215] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6777'. [ 9804.526649][T23255] veth1_to_bond: entered allmulticast mode [ 9804.577567][T23253] veth1_to_bond: left allmulticast mode [ 9813.909464][ T31] audit: type=1400 audit(134227541.807:535): avc: denied { read } for pid=23339 comm="syz.0.6823" name="file1" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 9813.910038][ T31] audit: type=1400 audit(134227541.807:536): avc: denied { watch } for pid=23339 comm="syz.0.6823" path="/215/file1" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 9835.551871][T23457] Driver unsupported XDP return value 0 on prog (id 130) dev N/A, expect packet loss! [ 9850.088958][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6892'. [ 9852.266313][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6903'. [ 9856.537423][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6911'. [ 9859.523211][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6922'. [ 9861.534760][T23695] sock: sock_set_timeout: `syz.1.6928' (pid 23695) tries to set negative timeout [ 9865.604266][T23711] fuse: Bad value for 'fd' [ 9873.826242][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6942'. [ 9875.960860][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6948'. [ 9876.884756][T22770] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 9877.070922][T22770] usb 1-1: Using ep0 maxpacket: 32 [ 9877.191125][T23749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9877.205108][T23749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9877.244467][T22770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 9877.247558][T22770] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 9877.247903][T22770] usb 1-1: can't read configurations, error -71 [ 9880.889757][T23787] fuse: Bad value for 'fd' [ 9881.394499][T22791] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 9881.565213][T22791] usb 2-1: device descriptor read/64, error -71 [ 9881.850293][T22791] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 9882.041468][T22791] usb 2-1: device descriptor read/64, error -71 [ 9882.159367][T22791] usb usb2-port1: attempt power cycle [ 9882.585033][T22791] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 9882.634071][T22791] usb 2-1: device descriptor read/8, error -71 [ 9882.961263][T22791] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 9882.994742][T22791] usb 2-1: device descriptor read/8, error -71 [ 9883.122124][T22791] usb usb2-port1: unable to enumerate USB device [ 9888.255911][ T31] audit: type=1400 audit(134227616.157:537): avc: denied { create } for pid=23823 comm="syz.0.6978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 9890.882518][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6988'. [ 9892.278966][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6993'. [ 9892.585334][T22708] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 9892.714393][T22708] usb 1-1: device descriptor read/64, error -71 [ 9892.955212][T22708] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 9893.094356][T22708] usb 1-1: device descriptor read/64, error -71 [ 9893.156328][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6998'. [ 9893.205938][T22708] usb usb1-port1: attempt power cycle [ 9893.544710][T22708] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 9893.566798][T22708] usb 1-1: device descriptor read/8, error -71 [ 9893.804924][T22708] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 9893.828991][T22708] usb 1-1: device descriptor read/8, error -71 [ 9893.935482][T22708] usb usb1-port1: unable to enumerate USB device [ 9896.401124][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7003'. [ 9899.012529][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7008'. [ 9903.754348][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7013'. [ 9904.604388][T22191] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 9904.735380][T22191] usb 1-1: device descriptor read/64, error -71 [ 9904.994432][T22191] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 9905.134906][T22191] usb 1-1: device descriptor read/64, error -71 [ 9905.245484][T22191] usb usb1-port1: attempt power cycle [ 9905.594791][T22191] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 9905.631219][T22191] usb 1-1: device descriptor read/8, error -71 [ 9905.864479][T22191] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 9905.906363][T22191] usb 1-1: device descriptor read/8, error -71 [ 9906.018169][T22191] usb usb1-port1: unable to enumerate USB device [ 9906.248008][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7021'. [ 9915.690915][ T7211] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 9915.836062][ T7211] usb 1-1: device descriptor read/64, error -71 [ 9916.134403][ T7211] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 9916.301523][ T7211] usb 1-1: device descriptor read/64, error -71 [ 9916.463603][ T7211] usb usb1-port1: attempt power cycle [ 9916.916082][ T7211] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 9916.980155][ T7211] usb 1-1: device descriptor read/8, error -71 [ 9917.274537][ T7211] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 9917.339592][ T7211] usb 1-1: device descriptor read/8, error -71 [ 9917.481091][ T7211] usb usb1-port1: unable to enumerate USB device [ 9927.274362][T22708] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 9927.427088][T22708] usb 2-1: no configurations [ 9927.427390][T22708] usb 2-1: can't read configurations, error -22 [ 9927.554392][T22708] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 9927.708214][T22708] usb 2-1: no configurations [ 9927.708519][T22708] usb 2-1: can't read configurations, error -22 [ 9927.711038][T22708] usb usb2-port1: attempt power cycle [ 9928.054660][T22708] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 9928.081329][T22708] usb 2-1: no configurations [ 9928.081529][T22708] usb 2-1: can't read configurations, error -22 [ 9928.206012][T22708] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 9928.231461][T22708] usb 2-1: no configurations [ 9928.231782][T22708] usb 2-1: can't read configurations, error -22 [ 9928.234541][T22708] usb usb2-port1: unable to enumerate USB device [ 9929.197102][T24145] fuse: Bad value for 'fd' [ 9934.980357][T24159] fuse: Bad value for 'fd' [ 9937.077395][T24167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7083'. [ 9937.286779][ T31] audit: type=1400 audit(134227665.187:538): avc: denied { set_context_mgr } for pid=24173 comm="syz.1.7084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 9937.358772][ T31] audit: type=1400 audit(134227665.257:539): avc: denied { call } for pid=24173 comm="syz.1.7084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 9937.360774][ T31] audit: type=1400 audit(134227665.257:540): avc: denied { transfer } for pid=24173 comm="syz.1.7084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 9937.376240][T24174] binder: 24173:24174 ioctl c0306201 0 returned -14 [ 9938.764952][T22438] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 9938.919979][T22438] usb 2-1: no configurations [ 9938.920231][T22438] usb 2-1: can't read configurations, error -22 [ 9939.044243][T22438] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 9939.086468][T22186] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 9939.209522][T22438] usb 2-1: no configurations [ 9939.209772][T22438] usb 2-1: can't read configurations, error -22 [ 9939.213471][T22438] usb usb2-port1: attempt power cycle [ 9939.306951][T22186] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 9939.307733][T22186] usb 1-1: config 0 has no interface number 0 [ 9939.308744][T22186] usb 1-1: config 0 interface 186 altsetting 66 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 9939.309815][T22186] usb 1-1: config 0 interface 186 altsetting 66 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 9939.310722][T22186] usb 1-1: config 0 interface 186 has no altsetting 0 [ 9939.320306][T22186] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.0b [ 9939.320972][T22186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9939.322032][T22186] usb 1-1: Product: syz [ 9939.322546][T22186] usb 1-1: Manufacturer: syz [ 9939.323032][T22186] usb 1-1: SerialNumber: syz [ 9939.335226][T22186] usb 1-1: config 0 descriptor?? [ 9939.340422][T24195] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 9939.554642][T22438] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 9939.564899][T22186] usb-storage 1-1:0.186: USB Mass Storage device detected [ 9939.572992][T22186] usb-storage 1-1:0.186: USB Mass Storage not supported on this host controller [ 9939.585900][T22438] usb 2-1: no configurations [ 9939.586208][T22438] usb 2-1: can't read configurations, error -22 [ 9939.619589][T22186] usb-storage 1-1:0.186: probe with driver usb-storage failed with error -22 [ 9939.640880][T22186] usb 1-1: USB disconnect, device number 17 [ 9939.725159][T22438] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 9939.768099][T22438] usb 2-1: no configurations [ 9939.768411][T22438] usb 2-1: can't read configurations, error -22 [ 9939.769553][T22438] usb usb2-port1: unable to enumerate USB device [ 9943.345250][ T31] audit: type=1400 audit(134227671.247:541): avc: denied { mount } for pid=24230 comm="syz.0.7097" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 9948.935498][T24256] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 9950.405435][ T7211] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 9950.554310][ T7211] usb 1-1: Using ep0 maxpacket: 32 [ 9950.565392][ T7211] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 9950.567182][ T7211] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 9950.568771][ T7211] usb 1-1: config 2 has no interface number 0 [ 9950.569882][ T7211] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 9950.571594][ T7211] usb 1-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 9950.575108][ T7211] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 9950.576278][ T7211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 9950.603264][T24279] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 9950.834645][ T7211] usb 1-1: string descriptor 0 read error: -71 [ 9950.847558][ T7211] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 9950.921132][ T7211] usb 1-1: USB disconnect, device number 18 [ 9953.244841][T24324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24324 comm=syz.1.7123 [ 9962.915509][T24380] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7137'. [ 9966.166347][T24401] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7146'. [ 9966.463844][ T31] audit: type=1400 audit(134227694.357:542): avc: denied { getopt } for pid=24403 comm="syz.1.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9966.846968][T22278] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 9967.004195][T22278] usb 2-1: Using ep0 maxpacket: 16 [ 9967.026378][T22278] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 9967.028871][T22278] usb 2-1: config 0 has no interface number 0 [ 9967.062981][T22278] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 9967.067371][T22278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9967.072541][T22278] usb 2-1: Product: syz [ 9967.076288][T22278] usb 2-1: Manufacturer: syz [ 9967.082191][T22278] usb 2-1: SerialNumber: syz [ 9967.107806][T22278] usb 2-1: config 0 descriptor?? [ 9970.170332][ T31] audit: type=1400 audit(134227698.067:543): avc: denied { setopt } for pid=24420 comm="syz.0.7152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 9977.376605][T22708] usb 2-1: USB disconnect, device number 82 [ 9977.713149][T22438] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 9977.919006][T22438] usb 1-1: Using ep0 maxpacket: 16 [ 9977.964251][T22438] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 9977.990006][T22438] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 9977.991810][T22438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 9977.996120][T22438] usb 1-1: Product: syz [ 9977.996989][T22438] usb 1-1: Manufacturer: syz [ 9977.997700][T22438] usb 1-1: SerialNumber: syz [ 9978.082865][T22438] usb 1-1: config 0 descriptor?? [ 9978.118790][T22438] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 9978.139027][T22438] usb 1-1: Detected FT232R [ 9978.383339][T22438] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 9978.750118][T22438] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 9978.782598][ T31] audit: type=1326 audit(134227706.677:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.1.7163" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x0 [ 9978.952954][T22191] usb 1-1: USB disconnect, device number 19 [ 9979.038021][T22191] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 9979.043430][T22191] ftdi_sio 1-1:0.0: device disconnected [ 9981.001260][T24488] fuse: Bad value for 'group_id' [ 9981.008253][T24488] fuse: Bad value for 'group_id' [ 9985.250985][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7176'. [ 9986.844227][T24516] fuse: Bad value for 'group_id' [ 9986.844418][T24516] fuse: Bad value for 'group_id' [ 9992.758861][T24530] fuse: Bad value for 'group_id' [ 9992.762458][T24530] fuse: Bad value for 'group_id' [10002.215011][T24591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7203'. [10003.180544][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7208'. [10004.368185][T24629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7217'. [10008.134211][ T7211] usb 1-1: new high-speed USB device number 20 using dummy_hcd [10008.284030][ T7211] usb 1-1: Using ep0 maxpacket: 16 [10008.290733][ T7211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10008.292877][ T7211] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [10008.295020][ T7211] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [10008.296440][ T7211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10008.305507][ T7211] usb 1-1: config 0 descriptor?? [10008.772380][ T7211] HID 045e:07da: Invalid code 65791 type 1 [10008.792834][ T7211] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input17 [10008.859563][ T7211] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [10009.220337][ T7211] usb 1-1: USB disconnect, device number 20 [10010.658066][T22438] usb 1-1: new high-speed USB device number 21 using dummy_hcd [10010.884299][T22438] usb 1-1: Using ep0 maxpacket: 8 [10010.897855][T22438] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [10010.898120][T22438] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [10010.898293][T22438] usb 1-1: config 0 has no interface number 0 [10010.898364][T22438] usb 1-1: config 0 interface 86 has no altsetting 0 [10010.914069][T22438] usb 1-1: New USB device found, idVendor=0421, idProduct=0071, bcdDevice=64.77 [10010.914391][T22438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10010.914581][T22438] usb 1-1: Product: syz [10010.914734][T22438] usb 1-1: Manufacturer: syz [10010.914815][T22438] usb 1-1: SerialNumber: syz [10010.945035][T22438] usb 1-1: config 0 descriptor?? [10011.236250][T22438] rndis_host 1-1:0.86: skipping garbage [10011.236887][T22438] usb 1-1: bad CDC descriptors [10011.238210][T22438] cdc_acm 1-1:0.86: skipping garbage [10011.264319][T22438] usb 1-1: USB disconnect, device number 21 [10012.058288][T24700] fuse: Bad value for 'fd' [10033.612045][T24787] lo: entered allmulticast mode [10033.706572][T24786] lo: left allmulticast mode [10037.797217][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7267'. [10041.200827][T24811] fuse: Bad value for 'user_id' [10041.202817][T24811] fuse: Bad value for 'user_id' [10044.882463][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7272'. [10046.457893][T24835] fuse: Bad value for 'user_id' [10046.474276][T24835] fuse: Bad value for 'user_id' [10049.581321][T24844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7277'. [10054.165064][T24862] fuse: Bad value for 'fd' [10055.665395][T24878] fuse: Bad value for 'fd' [10059.430418][T24893] fuse: Bad value for 'fd' [10063.629436][T22186] usb 1-1: new high-speed USB device number 22 using dummy_hcd [10063.879402][T22186] usb 1-1: unable to read config index 0 descriptor/start: -61 [10063.885296][T22186] usb 1-1: can't read configurations, error -61 [10064.054333][T22186] usb 1-1: new high-speed USB device number 23 using dummy_hcd [10064.310171][T22186] usb 1-1: unable to read config index 0 descriptor/start: -61 [10064.344665][T22186] usb 1-1: can't read configurations, error -61 [10064.395806][T22186] usb usb1-port1: attempt power cycle [10064.885264][T22186] usb 1-1: new high-speed USB device number 24 using dummy_hcd [10065.006255][T22186] usb 1-1: unable to read config index 0 descriptor/start: -61 [10065.014253][T22186] usb 1-1: can't read configurations, error -61 [10065.248719][T22186] usb 1-1: new high-speed USB device number 25 using dummy_hcd [10065.455416][T22186] usb 1-1: unable to read config index 0 descriptor/start: -61 [10065.457577][T22186] usb 1-1: can't read configurations, error -61 [10065.482115][T22186] usb usb1-port1: unable to enumerate USB device [10076.916067][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7300'. [10077.088152][T24925] debugfs: Bad value for 'gid' [10077.088432][T24925] debugfs: Bad value for 'gid' [10077.091034][ T31] audit: type=1400 audit(134227804.987:545): avc: denied { mount } for pid=24924 comm="syz.0.7301" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [10077.096560][ T31] audit: type=1400 audit(134227804.987:546): avc: denied { remount } for pid=24924 comm="syz.0.7301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [10077.147215][ T31] audit: type=1400 audit(134227805.047:547): avc: denied { unmount } for pid=21603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [10077.854449][ T7211] usb 1-1: new high-speed USB device number 26 using dummy_hcd [10078.024825][ T7211] usb 1-1: config 0 has no interfaces? [10078.052518][ T7211] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [10078.053778][ T7211] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [10078.057445][ T7211] usb 1-1: Product: syz [10078.059486][ T7211] usb 1-1: Manufacturer: syz [10078.062145][ T7211] usb 1-1: SerialNumber: syz [10078.087785][ T7211] usb 1-1: config 0 descriptor?? [10078.325373][ T7211] usb 1-1: USB disconnect, device number 26 [10078.674371][ T7211] usb 1-1: new high-speed USB device number 27 using dummy_hcd [10078.860558][ T7211] usb 1-1: unable to get BOS descriptor or descriptor too short [10078.871685][ T7211] usb 1-1: unable to read config index 0 descriptor/start: -71 [10078.872607][ T7211] usb 1-1: can't read configurations, error -71 [10081.712134][T24951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7305'. [10083.435440][T22191] usb 2-1: new high-speed USB device number 83 using dummy_hcd [10083.607247][T22191] usb 2-1: config 0 has no interfaces? [10083.664741][T22191] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [10083.665142][T22191] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [10083.665472][T22191] usb 2-1: Product: syz [10083.665532][T22191] usb 2-1: Manufacturer: syz [10083.665594][T22191] usb 2-1: SerialNumber: syz [10083.680162][T22191] usb 2-1: config 0 descriptor?? [10083.919202][T22191] usb 2-1: USB disconnect, device number 83 [10084.274350][T22191] usb 2-1: new high-speed USB device number 84 using dummy_hcd [10084.459539][T22191] usb 2-1: unable to get BOS descriptor or descriptor too short [10084.461536][T22191] usb 2-1: unable to read config index 0 descriptor/start: -71 [10084.461771][T22191] usb 2-1: can't read configurations, error -71 [10084.924134][T22708] usb 1-1: new high-speed USB device number 29 using dummy_hcd [10085.118460][T22708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10085.118765][T22708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [10085.119003][T22708] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [10085.119114][T22708] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [10085.119157][T22708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10085.123431][T22708] usb 1-1: config 0 descriptor?? [10085.620047][T22708] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [10085.674704][T22708] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [10086.907279][T22708] usb 1-1: USB disconnect, device number 29 [10087.606654][T22194] usb 1-1: new low-speed USB device number 30 using dummy_hcd [10087.925542][T22194] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [10087.925881][T22194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10087.929790][T22194] usb 1-1: config 0 descriptor?? [10088.004749][T22708] usb 2-1: new high-speed USB device number 86 using dummy_hcd [10088.187736][T22708] usb 2-1: config 0 has no interfaces? [10088.229069][T22708] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [10088.229721][T22194] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [10088.231387][T22708] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [10088.234655][T22708] usb 2-1: Product: syz [10088.235929][T22708] usb 2-1: Manufacturer: syz [10088.238811][T22708] usb 2-1: SerialNumber: syz [10088.270800][T22708] usb 2-1: config 0 descriptor?? [10088.456636][T22194] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [10088.457096][T22194] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [10088.457853][T22194] asix 1-1:0.0: probe with driver asix failed with error -32 [10088.466746][T22194] usb 1-1: USB disconnect, device number 30 [10088.620646][T22708] usb 2-1: USB disconnect, device number 86 [10088.994146][T22708] usb 2-1: new high-speed USB device number 87 using dummy_hcd [10089.192246][T22708] usb 2-1: unable to get BOS descriptor or descriptor too short [10089.212530][T22708] usb 2-1: unable to read config index 0 descriptor/start: -71 [10089.212908][T22708] usb 2-1: can't read configurations, error -71 [10090.664202][T22438] usb 1-1: new high-speed USB device number 31 using dummy_hcd [10090.854896][T22438] usb 1-1: config 0 has no interfaces? [10090.934881][T22438] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [10090.936212][T22438] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [10090.944199][T22438] usb 1-1: Product: syz [10090.946085][T22438] usb 1-1: Manufacturer: syz [10090.948810][T22438] usb 1-1: SerialNumber: syz [10090.968718][T25073] debugfs: Bad value for 'gid' [10090.970360][T25073] debugfs: Bad value for 'gid' [10091.003086][T22438] usb 1-1: config 0 descriptor?? [10091.225682][T22438] usb 1-1: USB disconnect, device number 31 [10091.404576][T22708] usb 2-1: new high-speed USB device number 89 using dummy_hcd [10091.654988][T22438] usb 1-1: new high-speed USB device number 32 using dummy_hcd [10091.830140][T22708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [10091.892304][T22708] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [10091.945638][T22708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10092.022953][T22708] usb 2-1: config 0 descriptor?? [10092.054179][T22438] usb 1-1: Using ep0 maxpacket: 32 [10092.177008][T22438] usb 1-1: unable to get BOS descriptor or descriptor too short [10092.181015][T22438] usb 1-1: unable to read config index 0 descriptor/start: -71 [10092.183212][T22438] usb 1-1: can't read configurations, error -71 [10092.808271][ T7211] usb 2-1: USB disconnect, device number 89 [10096.143076][ T31] audit: type=1400 audit(134227824.037:548): avc: denied { mount } for pid=25124 comm="syz.0.7331" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [10096.865140][T25132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7335'. [10098.814919][T25149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7340'. [10103.448281][T25165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7347'. [10107.757373][T21123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10107.866961][T21123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10107.962129][T21123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10108.057075][T21123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10108.928678][T21123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10108.956705][T21123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10108.968935][T21123] bond0 (unregistering): Released all slaves [10109.009073][T21123] bond1 (unregistering): Released all slaves [10109.185757][T21123] hsr_slave_0: left promiscuous mode [10109.190210][T21123] hsr_slave_1: left promiscuous mode [10109.220997][T21123] veth1_macvtap: left promiscuous mode [10109.221585][T21123] veth1_vlan: left promiscuous mode [10109.222257][T21123] veth0_vlan: left promiscuous mode [10115.305816][T25206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10115.330009][T25206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10117.520415][T25206] hsr_slave_0: entered promiscuous mode [10117.534955][T25206] hsr_slave_1: entered promiscuous mode [10117.536386][T25206] debugfs: 'hsr0' already exists in 'hsr' [10117.536468][T25206] Cannot create hsr debugfs directory [10118.731721][T25206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [10118.796028][T25206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [10118.847627][T25206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [10118.906923][T25206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [10120.765446][T25565] fuse: Bad value for 'fd' [10121.209594][T25206] 8021q: adding VLAN 0 to HW filter on device bond0 [10121.724211][T15462] usb 1-1: new high-speed USB device number 34 using dummy_hcd [10121.921292][T15462] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [10121.921591][T15462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10121.939201][T15462] usb 1-1: config 0 descriptor?? [10122.448160][T15462] usb 1-1: Cannot set MAC address [10122.448591][T15462] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [10122.454911][T15462] usb 1-1: USB disconnect, device number 34 [10126.634044][T22751] usb 1-1: new high-speed USB device number 35 using dummy_hcd [10126.794313][T22751] usb 1-1: Using ep0 maxpacket: 16 [10126.829881][T22751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [10126.836153][T22751] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [10126.839123][T22751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [10126.840663][T22751] usb 1-1: SerialNumber: syz [10127.061173][T22751] usb 1-1: bad CDC descriptors [10127.104565][T22751] usb 1-1: USB disconnect, device number 35 [10128.457916][T25206] veth0_vlan: entered promiscuous mode [10128.566337][T25206] veth1_vlan: entered promiscuous mode [10128.790191][T25206] veth0_macvtap: entered promiscuous mode [10128.831719][T25206] veth1_macvtap: entered promiscuous mode [10129.041183][T25208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10129.043540][T25208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10129.046500][T25208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10129.050249][T25208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10129.135566][T22779] usb 1-1: new high-speed USB device number 36 using dummy_hcd [10129.329784][T22779] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [10129.330150][T22779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [10129.330523][T22779] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [10129.331015][T22779] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [10129.331242][T22779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10129.358495][T22779] usb 1-1: config 0 descriptor?? [10129.926961][T22779] hid_parser_main: 4086 callbacks suppressed [10129.968334][T22779] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [10130.045345][T22779] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [10130.073229][T22779] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [10130.104787][T22779] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [10130.107119][T22779] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [10130.434663][T22779] logitech 0003:046D:CA04.000C: hidraw0: USB HID v1.ff Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [10130.436760][T22779] logitech 0003:046D:CA04.000C: no inputs found [10130.545055][T22779] usb 1-1: USB disconnect, device number 36 [10131.250249][T22779] usb 1-1: new high-speed USB device number 37 using dummy_hcd [10131.426100][T22779] usb 1-1: Using ep0 maxpacket: 32 [10131.435547][T22779] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [10131.435805][T22779] usb 1-1: config 4 has no interface number 0 [10131.436066][T22779] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10131.436128][T22779] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [10131.436266][T22779] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [10131.436362][T22779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10131.482719][T22779] hub 1-1:4.128: USB hub found [10131.678516][T22779] hub 1-1:4.128: 2 ports detected [10131.678874][T22779] hub 1-1:4.128: Using single TT (err -22) [10131.886862][T22779] hub 1-1:4.128: hub_hub_status failed (err = -71) [10131.887147][T22779] hub 1-1:4.128: config failed, can't get hub status (err -71) [10131.926752][T22779] usb 1-1: USB disconnect, device number 37 [10135.205625][T25765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7396'. [10136.534593][T22779] usb 2-1: new high-speed USB device number 90 using dummy_hcd [10136.684331][T22779] usb 2-1: Using ep0 maxpacket: 16 [10136.705345][T22779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10136.705670][T22779] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [10136.705956][T22779] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [10136.706133][T22779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10136.711968][T22779] usb 2-1: config 0 descriptor?? [10137.198853][T22779] microsoft 0003:045E:07DA.000D: unknown main item tag 0x1 [10137.199470][T22779] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [10137.199607][T22779] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [10137.199736][T22779] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [10137.200673][T22779] HID 045e:07da: Invalid code 65791 type 1 [10137.204918][T22779] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input20 [10137.229612][T22779] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [10137.440501][T22779] usb 2-1: USB disconnect, device number 90 [10138.626687][ T31] audit: type=1400 audit(134227866.517:549): avc: denied { map } for pid=25806 comm="syz.1.7403" path="socket:[71587]" dev="sockfs" ino=71587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [10142.677220][T25828] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [10146.874204][T22278] usb 2-1: new high-speed USB device number 91 using dummy_hcd [10147.144036][T22278] usb 2-1: Using ep0 maxpacket: 32 [10147.165830][T22278] usb 2-1: config 0 has no interfaces? [10147.167364][T22278] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [10147.168901][T22278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10147.195177][T22278] usb 2-1: config 0 descriptor?? [10147.602945][T22228] usb 2-1: USB disconnect, device number 91 [10149.894851][T22284] usb 2-1: new full-speed USB device number 92 using dummy_hcd [10150.101937][T22284] usb 2-1: unable to get BOS descriptor or descriptor too short [10150.173977][T22284] usb 2-1: not running at top speed; connect to a high speed hub [10150.321028][T22284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [10150.364529][T22284] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [10150.367767][T22284] usb 2-1: config 1 has no interface number 1 [10150.368739][T22284] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [10150.369899][T22284] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [10150.465605][T22284] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [10150.474812][T22284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10150.487990][T22284] usb 2-1: Product: syz [10150.499715][T22284] usb 2-1: Manufacturer: syz [10150.504783][T22284] usb 2-1: SerialNumber: syz [10150.863175][T22284] hub 2-1:1.0: Invalid hub with more than one config or interface [10150.878312][T22284] hub 2-1:1.0: probe with driver hub failed with error -22 [10150.997125][T22284] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [10151.112174][T25904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25904 comm=syz.1.7434 [10151.476902][T22284] usb 2-1: USB disconnect, device number 92 [10152.454119][T25935] netlink: 182 bytes leftover after parsing attributes in process `syz.1.7438'. [10154.231520][T25943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7442'. [10154.673148][T25948] sch_tbf: burst 1097 is lower than device syzkaller0 mtu (1514) ! [10157.369159][ T31] audit: type=1400 audit(134227885.267:550): avc: denied { read } for pid=25981 comm="syz.0.7458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [10164.412107][T26038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7478'. [10166.095672][T26046] tc_dump_action: action bad kind [10169.247468][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7493'. [10217.174188][T22751] usb 1-1: new high-speed USB device number 38 using dummy_hcd [10217.340481][T22751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10217.340834][T22751] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [10217.345819][T22751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10217.351101][T22751] usb 1-1: config 0 descriptor?? [10217.998736][T22751] usbhid 1-1:0.0: can't add hid device: -71 [10217.998974][T22751] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [10218.012968][T22751] usb 1-1: USB disconnect, device number 38 [10222.075654][T26303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10222.082657][T26303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10222.832397][T26514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7559'. [10222.839927][T26514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7559'. [10222.842798][T26514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7559'. [10222.942208][T26303] hsr_slave_0: entered promiscuous mode [10222.943451][T26303] hsr_slave_1: entered promiscuous mode [10222.944482][T26303] debugfs: 'hsr0' already exists in 'hsr' [10222.944679][T26303] Cannot create hsr debugfs directory [10222.951238][T26542] netlink: 'syz.1.7560': attribute type 2 has an invalid length. [10222.952965][T26542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7560'. [10223.457381][T26303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10223.538538][T26303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10223.615527][T26303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10223.719660][T26303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10223.987505][T26303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [10224.010041][T26303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [10224.025795][T26303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [10224.043184][T26303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [10224.794706][T22194] usb 2-1: new high-speed USB device number 93 using dummy_hcd [10224.954084][T22194] usb 2-1: Using ep0 maxpacket: 32 [10224.995683][T22194] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [10224.995873][T22194] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [10224.996031][T22194] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [10224.996251][T22194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [10224.996374][T22194] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [10224.996520][T22194] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [10224.996699][T22194] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [10224.996794][T22194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10225.007481][T22194] usb 2-1: config 0 descriptor?? [10225.299827][T22194] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [10225.325628][T22194] usb 2-1: USB disconnect, device number 93 [10225.330587][T22194] usblp0: removed [10225.814201][T22194] usb 2-1: new high-speed USB device number 94 using dummy_hcd [10225.974614][T22194] usb 2-1: Using ep0 maxpacket: 32 [10225.982570][T22194] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [10225.984166][T22194] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [10225.985146][T22194] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [10225.994184][T22194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [10225.994430][T22194] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [10225.994611][T22194] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [10225.994820][T22194] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [10225.995003][T22194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10226.001830][T22194] usb 2-1: config 0 descriptor?? [10226.226303][T22194] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 94 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [10226.835097][T26303] 8021q: adding VLAN 0 to HW filter on device bond0 [10232.429772][T26303] veth0_vlan: entered promiscuous mode [10232.447775][T26303] veth1_vlan: entered promiscuous mode [10232.508247][T26303] veth0_macvtap: entered promiscuous mode [10232.520597][T26303] veth1_macvtap: entered promiscuous mode [10232.576702][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10232.610340][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10232.630443][T21123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10232.646047][T21123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10240.550205][T15462] usb 2-1: USB disconnect, device number 94 [10240.552746][T15462] usblp0: removed [10244.126795][T26744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7573'. [10250.210859][T26801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7598'. [10250.535682][T26804] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7597'. [10251.524371][T22770] usb 2-1: new high-speed USB device number 95 using dummy_hcd [10251.765782][T22770] usb 2-1: Using ep0 maxpacket: 8 [10251.789630][T22770] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [10251.871914][T22770] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [10251.872334][T22770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10251.872579][T22770] usb 2-1: Product: syz [10251.872673][T22770] usb 2-1: Manufacturer: syz [10251.872712][T22770] usb 2-1: SerialNumber: syz [10251.884521][T22770] usb 2-1: config 0 descriptor?? [10252.927904][T26824] binder: 26823:26824 ioctl c0306201 0 returned -14 [10258.874706][T22260] usb 1-1: new high-speed USB device number 39 using dummy_hcd [10259.034698][T22260] usb 1-1: Using ep0 maxpacket: 16 [10259.068140][T22260] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [10259.071597][T22260] usb 1-1: config 0 has no interface number 0 [10259.077565][T22260] usb 1-1: config 0 interface 237 has no altsetting 0 [10259.156571][T22260] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [10259.158591][T22260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10259.161447][T22260] usb 1-1: Product: syz [10259.161837][T22260] usb 1-1: Manufacturer: syz [10259.162048][T22260] usb 1-1: SerialNumber: syz [10259.167580][T22260] usb 1-1: config 0 descriptor?? [10259.191812][T22260] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 found [10259.469193][T22260] snd_usb_podhd 1-1:0.237: cannot get proper max packet size [10259.474869][T22260] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 now disconnected [10259.482694][T22260] snd_usb_podhd 1-1:0.237: probe with driver snd_usb_podhd failed with error -22 [10259.714885][T22260] usb 1-1: USB disconnect, device number 39 [10262.141339][T22191] usb 2-1: USB disconnect, device number 95 [10262.144725][T22260] usb 1-1: new high-speed USB device number 40 using dummy_hcd [10262.461475][T22260] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [10262.472536][T22260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10262.491524][T22260] usb 1-1: Product: syz [10262.495199][T22260] usb 1-1: Manufacturer: syz [10262.496583][T22260] usb 1-1: SerialNumber: syz [10262.584403][T22191] usb 2-1: new high-speed USB device number 96 using dummy_hcd [10262.662605][T22260] usb 1-1: config 0 descriptor?? [10262.774944][T22191] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10262.778832][T22191] usb 2-1: config 0 interface 0 has no altsetting 0 [10262.782546][T22191] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [10262.786711][T22191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10262.797393][T22191] usb 2-1: config 0 descriptor?? [10263.080220][T22260] usb 1-1: ignoring: probably an ADSL modem [10263.359387][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.361468][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.367031][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.369950][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.376372][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.377008][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.377406][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.377712][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.378109][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.378418][T22191] macally 0003:060B:0001.000E: unknown main item tag 0x0 [10263.405959][T22191] macally 0003:060B:0001.000E: hidraw0: USB HID v0.40 Device [HID 060b:0001] on usb-dummy_hcd.1-1/input0 [10263.551828][T22191] usb 2-1: USB disconnect, device number 96 [10265.635359][T15462] usb 2-1: new high-speed USB device number 97 using dummy_hcd [10265.785100][T15462] usb 2-1: Using ep0 maxpacket: 8 [10265.791363][T15462] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [10265.807789][T15462] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [10265.808036][T15462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10265.808229][T15462] usb 2-1: Product: syz [10265.808368][T15462] usb 2-1: Manufacturer: syz [10265.808521][T15462] usb 2-1: SerialNumber: syz [10265.814867][T15462] usb 2-1: config 0 descriptor?? [10273.282712][T22191] usb 1-1: USB disconnect, device number 40 [10273.674802][T22191] usb 1-1: new high-speed USB device number 41 using dummy_hcd [10273.831481][T22191] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [10273.832796][T22191] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [10273.836988][T22191] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [10273.839410][T22191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10273.848205][T27080] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [10273.857122][T22191] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [10274.060618][T22260] usb 1-1: USB disconnect, device number 41 [10275.664653][T27128] syzkaller1: entered promiscuous mode [10275.666387][T27128] syzkaller1: entered allmulticast mode [10276.196519][T22260] usb 2-1: USB disconnect, device number 97 [10279.124828][T27162] erspan0: entered promiscuous mode [10279.137292][T27162] erspan0: left promiscuous mode [10279.200424][T27170] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [10279.442594][T27162] *** NOT YET: opcode db *** [10279.621482][T21123] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [10279.621760][T21123] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [10279.622026][T21123] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [10279.622160][T21123] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [10280.457509][T27190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7653'. [10280.470273][T27191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7654'. [10282.411644][T27214] syzkaller0: entered promiscuous mode [10282.424182][T27214] syzkaller0: entered allmulticast mode [10282.944202][T27224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7660'. [10285.299411][T27241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10285.486202][T27241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10285.616923][T27241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10285.726844][T27241] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10285.799333][ T31] audit: type=1400 audit(134228013.697:551): avc: denied { bind } for pid=27240 comm="syz.0.7665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [10285.948453][T21123] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [10286.000567][T21123] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [10286.161203][T21123] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [10286.191373][T21123] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [10287.350732][T27275] syzkaller0: entered promiscuous mode [10287.351110][T27275] syzkaller0: entered allmulticast mode [10287.789746][T27284] syzkaller0: entered promiscuous mode [10287.789968][T27284] syzkaller0: entered allmulticast mode [10288.776933][T27298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7676'. [10289.150361][T27304] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [10290.980320][ T31] audit: type=1400 audit(134228018.877:552): avc: denied { name_bind } for pid=27319 comm="syz.0.7686" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [10292.704697][T27333] veth0: entered allmulticast mode [10298.934228][T27383] bond1 (unregistering): Released all slaves [10299.235859][T27384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7705'. [10299.996783][T27457] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [10300.850623][T27470] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [10305.084260][T10077] usb 1-1: new high-speed USB device number 42 using dummy_hcd [10305.256170][T10077] usb 1-1: Using ep0 maxpacket: 16 [10305.312506][T10077] usb 1-1: config 81 has an invalid interface number: 59 but max is 0 [10305.312903][T10077] usb 1-1: config 81 has no interface number 0 [10305.313248][T10077] usb 1-1: config 81 interface 59 has no altsetting 0 [10305.510709][T10077] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=fc.ba [10305.511099][T10077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10305.511470][T10077] usb 1-1: Product: syz [10305.511672][T10077] usb 1-1: Manufacturer: syz [10305.511875][T10077] usb 1-1: SerialNumber: syz [10305.786463][T10077] legousbtower 1-1:81.59: interrupt endpoints not found [10305.802872][T10077] usb 1-1: USB disconnect, device number 42 [10307.025457][T22191] usb 2-1: new high-speed USB device number 98 using dummy_hcd [10307.204385][T22191] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [10307.204685][T22191] usb 2-1: config 0 has no interface number 0 [10307.205335][T22191] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=23.3b [10307.205408][T22191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10307.209191][T22191] usb 2-1: config 0 descriptor?? [10307.255429][T22191] usb 2-1: bad CDC descriptors [10307.457218][T22191] usb 2-1: USB disconnect, device number 98 [10307.773119][T27550] netlink: 'syz.0.7729': attribute type 21 has an invalid length. [10307.797553][T27550] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7729'. [10307.798521][T27550] netlink: 'syz.0.7729': attribute type 5 has an invalid length. [10307.798581][T27550] netlink: 'syz.0.7729': attribute type 6 has an invalid length. [10307.798620][T27550] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7729'. [10330.925440][ T31] audit: type=1400 audit(134228058.827:553): avc: denied { setattr } for pid=27581 comm="syz.1.7742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [10330.941859][T27586] wireguard: wg1: Could not create IPv4 socket [10340.074442][T22191] usb 2-1: new high-speed USB device number 99 using dummy_hcd [10340.333330][T22191] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [10340.334750][T22191] usb 2-1: config 1 has no interface number 0 [10340.334961][T22191] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [10340.335099][T22191] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [10340.335765][T22191] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [10340.336655][T22191] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10340.370644][T22191] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [10340.370923][T22191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10340.371197][T22191] usb 2-1: Product: syz [10340.371423][T22191] usb 2-1: Manufacturer: syz [10340.373467][T22191] usb 2-1: SerialNumber: syz [10340.496480][T27592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [10340.507148][T27592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [10340.713384][T27592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [10340.715836][T27592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [10341.034344][T22191] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [10342.174160][T22260] usb 2-1: USB disconnect, device number 99 [10342.178004][T22260] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [10342.286262][T22260] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [10347.211742][T27696] comedi: valid board names for 8255 driver are: [10347.212264][T27696] 8255 [10347.212576][T27696] comedi: valid board names for vmk80xx driver are: [10347.212801][T27696] vmk80xx [10347.212947][T27696] comedi: valid board names for usbduxsigma driver are: [10347.213085][T27696] usbduxsigma [10347.213220][T27696] comedi: valid board names for usbduxfast driver are: [10347.213395][T27696] usbduxfast [10347.213529][T27696] comedi: valid board names for usbdux driver are: [10347.214643][T27696] usbdux [10347.214921][T27696] comedi: valid board names for ni6501 driver are: [10347.215067][T27696] ni6501 [10347.215201][T27696] comedi: valid board names for dt9812 driver are: [10347.215355][T27696] dt9812 [10347.215497][T27696] comedi: valid board names for ni_labpc_cs driver are: [10347.215535][T27696] ni_labpc_cs [10347.215553][T27696] comedi: valid board names for ni_daq_700 driver are: [10347.215569][T27696] ni_daq_700 [10347.215583][T27696] comedi: valid board names for labpc_pci driver are: [10347.215597][T27696] labpc_pci [10347.215608][T27696] comedi: valid board names for adl_pci9118 driver are: [10347.215648][T27696] pci9118dg [10347.215740][T27696] pci9118hg [10347.215779][T27696] pci9118hr [10347.215830][T27696] comedi: valid board names for 8255_pci driver are: [10347.215868][T27696] 8255_pci [10347.215887][T27696] comedi: valid board names for comedi_parport driver are: [10347.215922][T27696] comedi_parport [10347.215967][T27696] comedi: valid board names for comedi_test driver are: [10347.215986][T27696] comedi_test [10347.216000][T27696] comedi: valid board names for comedi_bond driver are: [10347.216143][T27696] comedi_bond [10362.196935][T27704] netlink: 83 bytes leftover after parsing attributes in process `syz.1.7760'. [10362.545432][T22284] usb 1-1: new high-speed USB device number 43 using dummy_hcd [10362.601602][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7762'. [10362.615261][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7762'. [10362.714896][T22284] usb 1-1: Using ep0 maxpacket: 8 [10362.737147][T22284] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [10362.737295][T22284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10362.737428][T22284] usb 1-1: Product: syz [10362.737535][T22284] usb 1-1: Manufacturer: syz [10362.737629][T22284] usb 1-1: SerialNumber: syz [10362.776449][T22284] usb 1-1: config 0 descriptor?? [10373.029731][T22191] usb 1-1: USB disconnect, device number 43 [10373.330995][ T31] audit: type=1326 audit(134228101.227:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27729 comm="syz.0.7765" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x0 [10434.767824][T27849] syzkaller1: entered promiscuous mode [10434.770122][T27849] syzkaller1: entered allmulticast mode [10444.821744][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7805'. [10445.334481][T18598] usb 1-1: new high-speed USB device number 44 using dummy_hcd [10445.499202][T18598] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [10445.499536][T18598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10445.506017][T18598] usb 1-1: config 0 descriptor?? [10455.757888][T22779] usb 1-1: USB disconnect, device number 44 [10458.330653][T27932] input: syz0 as /devices/virtual/input/input22 [10461.688436][T27879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [10461.702974][T27879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [10463.822569][T27879] hsr_slave_0: entered promiscuous mode [10463.834956][T27879] hsr_slave_1: entered promiscuous mode [10463.835912][T27879] debugfs: 'hsr0' already exists in 'hsr' [10463.836035][T27879] Cannot create hsr debugfs directory [10465.377730][T27879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [10465.388791][T27879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [10465.417111][T27879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [10465.429647][T27879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [10465.565680][T22186] usb 1-1: new high-speed USB device number 45 using dummy_hcd [10465.774490][T22186] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [10465.774912][T22186] usb 1-1: config 0 has no interface number 0 [10465.775262][T22186] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [10465.775603][T22186] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [10465.775936][T22186] usb 1-1: config 0 interface 48 has no altsetting 0 [10465.837020][T22186] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [10465.837335][T22186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10465.837573][T22186] usb 1-1: Product: syz [10465.837736][T22186] usb 1-1: Manufacturer: syz [10465.837894][T22186] usb 1-1: SerialNumber: syz [10465.843504][T22186] usb 1-1: config 0 descriptor?? [10466.078155][T22186] peak_usb 1-1:0.48: probe with driver peak_usb failed with error 48 [10466.084569][T22186] usb 1-1: USB disconnect, device number 45 [10466.775161][T28270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7834'. [10467.642832][T27879] 8021q: adding VLAN 0 to HW filter on device bond0 [10469.970950][T28302] syzkaller1: entered promiscuous mode [10469.971273][T28302] syzkaller1: entered allmulticast mode [10470.744405][T22227] usb 1-1: new high-speed USB device number 46 using dummy_hcd [10470.936800][T22227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [10470.937736][T22227] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [10470.938808][T22227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10470.966805][T22227] usb 1-1: config 0 descriptor?? [10475.458920][T27879] veth0_vlan: entered promiscuous mode [10475.522241][T27879] veth1_vlan: entered promiscuous mode [10475.597801][T27879] veth0_macvtap: entered promiscuous mode [10475.607411][T27879] veth1_macvtap: entered promiscuous mode [10475.786044][T21123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [10475.786661][T21123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [10475.787039][T21123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [10475.787173][T21123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [10488.710836][T28367] syzkaller0: entered promiscuous mode [10488.711158][T28367] syzkaller0: entered allmulticast mode [10500.505809][T15462] usb 1-1: USB disconnect, device number 46 [10502.358170][T28413] TCP: TCP_TX_DELAY enabled [10523.012269][T28339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [10523.014687][T28339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10523.108199][T28339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [10523.108560][T28339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10523.161776][T28339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [10523.162115][T28339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10523.235476][T28339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [10523.236278][T28339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [10523.608938][T28339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [10523.625704][T28339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [10523.642848][T28339] bond0 (unregistering): Released all slaves [10523.914819][T28339] hsr_slave_0: left promiscuous mode [10523.965727][T28339] hsr_slave_1: left promiscuous mode [10523.981207][T28339] veth1_macvtap: left promiscuous mode [10523.988222][T28339] veth0_macvtap: left promiscuous mode [10523.990179][T28339] veth1_vlan: left promiscuous mode [10523.997782][T28339] veth0_vlan: left promiscuous mode [10530.198177][ T31] audit: type=1400 audit(134228258.097:555): avc: denied { write } for pid=28463 comm="syz.2.7881" name="rtc0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tetex_data_t:s0" [10536.479218][T28529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7885'. [10540.174678][T28518] usb 1-1: new high-speed USB device number 47 using dummy_hcd [10540.355435][T28518] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [10540.355759][T28518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10540.356075][T28518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [10540.356257][T28518] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [10540.371169][T28518] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [10540.371530][T28518] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [10540.372093][T28518] usb 1-1: Manufacturer: syz [10540.386392][T28518] usb 1-1: config 0 descriptor?? [10540.835056][T28518] hid_parser_main: 59 callbacks suppressed [10540.835337][T28518] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [10540.876005][T28518] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [10541.943448][T22194] usb 1-1: USB disconnect, device number 47 [10542.694267][T22194] usb 1-1: new high-speed USB device number 48 using dummy_hcd [10542.854119][T22194] usb 1-1: Using ep0 maxpacket: 32 [10542.929639][T22194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10542.932224][T22194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [10542.934575][T22194] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [10542.936154][T22194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10542.945028][T22194] usb 1-1: config 0 descriptor?? [10543.389427][T22194] ft260 0003:0403:6030.0010: unknown main item tag 0x7 [10543.594583][T22194] ft260 0003:0403:6030.0010: chip code: 6424 8183 [10543.800351][T22194] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [10544.024341][T22194] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [10544.027750][T22194] ft260 0003:0403:6030.0010: failed to retrieve status: -32 [10544.634478][T22194] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [10549.844310][T22194] usb 1-1: device descriptor read/64, error -110 [10550.095408][T22194] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [10550.225503][T22194] usb 1-1: device descriptor read/64, error -32 [10550.474205][T22194] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [10550.499553][T22194] usb 1-1: device descriptor read/8, error -32 [10550.744597][T22194] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [10550.764921][T22194] usb 1-1: device descriptor read/8, error -32 [10550.874210][T22194] raw-gadget.0 gadget.0: failed to queue suspend event [10550.877608][T28520] usb 1-1: USB disconnect, device number 48 [10550.916309][T28520] raw-gadget.0 gadget.0: failed to queue reset event [10550.984443][T28520] raw-gadget.0 gadget.0: failed to queue resume event [10551.058478][T28520] usb 1-1: new high-speed USB device number 49 using dummy_hcd [10551.060690][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [10551.061255][T28520] raw-gadget.0 gadget.0: failed to queue reset event [10551.168005][T28520] raw-gadget.0 gadget.0: failed to queue resume event [10551.269507][T28520] usb 1-1: device descriptor read/64, error -32 [10551.404101][T28520] raw-gadget.0 gadget.0: failed to queue suspend event [10551.438960][T28520] raw-gadget.0 gadget.0: failed to queue reset event [10551.535765][T28520] raw-gadget.0 gadget.0: failed to queue resume event [10551.656482][T28520] usb 1-1: new high-speed USB device number 50 using dummy_hcd [10551.668202][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [10551.675550][T28520] raw-gadget.0 gadget.0: failed to queue reset event [10551.744334][T28520] raw-gadget.0 gadget.0: failed to queue resume event [10551.804742][T28520] usb 1-1: device descriptor read/64, error -32 [10551.924347][T28520] raw-gadget.0 gadget.0: failed to queue suspend event [10551.925264][T28520] usb usb1-port1: attempt power cycle [10551.925497][T28520] raw-gadget.0 gadget.0: failed to queue disconnect event [10551.929536][T28520] raw-gadget.0 gadget.0: failed to queue reset event [10551.994356][T28520] raw-gadget.0 gadget.0: failed to queue resume event [10551.996517][T28520] raw-gadget.0 gadget.0: failed to queue reset event [10552.214423][T28520] raw-gadget.0 gadget.0: failed to queue resume event [10552.274439][T28520] usb 1-1: new high-speed USB device number 51 using dummy_hcd [10552.294856][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [10552.304241][T28520] usb 1-1: device descriptor read/8, error -32 [10552.414242][T28520] raw-gadget.0 gadget.0: failed to queue suspend event [10552.415958][T28520] raw-gadget.0 gadget.0: failed to queue reset event [10552.494517][T28520] raw-gadget.0 gadget.0: failed to queue resume event [10552.526452][T28572] raw-gadget.0 gadget.0: failed to queue suspend event [10552.534506][T28572] raw-gadget.0 gadget.0: failed to queue disconnect event [10552.554895][T28520] usb 1-1: new high-speed USB device number 52 using dummy_hcd [10552.764450][T28520] usb 1-1: device not accepting address 52, error -71 [10552.766171][T28520] usb usb1-port1: unable to enumerate USB device [10553.784804][ T7211] usb 1-1: new high-speed USB device number 53 using dummy_hcd [10554.149215][ T7211] usb 1-1: Using ep0 maxpacket: 8 [10554.218088][ T7211] usb 1-1: unable to get BOS descriptor or descriptor too short [10554.226464][ T7211] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [10554.228239][ T7211] usb 1-1: config 0 has no interface number 0 [10554.238063][ T7211] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [10554.239826][ T7211] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [10554.241780][ T7211] usb 1-1: config 0 interface 88 has no altsetting 0 [10554.318837][ T7211] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [10554.336532][ T7211] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [10554.343007][ T7211] usb 1-1: Product: syz [10554.351947][ T7211] usb 1-1: SerialNumber: syz [10554.449020][ T7211] usb 1-1: config 0 descriptor?? [10554.690734][ T7211] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input23 [10555.008727][ T7211] usb 1-1: USB disconnect, device number 53 [10556.024374][ T7211] usb 1-1: new high-speed USB device number 54 using dummy_hcd [10556.179983][ T7211] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [10556.182229][ T7211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [10556.185099][ T7211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [10556.186155][ T7211] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [10556.191105][ T7211] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [10556.192148][ T7211] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [10556.193015][ T7211] usb 1-1: Manufacturer: syz [10556.202090][ T7211] usb 1-1: config 0 descriptor?? [10556.623057][ T7211] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [10556.634739][ T7211] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [10558.334479][T22768] usb 1-1: reset high-speed USB device number 54 using dummy_hcd [10558.502277][T22768] usb 1-1: device firmware changed [10558.519651][ T7211] usb 1-1: USB disconnect, device number 54 [10558.994795][ T7211] usb 1-1: new high-speed USB device number 55 using dummy_hcd [10559.399368][ T7211] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [10559.400026][ T7211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10559.404669][ T7211] usb 1-1: Product: syz [10559.406871][ T7211] usb 1-1: Manufacturer: syz [10559.408486][ T7211] usb 1-1: SerialNumber: syz [10559.543396][ T7211] usb 1-1: config 0 descriptor?? [10559.859082][ T7211] usb 1-1: USB disconnect, device number 55 [10581.034640][T28517] usb 1-1: new high-speed USB device number 56 using dummy_hcd [10581.184255][T28517] usb 1-1: Using ep0 maxpacket: 16 [10581.254211][T28517] usb 1-1: config 0 interface 0 has no altsetting 0 [10581.256142][T28517] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [10581.259617][T28517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [10581.387733][T28517] usb 1-1: config 0 descriptor?? [10581.926477][T28517] hid (null): unknown global tag 0xd [10581.928409][T28517] hid (null): unknown global tag 0xe [10581.933468][T28517] hid (null): unknown global tag 0xe [10581.936490][T28517] hid (null): unknown global tag 0xc [10581.938862][T28517] hid (null): unknown global tag 0xe [10581.942445][T28517] hid (null): unknown global tag 0xd [10582.098320][T28517] usb 1-1: USB disconnect, device number 56 [10583.004719][T28517] usb 1-1: new high-speed USB device number 57 using dummy_hcd [10583.164377][T28517] usb 1-1: Using ep0 maxpacket: 32 [10583.173326][T28517] usb 1-1: config 7 has an invalid interface number: 150 but max is 0 [10583.175321][T28517] usb 1-1: config 7 has no interface number 0 [10583.176223][T28517] usb 1-1: config 7 interface 150 has no altsetting 0 [10583.187907][T28517] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=d3.ae [10583.189298][T28517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [10583.191634][T28517] usb 1-1: Product: syz [10583.193128][T28517] usb 1-1: Manufacturer: syz [10583.195011][T28517] usb 1-1: SerialNumber: syz [10583.795541][T28517] usb 1-1: USB disconnect, device number 57 [10583.808238][T28517] ------------[ cut here ]------------ [10583.808828][T28517] WARNING: CPU: 1 PID: 28517 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [10583.810817][T28517] refcount_t: underflow; use-after-free. [10583.811518][T28517] Modules linked in: [10583.812422][T28517] Kernel panic - not syncing: kernel: panic_on_warn set ... [10583.812934][T28517] CPU: 1 UID: 0 PID: 28517 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT [10583.813362][T28517] Hardware name: ARM-Versatile Express [10583.814205][T28517] Workqueue: usb_hub_wq hub_event [10583.815145][T28517] Call trace: [10583.815363][T28517] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [10583.816156][T28517] r7:8223c2cc r6:84b66000 r5:00000000 r4:8224dfd0 [10583.816471][T28517] [<80201b08>] (show_stack) from [<8021f900>] (dump_stack_lvl+0x54/0x7c) [10583.816922][T28517] [<8021f8ac>] (dump_stack_lvl) from [<8021f940>] (dump_stack+0x18/0x1c) [10583.817421][T28517] r5:00000000 r4:82a77d18 [10583.817647][T28517] [<8021f928>] (dump_stack) from [<802025f8>] (vpanic+0xe0/0x2e8) [10583.818016][T28517] [<80202518>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0xd8) [10583.818407][T28517] r7:808cb5e8 [10583.818570][T28517] [<80202800>] (panic) from [<80252948>] (get_taint+0x0/0x1c) [10583.818939][T28517] r3:8280c684 r2:00000001 r1:82234830 r0:8223c2cc [10583.819213][T28517] [<802528d0>] (check_panic_on_warn) from [<80252aac>] (__warn+0x80/0x188) [10583.819645][T28517] [<80252a2c>] (__warn) from [<80252d9c>] (warn_slowpath_fmt+0x1e8/0x1f4) [10583.820045][T28517] r8:00000009 r7:822a6b8c r6:dfbb1bfc r5:84b66000 r4:00000000 [10583.820349][T28517] [<80252bb8>] (warn_slowpath_fmt) from [<808cb5e8>] (refcount_warn_saturate+0x13c/0x174) [10583.820818][T28517] r10:00000100 r9:829d7a8c r8:85ede888 r7:85ede474 r6:84e6d7b4 r5:85ede400 [10583.821221][T28517] r4:85ae3000 [10583.821396][T28517] [<808cb4ac>] (refcount_warn_saturate) from [<81a10868>] (kobject_put+0x158/0x1f4) [10583.821828][T28517] [<81a10710>] (kobject_put) from [<80b52848>] (put_device+0x18/0x1c) [10583.822220][T28517] r7:85ede474 r6:84e6d7b4 r5:85ede400 r4:84e6d000 [10583.822509][T28517] [<80b52830>] (put_device) from [<81457ed0>] (hdm_disconnect+0x90/0x9c) [10583.822897][T28517] [<81457e40>] (hdm_disconnect) from [<80eb3ad8>] (usb_unbind_interface+0x84/0x2b8) [10583.823360][T28517] r7:85ede474 r6:85ede430 r5:00000000 r4:85ede800 [10583.823945][T28517] [<80eb3a54>] (usb_unbind_interface) from [<80b5a9f0>] (device_remove+0x64/0x6c) [10583.824714][T28517] r10:00000100 r9:85ede888 r8:00000044 r7:85ede474 r6:829d7a8c r5:00000000 [10583.825119][T28517] r4:85ede430 [10583.825288][T28517] [<80b5a98c>] (device_remove) from [<80b5bee0>] (device_release_driver_internal+0x18c/0x200) [10583.825903][T28517] r5:00000000 r4:85ede430 [10583.826140][T28517] [<80b5bd54>] (device_release_driver_internal) from [<80b5bf6c>] (device_release_driver+0x18/0x1c) [10583.826651][T28517] r9:85ede888 r8:833cfe40 r7:833cfe38 r6:833cfe0c r5:85ede430 r4:833cfe30 [10583.827053][T28517] [<80b5bf54>] (device_release_driver) from [<80b5a030>] (bus_remove_device+0xcc/0x120) [10583.827533][T28517] [<80b59f64>] (bus_remove_device) from [<80b5429c>] (device_del+0x148/0x38c) [10583.827921][T28517] r9:85ede888 r8:84b66000 r7:04208060 r6:00000000 r5:85ede430 r4:85ede474 [10583.828334][T28517] [<80b54154>] (device_del) from [<80eb13c4>] (usb_disable_device+0xd4/0x1e8) [10583.828808][T28517] r10:00000100 r9:00000000 r8:00000000 r7:85ede400 r6:85ede800 r5:85f1ea08 [10583.829267][T28517] r4:60000113 [10583.829490][T28517] [<80eb12f0>] (usb_disable_device) from [<80ea6134>] (usb_disconnect+0xec/0x2ac) [10583.830437][T28517] r9:85ae3800 r8:85ede8cc r7:83faf400 r6:85ede888 r5:85ede800 r4:60000113 [10583.831117][T28517] [<80ea6048>] (usb_disconnect) from [<80ea9130>] (hub_event+0x1194/0x1950) [10583.832129][T28517] r10:00000100 r9:83d8172c r8:83faec00 r7:85ede800 r6:83d81000 r5:00000001 [10583.833158][T28517] r4:00000001 [10583.833743][T28517] [<80ea7f9c>] (hub_event) from [<80278594>] (process_one_work+0x1b4/0x4f4) [10583.835069][T28517] r10:833d5070 r9:83272e05 r8:84b66000 r7:ddde3d80 r6:83272e00 r5:83d8172c [10583.835577][T28517] r4:85cf5a80 [10583.835798][T28517] [<802783e0>] (process_one_work) from [<802791dc>] (worker_thread+0x1fc/0x3d8) [10583.836340][T28517] r10:61c88647 r9:84b66000 r8:85cf5aac r7:82804d40 r6:ddde3d80 r5:ddde3da0 [10583.836687][T28517] r4:85cf5a80 [10583.836837][T28517] [<80278fe0>] (worker_thread) from [<80280200>] (kthread+0x12c/0x280) [10583.837293][T28517] r10:00000000 r9:85cf5a80 r8:80278fe0 r7:dfbade60 r6:85d01200 r5:84b66000 [10583.837739][T28517] r4:00000001 [10583.837965][T28517] [<802800d4>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [10583.838337][T28517] Exception stack(0xdfbb1fb0 to 0xdfbb1ff8) [10583.838626][T28517] 1fa0: 00000000 00000000 00000000 00000000 [10583.839184][T28517] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [10583.839630][T28517] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [10583.840012][T28517] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802800d4 [10583.840459][T28517] r4:85c82680 [10583.842723][T28517] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:35:57 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000000 R03=81a36cf0 R04=0000000a R05=828f7dc8 R06=00000000 R07=828f7dc0 R08=8565c800 R09=00000028 R10=828f7dc8 R11=df801d54 R12=df801d58 R13=df801d48 R14=8033d624 R15=81a36d00 PSR=000e0193 ---- A S svc32 s00=65626d75 s01=37352072 d00=3735207265626d75 s02=3530315b s03=372e3338 d01=372e33383530315b s04=34353539 s05=545b5d31 d02=545b5d3134353539 s06=31353832 s07=75205d37 d03=75205d3731353832 s08=31206273 s09=203a312d d04=203a312d31206273 s10=20425355 s11=63736964 d05=6373696420425355 s12=656e6e6f s13=202c7463 d06=202c7463656e6e6f s14=69766564 s15=6e206563 d07=6e20656369766564 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84a77040 R01=00000038 R02=eb8e3000 R03=00000000 R04=82abb0f8 R05=84a77040 R06=80a8d904 R07=82abb151 R08=828270a8 R09=00000000 R10=000026b2 R11=dfbb18c8 R12=00000002 R13=dfbb18bc R14=82959404 R15=80a8d95c PSR=800e0093 N--- A S svc32 s00=756e2065 s01=7265626d d00=7265626d756e2065 s02=7250202c s03=6375646f d01=6375646f7250202c s04=7375205d s05=2d312062 d02=2d3120627375205d s06=63203a31 s07=69666e6f d03=69666e6f63203a31 s08=20372067 s09=20736168 d04=2073616820372067 s10=69206e61 s11=6c61766e d05=6c61766e69206e61 s12=69206469 s13=7265746e d06=7265746e69206469 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000