last executing test programs: 1.300178756s ago: executing program 3 (id=7683): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009040080ff0000fe01000000000000", 0x1c) 1.300129475s ago: executing program 3 (id=7684): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) 1.300074996s ago: executing program 3 (id=7685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)) 1.212430963s ago: executing program 3 (id=7689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000ffc000/0x3000)=nil}) 1.183819485s ago: executing program 0 (id=7694): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) 1.183735665s ago: executing program 0 (id=7695): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x10, 0x1cc03931, &(0x7f00000002c0)="8aa3"}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x244, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]}) 1.098903692s ago: executing program 3 (id=7700): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r0}}, 0x20) 1.098748171s ago: executing program 3 (id=7701): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, 0x7f, 0x2, 0x17, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, {0x6, 0x2b, 0x1, 0x80, 0x0, 0x1, 0x0, @in=@local, @in=@rand_addr=0x64010102}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x11, 0x14, 0x10}, @sadb_key={0x3, 0x8, 0x78, 0x0, "9725cc405a98fc48d3a5c035eb8422"}]}, 0xb8}}, 0x8080) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003040040000000000109022472510000000009040000120701030009050102cb0a00000009058202"], 0x0) 1.098649512s ago: executing program 2 (id=7702): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 1.098454072s ago: executing program 0 (id=7703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1000c011}, 0x1000) 1.063047775s ago: executing program 2 (id=7704): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.062688904s ago: executing program 0 (id=7705): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x0, 0x203}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) 1.062579385s ago: executing program 2 (id=7706): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x73}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 1.062485685s ago: executing program 0 (id=7707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x3c, r1, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) 1.062339315s ago: executing program 2 (id=7708): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1.062207225s ago: executing program 0 (id=7709): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @local=@item_4={0x3, 0x2, 0x4, "64b12ff5"}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) 1.016278848s ago: executing program 2 (id=7710): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r0, 0x8940, &(0x7f0000000000)) 1.016111669s ago: executing program 2 (id=7711): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x110, 0x88, 0x42, 0xb9, 0x10, 0x7fd, 0x4, 0x28a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x1, 0x10, 0x5, [{{0x9, 0x4, 0xd5, 0x5, 0x0, 0xff, 0x6f, 0xeb, 0x40}}]}}]}}, 0x0) 52.753176ms ago: executing program 1 (id=7751): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000000)=""/92, 0x5c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) 432.31µs ago: executing program 1 (id=7752): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 224.36µs ago: executing program 1 (id=7753): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) fcntl$getflags(r1, 0x40a) 162.33µs ago: executing program 1 (id=7754): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x5, 0xfffffffffffffffe) 106.97µs ago: executing program 1 (id=7755): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 0s ago: executing program 1 (id=7756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x28, 0x4, 0x0, 0xfffff008}, {0x6}]}) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.793639][ T886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.805270][ T886] usb 1-1: config 0 descriptor?? [ 125.814769][ T886] hub 1-1:0.0: USB hub found [ 125.828111][ T7161] random: crng reseeded on system resumption [ 126.025432][ T886] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 126.033671][ T886] usbhid 1-1:0.0: can't add hid device: -22 [ 126.039727][ T886] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 126.070434][ T886] usb 1-1: USB disconnect, device number 57 [ 126.153003][ T7187] incfs: Options parsing error. -22 [ 126.158441][ T7187] incfs: mount failed -22 [ 126.304413][ T7216] cgroup: No subsys list or none specified [ 126.483626][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 126.507231][ T768] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 126.554043][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3470'. [ 126.607121][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 126.646802][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3480'. [ 126.680846][ T7271] netlink: 'syz.0.3484': attribute type 4 has an invalid length. [ 126.688699][ T7271] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3484'. [ 126.699796][ T768] usb 4-1: Using ep0 maxpacket: 16 [ 126.706949][ T768] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 126.725088][ T768] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 126.740992][ T768] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.763852][ T768] usb 4-1: config 0 has no interface number 0 [ 126.775969][ T768] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 126.795842][ T768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.803981][ T768] usb 4-1: Product: syz [ 126.808618][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 126.824691][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.838263][ T768] usb 4-1: Manufacturer: syz [ 126.846249][ T768] usb 4-1: SerialNumber: syz [ 126.857800][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 126.868421][ T768] usb 4-1: config 0 descriptor?? [ 126.881351][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.896683][ T9] usb 2-1: Product: syz [ 126.901090][ T9] usb 2-1: Manufacturer: syz [ 126.915757][ T9] usb 2-1: SerialNumber: syz [ 126.926366][ T9] usb 2-1: config 0 descriptor?? [ 126.941973][ T9] usb 2-1: bad CDC descriptors [ 126.952474][ T9] usb 2-1: unsupported MDLM descriptors [ 127.099134][ T7367] ÿÿÿÿÿÿ: port 2(bridge_slave_1) entered disabled state [ 127.107651][ T768] usb 4-1: Found UVC 0.00 device syz (046c:14e0) [ 127.109475][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 127.109493][ T36] audit: type=1400 audit(2000000294.031:442): avc: denied { create } for pid=7368 comm="syz.0.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.114094][ T768] usb 4-1: No valid video chain found. [ 127.121790][ T36] audit: type=1400 audit(2000000294.050:443): avc: denied { getopt } for pid=7368 comm="syz.0.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.166063][ T7367] ÿÿÿÿÿÿ: port 2(bridge_slave_1) entered disabled state [ 127.172459][ T886] usb 2-1: USB disconnect, device number 56 [ 127.192658][ T36] audit: type=1400 audit(2000000294.115:444): avc: denied { create } for pid=7370 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.214484][ T36] audit: type=1400 audit(2000000294.115:445): avc: denied { write } for pid=7370 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.240480][ T36] audit: type=1400 audit(2000000294.152:446): avc: denied { read } for pid=7374 comm="syz.0.3535" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.264183][ T36] audit: type=1400 audit(2000000294.152:447): avc: denied { open } for pid=7374 comm="syz.0.3535" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.302969][ T36] audit: type=1400 audit(2000000294.152:448): avc: denied { ioctl } for pid=7374 comm="syz.0.3535" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.351765][ T36] audit: type=1400 audit(2000000294.171:449): avc: denied { mounton } for pid=7376 comm="syz.0.3536" path="/759/file0" dev="tmpfs" ino=3832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.354385][ T886] usb 4-1: USB disconnect, device number 53 [ 127.381934][ T7393] netlink: 'syz.2.3544': attribute type 39 has an invalid length. [ 127.393391][ T36] audit: type=1400 audit(2000000294.209:450): avc: denied { create } for pid=7380 comm="syz.0.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.414030][ T36] audit: type=1400 audit(2000000294.209:451): avc: denied { ioctl } for pid=7380 comm="syz.0.3538" path="socket:[25965]" dev="sockfs" ino=25965 ioctlcmd=0x8932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.776410][ T7484] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 128.253261][ T7608] netlink: 'syz.2.3651': attribute type 1 has an invalid length. [ 128.360352][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.369186][ T7636] bridge_slave_1 (unregistering): left allmulticast mode [ 128.376616][ T7636] bridge_slave_1 (unregistering): left promiscuous mode [ 128.384123][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.550001][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.571265][ T7681] bridge_slave_1 (unregistering): left allmulticast mode [ 128.578391][ T7681] bridge_slave_1 (unregistering): left promiscuous mode [ 128.585527][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.999494][ T7778] bpf: Bad value for 'mode' [ 129.031038][ T7783] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 129.043965][ T7783] rust_binder: Write failure EINVAL in pid:1815 [ 129.343117][ T7848] netlink: 'syz.2.3769': attribute type 4 has an invalid length. [ 129.397767][ T7856] x_tables: duplicate entry at hook 1 [ 129.463242][ T7865] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.537546][ T7884] netlink: 'syz.2.3786': attribute type 5 has an invalid length. [ 129.546307][ T7884] netlink: 'syz.2.3786': attribute type 5 has an invalid length. [ 129.562589][ T7884] __nla_validate_parse: 8 callbacks suppressed [ 129.562613][ T7884] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3786'. [ 129.732166][ T7925] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.893531][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3827'. [ 129.910753][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3829'. [ 129.928359][ T7971] bridge_slave_1: left allmulticast mode [ 129.935508][ T7971] bridge_slave_1: left promiscuous mode [ 129.942059][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.950136][ T7971] bridge_slave_0: left allmulticast mode [ 129.956481][ T7971] bridge_slave_0: left promiscuous mode [ 129.962450][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.036921][ T7983] tc_dump_action: action bad kind [ 130.199659][ T8029] netlink: 'syz.2.3857': attribute type 4 has an invalid length. [ 130.409290][ T768] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 130.432774][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3894'. [ 130.441843][ T8101] bridge_slave_0: left allmulticast mode [ 130.447493][ T8101] bridge_slave_0: left promiscuous mode [ 130.453560][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.580339][ T768] usb 2-1: Using ep0 maxpacket: 32 [ 130.590353][ T768] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.598726][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 130.607710][ T768] usb 2-1: config 0 has no interface number 0 [ 130.611308][ T8123] syz.0.3904: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 130.614977][ T768] usb 2-1: config 0 interface 184 has no altsetting 0 [ 130.630274][ T8123] CPU: 1 UID: 0 PID: 8123 Comm: syz.0.3904 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 130.630307][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.630325][ T8123] Call Trace: [ 130.630331][ T8123] [ 130.630340][ T8123] __dump_stack+0x21/0x30 [ 130.630377][ T8123] dump_stack_lvl+0x10c/0x190 [ 130.630401][ T8123] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.630423][ T8123] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 130.630454][ T8123] dump_stack+0x19/0x20 [ 130.630475][ T8123] warn_alloc+0x1bc/0x2a0 [ 130.630497][ T8123] ? stack_depot_save_flags+0x399/0x800 [ 130.630529][ T8123] ? __cfi_warn_alloc+0x10/0x10 [ 130.630553][ T8123] ? kasan_save_track+0x4f/0x80 [ 130.630584][ T8123] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 130.630611][ T8123] ? xskq_create+0x68/0x2a0 [ 130.630630][ T8123] ? xsk_init_queue+0xb6/0x120 [ 130.630647][ T8123] ? xsk_setsockopt+0x43f/0x6f0 [ 130.630663][ T8123] ? do_sock_setsockopt+0x26a/0x400 [ 130.630682][ T8123] ? __x64_sys_setsockopt+0x1b8/0x250 [ 130.630700][ T8123] ? x64_sys_call+0x2adc/0x2ee0 [ 130.630723][ T8123] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.630769][ T8123] __vmalloc_node_range_noprof+0x135/0x1420 [ 130.630801][ T8123] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 130.630825][ T8123] ? avc_has_perm+0x144/0x220 [ 130.630850][ T8123] ? kasan_save_alloc_info+0x40/0x50 [ 130.630873][ T8123] ? __kasan_kmalloc+0x96/0xb0 [ 130.630901][ T8123] vmalloc_user_noprof+0x77/0x90 [ 130.630923][ T8123] ? xskq_create+0xdb/0x2a0 [ 130.630941][ T8123] xskq_create+0xdb/0x2a0 [ 130.630959][ T8123] xsk_init_queue+0xb6/0x120 [ 130.630976][ T8123] xsk_setsockopt+0x43f/0x6f0 [ 130.630993][ T8123] ? __cfi_xsk_setsockopt+0x10/0x10 [ 130.631010][ T8123] ? do_futex+0x309/0x500 [ 130.631040][ T8123] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 130.631060][ T8123] ? security_socket_setsockopt+0x33/0xd0 [ 130.631087][ T8123] ? __cfi_xsk_setsockopt+0x10/0x10 [ 130.631104][ T8123] do_sock_setsockopt+0x26a/0x400 [ 130.631122][ T8123] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 130.631142][ T8123] __x64_sys_setsockopt+0x1b8/0x250 [ 130.631162][ T8123] x64_sys_call+0x2adc/0x2ee0 [ 130.631186][ T8123] do_syscall_64+0x58/0xf0 [ 130.631211][ T8123] ? clear_bhb_loop+0x50/0xa0 [ 130.631233][ T8123] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.631253][ T8123] RIP: 0033:0x7fc2a478eb69 [ 130.631281][ T8123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.631300][ T8123] RSP: 002b:00007fc2a55d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.631322][ T8123] RAX: ffffffffffffffda RBX: 00007fc2a49b5fa0 RCX: 00007fc2a478eb69 [ 130.631340][ T8123] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 130.631354][ T8123] RBP: 00007fc2a4811df1 R08: 0000000000000004 R09: 0000000000000000 [ 130.631369][ T8123] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.631383][ T8123] R13: 0000000000000000 R14: 00007fc2a49b5fa0 R15: 00007fff7e863448 [ 130.631400][ T8123] [ 130.631413][ T8123] Mem-Info: [ 130.637401][ T768] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.649267][ T8123] active_anon:6953 inactive_anon:12 isolated_anon:0 [ 130.649267][ T8123] active_file:10675 inactive_file:14607 isolated_file:0 [ 130.649267][ T8123] unevictable:0 dirty:280 writeback:0 [ 130.649267][ T8123] slab_reclaimable:5253 slab_unreclaimable:74611 [ 130.649267][ T8123] mapped:24718 shmem:163 pagetables:789 [ 130.649267][ T8123] sec_pagetables:0 bounce:0 [ 130.649267][ T8123] kernel_misc_reclaimable:0 [ 130.649267][ T8123] free:1518741 free_pcp:2669 free_cma:0 [ 130.661175][ T768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.662759][ T8123] Node 0 active_anon:27812kB inactive_anon:48kB active_file:42700kB inactive_file:58428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98872kB dirty:1120kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5212kB pagetables:3156kB sec_pagetables:0kB all_unreclaimable? no [ 130.665632][ T768] usb 2-1: Product: syz [ 130.670021][ T8123] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965984kB mlocked:0kB bounce:0kB free_pcp:5772kB local_pcp:5704kB free_cma:0kB [ 130.674959][ T768] usb 2-1: Manufacturer: syz [ 130.680029][ T8123] lowmem_reserve[]: [ 130.685804][ T768] usb 2-1: SerialNumber: syz [ 130.690059][ T8123] 0 [ 130.695425][ T768] usb 2-1: config 0 descriptor?? [ 130.708639][ T8123] 3921 [ 130.710772][ T768] smsc75xx v1.0.0 [ 130.715188][ T8123] 3921 [ 130.794114][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 130.796674][ T8123] [ 130.802056][ T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 130.806186][ T8123] Normal free:3114172kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27896kB inactive_anon:48kB active_file:42700kB inactive_file:58428kB unevictable:0kB writepending:1120kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:3408kB free_cma:0kB [ 130.811013][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.816124][ T8123] lowmem_reserve[]: [ 130.822189][ T9] usb 3-1: config 0 has no interface number 0 [ 130.828414][ T8123] 0 [ 130.835240][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 130.837750][ T8123] 0 0 [ 130.843139][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.847715][ T8123] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB [ 130.852667][ T9] usb 3-1: Product: syz [ 130.856821][ T8123] (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) [ 130.863152][ T9] usb 3-1: Manufacturer: syz [ 130.867310][ T8123] 4*256kB (M) 4*512kB (M) [ 130.887313][ T9] usb 3-1: SerialNumber: syz [ 130.896117][ T8123] 5*1024kB [ 130.904612][ T9] usb 3-1: config 0 descriptor?? [ 130.919481][ T8123] (UM) [ 130.930569][ T9] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 130.935484][ T8123] 5*2048kB (M) [ 130.938622][ T9] usb 3-1: No valid video chain found. [ 130.941630][ T8123] 718*4096kB (M) = 2960212kB [ 130.941654][ T8123] Normal: 182*4kB [ 131.143065][ T768] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 131.146553][ T886] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 131.166896][ T8123] (UM) 245*8kB (U) 67*16kB (UME) 93*32kB (UME) 250*64kB (UME) 120*128kB (UME) 54*256kB (UME) 26*512kB (UME) 21*1024kB (UME) 4*2048kB (ME) 737*4096kB (UM) = 3113680kB [ 131.270449][ T9] usb 3-1: USB disconnect, device number 55 [ 131.287295][ T8123] 25461 total pagecache pages [ 131.292972][ T768] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 131.297935][ T8123] 18 pages in swap cache [ 131.307690][ T768] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 131.315752][ T8123] Free swap = 124460kB [ 131.323082][ T768] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 131.328664][ T8123] Total swap = 124996kB [ 131.336754][ T768] usb 2-1: USB disconnect, device number 57 [ 131.343690][ T8123] 2097051 pages RAM [ 131.348058][ T8123] 0 pages HighMem/MovableOnly [ 131.352831][ T886] usb 4-1: Using ep0 maxpacket: 8 [ 131.352904][ T8123] 351525 pages reserved [ 131.358989][ T886] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.362672][ T8123] 0 pages cma reserved [ 131.371045][ T886] usb 4-1: config 179 has no interface number 0 [ 131.377454][ T8123] Memory allocations: [ 131.381481][ T886] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 131.385637][ T8123] 0 B 0 init/main.c:1370 func:do_initcalls [ 131.404027][ T8123] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 131.405999][ T886] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 131.412101][ T8123] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 131.412122][ T8123] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 131.412140][ T8123] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 131.423551][ T886] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.431554][ T8123] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 131.439101][ T886] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 131.447187][ T8123] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 131.458188][ T886] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.466879][ T8123] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 131.478197][ T886] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 131.486246][ T8123] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 131.519299][ T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.524418][ T8123] 0 B 0 init/initramfs.c:101 func:find_link [ 131.533626][ T8125] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 131.739821][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'. [ 131.748871][ T8141] bridge_slave_0: left allmulticast mode [ 131.754583][ T8141] bridge_slave_0: left promiscuous mode [ 131.760439][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.821098][ T8151] netlink: 37 bytes leftover after parsing attributes in process `syz.0.3918'. [ 131.997236][ T768] usb 4-1: USB disconnect, device number 54 [ 131.997274][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 132.012036][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 132.127809][ T8217] 2N: renamed from vcan0 (while UP) [ 132.181039][ T8227] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3957'. [ 132.234914][ T8234] sit0: entered promiscuous mode [ 132.241562][ T8234] netlink: 'syz.1.3959': attribute type 1 has an invalid length. [ 132.249529][ T8234] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3959'. [ 132.567926][ T8292] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.3989'. [ 132.594980][ T8296] cgroup: Bad value for 'name' [ 132.602887][ T886] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 132.667402][ T36] kauditd_printk_skb: 1179 callbacks suppressed [ 132.667428][ T36] audit: type=1400 audit(2000000299.232:1631): avc: denied { setopt } for pid=8309 comm="syz.3.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.682336][ T8312] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.762325][ T886] usb 1-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 132.776478][ T36] audit: type=1400 audit(2000000299.335:1632): avc: denied { mounton } for pid=8327 comm="syz.3.4006" path="/proc/2077/ns/cgroup" dev="proc" ino=28668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 132.782638][ T886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.812615][ T886] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.827117][ T886] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.836303][ T886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.844364][ T886] usb 1-1: Product: syz [ 132.848629][ T886] usb 1-1: Manufacturer: syz [ 132.853321][ T886] usb 1-1: SerialNumber: syz [ 132.899081][ T8336] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4010'. [ 133.077953][ T886] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 133.087683][ T886] cdc_ncm 1-1:1.0: bind() failure [ 133.097861][ T886] usb 1-1: USB disconnect, device number 58 [ 133.167458][ T768] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 133.196711][ T36] audit: type=1400 audit(2000000299.727:1633): avc: denied { load_policy } for pid=8355 comm="syz.2.4020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 133.239761][ T36] audit: type=1400 audit(2000000299.756:1634): avc: denied { write } for pid=8357 comm="syz.2.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.343450][ T36] audit: type=1400 audit(2000000299.868:1635): avc: denied { getopt } for pid=8381 comm="syz.2.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.349191][ T768] usb 4-1: Using ep0 maxpacket: 16 [ 133.389462][ T768] usb 4-1: config 1 interface 0 has no altsetting 0 [ 133.404022][ T768] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 133.413107][ T768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.421867][ T36] audit: type=1400 audit(2000000299.933:1636): avc: denied { create } for pid=8389 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 133.429824][ T768] usb 4-1: Product: syz [ 133.443355][ T36] audit: type=1400 audit(2000000299.933:1637): avc: denied { write } for pid=8389 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 133.459290][ T768] usb 4-1: Manufacturer: syz [ 133.477622][ T768] usb 4-1: SerialNumber: syz [ 133.587652][ T36] audit: type=1400 audit(2000000300.092:1638): avc: denied { write } for pid=8413 comm="syz.2.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.710528][ T768] usbhid 4-1:1.0: can't add hid device: -71 [ 133.723383][ T768] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 133.745036][ T768] usb 4-1: USB disconnect, device number 55 [ 133.883812][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 133.913952][ T36] audit: type=1400 audit(2000000300.392:1639): avc: denied { read append } for pid=8453 comm="syz.0.4069" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.938214][ T36] audit: type=1400 audit(2000000300.392:1640): avc: denied { open } for pid=8453 comm="syz.0.4069" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.001377][ T886] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 134.054848][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 134.062537][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 134.071846][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.079913][ T9] usb 3-1: Product: syz [ 134.084142][ T9] usb 3-1: Manufacturer: syz [ 134.088794][ T9] usb 3-1: SerialNumber: syz [ 134.094313][ T9] usb 3-1: config 0 descriptor?? [ 134.100382][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 134.108654][ T9] usb 3-1: Detected FT-X [ 134.163305][ T886] usb 2-1: not running at top speed; connect to a high speed hub [ 134.171907][ T886] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 134.172395][ T769] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 134.183045][ T886] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 134.202773][ T886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.212030][ T886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.220176][ T886] usb 2-1: Product: syz [ 134.224381][ T886] usb 2-1: Manufacturer: syz [ 134.229050][ T886] usb 2-1: SerialNumber: syz [ 134.315690][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 134.323132][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 134.330267][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 134.337764][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.347651][ T9] usb 3-1: USB disconnect, device number 56 [ 134.353760][ T769] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.362176][ T769] usb 1-1: config 179 has no interface number 0 [ 134.368952][ T769] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 134.380415][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 134.390128][ T9] ftdi_sio 3-1:0.0: device disconnected [ 134.396192][ T769] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 134.408192][ T769] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 134.420151][ T769] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 134.433204][ T769] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.446781][ T769] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.453132][ T886] cdc_ncm 2-1:1.0: bind() failure [ 134.455867][ T769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.463056][ T886] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 134.475174][ T8454] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 134.475865][ T886] cdc_ncm 2-1:1.1: bind() failure [ 134.483287][ T8454] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 134.494965][ T886] usb 2-1: USB disconnect, device number 58 [ 134.760002][ T886] usb 1-1: USB disconnect, device number 59 [ 134.760002][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 134.760040][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.034289][ T8457] __nla_validate_parse: 3 callbacks suppressed [ 135.034312][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 135.067053][ T8462] cgroup: noprefix used incorrectly [ 135.114066][ T8476] netlink: 'syz.2.4081': attribute type 30 has an invalid length. [ 135.209977][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4093'. [ 135.346814][ T8533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33 sclass=netlink_audit_socket pid=8533 comm=syz.2.4108 [ 135.391121][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 135.487197][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4127'. [ 135.498747][ T8572] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4128'. [ 135.552523][ T9] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 135.572239][ T9] usb 4-1: config 0 has no interface number 1 [ 135.579410][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 135.594227][ T9] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 135.617779][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.640858][ T9] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 135.658344][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.666381][ T9] usb 4-1: SerialNumber: syz [ 135.685537][ T9] usb 4-1: config 0 descriptor?? [ 135.699198][ T9] usb 4-1: Found UVC 0.00 device (0002:0000) [ 135.713233][ T9] usb 4-1: No valid video chain found. [ 135.723340][ T8618] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4151'. [ 135.792220][ T8638] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.4161'. [ 135.801422][ T8638] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4161'. [ 135.914524][ T9] usb 4-1: USB disconnect, device number 56 [ 136.110582][ T8721] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4201'. [ 136.187218][ T8747] netlink: 'syz.2.4213': attribute type 12 has an invalid length. [ 136.228099][ T8759] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 136.389052][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4231'. [ 136.470836][ T886] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 136.656787][ T886] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 136.670579][ T886] usb 1-1: config 0 has no interface number 0 [ 136.686105][ T886] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 136.707876][ T886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.724264][ T886] usb 1-1: Product: syz [ 136.728662][ T886] usb 1-1: Manufacturer: syz [ 136.745696][ T886] usb 1-1: SerialNumber: syz [ 136.768852][ T886] usb 1-1: config 0 descriptor?? [ 136.999523][ T886] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 137.011910][ T886] usb 1-1: No valid video chain found. [ 137.030439][ T886] usb 1-1: USB disconnect, device number 60 [ 137.336986][ T8988] rust_binder: Write failure EFAULT in pid:2166 [ 137.360140][ T8994] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 137.378294][ T8994] overlayfs: missing 'lowerdir' [ 137.396400][ T8998] 9pnet_fd: Insufficient options for proto=fd [ 137.709571][ T9081] rust_binder: Write failure EFAULT in pid:2210 [ 137.731771][ T9090] gre0: left promiscuous mode [ 137.743862][ T9090] gre0: left allmulticast mode [ 137.761545][ T9090] netlink: 'syz.2.4383': attribute type 2 has an invalid length. [ 137.815972][ T9104] sit0: entered promiscuous mode [ 137.837523][ T9104] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 137.877985][ T9110] netlink: 'syz.2.4393': attribute type 63 has an invalid length. [ 137.903050][ T9110] gretap0: left promiscuous mode [ 137.910240][ T9110] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 137.964322][ T9126] netlink: 'syz.2.4401': attribute type 32 has an invalid length. [ 138.054984][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 138.055005][ T36] audit: type=1400 audit(2000000304.274:1663): avc: denied { ioctl } for pid=9149 comm="syz.2.4413" path="socket:[32344]" dev="sockfs" ino=32344 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.149291][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 138.323047][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 138.336280][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 138.352383][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.371077][ T9] usb 1-1: config 1 has no interface number 1 [ 138.386250][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 138.414171][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.430576][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.448616][ T9] usb 1-1: Product: syz [ 138.452872][ T9] usb 1-1: Manufacturer: syz [ 138.466208][ T9] usb 1-1: SerialNumber: syz [ 138.491430][ T636] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 138.554779][ T9265] TCP: TCP_TX_DELAY enabled [ 138.658820][ T36] audit: type=1400 audit(2000000304.835:1664): avc: denied { connect } for pid=9289 comm="syz.1.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.679437][ T636] usb 4-1: Using ep0 maxpacket: 8 [ 138.696064][ T636] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.696947][ T9] usb 1-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 138.704692][ T636] usb 4-1: config 179 has no interface number 0 [ 138.704735][ T636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 138.726562][ T9] usb 1-1: found format II with max.bitrate = 1, frame size=3014 [ 138.753545][ T636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 138.760966][ T9] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 138.773874][ T636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.785569][ T636] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 138.792946][ T9] usb 1-1: USB disconnect, device number 61 [ 138.825838][ T9304] SELinux: security_context_str_to_sid () failed with errno=-22 [ 138.848850][ T636] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.864070][ T636] usb 4-1: config 179 interface 65 has no altsetting 0 [ 138.871143][ T636] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 138.880473][ T636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.902282][ T636] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input25 [ 138.911917][ T36] audit: type=1400 audit(2000000305.078:1665): avc: denied { bind } for pid=9317 comm="syz.2.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.072462][ T36] audit: type=1400 audit(2000000305.228:1666): avc: denied { ioctl } for pid=9343 comm="syz.2.4508" path="socket:[32758]" dev="sockfs" ino=32758 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.097538][ T36] audit: type=1400 audit(2000000305.246:1667): avc: denied { bind } for pid=9347 comm="syz.2.4510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.100755][ T768] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 139.126428][ T636] usb 4-1: USB disconnect, device number 57 [ 139.134412][ T636] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 139.144167][ T9352] netlink: 'syz.2.4512': attribute type 19 has an invalid length. [ 139.255105][ T9380] netlink: 'syz.2.4526': attribute type 27 has an invalid length. [ 139.289804][ T9388] No source specified [ 139.296289][ T36] audit: type=1400 audit(2000000305.433:1668): avc: denied { read } for pid=9389 comm="syz.2.4531" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.303868][ T768] usb 2-1: Using ep0 maxpacket: 32 [ 139.323884][ T36] audit: type=1400 audit(2000000305.433:1669): avc: denied { open } for pid=9389 comm="syz.2.4531" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.352686][ T9397] 8021q: VLANs not supported on ip_vti0 [ 139.353235][ T36] audit: type=1400 audit(2000000305.433:1670): avc: denied { ioctl } for pid=9389 comm="syz.2.4531" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.384240][ T768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.401163][ T768] usb 2-1: config 3 has an invalid interface number: 43 but max is 0 [ 139.419247][ T768] usb 2-1: config 3 has no interface number 0 [ 139.429614][ T768] usb 2-1: config 3 interface 43 has no altsetting 0 [ 139.442834][ T36] audit: type=1326 audit(2000000305.564:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x7ffc0000 [ 139.448892][ T768] usb 2-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 139.469565][ T36] audit: type=1326 audit(2000000305.564:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x7ffc0000 [ 139.499452][ T768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.507528][ T768] usb 2-1: Product: syz [ 139.513757][ T768] usb 2-1: Manufacturer: syz [ 139.526150][ T768] usb 2-1: SerialNumber: syz [ 139.610298][ T9434] cgroup: noprefix used incorrectly [ 139.731491][ T9462] netlink: 'syz.3.4567': attribute type 30 has an invalid length. [ 139.752916][ T768] rndis_host 2-1:3.43: More than one union descriptor, skipping ... [ 139.761150][ T768] usb 2-1: bad CDC descriptors [ 139.767180][ T768] cdc_acm 2-1:3.43: More than one union descriptor, skipping ... [ 139.778746][ T768] usb 2-1: USB disconnect, device number 59 [ 139.902536][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 140.066098][ T9552] netlink: 'syz.3.4612': attribute type 27 has an invalid length. [ 140.067470][ T9] usb 3-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 140.084580][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.093511][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.109072][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.118295][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.126320][ T9] usb 3-1: Product: syz [ 140.131458][ T9] usb 3-1: Manufacturer: syz [ 140.136374][ T9] usb 3-1: SerialNumber: syz [ 140.142368][ T9552] sit0: left promiscuous mode [ 140.230307][ T9573] erspan0: default FDB implementation only supports local addresses [ 140.364848][ T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 140.385847][ T9] cdc_ncm 3-1:1.0: bind() failure [ 140.389934][ T9599] __nla_validate_parse: 20 callbacks suppressed [ 140.389958][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4635'. [ 140.392992][ T9] usb 3-1: USB disconnect, device number 57 [ 140.543996][ T768] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 140.704346][ T768] usb 1-1: Using ep0 maxpacket: 8 [ 140.710429][ T768] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.718853][ T768] usb 1-1: config 179 has no interface number 0 [ 140.725137][ T768] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.725726][ T636] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 140.736695][ T768] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 140.755029][ T768] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.766730][ T768] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 140.778187][ T768] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.791495][ T768] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.800554][ T768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.809567][ T9577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.907473][ T636] usb 4-1: Using ep0 maxpacket: 16 [ 140.915130][ T636] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 140.925843][ T636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.934124][ T636] usb 4-1: Product: syz [ 140.938300][ T636] usb 4-1: Manufacturer: syz [ 140.943097][ T636] usb 4-1: SerialNumber: syz [ 140.948537][ T636] usb 4-1: config 0 descriptor?? [ 140.961486][ T636] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 140.981440][ T636] usb 4-1: Detected FT-X [ 141.016893][ T9628] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4648'. [ 141.171827][ T636] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 141.182756][ T636] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 141.196779][ T636] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 141.209013][ T636] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 141.222597][ T636] usb 4-1: USB disconnect, device number 58 [ 141.239351][ T636] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 141.254726][ T636] ftdi_sio 4-1:0.0: device disconnected [ 141.292304][ T768] usb 1-1: USB disconnect, device number 62 [ 141.292354][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.292388][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 141.456491][ T9705] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 141.518634][ T9720] netlink: 'syz.2.4695': attribute type 46 has an invalid length. [ 141.859768][ T9769] syz.0.4719 (9769): /proc/9768/oom_adj is deprecated, please use /proc/9768/oom_score_adj instead. [ 142.051388][ T768] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 142.213293][ T768] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.221414][ T768] usb 4-1: not running at top speed; connect to a high speed hub [ 142.229969][ T768] usb 4-1: config 1 has an invalid interface number: 138 but max is 16 [ 142.238314][ T768] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 17 [ 142.247390][ T768] usb 4-1: config 1 has no interface number 0 [ 142.253508][ T768] usb 4-1: config 1 interface 138 has no altsetting 0 [ 142.261901][ T768] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 142.271041][ T768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 142.279512][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 142.287303][ T768] usb 4-1: Product: syz [ 142.291599][ T768] usb 4-1: Manufacturer: syz [ 142.296250][ T768] usb 4-1: SerialNumber: syz [ 142.457580][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 142.463816][ T9] usb 1-1: config 42 has an invalid interface number: 199 but max is 0 [ 142.472210][ T9] usb 1-1: config 42 has an invalid interface number: 1 but max is 0 [ 142.480406][ T9] usb 1-1: config 42 has 2 interfaces, different from the descriptor's value: 1 [ 142.489548][ T9] usb 1-1: config 42 has no interface number 0 [ 142.495786][ T9] usb 1-1: config 42 interface 199 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.509370][ T9] usb 1-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 142.522703][ T9] usb 1-1: config 42 interface 199 has no altsetting 0 [ 142.529947][ T9] usb 1-1: config 42 interface 1 has no altsetting 0 [ 142.538674][ T768] usb 4-1: MIDIStreaming interface descriptor not found [ 142.546321][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=19.cb [ 142.555892][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.565385][ T768] usb 4-1: USB disconnect, device number 59 [ 142.571482][ T9] usb 1-1: Product: syz [ 142.576449][ T9] usb 1-1: Manufacturer: syz [ 142.581214][ T9] usb 1-1: SerialNumber: syz [ 142.593794][ T292] udevd[292]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.627932][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4751'. [ 142.652553][ T9837] rust_binder: Write failure EFAULT in pid:2627 [ 142.671413][ T31] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 142.817913][ T9] snd-usb-audio 1-1:42.1: probe with driver snd-usb-audio failed with error -2 [ 142.828152][ T9] usb 1-1: USB disconnect, device number 63 [ 142.835974][ T637] udevd[637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:42.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.854995][ T31] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 142.863238][ T31] usb 2-1: config 0 has no interface number 0 [ 142.869473][ T31] usb 2-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 142.879652][ T31] usb 2-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 142.891318][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 142.900483][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.908626][ T31] usb 2-1: Product: syz [ 142.912880][ T31] usb 2-1: Manufacturer: syz [ 142.917536][ T31] usb 2-1: SerialNumber: syz [ 142.924501][ T31] usb 2-1: config 0 descriptor?? [ 142.929820][ T9827] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 142.937192][ T9827] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 142.945237][ T31] ums-usbat 2-1:0.23: USB Mass Storage device detected [ 143.088746][ T9849] netlink: 'syz.3.4757': attribute type 63 has an invalid length. [ 143.097095][ T9849] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4757'. [ 143.107830][ T9849] gretap0: entered allmulticast mode [ 143.114528][ T9849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 143.212282][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4770'. [ 143.214599][ T31] ums-usbat 2-1:0.23: probe with driver ums-usbat failed with error -5 [ 143.222618][ T9877] netlink: 'syz.3.4771': attribute type 32 has an invalid length. [ 143.234055][ T31] usb 2-1: USB disconnect, device number 60 [ 143.487149][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 143.487170][ T36] audit: type=1400 audit(141.164:1678): avc: denied { read } for pid=9946 comm="syz.0.4806" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.516084][ T36] audit: type=1400 audit(141.164:1679): avc: denied { open } for pid=9946 comm="syz.0.4806" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.561627][ T36] audit: type=1400 audit(141.229:1680): avc: denied { ioctl } for pid=9946 comm="syz.0.4806" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.739910][T10004] netlink: 'syz.1.4833': attribute type 5 has an invalid length. [ 143.811256][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4844'. [ 143.866158][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4850'. [ 143.945188][T10053] netlink: 'syz.1.4858': attribute type 15 has an invalid length. [ 144.000563][T10063] netlink: 'syz.1.4863': attribute type 4 has an invalid length. [ 144.008446][T10063] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4863'. [ 144.029033][T10065] netlink: 'syz.1.4864': attribute type 1 has an invalid length. [ 144.037192][T10065] netlink: 'syz.1.4864': attribute type 2 has an invalid length. [ 144.050490][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 144.123228][ T36] audit: type=1400 audit(141.753:1681): avc: denied { ioctl } for pid=10086 comm="syz.0.4875" path="socket:[35196]" dev="sockfs" ino=35196 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.170705][T10093] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4878'. [ 144.219983][T10103] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4883'. [ 144.233327][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 144.241486][ T9] usb 4-1: config 0 has no interface number 0 [ 144.255424][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 144.281422][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.295654][T10119] No source specified [ 144.299833][ T9] usb 4-1: Product: syz [ 144.304625][ T9] usb 4-1: Manufacturer: syz [ 144.314524][ T9] usb 4-1: SerialNumber: syz [ 144.326654][ T9] usb 4-1: config 0 descriptor?? [ 144.511747][T10154] netlink: 'syz.2.4907': attribute type 1 has an invalid length. [ 144.558099][ T9] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 144.569945][ T36] audit: type=1400 audit(142.174:1682): avc: denied { ioctl } for pid=10164 comm="syz.1.4913" path="socket:[36078]" dev="sockfs" ino=36078 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.594629][ T9] usb 4-1: No valid video chain found. [ 144.595741][ T31] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 144.605771][ T9] usb 4-1: USB disconnect, device number 60 [ 144.788134][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 144.798737][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 144.807474][ T31] usb 1-1: config 179 has no interface number 0 [ 144.813945][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 144.836452][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 144.855698][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 144.871105][ T31] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 144.881699][ T31] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.911311][ T31] usb 1-1: config 179 interface 65 has no altsetting 0 [ 144.918697][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 144.928136][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.946610][ T31] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29 [ 145.001346][T10235] netlink: 'syz.2.4948': attribute type 4 has an invalid length. [ 145.034014][ T36] audit: type=1400 audit(142.595:1683): avc: denied { read write } for pid=556 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.071233][ T36] audit: type=1400 audit(142.595:1684): avc: denied { open } for pid=556 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.111596][ T36] audit: type=1400 audit(142.595:1685): avc: denied { ioctl } for pid=556 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.136488][T10254] incfs: Backing dir is not set, filesystem can't be mounted. [ 145.136526][T10254] incfs: mount failed -2 [ 145.150027][ T36] audit: type=1400 audit(142.670:1686): avc: denied { write } for pid=10246 comm="syz.2.4954" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 145.201214][ T36] audit: type=1400 audit(142.670:1687): avc: denied { open } for pid=10246 comm="syz.2.4954" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 145.225601][ T9] usb 1-1: USB disconnect, device number 64 [ 145.245534][ T9] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 145.309592][T10283] batadv_slave_0: mtu less than device minimum [ 145.358377][T10295] cgroup2: Unknown parameter 'freezer' [ 145.365873][T10298] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 145.365900][T10298] rust_binder: Read failure Err(EFAULT) in pid:2166 [ 145.386120][T10301] 9pnet: Unknown protocol version 9 [ 145.397990][T10305] tc_dump_action: action bad kind [ 145.893138][T10385] netlink: 'syz.1.5023': attribute type 1 has an invalid length. [ 145.911040][T10385] __nla_validate_parse: 4 callbacks suppressed [ 145.911061][T10385] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5023'. [ 146.363365][T10439] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 146.383944][T10439] overlayfs: missing 'lowerdir' [ 146.485154][T10454] deleting an unspecified loop device is not supported. [ 146.758682][T10495] usb usb7: usbfs: process 10495 (syz.1.5078) did not claim interface 0 before use [ 146.787309][ T31] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 146.894190][ T636] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 146.959402][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.974113][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.996723][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.017772][ T31] usb 1-1: SerialNumber: syz [ 147.055614][ T636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.076084][ T636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.087495][ T636] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.100590][ T636] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.127135][ T636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.141277][ T636] usb 4-1: config 0 descriptor?? [ 147.148586][ T636] hub 4-1:0.0: USB hub found [ 147.370265][ T636] hub 4-1:0.0: 14 ports detected [ 147.381750][ T636] hub 4-1:0.0: insufficient power available to use all downstream ports [ 147.457428][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 147.482335][ T31] usb 1-1: USB disconnect, device number 65 [ 147.585259][ T636] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 147.593659][ T636] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 147.621658][ T636] usb 4-1: USB disconnect, device number 61 [ 147.755429][T10576] overlayfs: missing 'lowerdir' [ 148.498605][T10670] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=10670 comm=syz.3.5173 [ 148.749231][T10722] rust_binder: 2538: no such ref 3 [ 148.758409][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5189'. [ 148.762412][T10722] rust_binder: Write failure EFAULT in pid:2538 [ 148.849655][ T36] kauditd_printk_skb: 15856 callbacks suppressed [ 148.849674][ T36] audit: type=1326 audit(146.159:17544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 148.897138][ T36] audit: type=1326 audit(146.168:17545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 148.901149][T10746] netlink: 'syz.3.5203': attribute type 5 has an invalid length. [ 148.927261][ T36] audit: type=1326 audit(146.168:17546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 148.951172][ T36] audit: type=1326 audit(146.168:17547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 148.977030][ T36] audit: type=1326 audit(146.168:17548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 149.034557][ T36] audit: type=1326 audit(146.168:17549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 149.063807][ T36] audit: type=1326 audit(146.168:17550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 149.086808][ T36] audit: type=1326 audit(146.168:17551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 149.109632][ T36] audit: type=1326 audit(146.168:17552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 149.132459][ T36] audit: type=1326 audit(146.168:17553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.2.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922c38eb69 code=0x50000 [ 149.873350][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5224'. [ 149.979664][T10824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5241'. [ 149.995210][T10827] usb usb9: usbfs: process 10827 (syz.3.5242) did not claim interface 0 before use [ 150.112460][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5256'. [ 150.171799][T10869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5263'. [ 150.403483][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'. [ 150.446813][T10938] netlink: 'syz.3.5297': attribute type 27 has an invalid length. [ 150.552573][T10975] netlink: 'syz.3.5314': attribute type 32 has an invalid length. [ 150.612298][T10994] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5324'. [ 150.828361][ T636] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 150.889834][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5351'. [ 150.986961][T11072] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5362'. [ 150.999882][ T636] usb 1-1: Using ep0 maxpacket: 32 [ 151.006507][ T636] usb 1-1: config 13 has an invalid interface number: 249 but max is 1 [ 151.019565][ T636] usb 1-1: config 13 has an invalid interface number: 37 but max is 1 [ 151.028813][ T636] usb 1-1: config 13 has no interface number 0 [ 151.035636][ T636] usb 1-1: config 13 has no interface number 1 [ 151.042048][ T636] usb 1-1: config 13 interface 37 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 151.053810][ T636] usb 1-1: config 13 interface 249 has no altsetting 0 [ 151.060787][ T636] usb 1-1: config 13 interface 37 has no altsetting 0 [ 151.070003][ T636] usb 1-1: New USB device found, idVendor=0403, idProduct=e88f, bcdDevice=6c.94 [ 151.074959][T11086] netlink: 'syz.2.5369': attribute type 14 has an invalid length. [ 151.079800][ T636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.095687][ T636] usb 1-1: Product: syz [ 151.100108][ T636] usb 1-1: Manufacturer: syz [ 151.104776][ T636] usb 1-1: SerialNumber: syz [ 151.175860][T11102] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.211701][T11108] rust_binder: Read failure Err(EAGAIN) in pid:2935 [ 151.276225][T11122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5387'. [ 151.329698][ T636] ftdi_sio 1-1:13.249: FTDI USB Serial Device converter detected [ 151.338191][ T636] ftdi_sio ttyUSB0: unknown device type: 0x6c94 [ 151.345634][ T636] ftdi_sio 1-1:13.37: FTDI USB Serial Device converter detected [ 151.353674][ T636] ftdi_sio ttyUSB1: unknown device type: 0x6c94 [ 151.362438][ T636] usb 1-1: USB disconnect, device number 66 [ 151.369437][ T636] ftdi_sio 1-1:13.249: device disconnected [ 151.375887][ T636] ftdi_sio 1-1:13.37: device disconnected [ 151.598163][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 151.659881][T11200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5426'. [ 151.769095][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 151.782546][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.800762][ T9] usb 3-1: string descriptor 0 read error: -22 [ 151.810920][ T9] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 151.827901][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.909690][T11278] netlink: 'syz.3.5457': attribute type 27 has an invalid length. [ 151.990273][T11301] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.007080][T11303] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 152.056082][ T9] asix 3-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 152.171708][T11329] block device autoloading is deprecated and will be removed. [ 152.194617][T11335] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5484'. [ 152.279944][ T9] asix 3-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 152.293395][ T9] asix 3-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 152.304277][ T9] asix 3-1:7.0: probe with driver asix failed with error -71 [ 152.314892][ T9] usb 3-1: USB disconnect, device number 58 [ 152.419732][T11387] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5510'. [ 152.428900][T11387] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5510'. [ 152.438160][T11387] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 152.485389][ T636] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 152.645742][ T636] usb 4-1: Using ep0 maxpacket: 8 [ 152.651727][ T636] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.660616][ T636] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 152.669943][ T636] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.680305][ T636] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.689589][ T636] usb 4-1: config 1 has no interface number 1 [ 152.695863][ T636] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 152.708831][ T636] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.721893][ T636] usb 4-1: config 1 interface 2 has no altsetting 0 [ 152.729908][ T636] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.739022][ T636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.747083][ T636] usb 4-1: Product: syz [ 152.751264][ T636] usb 4-1: Manufacturer: syz [ 152.755925][ T636] usb 4-1: SerialNumber: syz [ 152.933906][T11486] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5557'. [ 152.987509][ T636] usb 4-1: MIDIStreaming interface descriptor not found [ 153.008246][ T636] usb 4-1: USB disconnect, device number 62 [ 153.050409][T11510] netlink: 'syz.2.5569': attribute type 30 has an invalid length. [ 153.063647][T11512] netlink: 'syz.1.5570': attribute type 4 has an invalid length. [ 153.238719][T11560] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5594'. [ 153.248363][T11560] gretap0: entered promiscuous mode [ 153.332011][T11580] netlink: 'syz.1.5605': attribute type 10 has an invalid length. [ 153.340040][T11580] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5605'. [ 153.379596][T11592] veth0_vlan: entered allmulticast mode [ 153.460301][T11611] netlink: 'syz.0.5619': attribute type 16 has an invalid length. [ 153.592030][T11646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11646 comm=syz.3.5638 [ 153.605256][T11651] netlink: 680 bytes leftover after parsing attributes in process `syz.0.5639'. [ 153.617185][T11653] netlink: 'syz.1.5640': attribute type 4 has an invalid length. [ 153.625234][T11653] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5640'. [ 153.645693][T11655] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=11655 comm=syz.2.5641 [ 153.686046][T11665] rust_binder: 3036: no such ref 3 [ 153.697157][T11665] rust_binder: Write failure EFAULT in pid:3036 [ 153.766666][T11683] !@ÿ: renamed from xfrm0 (while UP) [ 153.789065][T11689] rust_binder: Write failure EFAULT in pid:2698 [ 154.377214][T11857] usb usb9: usbfs: process 11857 (syz.2.5741) did not claim interface 0 before use [ 154.515917][T11898] validate_nla: 3 callbacks suppressed [ 154.515941][T11898] netlink: 'syz.2.5762': attribute type 27 has an invalid length. [ 154.605152][T11920] netlink: 'syz.2.5771': attribute type 32 has an invalid length. [ 154.886296][T11989] netlink: 'syz.2.5805': attribute type 63 has an invalid length. [ 155.027332][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 155.027352][ T36] audit: type=1400 audit(151.949:17665): avc: denied { lock } for pid=12008 comm="syz.2.5822" path="socket:[41572]" dev="sockfs" ino=41572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 155.177310][T12037] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.500166][ T759] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 155.679870][ T759] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.697329][ T759] usb 3-1: not running at top speed; connect to a high speed hub [ 155.706279][ T759] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 155.723339][ T759] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.739315][ T759] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 123, using maximum allowed: 30 [ 155.757708][ T759] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 155.775360][ T759] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.785866][ T759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.794268][ T759] usb 3-1: Product: syz [ 155.807141][ T759] usb 3-1: Manufacturer: syz [ 155.811847][ T759] usb 3-1: SerialNumber: syz [ 155.917276][T12129] kernel profiling enabled (shift: 63) [ 155.922781][T12129] profiling shift: 63 too large [ 155.945233][ T36] audit: type=1400 audit(152.809:17666): avc: denied { name_bind } for pid=12135 comm="syz.3.5879" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 155.945765][T12138] binfmt_misc: register: failed to install interpreter file ./file0 [ 155.966945][ T36] audit: type=1400 audit(152.837:17667): avc: denied { node_bind } for pid=12135 comm="syz.3.5879" saddr=ff02::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 156.038166][ T759] usb 3-1: 0:2 : does not exist [ 156.044862][ T759] hub 3-1:1.1: Invalid hub with more than one config or interface [ 156.053433][ T759] hub 3-1:1.1: probe with driver hub failed with error -22 [ 156.066953][ T759] usb 3-1: USB disconnect, device number 59 [ 156.086774][ T637] udevd[637]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.289723][T12215] x_tables: unsorted underflow at hook 3 [ 156.374678][ T36] audit: type=1400 audit(153.212:17668): avc: denied { setopt } for pid=12240 comm="syz.0.5931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.461616][T12261] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 156.564356][ T36] audit: type=1326 audit(153.389:17669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72678eb69 code=0x50000 [ 156.587257][ T36] audit: type=1326 audit(153.389:17670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72678eb69 code=0x50000 [ 156.610012][ T36] audit: type=1326 audit(153.389:17671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72678eb69 code=0x50000 [ 156.632839][ T36] audit: type=1326 audit(153.389:17672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72678eb69 code=0x50000 [ 156.633136][T12294] usb usb8: usbfs: process 12294 (syz.2.5957) did not claim interface 12 before use [ 156.656394][ T36] audit: type=1326 audit(153.389:17673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72678eb69 code=0x50000 [ 156.688213][ T36] audit: type=1326 audit(153.389:17674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.1.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72678eb69 code=0x50000 [ 157.650223][T12415] __nla_validate_parse: 13 callbacks suppressed [ 157.650243][T12415] netlink: 396 bytes leftover after parsing attributes in process `syz.2.6017'. [ 157.676613][T12419] netlink: 'syz.3.6018': attribute type 16 has an invalid length. [ 157.735283][T12427] netlink: 'syz.3.6022': attribute type 30 has an invalid length. [ 157.947071][T12472] netlink: 'syz.3.6045': attribute type 4 has an invalid length. [ 157.970918][T12472] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.6045'. [ 158.081066][T12496] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6054'. [ 158.138854][T12508] netlink: 'syz.3.6061': attribute type 12 has an invalid length. [ 158.182794][T12516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6067'. [ 158.198122][T12519] netlink: 'syz.3.6068': attribute type 4 has an invalid length. [ 158.219412][T12519] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6068'. [ 158.467445][T12571] netlink: 'syz.0.6093': attribute type 27 has an invalid length. [ 158.474420][T12573] SELinux: failed to load policy [ 158.601335][T12596] rust_binder: Write failure EFAULT in pid:3309 [ 158.721999][T12623] Restarting kernel threads ... [ 158.731090][T12627] netlink: 'syz.3.6121': attribute type 7 has an invalid length. [ 158.739528][T12623] done. [ 158.761659][T12627] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6121'. [ 158.777413][T12629] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6123'. [ 158.849871][T12645] rust_binder: Write failure EFAULT in pid:2908 [ 159.121200][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6160'. [ 159.155051][T12710] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6163'. [ 159.234739][T12723] fuse: Bad value for 'fd' [ 159.292645][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6175'. [ 159.374877][T12748] tc_dump_action: action bad kind [ 159.782778][T12831] tipc: Can't bind to reserved service type 0 [ 159.901915][T12867] validate_nla: 4 callbacks suppressed [ 159.901939][T12867] netlink: 'syz.3.6241': attribute type 4 has an invalid length. [ 159.956731][T12880] netlink: 'syz.0.6246': attribute type 16 has an invalid length. [ 159.975693][T12887] x_tables: duplicate underflow at hook 1 [ 160.085154][T12923] No source specified [ 160.097437][T12925] netlink: 'syz.0.6270': attribute type 4 has an invalid length. [ 160.119352][T12930] netlink: 'syz.3.6272': attribute type 20 has an invalid length. [ 160.176660][T12945] netlink: 'syz.0.6280': attribute type 64 has an invalid length. [ 160.350811][T13000] netlink: 'syz.1.6307': attribute type 4 has an invalid length. [ 160.484151][T13035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.495941][T13038] netlink: 'syz.3.6326': attribute type 29 has an invalid length. [ 160.568921][ T36] kauditd_printk_skb: 17549 callbacks suppressed [ 160.568939][ T36] audit: type=1400 audit(157.140:35224): avc: denied { accept } for pid=13057 comm="syz.2.6336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.657559][T13068] tipc: Trying to set illegal importance in message [ 160.658410][ T36] audit: type=1400 audit(157.215:35225): avc: denied { setopt } for pid=13067 comm="syz.2.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.849063][T13084] 8021q: VLANs not supported on lo [ 160.866791][ T36] audit: type=1400 audit(157.412:35226): avc: denied { getopt } for pid=13088 comm="syz.1.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.258897][T13160] x_tables: unsorted underflow at hook 3 [ 161.440075][ T36] audit: type=1400 audit(157.945:35227): avc: denied { setcurrent } for pid=13218 comm="syz.3.6413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 161.463609][ T36] audit: type=1401 audit(157.945:35228): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 161.481135][T13227] x_tables: unsorted entry at hook 2 [ 161.813586][T13325] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.829531][ T36] audit: type=1400 audit(158.319:35229): avc: denied { read } for pid=13330 comm="syz.0.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.989570][ T36] audit: type=1400 audit(158.469:35230): avc: denied { bind } for pid=13380 comm="syz.0.6495" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.013014][ T36] audit: type=1400 audit(158.469:35231): avc: denied { name_bind } for pid=13380 comm="syz.0.6495" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 162.034177][ T36] audit: type=1400 audit(158.469:35232): avc: denied { node_bind } for pid=13380 comm="syz.0.6495" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 162.106818][T13412] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 162.165837][T13426] netlink: 'syz.2.6518': attribute type 4 has an invalid length. [ 162.201510][T13438] netlink: 'syz.0.6521': attribute type 27 has an invalid length. [ 162.203147][ T759] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 162.218108][T13440] netlink: 'syz.2.6522': attribute type 4 has an invalid length. [ 162.313597][ T36] audit: type=1400 audit(158.768:35233): avc: denied { shutdown } for pid=13469 comm="syz.0.6538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.386318][ T759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.394444][ T759] usb 2-1: not running at top speed; connect to a high speed hub [ 162.404544][ T759] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 162.414723][ T759] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 162.423854][ T759] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 123, using maximum allowed: 30 [ 162.434982][ T759] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 162.450202][ T759] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.459358][ T759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.467419][ T759] usb 2-1: Product: syz [ 162.471741][ T759] usb 2-1: Manufacturer: syz [ 162.476342][ T759] usb 2-1: SerialNumber: syz [ 162.588052][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 162.702179][ T759] usb 2-1: 0:2 : does not exist [ 162.708536][ T759] hub 2-1:1.1: Invalid hub with more than one config or interface [ 162.716456][ T759] hub 2-1:1.1: probe with driver hub failed with error -22 [ 162.725398][ T759] usb 2-1: USB disconnect, device number 61 [ 162.737667][T13473] udevd[13473]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.759052][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 162.765021][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.773598][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 162.782348][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.792548][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 162.801619][ T9] usb 3-1: config 1 has no interface number 1 [ 162.812545][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 162.825635][ T9] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.838629][ T9] usb 3-1: config 1 interface 2 has no altsetting 0 [ 162.846654][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.855834][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.863916][ T9] usb 3-1: Product: syz [ 162.868280][ T9] usb 3-1: Manufacturer: syz [ 162.872979][ T9] usb 3-1: SerialNumber: syz [ 163.095438][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 163.105503][ T9] usb 3-1: USB disconnect, device number 60 [ 163.426180][T13510] Restarting kernel threads ... done. [ 163.439749][T13525] rust_binder: Write failure EFAULT in pid:3049 [ 163.455315][T13529] rust_binder: Write failure EFAULT in pid:3212 [ 163.555044][T13559] __nla_validate_parse: 15 callbacks suppressed [ 163.555073][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6582'. [ 163.578014][T13564] x_tables: duplicate underflow at hook 2 [ 163.578358][T13559] erspan0: default FDB implementation only supports local addresses [ 163.610880][T13571] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6588'. [ 163.746221][T13613] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6609'. [ 163.762399][T13613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6609'. [ 163.863890][T13651] usb usb8: usbfs: process 13651 (syz.3.6627) did not claim interface 0 before use [ 163.900367][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6631'. [ 163.910757][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6632'. [ 163.988523][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 164.156095][ T9] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 164.173198][T13737] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6671'. [ 164.175751][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.195697][ T9] usb 3-1: config 0 has no interface number 0 [ 164.204402][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 164.215096][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.223451][ T9] usb 3-1: Product: syz [ 164.228580][ T9] usb 3-1: Manufacturer: syz [ 164.234392][ T9] usb 3-1: SerialNumber: syz [ 164.245158][ T9] usb 3-1: config 0 descriptor?? [ 164.252457][ T9] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 164.260850][ T9] usb 3-1: No valid video chain found. [ 164.417157][T13805] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6704'. [ 164.470845][ T9] usb 3-1: USB disconnect, device number 61 [ 164.575532][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6718'. [ 164.597848][ T31] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 164.639160][T13854] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 164.770131][ T31] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 164.778381][ T31] usb 4-1: config 0 has no interface number 0 [ 164.785990][ T31] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 164.795106][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.803209][ T31] usb 4-1: Product: syz [ 164.807371][ T31] usb 4-1: Manufacturer: syz [ 164.812039][ T31] usb 4-1: SerialNumber: syz [ 164.817342][ T31] usb 4-1: config 0 descriptor?? [ 164.875822][ T636] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 165.036332][ T636] usb 2-1: Using ep0 maxpacket: 16 [ 165.046135][ T636] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 165.055126][ T31] usb 4-1: USB disconnect, device number 63 [ 165.061867][ T636] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.071703][T13867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6739'. [ 165.073279][ T636] usb 2-1: config 0 has no interface number 0 [ 165.089189][ T636] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 165.098455][ T636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.106689][ T636] usb 2-1: Product: syz [ 165.111135][ T636] usb 2-1: Manufacturer: syz [ 165.115764][ T636] usb 2-1: SerialNumber: syz [ 165.121036][ T636] usb 2-1: config 0 descriptor?? [ 165.341425][ T636] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 165.347852][ T636] usb 2-1: No valid video chain found. [ 165.390976][T13879] validate_nla: 8 callbacks suppressed [ 165.390998][T13879] netlink: 'syz.2.6737': attribute type 4 has an invalid length. [ 165.430918][T13885] netlink: 'syz.2.6740': attribute type 29 has an invalid length. [ 165.482253][T13901] 8021q: VLANs not supported on lo [ 165.542495][T13915] tipc: Trying to set illegal importance in message [ 165.565077][ T636] usb 2-1: USB disconnect, device number 62 [ 165.633680][T13940] netlink: 'syz.2.6769': attribute type 13 has an invalid length. [ 165.902114][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 166.062471][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 166.068733][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 166.089200][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 166.101905][T14017] cannot load conntrack support for proto=3 [ 166.107916][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.125469][ T9] usb 4-1: Product: syz [ 166.132087][ T9] usb 4-1: Manufacturer: syz [ 166.136715][ T9] usb 4-1: SerialNumber: syz [ 166.153612][ T9] usb 4-1: config 0 descriptor?? [ 166.166605][T13945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.260114][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 166.260133][ T36] audit: type=1400 audit(162.463:35239): avc: denied { write } for pid=14059 comm="syz.2.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.326393][T14076] netlink: 'syz.2.6837': attribute type 46 has an invalid length. [ 166.336338][T14078] rust_binder: Write failure EFAULT in pid:3185 [ 166.360964][T14084] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 166.400742][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.410654][ T36] audit: type=1400 audit(162.594:35240): avc: denied { ioctl } for pid=14091 comm="syz.1.6845" path="socket:[48568]" dev="sockfs" ino=48568 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.436672][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.458681][ T9] usb 4-1: USB disconnect, device number 64 [ 166.551032][ T36] audit: type=1400 audit(162.715:35241): avc: denied { accept } for pid=14117 comm="syz.1.6858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.575025][ T36] audit: type=1400 audit(162.715:35242): avc: denied { read } for pid=14118 comm="syz.2.6859" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 166.612935][ T36] audit: type=1400 audit(162.715:35243): avc: denied { open } for pid=14118 comm="syz.2.6859" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 166.639757][ T36] audit: type=1400 audit(162.809:35244): avc: denied { connect } for pid=14135 comm="syz.1.6867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.710913][ T36] audit: type=1400 audit(162.884:35245): avc: denied { write } for pid=14153 comm="syz.2.6876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.799345][ T36] audit: type=1400 audit(162.958:35246): avc: denied { listen } for pid=14177 comm="syz.2.6888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.853041][ T36] audit: type=1400 audit(163.005:35247): avc: denied { map } for pid=14187 comm="syz.0.6895" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.892180][ T36] audit: type=1400 audit(163.005:35248): avc: denied { execute } for pid=14187 comm="syz.0.6895" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.000853][T14228] PM: Enabling pm_trace changes system date and time during resume. [ 167.000853][T14228] PM: Correct system time has to be restored manually after resume. [ 167.047015][T14225] wg1: left promiscuous mode [ 167.054253][T14225] wg1: left allmulticast mode [ 167.258829][T14287] tc_dump_action: action bad kind [ 167.369226][T14319] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 167.505701][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 167.601920][ T887] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 167.764965][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 167.774117][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.774370][ T887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.782500][ T9] usb 3-1: Product: syz [ 167.794674][ T9] usb 3-1: Manufacturer: syz [ 167.799287][ T9] usb 3-1: SerialNumber: syz [ 167.804942][ T9] usb 3-1: config 0 descriptor?? [ 167.807001][ T887] usb 4-1: not running at top speed; connect to a high speed hub [ 167.813344][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 167.818609][ T887] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 167.826100][ T9] usb 3-1: Detected FT4232HP [ 167.837520][ T887] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.851647][ T887] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 123, using maximum allowed: 30 [ 167.873925][ T887] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 167.888669][ T887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.897992][ T887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.906084][ T887] usb 4-1: Product: syz [ 167.911674][ T887] usb 4-1: Manufacturer: syz [ 167.922006][ T887] usb 4-1: SerialNumber: syz [ 168.027513][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 168.039880][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 168.040816][T14421] netlink: 'syz.1.7008': attribute type 4 has an invalid length. [ 168.051059][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.081520][ T9] usb 3-1: USB disconnect, device number 62 [ 168.088372][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.104525][ T9] ftdi_sio 3-1:0.0: device disconnected [ 168.155791][ T887] usb 4-1: 0:2 : does not exist [ 168.168798][ T887] hub 4-1:1.1: Invalid hub with more than one config or interface [ 168.176905][ T887] hub 4-1:1.1: probe with driver hub failed with error -22 [ 168.198104][ T887] usb 4-1: USB disconnect, device number 65 [ 168.272959][T14457] netlink: 'syz.1.7025': attribute type 1 has an invalid length. [ 168.320466][T14467] netlink: 'syz.1.7031': attribute type 2 has an invalid length. [ 168.700937][T14568] binfmt_misc: register: failed to install interpreter file ./cgroup [ 168.906149][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 168.916100][T14636] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 168.928148][T14636] rust_binder: Write failure EINVAL in pid:3344 [ 168.930775][T14640] __nla_validate_parse: 15 callbacks suppressed [ 168.930797][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7117'. [ 168.989075][T14656] ip6gretap0: mtu less than device minimum [ 169.077186][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 169.093819][ T9] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 169.103490][ T9] usb 3-1: config 0 has no interface number 0 [ 169.115881][ T9] usb 3-1: config 0 interface 148 has no altsetting 0 [ 169.124875][ T9] usb 3-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 169.134439][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.152022][ T9] usb 3-1: Product: syz [ 169.157659][ T9] usb 3-1: Manufacturer: syz [ 169.162642][ T9] usb 3-1: SerialNumber: syz [ 169.169690][ T9] usb 3-1: config 0 descriptor?? [ 169.176570][ T9] pl2303 3-1:0.148: required interrupt-in endpoint missing [ 169.304164][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7167'. [ 169.331576][T14749] tipc: Trying to set illegal importance in message [ 169.391207][ T768] usb 3-1: USB disconnect, device number 63 [ 169.397965][ T759] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 169.559652][ T759] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.568361][ T759] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.578861][ T759] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.587936][ T759] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.602139][ T759] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.611193][ T759] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.619304][ T759] usb 4-1: Product: syz [ 169.623793][ T759] usb 4-1: Manufacturer: syz [ 169.630260][ T759] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 169.846137][ T887] usb 4-1: USB disconnect, device number 66 [ 169.954058][T14756] netlink: 'syz.1.7182': attribute type 12 has an invalid length. [ 169.984049][T14765] x_tables: duplicate underflow at hook 1 [ 170.008253][T14769] 8021q: VLANs not supported on lo [ 170.102438][T14799] x_tables: unsorted entry at hook 2 [ 170.191332][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7206'. [ 170.268003][T14845] cannot load conntrack support for proto=3 [ 170.316297][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7226'. [ 170.409140][T14880] netlink: 'syz.3.7233': attribute type 28 has an invalid length. [ 170.586800][T14934] x_tables: duplicate underflow at hook 2 [ 170.687346][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7278'. [ 170.736232][T14981] x_tables: duplicate entry at hook 2 [ 170.814444][T15005] netlink: 'syz.0.7297': attribute type 33 has an invalid length. [ 170.829116][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7297'. [ 170.866281][T15019] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 170.926074][T15037] netlink: 'syz.0.7314': attribute type 1 has an invalid length. [ 170.987724][T15058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7324'. [ 171.016544][T15068] netlink: 'syz.0.7330': attribute type 28 has an invalid length. [ 171.085035][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7341'. [ 171.226701][T15135] rust_binder: Write failure EFAULT in pid:3443 [ 171.243927][T15139] can0: slcan on ttyS3. [ 171.258280][ T759] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 171.293662][T15138] can0 (unregistered): slcan off ttyS3. [ 171.323564][T15153] tipc: Started in network mode [ 171.328572][T15153] tipc: Node identity 9ebd5dc868ea, cluster identity 4711 [ 171.336078][T15153] tipc: Enabled bearer , priority 10 [ 171.386398][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 171.430301][ T759] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.440149][ T759] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.446832][ T759] usb 3-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 171.456171][ T759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.461227][ T31] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 171.465227][ T759] usb 3-1: config 0 descriptor?? [ 171.560027][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.569263][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.577341][ T9] usb 2-1: Product: syz [ 171.581603][ T9] usb 2-1: Manufacturer: syz [ 171.586250][ T9] usb 2-1: SerialNumber: syz [ 171.632268][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 171.638957][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 171.647394][ T31] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.660510][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 171.668767][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.40 [ 171.677849][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.686047][ T31] usb 1-1: Product: syz [ 171.690561][ T31] usb 1-1: Manufacturer: syz [ 171.694712][ T759] usbhid 3-1:0.0: can't add hid device: -71 [ 171.695616][ T31] usb 1-1: SerialNumber: syz [ 171.701783][ T759] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.717762][ T759] usb 3-1: USB disconnect, device number 64 [ 172.140819][ T31] usbhid 1-1:1.0: can't add hid device: -71 [ 172.146937][ T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 172.156551][ T31] usb 1-1: USB disconnect, device number 67 [ 172.248441][T15183] overlayfs: failed to resolve '': -2 [ 172.319792][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 172.319809][ T36] audit: type=1326 audit(168.131:35275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b878eb69 code=0x7fc00000 [ 172.361158][T15205] rust_binder: Write failure EFAULT in pid:3466 [ 172.408933][T15219] PM: Enabling pm_trace changes system date and time during resume. [ 172.408933][T15219] PM: Correct system time has to be restored manually after resume. [ 172.458561][T15226] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7393'. [ 172.481770][T15233] netlink: 'syz.2.7397': attribute type 16 has an invalid length. [ 172.489684][T15233] netlink: 'syz.2.7397': attribute type 4 has an invalid length. [ 172.497567][T15233] netlink: 64126 bytes leftover after parsing attributes in process `syz.2.7397'. [ 172.530277][ T759] tipc: Node number set to 4132920776 [ 172.601410][T15267] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 172.811694][ T36] audit: type=1400 audit(168.590:35276): avc: denied { connect } for pid=15322 comm="syz.3.7441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.844625][T15329] netlink: 'syz.0.7444': attribute type 1 has an invalid length. [ 173.086195][ T759] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 173.182424][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 173.250070][ T759] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.270415][ T759] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.290544][ T759] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.297181][ T759] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 173.323224][ T759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.339591][ T759] usb 4-1: config 0 descriptor?? [ 173.354657][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.365658][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.375569][ T31] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 173.377798][ T36] audit: type=1326 audit(169.123:35277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15366 comm="syz.2.7463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f922c38eb69 code=0x0 [ 173.384743][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.388247][ T31] usb 1-1: config 0 descriptor?? [ 173.781310][ T759] dragonrise 0003:0079:0011.0001: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 173.995536][ T9] usb 4-1: USB disconnect, device number 67 [ 174.064780][ T31] hid-led 0003:1D34:0004.0002: probe with driver hid-led failed with error -71 [ 174.076019][ T31] usb 1-1: USB disconnect, device number 68 [ 174.346524][ T9] usb 2-1: USB disconnect, device number 63 [ 174.370548][ T36] audit: type=1400 audit(170.049:35278): avc: denied { setopt } for pid=15383 comm="syz.1.7470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.432268][T15395] __nla_validate_parse: 3 callbacks suppressed [ 174.432289][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7474'. [ 174.433478][T15397] binfmt_misc: register: failed to install interpreter file ./cgroup [ 174.473084][ T36] audit: type=1400 audit(170.142:35279): avc: denied { connect } for pid=15402 comm="syz.1.7480" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.635508][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.643338][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.650949][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.667958][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.684029][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.692524][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.700088][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.707823][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.715261][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.723379][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.730799][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.738435][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.746064][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.754073][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.761592][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.769150][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.776984][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.784477][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.792018][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.799523][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.807104][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.815162][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.822664][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.830149][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.837536][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.845026][ T9] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 174.852865][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.860266][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.868140][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.875760][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.883463][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.890875][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.898369][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.905792][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.913377][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.920808][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.928274][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.936023][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.943462][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.950895][ T769] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 174.958899][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.966385][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.974046][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.981473][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.988914][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 174.996366][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.003814][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.011219][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.018648][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.026277][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.033899][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.041279][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.042579][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 175.049008][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.063958][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.071593][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.079124][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.086799][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.094281][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.101775][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.111668][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.119149][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 175.128491][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.136153][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.143689][ T769] usb 3-1: Using ep0 maxpacket: 16 [ 175.149150][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.157916][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.165794][ T9] usb 2-1: config 0 descriptor?? [ 175.170968][ T769] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.183991][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.191567][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.200201][ T769] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 175.209347][ T769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.217469][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.225582][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.233416][ T769] usb 3-1: config 0 descriptor?? [ 175.238602][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.238973][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.246388][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.256754][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.265078][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.278242][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.282376][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.291622][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.299240][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.307534][ T31] usb 1-1: Product: syz [ 175.314668][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.319052][ T31] usb 1-1: Manufacturer: syz [ 175.326213][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.331013][ T31] usb 1-1: SerialNumber: syz [ 175.338178][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.349200][ T31] cdc_mbim 1-1:1.0: skipping garbage [ 175.350186][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.355662][ T31] usb 1-1: selecting invalid altsetting 1 [ 175.362841][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.376021][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.383472][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.391284][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.398709][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.406216][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.413973][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.421558][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.429044][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.436558][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.444078][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.451612][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.459329][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.467097][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.474594][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.483252][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.490702][ T759] hid-generic 0003:0008:000F.0003: unknown main item tag 0x0 [ 175.499038][ T759] hid-generic 0003:0008:000F.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 175.520876][T15445] fido_id[15445]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.638156][ T9] apple 0003:05AC:027D.0004: hidraw0: USB HID vff.ff Device [HID 05ac:027d] on usb-dummy_hcd.1-1/input0 [ 175.699379][ T769] logitech-djreceiver 0003:046D:C531.0005: ignoring exceeding usage max [ 175.769538][ T759] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 175.777410][ T31] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 175.783581][ T31] cdc_mbim 1-1:1.0: bind() failure [ 175.791665][ T31] usb 1-1: USB disconnect, device number 69 [ 175.851342][ T769] usb 2-1: USB disconnect, device number 64 [ 175.923890][ T9] usb 3-1: USB disconnect, device number 65 [ 175.940696][ T759] usb 4-1: Using ep0 maxpacket: 32 [ 175.947309][ T759] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 175.955544][ T759] usb 4-1: config 0 has no interface number 0 [ 175.961762][ T759] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 175.971873][ T759] usb 4-1: config 0 interface 196 has no altsetting 0 [ 175.980233][ T759] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 175.989420][ T759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.997502][ T759] usb 4-1: Product: syz [ 176.001666][ T759] usb 4-1: Manufacturer: syz [ 176.006411][ T759] usb 4-1: SerialNumber: syz [ 176.011638][ T759] usb 4-1: config 0 descriptor?? [ 176.017064][T15447] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 176.341134][ T36] audit: type=1400 audit(171.891:35280): avc: denied { map } for pid=15451 comm="syz.0.7502" path="socket:[53901]" dev="sockfs" ino=53901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 176.449952][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7511'. [ 176.508909][ T36] audit: type=1326 audit(172.051:35281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15476 comm="syz.0.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a478eb69 code=0x7ffc0000 [ 176.532836][ T36] audit: type=1326 audit(172.051:35282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15476 comm="syz.0.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2a478d4d0 code=0x7ffc0000 [ 176.556194][ T36] audit: type=1326 audit(172.051:35283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15476 comm="syz.0.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2a478d4d0 code=0x7ffc0000 [ 176.586751][ T36] audit: type=1326 audit(172.051:35284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15476 comm="syz.0.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a478eb69 code=0x7ffc0000 [ 176.674269][ T759] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 176.685546][ T759] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 176.708321][ T759] usb 4-1: USB disconnect, device number 68 [ 176.732851][T15510] overlayfs: workdir and upperdir must be separate subtrees [ 176.744880][T15515] lo: MTU too low for tipc bearer [ 176.749958][T15515] tipc: Enabling of bearer rejected, failed to enable media [ 176.775550][ T759] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 176.787654][T15521] fuse: Bad value for 'group_id' [ 176.792946][T15521] fuse: Bad value for 'group_id' [ 177.064438][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 177.223821][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 177.231214][T15588] tipc: Enabling of bearer rejected, failed to enable media [ 177.240501][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.260136][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.271965][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 177.281336][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.292189][ T9] usb 3-1: config 0 descriptor?? [ 177.353298][T15611] tipc: Started in network mode [ 177.358200][T15611] tipc: Node identity , cluster identity 4711 [ 177.364572][T15611] tipc: Failed to obtain node identity [ 177.370164][T15611] tipc: Enabling of bearer rejected, failed to enable media [ 177.393056][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7582'. [ 177.522832][ T31] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 177.684669][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 177.693843][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.702587][ T31] usb 2-1: config 0 descriptor?? [ 177.729114][ T9] logitech 0003:046D:C623.0006: unknown main item tag 0x5 [ 177.737352][ T9] logitech 0003:046D:C623.0006: hidraw0: USB HID v0.02 Device [HID 046d:c623] on usb-dummy_hcd.2-1/input0 [ 177.952050][ T9] usb 3-1: USB disconnect, device number 66 [ 178.137737][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.145299][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.152446][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.159605][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.166782][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.173922][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.181091][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.188256][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.195370][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.202595][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.209916][ T31] logitech 0003:046D:CA03.0007: unknown main item tag 0x0 [ 178.217542][ T31] logitech 0003:046D:CA03.0007: hidraw0: USB HID v8.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 178.229017][ T31] logitech 0003:046D:CA03.0007: no inputs found [ 178.299120][T15649] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7596'. [ 178.355711][ T31] usb 2-1: USB disconnect, device number 65 [ 178.407101][T15665] raw_sendmsg: syz.0.7604 forgot to set AF_INET. Fix it! [ 178.816346][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 178.924484][T15700] netlink: 'syz.1.7620': attribute type 2 has an invalid length. [ 178.977809][ T9] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.988895][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.995536][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 179.004650][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.015348][ T9] usb 3-1: config 0 descriptor?? [ 179.372261][ T31] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 179.451641][ T9] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 179.458964][ T9] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 179.466478][ T9] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 179.475287][ T9] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 179.482617][ T9] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 179.489911][ T9] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 179.497186][ T9] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 179.505971][ T9] microsoft 0003:045E:00F9.0008: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 179.532601][ T9] microsoft 0003:045E:00F9.0008: no inputs found [ 179.539073][ T9] microsoft 0003:045E:00F9.0008: could not initialize ff, continuing anyway [ 179.555091][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.561814][ T31] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 179.571067][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.581936][ T31] usb 2-1: config 0 descriptor?? [ 179.602609][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 179.602622][ T36] audit: type=1326 audit(181.943:35300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.0.7646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2a478eb69 code=0x0 [ 179.666077][ T9] usb 3-1: USB disconnect, device number 67 [ 180.028469][ T31] betop 0003:20BC:5500.0009: hidraw0: USB HID v1.01 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0 [ 180.056533][ T31] betop 0003:20BC:5500.0009: no inputs found [ 180.235654][ T9] usb 2-1: USB disconnect, device number 66 [ 180.349813][ T36] audit: type=1400 audit(182.635:35301): avc: denied { connect } for pid=15816 comm="syz.3.7675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.532452][ T36] audit: type=1400 audit(182.813:35302): avc: denied { read } for pid=15850 comm="syz.0.7692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.551820][ T36] audit: type=1400 audit(182.813:35303): avc: denied { write } for pid=15850 comm="syz.0.7692" path="socket:[55688]" dev="sockfs" ino=55688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.591769][ T36] audit: type=1400 audit(182.860:35304): avc: denied { set_context_mgr } for pid=15858 comm="syz.2.7696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 180.600278][T15861] UHID_CREATE from different security context by process 3984 (syz.2.7697), this is not allowed. [ 180.911729][ T31] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 180.954474][ T887] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 180.997254][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 181.072127][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 181.081348][ T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 181.090019][ T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 181.098883][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 181.108112][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 181.119304][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 181.129284][ T887] usb 1-1: Using ep0 maxpacket: 16 [ 181.134643][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.144786][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.155092][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.168529][ T887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.178970][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 181.180435][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 181.192215][ T9] usb 3-1: config 16 has an invalid interface number: 213 but max is 0 [ 181.194487][ T887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.212913][ T36] audit: type=1400 audit(183.440:35305): avc: denied { mount } for pid=15927 comm="syz.1.7730" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 181.213556][ T9] usb 3-1: config 16 has no interface number 0 [ 181.235626][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.249981][ T887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.251074][ T9] usb 3-1: config 16 interface 213 has no altsetting 0 [ 181.263752][ T887] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 181.272267][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=28.a8 [ 181.279553][ T31] usb 4-1: config 0 descriptor?? [ 181.288767][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.296654][T15869] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.310192][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.311524][ T9] usb 3-1: Product: syz [ 181.318862][ T31] usblp0: Disabling reads from problematic bidirectional printer [ 181.332071][ T9] usb 3-1: Manufacturer: syz [ 181.335415][ T887] usb 1-1: config 0 descriptor?? [ 181.337352][ T9] usb 3-1: SerialNumber: syz [ 181.375701][T15936] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7734'. [ 181.385088][ T36] audit: type=1400 audit(183.609:35306): avc: denied { read } for pid=15935 comm="syz.1.7734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.411695][T15938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=15938 comm=syz.1.7735 [ 181.424706][T15938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7735'. [ 181.544016][T15957] usb usb8: usbfs: process 15957 (syz.1.7744) did not claim interface 0 before use [ 181.556653][ T31] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 181.574377][ T9] usb 3-1: USB disconnect, device number 68 [ 181.582245][ T31] usb 4-1: USB disconnect, device number 69 [ 181.593042][ T31] usblp0: removed [ 181.662109][ T36] audit: type=1400 audit(183.870:35307): avc: denied { map } for pid=15967 comm="syz.1.7749" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 181.786545][ T887] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 181.797231][ T887] ================================================================== [ 181.805344][ T887] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 181.813193][ T887] Read of size 2240 at addr ffff88810afd7561 by task kworker/1:6/887 [ 181.821425][ T887] [ 181.823740][ T887] CPU: 1 UID: 0 PID: 887 Comm: kworker/1:6 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 181.823762][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.823773][ T887] Workqueue: usb_hub_wq hub_event [ 181.823800][ T887] Call Trace: [ 181.823807][ T887] [ 181.823814][ T887] __dump_stack+0x21/0x30 [ 181.823832][ T887] dump_stack_lvl+0x10c/0x190 [ 181.823847][ T887] ? __cfi_dump_stack_lvl+0x10/0x10 [ 181.823862][ T887] ? __cfi__printk+0x10/0x10 [ 181.823881][ T887] print_address_description+0x71/0x220 [ 181.823894][ T887] print_report+0x4a/0x70 [ 181.823905][ T887] kasan_report+0x163/0x1a0 [ 181.823916][ T887] ? mon_bin_event+0x12c1/0x23e0 [ 181.823931][ T887] ? mon_bin_event+0x12c1/0x23e0 [ 181.823945][ T887] kasan_check_range+0x299/0x2a0 [ 181.823956][ T887] ? mon_bin_event+0x12c1/0x23e0 [ 181.823970][ T887] __asan_memcpy+0x31/0x80 [ 181.823983][ T887] mon_bin_event+0x12c1/0x23e0 [ 181.823999][ T887] ? mon_bin_complete+0x50/0x50 [ 181.824016][ T887] ? __kmalloc_noprof+0x1b1/0x450 [ 181.824032][ T887] ? __hid_request+0x1e8/0x410 [ 181.824048][ T887] ? hid_connect+0x49a/0x1a20 [ 181.824067][ T887] ? hid_hw_start+0xcb/0x160 [ 181.824081][ T887] ? ms_probe+0x194/0x460 [ 181.824097][ T887] ? __cfi_mon_bin_submit+0x10/0x10 [ 181.824113][ T887] mon_bin_submit+0x2b/0x40 [ 181.824129][ T887] mon_submit+0x1b6/0x230 [ 181.824143][ T887] usb_hcd_submit_urb+0x12d/0x1a20 [ 181.824157][ T887] ? bus_probe_device+0x18b/0x270 [ 181.824173][ T887] ? usb_probe_device+0x1d4/0x380 [ 181.824183][ T887] ? really_probe+0x2d6/0x890 [ 181.824194][ T887] ? __driver_probe_device+0x198/0x280 [ 181.824204][ T887] ? driver_probe_device+0x54/0x3f0 [ 181.824215][ T887] ? __device_attach_driver+0x2f1/0x4b0 [ 181.824226][ T887] usb_submit_urb+0x111b/0x1800 [ 181.824240][ T887] usb_start_wait_urb+0x11b/0x2f0 [ 181.824255][ T887] ? usb_api_blocking_completion+0xd0/0xd0 [ 181.824269][ T887] ? __kasan_kmalloc+0x96/0xb0 [ 181.824285][ T887] ? __kasan_check_write+0x18/0x20 [ 181.824299][ T887] ? usb_alloc_urb+0x9b/0x200 [ 181.824311][ T887] usb_control_msg+0x25a/0x490 [ 181.824325][ T887] usbhid_raw_request+0x457/0x590 [ 181.824340][ T887] __hid_request+0x1e8/0x410 [ 181.824360][ T887] hidinput_connect+0x241b/0x3340 [ 181.824373][ T887] hid_connect+0x49a/0x1a20 [ 181.824388][ T887] ? usbhid_start+0x1a67/0x2530 [ 181.824401][ T887] ? __cfi_hid_connect+0x10/0x10 [ 181.824419][ T887] hid_hw_start+0xcb/0x160 [ 181.824437][ T887] ms_probe+0x194/0x460 [ 181.824453][ T887] hid_device_probe+0x2c1/0x5d0 [ 181.824472][ T887] ? __cfi_hid_device_probe+0x10/0x10 [ 181.824490][ T887] really_probe+0x2d6/0x890 [ 181.824504][ T887] __driver_probe_device+0x198/0x280 [ 181.824515][ T887] driver_probe_device+0x54/0x3f0 [ 181.824527][ T887] ? __device_attach_driver+0x2db/0x4b0 [ 181.824540][ T887] __device_attach_driver+0x2f1/0x4b0 [ 181.824551][ T887] bus_for_each_drv+0x260/0x2f0 [ 181.824564][ T887] ? __cfi___device_attach_driver+0x10/0x10 [ 181.824575][ T887] ? __cfi_bus_for_each_drv+0x10/0x10 [ 181.824588][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 181.824605][ T887] __device_attach+0x2bd/0x3a0 [ 181.824615][ T887] ? device_attach+0x40/0x40 [ 181.824630][ T887] ? _raw_spin_lock+0x8c/0x120 [ 181.824645][ T887] ? __cfi__raw_spin_lock+0x10/0x10 [ 181.824660][ T887] device_initial_probe+0x1e/0x30 [ 181.824670][ T887] bus_probe_device+0x18b/0x270 [ 181.824683][ T887] device_add+0x80c/0xc00 [ 181.824700][ T887] hid_add_device+0x39b/0x560 [ 181.824715][ T887] usbhid_probe+0xde3/0x12b0 [ 181.824729][ T887] usb_probe_interface+0x696/0xc00 [ 181.824742][ T887] ? __cfi_usb_probe_interface+0x10/0x10 [ 181.824758][ T887] really_probe+0x2d6/0x890 [ 181.824769][ T887] __driver_probe_device+0x198/0x280 [ 181.824780][ T887] driver_probe_device+0x54/0x3f0 [ 181.824790][ T887] ? __device_attach_driver+0x2db/0x4b0 [ 181.824801][ T887] __device_attach_driver+0x2f1/0x4b0 [ 181.824812][ T887] bus_for_each_drv+0x260/0x2f0 [ 181.824825][ T887] ? __cfi___device_attach_driver+0x10/0x10 [ 181.824836][ T887] ? __cfi_bus_for_each_drv+0x10/0x10 [ 181.824850][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 181.824865][ T887] __device_attach+0x2bd/0x3a0 [ 181.824875][ T887] ? device_attach+0x40/0x40 [ 181.824890][ T887] ? _raw_spin_lock+0x8c/0x120 [ 181.824904][ T887] ? __cfi__raw_spin_lock+0x10/0x10 [ 181.824919][ T887] device_initial_probe+0x1e/0x30 [ 181.824928][ T887] bus_probe_device+0x18b/0x270 [ 181.824942][ T887] device_add+0x80c/0xc00 [ 181.824957][ T887] usb_set_configuration+0x1ad4/0x20b0 [ 181.824975][ T887] usb_generic_driver_probe+0x95/0x160 [ 181.824990][ T887] usb_probe_device+0x1d4/0x380 [ 181.825000][ T887] ? __cfi_usb_probe_device+0x10/0x10 [ 181.825010][ T887] really_probe+0x2d6/0x890 [ 181.825021][ T887] __driver_probe_device+0x198/0x280 [ 181.825032][ T887] driver_probe_device+0x54/0x3f0 [ 181.825042][ T887] ? __device_attach_driver+0x2db/0x4b0 [ 181.825053][ T887] __device_attach_driver+0x2f1/0x4b0 [ 181.825073][ T887] bus_for_each_drv+0x260/0x2f0 [ 181.825088][ T887] ? __cfi___device_attach_driver+0x10/0x10 [ 181.825100][ T887] ? __cfi_bus_for_each_drv+0x10/0x10 [ 181.825117][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 181.825145][ T887] __device_attach+0x2bd/0x3a0 [ 181.825162][ T887] ? device_attach+0x40/0x40 [ 181.825179][ T887] ? _raw_spin_lock+0x8c/0x120 [ 181.825193][ T887] ? __cfi__raw_spin_lock+0x10/0x10 [ 181.825208][ T887] device_initial_probe+0x1e/0x30 [ 181.825218][ T887] bus_probe_device+0x18b/0x270 [ 181.825231][ T887] device_add+0x80c/0xc00 [ 181.825247][ T887] usb_new_device+0x9ed/0x1590 [ 181.825262][ T887] ? __cfi_usb_new_device+0x10/0x10 [ 181.825277][ T887] hub_event+0x2c81/0x4270 [ 181.825290][ T887] ? __cfi_hub_event+0x10/0x10 [ 181.825299][ T887] ? __kasan_check_write+0x18/0x20 [ 181.825316][ T887] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 181.825331][ T887] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 181.825346][ T887] ? kick_pool+0xb9/0x550 [ 181.825357][ T887] process_scheduled_works+0x7d2/0x1020 [ 181.825373][ T887] worker_thread+0xc58/0x1250 [ 181.825390][ T887] kthread+0x2ca/0x370 [ 181.825400][ T887] ? __cfi_worker_thread+0x10/0x10 [ 181.825415][ T887] ? __cfi_kthread+0x10/0x10 [ 181.825424][ T887] ret_from_fork+0x67/0xa0 [ 181.825445][ T887] ? __cfi_kthread+0x10/0x10 [ 181.825460][ T887] ret_from_fork_asm+0x1a/0x30 [ 181.825482][ T887] [ 181.825490][ T887] [ 182.454808][ T887] Allocated by task 887: [ 182.459142][ T887] kasan_save_track+0x3e/0x80 [ 182.463820][ T887] kasan_save_alloc_info+0x40/0x50 [ 182.468952][ T887] __kasan_kmalloc+0x96/0xb0 [ 182.473567][ T887] __kmalloc_noprof+0x1b1/0x450 [ 182.478506][ T887] __hid_request+0xa9/0x410 [ 182.483104][ T887] hidinput_connect+0x241b/0x3340 [ 182.488173][ T887] hid_connect+0x49a/0x1a20 [ 182.492699][ T887] hid_hw_start+0xcb/0x160 [ 182.497111][ T887] ms_probe+0x194/0x460 [ 182.501268][ T887] hid_device_probe+0x2c1/0x5d0 [ 182.506168][ T887] really_probe+0x2d6/0x890 [ 182.510674][ T887] __driver_probe_device+0x198/0x280 [ 182.515956][ T887] driver_probe_device+0x54/0x3f0 [ 182.520990][ T887] __device_attach_driver+0x2f1/0x4b0 [ 182.526434][ T887] bus_for_each_drv+0x260/0x2f0 [ 182.531361][ T887] __device_attach+0x2bd/0x3a0 [ 182.536112][ T887] device_initial_probe+0x1e/0x30 [ 182.541131][ T887] bus_probe_device+0x18b/0x270 [ 182.545986][ T887] device_add+0x80c/0xc00 [ 182.550376][ T887] hid_add_device+0x39b/0x560 [ 182.555328][ T887] usbhid_probe+0xde3/0x12b0 [ 182.560216][ T887] usb_probe_interface+0x696/0xc00 [ 182.565572][ T887] really_probe+0x2d6/0x890 [ 182.570073][ T887] __driver_probe_device+0x198/0x280 [ 182.575367][ T887] driver_probe_device+0x54/0x3f0 [ 182.580485][ T887] __device_attach_driver+0x2f1/0x4b0 [ 182.585859][ T887] bus_for_each_drv+0x260/0x2f0 [ 182.590704][ T887] __device_attach+0x2bd/0x3a0 [ 182.595494][ T887] device_initial_probe+0x1e/0x30 [ 182.600518][ T887] bus_probe_device+0x18b/0x270 [ 182.605379][ T887] device_add+0x80c/0xc00 [ 182.609723][ T887] usb_set_configuration+0x1ad4/0x20b0 [ 182.615173][ T887] usb_generic_driver_probe+0x95/0x160 [ 182.620621][ T887] usb_probe_device+0x1d4/0x380 [ 182.625454][ T887] really_probe+0x2d6/0x890 [ 182.629962][ T887] __driver_probe_device+0x198/0x280 [ 182.635371][ T887] driver_probe_device+0x54/0x3f0 [ 182.640389][ T887] __device_attach_driver+0x2f1/0x4b0 [ 182.645790][ T887] bus_for_each_drv+0x260/0x2f0 [ 182.650628][ T887] __device_attach+0x2bd/0x3a0 [ 182.655567][ T887] device_initial_probe+0x1e/0x30 [ 182.660601][ T887] bus_probe_device+0x18b/0x270 [ 182.665452][ T887] device_add+0x80c/0xc00 [ 182.669770][ T887] usb_new_device+0x9ed/0x1590 [ 182.674522][ T887] hub_event+0x2c81/0x4270 [ 182.679042][ T887] process_scheduled_works+0x7d2/0x1020 [ 182.684591][ T887] worker_thread+0xc58/0x1250 [ 182.689341][ T887] kthread+0x2ca/0x370 [ 182.693483][ T887] ret_from_fork+0x67/0xa0 [ 182.697920][ T887] ret_from_fork_asm+0x1a/0x30 [ 182.702681][ T887] [ 182.705257][ T887] The buggy address belongs to the object at ffff88810afd7560 [ 182.705257][ T887] which belongs to the cache kmalloc-8 of size 8 [ 182.719065][ T887] The buggy address is located 1 bytes inside of [ 182.719065][ T887] allocated 7-byte region [ffff88810afd7560, ffff88810afd7567) [ 182.733130][ T887] [ 182.735442][ T887] The buggy address belongs to the physical page: [ 182.741842][ T887] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10afd7 [ 182.750708][ T887] flags: 0x4000000000000000(zone=1) [ 182.755914][ T887] page_type: f5(slab) [ 182.759894][ T887] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 182.768591][ T887] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 182.777250][ T887] page dumped because: kasan: bad access detected [ 182.783646][ T887] page_owner tracks the page as allocated [ 182.789438][ T887] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 557, tgid 557 (syz-executor), ts 117190702778, free_ts 117190588866 [ 182.808634][ T887] post_alloc_hook+0x3b9/0x3f0 [ 182.813496][ T887] prep_new_page+0x1c/0x120 [ 182.818082][ T887] get_page_from_freelist+0x48ce/0x4960 [ 182.823643][ T887] __alloc_pages_noprof+0x31f/0x7b0 [ 182.828841][ T887] alloc_slab_page+0x6b/0x1f0 [ 182.833514][ T887] allocate_slab+0x69/0x440 [ 182.838029][ T887] ___slab_alloc+0x59a/0x8b0 [ 182.842613][ T887] __kmalloc_node_noprof+0x23e/0x450 [ 182.847890][ T887] __vmalloc_node_range_noprof+0x544/0x1420 [ 182.853790][ T887] vzalloc_noprof+0xfd/0x1d0 [ 182.858561][ T887] do_ip6t_get_ctl+0x777/0x1180 [ 182.863410][ T887] nf_getsockopt+0x28b/0x2b0 [ 182.868170][ T887] ipv6_getsockopt+0x1dd/0x280 [ 182.872950][ T887] tcp_getsockopt+0x106/0x130 [ 182.877663][ T887] sock_common_getsockopt+0xaf/0xd0 [ 182.882864][ T887] do_sock_getsockopt+0x3a3/0x6d0 [ 182.887884][ T887] page last free pid 557 tgid 557 stack trace: [ 182.894045][ T887] free_unref_page+0xb4d/0xee0 [ 182.898802][ T887] __free_pages+0x6b/0x3b0 [ 182.903224][ T887] vfree+0x3bf/0x580 [ 182.907135][ T887] do_ipt_get_ctl+0xe89/0x1180 [ 182.911885][ T887] nf_getsockopt+0x28b/0x2b0 [ 182.916637][ T887] ip_getsockopt+0x14c/0x1e0 [ 182.921219][ T887] tcp_getsockopt+0x106/0x130 [ 182.925888][ T887] sock_common_getsockopt+0xaf/0xd0 [ 182.931073][ T887] do_sock_getsockopt+0x3a3/0x6d0 [ 182.936084][ T887] __x64_sys_getsockopt+0x1d5/0x280 [ 182.941264][ T887] x64_sys_call+0x10db/0x2ee0 [ 182.946052][ T887] do_syscall_64+0x58/0xf0 [ 182.950469][ T887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.956453][ T887] [ 182.958765][ T887] Memory state around the buggy address: [ 182.964388][ T887] ffff88810afd7400: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 182.972613][ T887] ffff88810afd7480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 182.980678][ T887] >ffff88810afd7500: fa fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 182.988725][ T887] ^ [ 182.995930][ T887] ffff88810afd7580: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 183.004005][ T887] ffff88810afd7600: fa fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc [ 183.012060][ T887] ================================================================== [ 183.020109][ T887] Disabling lock debugging due to kernel taint [ 183.028895][ T887] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 183.041254][ T887] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 183.056565][ T36] audit: type=1400 audit(185.171:35308): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 183.077960][ T887] microsoft 0003:045E:07DA.000A: no inputs found [ 183.084372][ T887] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 183.096559][ T887] usb 1-1: USB disconnect, device number 70 [ 183.100592][ T36] audit: type=1400 audit(185.171:35309): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1