last executing test programs: 4.681352858s ago: executing program 1 (id=2): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040), 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x2, 0x73, &(0x7f0000000040)="a70b71416d418ddb717f82d320c2955aca0c18cdc8186ec1433c66fe2925870902b5ded8b66aae90b836fd34c1eee9c210cd2fcd60726d73cea01c9293d0397d2e8cf232aa0424558023a9780fe408921220f62b9d8449bcb73882280dd34fe7416e4607afaf1c557f6eb411eb6f7c675b03ed"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.747077727s ago: executing program 1 (id=3): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x40, r1, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 2.270874509s ago: executing program 1 (id=4): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1.188384401s ago: executing program 0 (id=6): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r0, &(0x7f00000000c0)="06", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000c00)='U\'+Uh+', 0x6, 0x40000, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1.050734251s ago: executing program 0 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x8804) 621.083309ms ago: executing program 0 (id=8): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setresuid(0xee01, 0x0, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}}], 0x1, 0x8000) shutdown(r0, 0x2) 490.232667ms ago: executing program 0 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d26693d39c46cebe2639d449f163cab1"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x8010) 100.760364ms ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x64}, 0x1, 0x620b}, 0x0) 0s ago: executing program 0 (id=11): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0xfffffffe, 0xcc7, 0xfff, 0x5c95239c, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x4000009, 0x9, 0xe1cb, 0x6, 0x4, 0x10, 0x0, 0x8000008b, 0xfffffffe, 0x9, 0xfffffff5, 0xffffeadb, 0x103, 0x83c, 0x0, 0x4, 0x2, 0xdffffffa]}) kernel console output (not intermixed with test programs): [ 52.367127][ T28] audit: type=1400 audit(52.290:56): avc: denied { read write } for pid=3079 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.369378][ T28] audit: type=1400 audit(52.290:57): avc: denied { open } for pid=3079 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:61479' (ED25519) to the list of known hosts. [ 68.043184][ T28] audit: type=1400 audit(67.960:58): avc: denied { name_bind } for pid=3082 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.657850][ T28] audit: type=1400 audit(69.570:59): avc: denied { execute } for pid=3083 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 69.678899][ T28] audit: type=1400 audit(69.600:60): avc: denied { execute_no_trans } for pid=3083 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 73.285785][ T28] audit: type=1400 audit(73.210:61): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 73.289623][ T28] audit: type=1400 audit(73.210:62): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.308591][ T3083] cgroup: Unknown subsys name 'net' [ 73.318438][ T28] audit: type=1400 audit(73.240:63): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.494927][ T3083] cgroup: Unknown subsys name 'cpuset' [ 73.501221][ T3083] cgroup: Unknown subsys name 'hugetlb' [ 73.504151][ T3083] cgroup: Unknown subsys name 'rlimit' [ 73.706800][ T28] audit: type=1400 audit(73.630:64): avc: denied { setattr } for pid=3083 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.709766][ T28] audit: type=1400 audit(73.630:65): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 73.711850][ T28] audit: type=1400 audit(73.630:66): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 73.920205][ T3085] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 73.923728][ T28] audit: type=1400 audit(73.850:67): avc: denied { relabelto } for pid=3085 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.927574][ T28] audit: type=1400 audit(73.850:68): avc: denied { write } for pid=3085 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 73.958918][ T28] audit: type=1400 audit(73.880:69): avc: denied { read } for pid=3083 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.959524][ T28] audit: type=1400 audit(73.880:70): avc: denied { open } for pid=3083 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.309499][ T3083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.491419][ T28] audit: type=1400 audit(81.410:71): avc: denied { execmem } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.565159][ T28] audit: type=1400 audit(81.490:72): avc: denied { read } for pid=3088 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.568290][ T28] audit: type=1400 audit(81.490:73): avc: denied { open } for pid=3088 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.580396][ T28] audit: type=1400 audit(81.500:74): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.610241][ T28] audit: type=1400 audit(81.530:75): avc: denied { module_request } for pid=3089 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 81.614078][ T28] audit: type=1400 audit(81.530:76): avc: denied { module_request } for pid=3088 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 81.701608][ T28] audit: type=1400 audit(81.620:77): avc: denied { sys_module } for pid=3088 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.484244][ T28] audit: type=1400 audit(82.410:78): avc: denied { ioctl } for pid=3088 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.760702][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.771600][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.831671][ T3089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.840018][ T3089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.640103][ T3089] hsr_slave_0: entered promiscuous mode [ 84.645887][ T3089] hsr_slave_1: entered promiscuous mode [ 84.660951][ T3088] hsr_slave_0: entered promiscuous mode [ 84.665786][ T3088] hsr_slave_1: entered promiscuous mode [ 84.667617][ T3088] debugfs: 'hsr0' already exists in 'hsr' [ 84.669903][ T3088] Cannot create hsr debugfs directory [ 85.227333][ T28] audit: type=1400 audit(85.150:79): avc: denied { create } for pid=3089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.229673][ T28] audit: type=1400 audit(85.150:80): avc: denied { write } for pid=3089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.240085][ T3089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.267244][ T3089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.285932][ T3089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.296326][ T3089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.409162][ T3088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.421545][ T3088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.434696][ T3088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.447312][ T3088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.066518][ T3089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.371022][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.152452][ T3088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.197285][ T3089] veth0_vlan: entered promiscuous mode [ 89.224981][ T3089] veth1_vlan: entered promiscuous mode [ 89.305747][ T3089] veth0_macvtap: entered promiscuous mode [ 89.320888][ T3089] veth1_macvtap: entered promiscuous mode [ 89.416660][ T240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417633][ T240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417759][ T240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417866][ T240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.611170][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 89.611593][ T28] audit: type=1400 audit(89.520:82): avc: denied { mount } for pid=3089 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.624459][ T28] audit: type=1400 audit(89.550:83): avc: denied { mounton } for pid=3089 comm="syz-executor" path="/syzkaller.loLs73/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.635055][ T28] audit: type=1400 audit(89.560:84): avc: denied { mount } for pid=3089 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.647205][ T28] audit: type=1400 audit(89.570:85): avc: denied { mounton } for pid=3089 comm="syz-executor" path="/syzkaller.loLs73/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.663073][ T28] audit: type=1400 audit(89.580:86): avc: denied { mounton } for pid=3089 comm="syz-executor" path="/syzkaller.loLs73/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 89.675486][ T28] audit: type=1400 audit(89.600:87): avc: denied { unmount } for pid=3089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.688328][ T28] audit: type=1400 audit(89.610:88): avc: denied { mounton } for pid=3089 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 89.694320][ T28] audit: type=1400 audit(89.620:89): avc: denied { mount } for pid=3089 comm="syz-executor" name="/" dev="gadgetfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.705118][ T28] audit: type=1400 audit(89.630:90): avc: denied { mount } for pid=3089 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.709343][ T28] audit: type=1400 audit(89.630:91): avc: denied { mounton } for pid=3089 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 89.797232][ T3089] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.878309][ T3088] veth0_vlan: entered promiscuous mode [ 89.910112][ T3088] veth1_vlan: entered promiscuous mode [ 90.011546][ T3088] veth0_macvtap: entered promiscuous mode [ 90.029234][ T3088] veth1_macvtap: entered promiscuous mode [ 90.133950][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.134948][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.135085][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.135207][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.897964][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.063923][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 91.075017][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.078154][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58627, setting to 1024 [ 91.079984][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.083681][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.091049][ T10] usb 2-1: config 0 descriptor?? [ 91.098383][ T3695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.111463][ T10] hub 2-1:0.0: USB hub found [ 91.184666][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.320665][ T10] hub 2-1:0.0: 1 port detected [ 91.350836][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 91.352079][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 91.352415][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.379073][ T9] usb 1-1: config 0 descriptor?? [ 91.387496][ T3700] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 91.766032][ T10] usb 2-1: USB disconnect, device number 2 [ 91.856533][ T9] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 92.574059][ T88] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.731234][ T88] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 92.734744][ T88] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 92.736066][ T88] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.748919][ T10] usb 1-1: USB disconnect, device number 2 [ 94.590502][ T3772] 8<--- cut here --- [ 94.596300][ T3772] Unable to handle kernel paging request at virtual address fee04f2a when write [ 94.599140][ T3772] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 94.607331][ T3772] Internal error: Oops: a06 [#1] SMP ARM [ 94.609246][ T3772] Modules linked in: [ 94.610239][ T3772] CPU: 1 UID: 0 PID: 3772 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT [ 94.610786][ T3772] Hardware name: ARM-Versatile Express [ 94.611256][ T3772] PC is at subdev_8255_io+0x60/0x6c [ 94.612249][ T3772] LR is at subdev_8255_io+0x4c/0x6c [ 94.612619][ T3772] pc : [<8143e530>] lr : [<8143e51c>] psr: 60000013 [ 94.613179][ T3772] sp : e4341cb8 ip : e4341cb8 fp : e4341cd4 [ 94.613445][ T3772] r10: 00000000 r9 : 00000084 r8 : e4341da4 [ 94.613740][ T3772] r7 : 00004f27 r6 : 0000009b r5 : 8385fc00 r4 : 00004f2a [ 94.614208][ T3772] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 8385fc00 [ 94.614637][ T3772] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 94.615003][ T3772] Control: 30c5387d Table: 85f09780 DAC: 00000000 [ 94.615340][ T3772] Register r0 information: slab kmalloc-192 start 8385fc00 pointer offset 0 size 192 [ 94.617011][ T3772] Register r1 information: non-paged memory [ 94.617593][ T3772] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 94.618188][ T3772] Register r3 information: non-paged memory [ 94.618508][ T3772] Register r4 information: non-paged memory [ 94.618770][ T3772] Register r5 information: slab kmalloc-192 start 8385fc00 pointer offset 0 size 192 [ 94.619351][ T3772] Register r6 information: non-paged memory [ 94.619704][ T3772] Register r7 information: non-paged memory [ 94.620041][ T3772] Register r8 information: 2-page vmalloc region starting at 0xe4340000 allocated at kernel_clone+0xac/0x428 [ 94.620532][ T3772] Register r9 information: non-paged memory [ 94.620779][ T3772] Register r10 information: NULL pointer [ 94.621123][ T3772] Register r11 information: 2-page vmalloc region starting at 0xe4340000 allocated at kernel_clone+0xac/0x428 [ 94.621673][ T3772] Register r12 information: 2-page vmalloc region starting at 0xe4340000 allocated at kernel_clone+0xac/0x428 [ 94.622297][ T3772] Process syz.0.11 (pid: 3772, stack limit = 0xe4340000) [ 94.622897][ T3772] Stack: (0xe4341cb8 to 0xe4342000) [ 94.623407][ T3772] 1ca0: 8143e4d0 00004f27 [ 94.623981][ T3772] 1cc0: 8385fc00 00004f27 e4341cf4 e4341cd8 8143e20c 8143e4dc 00004f27 805228d4 [ 94.624329][ T3772] 1ce0: 85ec1000 85ec1000 e4341d14 e4341cf8 8143e5c4 8143e1c0 8385fc00 00000000 [ 94.624696][ T3772] 1d00: 85ec1000 00004f27 e4341d54 e4341d18 8143e774 8143e548 82afde04 847d3700 [ 94.625059][ T3772] 1d20: 828217c0 00000000 00000000 829d6e04 8385fc00 00000000 e4341d90 8385fc00 [ 94.625554][ T3772] 1d40: 00000000 82b2efdc e4341d8c e4341d58 8142d0ac 8143e70c 40946400 00000000 [ 94.626157][ T3772] 1d60: e4341d7c 200000c0 8385fc00 b5403587 40946400 00000003 00000003 833c4800 [ 94.626703][ T3772] 1d80: e4341e4c e4341d90 814288c0 8142cfac 35353238 00000000 00000000 00000000 [ 94.627218][ T3772] 1da0: 00000000 00004f27 00000005 00000002 00000401 fffffffe 00000cc7 00000fff [ 94.627709][ T3772] 1dc0: 5c95239c 00000001 000003ff 00000006 00001600 00000001 04000009 00000009 [ 94.628151][ T3772] 1de0: 0000e1cb 00000006 00000004 00000010 00000000 8000008b fffffffe 00000009 [ 94.628647][ T3772] 1e00: fffffff5 ffffeadb 00000103 0000083c 00000000 00000004 00000002 dffffffa [ 94.629362][ T3772] 1e20: 00000000 6a28ee01 00000000 8531f480 8385fc00 200000c0 40946400 00000003 [ 94.629769][ T3772] 1e40: e4341f14 e4341e50 81429be4 814287f8 00000000 6a28ee01 00000000 00000000 [ 94.630126][ T3772] 1e60: 824b857c e4341ea4 0000005f 84595de0 00000064 8385fc30 e4341ee4 e4341e88 [ 94.630532][ T3772] 1e80: 807cdb54 807c3f2c 00000064 00000001 00000000 e4341ea4 8337c0d0 8342bee0 [ 94.630882][ T3772] 1ea0: 00006400 0000000b e4341e98 00000000 00000000 6a28ee01 00000000 8531f480 [ 94.631207][ T3772] 1ec0: 40946400 200000c0 200000c0 8531f480 00000003 833c4800 e4341ef4 e4341ee8 [ 94.631564][ T3772] 1ee0: 807cdc84 6a28ee01 e4341f14 00000000 8531f481 40946400 200000c0 8531f480 [ 94.631903][ T3772] 1f00: 00000003 833c4800 e4341fa4 e4341f18 8058fa74 8142989c ecac8b10 833c4800 [ 94.632251][ T3772] 1f20: e4341f3c e4341f30 81ae19f4 81ae18c0 e4341f54 e4341f40 8025a85c 8028c340 [ 94.632921][ T3772] 1f40: e4341fb0 40000000 e4341f84 e4341f58 80220bf8 8025a818 00000000 8281d2bc [ 94.633505][ T3772] 1f60: e4341fb0 0013e290 ecac8b10 80220b4c 00000000 6a28ee01 e4341fac 00000000 [ 94.633923][ T3772] 1f80: 00000000 00346310 00000036 8020029c 833c4800 00000036 00000000 e4341fa8 [ 94.634633][ T3772] 1fa0: 80200060 8058f83c 00000000 00000000 00000003 40946400 200000c0 00000000 [ 94.635125][ T3772] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f8a0dc [ 94.635595][ T3772] 1fe0: 76f89e88 76f89e78 00018ba0 001300f0 60000010 00000003 00000000 00000000 [ 94.636238][ T3772] Call trace: SYZFAIL: failed to recv rpc [ 94.637091][ T3772] [<8143e4d0>] (subdev_8255_io) from [<8143e20c>] (subdev_8255_do_config+0x58/0x60) [ 94.637873][ T3772] r7:00004f27 r6:8385fc00 r5:00004f27 r4:8143e4d0 [ 94.638303][ T3772] [<8143e1b4>] (subdev_8255_do_config) from [<8143e5c4>] (subdev_8255_io_init+0x88/0x98) [ 94.638725][ T3772] r4:85ec1000 [ 94.638937][ T3772] [<8143e53c>] (subdev_8255_io_init) from [<8143e774>] (dev_8255_attach+0x74/0x120) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.639315][ T3772] r7:00004f27 r6:85ec1000 r5:00000000 r4:8385fc00 [ 94.640024][ T3772] [<8143e700>] (dev_8255_attach) from [<8142d0ac>] (comedi_device_attach+0x10c/0x248) [ 94.640526][ T3772] r10:82b2efdc r9:00000000 r8:8385fc00 r7:e4341d90 r6:00000000 r5:8385fc00 [ 94.640952][ T3772] r4:829d6e04 [ 94.641127][ T3772] [<8142cfa0>] (comedi_device_attach) from [<814288c0>] (do_devconfig_ioctl+0xd4/0x21c) [ 94.641701][ T3772] r10:833c4800 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:8385fc00 [ 94.642181][ T3772] r4:200000c0 [ 94.642389][ T3772] [<814287ec>] (do_devconfig_ioctl) from [<81429be4>] (comedi_unlocked_ioctl+0x354/0x1dbc) [ 94.643360][ T3772] r8:00000003 r7:40946400 r6:200000c0 r5:8385fc00 r4:8531f480 [ 94.643877][ T3772] [<81429890>] (comedi_unlocked_ioctl) from [<8058fa74>] (sys_ioctl+0x244/0xb5c) [ 94.644466][ T3772] r10:833c4800 r9:00000003 r8:8531f480 r7:200000c0 r6:40946400 r5:8531f481 [ 94.644799][ T3772] r4:00000000 [ 94.645288][ T3772] [<8058f830>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 94.646137][ T3772] Exception stack(0xe4341fa8 to 0xe4341ff0) [ 94.646493][ T3772] 1fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 94.647022][ T3772] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f8a0dc [ 94.647368][ T3772] 1fe0: 76f89e88 76f89e78 00018ba0 001300f0 [ 94.647628][ T3772] r10:00000036 r9:833c4800 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 94.648015][ T3772] r4:00000000 [ 94.648494][ T3772] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 94.650959][ T3772] ---[ end trace 0000000000000000 ]--- [ 94.684749][ T3772] Kernel panic - not syncing: Fatal exception [ 94.687835][ T3772] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:42:06 Registers: info registers vcpu 0 CPU#0 R00=00000044 R01=00a371d4 R02=000000ff R03=00000000 R04=00000000 R05=00000000 R06=00a371a8 R07=00000003 R08=00000000 R09=004845ec R10=76f7554c R11=76f75548 R12=00000001 R13=ebcb1ff8 R14=76da0590 R15=76da0590 PSR=600e0093 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=7250202c s03=6375646f d01=6375646f7250202c s04=7375205d s05=2d322062 d02=2d3220627375205d s06=4e203a31 s07=55207765 d03=552077654e203a31 s08=64204253 s09=63697665 d04=6369766564204253 s10=6f662065 s11=2c646e75 d05=2c646e756f662065 s12=56646920 s13=6f646e65 d06=6f646e6556646920 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ddde5400 R01=5b719000 R02=00013ef7 R03=81ae22c0 R04=00000006 R05=828f8388 R06=8280c82c R07=828f8380 R08=833c4800 R09=828f8388 R10=00000000 R11=e4341994 R12=e4341998 R13=e4341988 R14=80341398 R15=81ae22d0 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000