last executing test programs: 2m27.719453671s ago: executing program 0 (id=2623): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x84, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0xdc, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x6c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x80}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x340a}}, {0x7a, &(0x7f00000002c0)=@string={0x7a, 0x3, "2449f7ef49cd84196731b74de940e7771892c1c2c9ed44fb4b68c5c69c1a048521f634285d2c2d77a48bf829e523def2d7b7d9fcdef9e63964a0fa6c0b948b23a0c31875f2581c157adab7dd906ab87c1e4433187abccc550870dc7079a6a2b803248df28e4b1bca0f2d3b05b3ddecdc776996f849e8dda6"}}, {0x0, 0x0}, {0x0, 0x0}]}) 2m26.859673199s ago: executing program 0 (id=2624): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="53479998c303f424101e4884d308928e", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 2m26.759898175s ago: executing program 0 (id=2625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="bad33075218151db00316f3a277f17a8e596c270a7a7511ae7600cc6b202639a930d1b10c352b391", 0x28, 0x6008093, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 2m26.469394501s ago: executing program 0 (id=2626): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x2004a010) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) fsmount(r2, 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) rename(0x0, &(0x7f00000000c0)='./bus\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', 0x0}) 2m26.339669148s ago: executing program 0 (id=2627): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="4701000000000000000620000000000000000000", 0x14, 0x81, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @multicast}, 0x14) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 2m26.139877579s ago: executing program 0 (id=2628): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getpgid(0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000180)) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x7, 0xabc}, &(0x7f00000010c0)) 1m40.2122919s ago: executing program 32 (id=2628): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getpgid(0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000180)) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x7, 0xabc}, &(0x7f00000010c0)) 52.33121239s ago: executing program 2 (id=2704): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000855) 52.030286257s ago: executing program 2 (id=2705): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = memfd_create(&(0x7f0000000440)='4F\xd1\x87g\xcax(\xfco&vCHHki\x8e\xf6t\xcb\x8a\v\xc8\xd0\xa0|naL:\x87S\x93\x8c\x9d\x9c\x1d\xed\x94\xf1\xb5\xeb\xf9\xd3\x1bmdwfA\xcbS\x9bXWT\xf5\x9dU\xb9\xbb`\xdf\x89`\xf11N \x14\x9c\x99\x19\xa8', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x800fff}) 51.80925253s ago: executing program 2 (id=2706): r0 = mq_open(&(0x7f0000000480)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x4, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000000140)) 51.608359181s ago: executing program 2 (id=2707): capset(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r3, &(0x7f0000019080)={0x2020}, 0x2020) 44.900410598s ago: executing program 2 (id=2723): add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_setup(0x4ba6, &(0x7f00000000c0)={0x0, 0xf18b, 0x2, 0x2001, 0x280}) 44.602465405s ago: executing program 2 (id=2724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 4.690202747s ago: executing program 1 (id=2762): r0 = syz_open_dev$loop(&(0x7f0000002880), 0xfff, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000028c0)=0x1) 4.589650743s ago: executing program 1 (id=2763): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.261053944s ago: executing program 1 (id=2764): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x0, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.090041269s ago: executing program 1 (id=2765): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) 939.926337ms ago: executing program 1 (id=2766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44045080) 0s ago: executing program 1 (id=2767): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x0, 0xfffe, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000103, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0xa, 0xffffffff, 0xeffffff8]}) kernel console output (not intermixed with test programs): tributes in process `syz.0.1992'. [ 1131.901623][ T8464] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1132.041774][ T8464] usb 1-1: device descriptor read/64, error -71 [ 1132.281656][ T8464] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1132.451780][ T8464] usb 1-1: device descriptor read/64, error -71 [ 1132.571895][ T8464] usb usb1-port1: attempt power cycle [ 1132.911800][ T8464] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1132.934257][ T8464] usb 1-1: device descriptor read/8, error -71 [ 1133.182102][ T8464] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1133.256949][ T8464] usb 1-1: device descriptor read/8, error -71 [ 1133.374089][ T8464] usb usb1-port1: unable to enumerate USB device [ 1134.541858][ T8467] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1154.958193][ T9809] FAULT_INJECTION: forcing a failure. [ 1154.958193][ T9809] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.982204][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.0.2004 Tainted: G L syzkaller #0 PREEMPT [ 1154.982386][ T9809] Tainted: [L]=SOFTLOCKUP [ 1154.982407][ T9809] Hardware name: ARM-Versatile Express [ 1154.982438][ T9809] Call trace: [ 1154.982568][ T9809] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1154.982749][ T9809] r7:60000113 r6:60000113 r5:822a7e1c r4:00000000 [ 1154.982774][ T9809] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1154.982837][ T9809] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1154.982905][ T9809] r7:00000cc0 r6:00000000 r5:850e5400 r4:82919410 [ 1154.982962][ T9809] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1154.983033][ T9809] [<809bbf28>] (should_fail_ex) from [<80543a80>] (should_failslab+0x6c/0x94) [ 1154.983111][ T9809] r8:861c80c8 r7:00000cc0 r6:00000000 r5:00000000 r4:83019400 [ 1154.983131][ T9809] [<80543a14>] (should_failslab) from [<805224e4>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1154.983208][ T9809] [<80522490>] (kmem_cache_alloc_noprof) from [<804f5ab4>] (anon_vma_clone+0x14c/0x4c4) [ 1154.983351][ T9809] r10:82ad3618 r9:861c80c8 r8:861c80c8 r7:84d23520 r6:8615d600 r5:84d23500 [ 1154.983377][ T9809] r4:84d23520 [ 1154.983456][ T9809] [<804f5968>] (anon_vma_clone) from [<804f8afc>] (anon_vma_fork+0x84/0x1d0) [ 1154.983535][ T9809] r10:00000001 r9:00000001 r8:84d78438 r7:8615d600 r6:82ad3618 r5:84d23500 [ 1154.983571][ T9809] r4:84d907a8 [ 1154.983590][ T9809] [<804f8a78>] (anon_vma_fork) from [<804ed010>] (dup_mmap+0x658/0xa3c) [ 1154.983724][ T9809] r10:00000001 r9:00001000 r8:82c4735c r7:850392c0 r6:85037c00 r5:8615d600 [ 1154.983759][ T9809] r4:84d23500 r3:00100077 [ 1154.983828][ T9809] [<804ec9b8>] (dup_mmap) from [<8024f220>] (copy_process+0x17a8/0x1928) [ 1154.983910][ T9809] r10:00000000 r9:850392c0 r8:85037c00 r7:00000000 r6:00000000 r5:00300000 [ 1154.983935][ T9809] r4:85190c00 [ 1154.983951][ T9809] [<8024da78>] (copy_process) from [<8024f4e4>] (kernel_clone+0xac/0x428) [ 1154.984077][ T9809] r10:850e5400 r9:850e5400 r8:00000000 r7:00100000 r6:dfe71f30 r5:00000000 [ 1154.984104][ T9809] r4:00300000 [ 1154.984180][ T9809] [<8024f438>] (kernel_clone) from [<8024fc10>] (sys_clone+0x78/0x9c) [ 1154.984262][ T9809] r10:00000078 r9:850e5400 r8:8020029c r7:200002c0 r6:20000200 r5:00000000 [ 1154.984286][ T9809] r4:00000000 [ 1154.984303][ T9809] [<8024fb98>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1154.984354][ T9809] Exception stack(0xdfe71fa8 to 0xdfe71ff0) [ 1154.984442][ T9809] 1fa0: 00000000 00000000 00300000 200002c0 00000000 20000200 [ 1154.984500][ T9809] 1fc0: 00000000 00000000 00000003 00000078 003462d8 00000000 003d0f00 76f7b0dc [ 1154.984533][ T9809] 1fe0: 76f7ae60 76f7ae50 00018ebc 001302e0 [ 1154.984564][ T9809] r7:00000078 r6:00000003 r5:00000000 r4:00000000 [ 1157.312849][ T28] audit: type=1400 audit(2000000365.060:395): avc: denied { ioctl } for pid=9810 comm="syz.0.2005" path="socket:[21681]" dev="sockfs" ino=21681 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1177.775901][ T9845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9845 comm=syz.0.2014 [ 1178.234897][ T9848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9848 comm=syz.0.2015 [ 1183.587797][ T9853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9853 comm=syz.1.2017 [ 1185.787031][ T9859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9859 comm=syz.1.2019 [ 1186.193664][ T9861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9861 comm=syz.1.2020 [ 1195.645999][ T9865] FAULT_INJECTION: forcing a failure. [ 1195.645999][ T9865] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.646311][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.0.2022 Tainted: G L syzkaller #0 PREEMPT [ 1195.646369][ T9865] Tainted: [L]=SOFTLOCKUP [ 1195.646378][ T9865] Hardware name: ARM-Versatile Express [ 1195.646389][ T9865] Call trace: [ 1195.646410][ T9865] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1195.646494][ T9865] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1195.646506][ T9865] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1195.646534][ T9865] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1195.646564][ T9865] r7:00000000 r6:00000000 r5:8409a400 r4:82919410 [ 1195.646572][ T9865] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1195.646718][ T9865] [<809bbf28>] (should_fail_ex) from [<80543a80>] (should_failslab+0x6c/0x94) [ 1195.646771][ T9865] r8:00000000 r7:00000000 r6:83001480 r5:00000c40 r4:00001000 [ 1195.646854][ T9865] [<80543a14>] (should_failslab) from [<8052343c>] (__kmalloc_noprof+0xa4/0x39c) [ 1195.646886][ T9865] [<80523398>] (__kmalloc_noprof) from [<807fb3b8>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1195.646933][ T9865] r10:00000000 r9:83844800 r8:00000000 r7:858fc770 r6:85cd93e8 r5:00001000 [ 1195.646977][ T9865] r4:00000000 [ 1195.647096][ T9865] [<807fb37c>] (tomoyo_realpath_from_path) from [<807f7480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1195.647171][ T9865] r10:00000000 r9:00000004 r8:85cd93c0 r7:0000541b r6:81cd9ee4 r5:00000004 [ 1195.647408][ T9865] r4:85cd93e8 r3:826ca380 [ 1195.647568][ T9865] [<807f73b4>] (tomoyo_path_number_perm) from [<807fbdd4>] (tomoyo_file_ioctl+0x1c/0x20) [ 1195.647650][ T9865] r10:8409a400 r9:00000004 r8:85cd93c0 r7:00000000 r6:00000000 r5:0000541b [ 1195.647670][ T9865] r4:85cd93c0 [ 1195.647745][ T9865] [<807fbdb8>] (tomoyo_file_ioctl) from [<807a7940>] (security_file_ioctl+0x80/0x1d4) [ 1195.647804][ T9865] [<807a78c0>] (security_file_ioctl) from [<805903a0>] (sys_ioctl+0x4c/0xb5c) [ 1195.647871][ T9865] r7:00000000 r6:0000541b r5:85cd93c1 r4:00000000 [ 1195.647890][ T9865] [<80590354>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1195.647930][ T9865] Exception stack(0xe0475fa8 to 0xe0475ff0) [ 1195.647974][ T9865] 5fa0: 00000000 00000000 00000004 0000541b 00000000 00000000 [ 1195.648006][ T9865] 5fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76f7b0dc [ 1195.648028][ T9865] 5fe0: 76f7ae88 76f7ae78 00018ba0 001302e0 [ 1195.648068][ T9865] r10:00000036 r9:8409a400 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 1195.648162][ T9865] r4:00000000 [ 1195.648197][ T9865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1197.707280][ T9871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9871 comm=syz.0.2024 [ 1203.806688][ T9883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9883 comm=syz.1.2029 [ 1212.167448][ T9900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9900 comm=syz.0.2034 [ 1222.309246][ T9917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9917 comm=syz.1.2039 [ 1223.912349][ T9921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9921 comm=syz.1.2041 [ 1226.614570][ T9937] FAULT_INJECTION: forcing a failure. [ 1226.614570][ T9937] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.614958][ T9937] CPU: 0 UID: 0 PID: 9937 Comm: syz.1.2044 Tainted: G L syzkaller #0 PREEMPT [ 1226.615031][ T9937] Tainted: [L]=SOFTLOCKUP [ 1226.615048][ T9937] Hardware name: ARM-Versatile Express [ 1226.615067][ T9937] Call trace: [ 1226.615163][ T9937] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1226.615288][ T9937] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1226.615307][ T9937] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1226.615394][ T9937] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1226.615513][ T9937] r7:00000000 r6:00000000 r5:85190c00 r4:82919410 [ 1226.615552][ T9937] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1226.615614][ T9937] [<809bbf28>] (should_fail_ex) from [<80543a80>] (should_failslab+0x6c/0x94) [ 1226.615686][ T9937] r8:00000000 r7:00000000 r6:83001180 r5:00000d40 r4:00000019 [ 1226.615724][ T9937] [<80543a14>] (should_failslab) from [<8052343c>] (__kmalloc_noprof+0xa4/0x39c) [ 1226.615783][ T9937] [<80523398>] (__kmalloc_noprof) from [<807fb2c4>] (tomoyo_encode2+0x64/0xec) [ 1226.615855][ T9937] r10:00000fff r9:83844800 r8:00000000 r7:85880aa0 r6:86272ce8 r5:863a9ffd [ 1226.615875][ T9937] r4:863a9fef [ 1226.615892][ T9937] [<807fb260>] (tomoyo_encode2) from [<807fb370>] (tomoyo_encode+0x24/0x30) [ 1226.615961][ T9937] r9:83844800 r8:00000000 r7:85880aa0 r6:86272ce8 r5:00001000 r4:863a9ff0 [ 1226.615977][ T9937] [<807fb34c>] (tomoyo_encode) from [<807fb3fc>] (tomoyo_realpath_from_path+0x80/0x16c) [ 1226.616032][ T9937] r5:00001000 r4:863a9000 [ 1226.616048][ T9937] [<807fb37c>] (tomoyo_realpath_from_path) from [<807f7480>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1226.616118][ T9937] r10:00000000 r9:00000004 r8:86272cc0 r7:0000541b r6:81cd9ee4 r5:00000004 [ 1226.616246][ T9937] r4:86272ce8 r3:826ca380 [ 1226.616267][ T9937] [<807f73b4>] (tomoyo_path_number_perm) from [<807fbdd4>] (tomoyo_file_ioctl+0x1c/0x20) [ 1226.616340][ T9937] r10:85190c00 r9:00000004 r8:86272cc0 r7:00000000 r6:00000000 r5:0000541b [ 1226.616392][ T9937] r4:86272cc0 [ 1226.616562][ T9937] [<807fbdb8>] (tomoyo_file_ioctl) from [<807a7940>] (security_file_ioctl+0x80/0x1d4) [ 1226.616653][ T9937] [<807a78c0>] (security_file_ioctl) from [<805903a0>] (sys_ioctl+0x4c/0xb5c) [ 1226.616759][ T9937] r7:00000000 r6:0000541b r5:86272cc1 r4:00000000 [ 1226.616814][ T9937] [<80590354>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1226.617072][ T9937] Exception stack(0xea7c1fa8 to 0xea7c1ff0) [ 1226.617206][ T9937] 1fa0: 00000000 00000000 00000004 0000541b 00000000 00000000 [ 1226.617310][ T9937] 1fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76f680dc [ 1226.617420][ T9937] 1fe0: 76f67e88 76f67e78 00018ba0 001302e0 [ 1226.617687][ T9937] r10:00000036 r9:85190c00 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 1226.617725][ T9937] r4:00000000 [ 1226.618160][ T9937] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1227.186291][ T9939] FAULT_INJECTION: forcing a failure. [ 1227.186291][ T9939] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.186810][ T9939] CPU: 0 UID: 0 PID: 9939 Comm: syz.1.2045 Tainted: G L syzkaller #0 PREEMPT [ 1227.186925][ T9939] Tainted: [L]=SOFTLOCKUP [ 1227.186946][ T9939] Hardware name: ARM-Versatile Express [ 1227.186970][ T9939] Call trace: [ 1227.187012][ T9939] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1227.187118][ T9939] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1227.187141][ T9939] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1227.187195][ T9939] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1227.187263][ T9939] r7:00000cc0 r6:00000000 r5:8318bc00 r4:82919410 [ 1227.187282][ T9939] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1227.187337][ T9939] [<809bbf28>] (should_fail_ex) from [<80543a80>] (should_failslab+0x6c/0x94) [ 1227.187396][ T9939] r8:82c4735c r7:00000cc0 r6:00000000 r5:00000000 r4:83019700 [ 1227.187413][ T9939] [<80543a14>] (should_failslab) from [<805224e4>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1227.187459][ T9939] [<80522490>] (kmem_cache_alloc_noprof) from [<804d886c>] (vm_area_dup+0x24/0x148) [ 1227.187516][ T9939] r10:00000001 r9:00000000 r8:82c4735c r7:8503b840 r6:85038000 r5:84d52700 [ 1227.187534][ T9939] r4:00000000 [ 1227.187548][ T9939] [<804d8848>] (vm_area_dup) from [<804ecb9c>] (dup_mmap+0x1e4/0xa3c) [ 1227.187597][ T9939] r5:84d52700 r4:00000000 [ 1227.187613][ T9939] [<804ec9b8>] (dup_mmap) from [<8024f220>] (copy_process+0x17a8/0x1928) [ 1227.187681][ T9939] r10:00000000 r9:8503b840 r8:85038000 r7:00000000 r6:00000000 r5:00300000 [ 1227.187701][ T9939] r4:831e9800 [ 1227.187715][ T9939] [<8024da78>] (copy_process) from [<8024f4e4>] (kernel_clone+0xac/0x428) [ 1227.187787][ T9939] r10:8318bc00 r9:8318bc00 r8:00000000 r7:00100000 r6:ea875f30 r5:00000000 [ 1227.187807][ T9939] r4:00300000 [ 1227.187822][ T9939] [<8024f438>] (kernel_clone) from [<8024fc10>] (sys_clone+0x78/0x9c) [ 1227.187882][ T9939] r10:00000078 r9:8318bc00 r8:8020029c r7:200002c0 r6:20000200 r5:00000000 [ 1227.187901][ T9939] r4:00000000 [ 1227.187915][ T9939] [<8024fb98>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1227.187962][ T9939] Exception stack(0xea875fa8 to 0xea875ff0) [ 1227.188003][ T9939] 5fa0: 00000000 00000000 00300000 200002c0 00000000 20000200 [ 1227.188039][ T9939] 5fc0: 00000000 00000000 00000003 00000078 003462d8 00000000 003d0f00 76f680dc [ 1227.188067][ T9939] 5fe0: 76f67e60 76f67e50 00018ebc 001302e0 [ 1227.188098][ T9939] r7:00000078 r6:00000003 r5:00000000 r4:00000000 [ 1241.954352][ T28] audit: type=1400 audit(2000000449.700:396): avc: denied { map } for pid=9956 comm="syz.0.2051" path="socket:[21904]" dev="sockfs" ino=21904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1246.832601][ T9969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9969 comm=syz.0.2055 [ 1248.808435][ T9979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9979 comm=syz.0.2059 [ 1251.365660][ T9989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9989 comm=syz.0.2063 [ 1252.626927][ T9991] FAULT_INJECTION: forcing a failure. [ 1252.626927][ T9991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1252.627416][ T9991] CPU: 0 UID: 0 PID: 9991 Comm: syz.0.2064 Tainted: G L syzkaller #0 PREEMPT [ 1252.627518][ T9991] Tainted: [L]=SOFTLOCKUP [ 1252.627549][ T9991] Hardware name: ARM-Versatile Express [ 1252.627575][ T9991] Call trace: [ 1252.627627][ T9991] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1252.628234][ T9991] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1252.628358][ T9991] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1252.628805][ T9991] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1252.629104][ T9991] r7:00000001 r6:00000000 r5:840a6000 r4:82919464 [ 1252.629211][ T9991] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1252.629435][ T9991] [<809bbf28>] (should_fail_ex) from [<80543b10>] (should_fail_alloc_page+0x68/0x74) [ 1252.629584][ T9991] r8:ea9e9d54 r7:00000001 r6:00000002 r5:00040cc0 r4:ea9e9d60 [ 1252.629815][ T9991] [<80543aa8>] (should_fail_alloc_page) from [<8050a510>] (prepare_alloc_pages+0xf8/0x1b4) [ 1252.629934][ T9991] [<8050a418>] (prepare_alloc_pages) from [<805138b8>] (__alloc_frozen_pages_noprof+0xb0/0x1644) [ 1252.630114][ T9991] r10:840a6000 r9:840a6000 r8:00000002 r7:00040cc0 r6:840a6000 r5:00000000 [ 1252.630319][ T9991] r4:00000002 [ 1252.630341][ T9991] [<80513808>] (__alloc_frozen_pages_noprof) from [<8051a718>] (___kmalloc_large_node+0x50/0xec) [ 1252.630539][ T9991] r10:840a6000 r9:840a6000 r8:3d008000 r7:80523678 r6:ffffffff r5:00000cc0 [ 1252.630723][ T9991] r4:00000002 [ 1252.630859][ T9991] [<8051a6c8>] (___kmalloc_large_node) from [<8051add4>] (__kmalloc_large_node_noprof+0x24/0x68) [ 1252.631070][ T9991] r6:ffffffff r5:00000cc0 r4:00002200 [ 1252.631337][ T9991] [<8051adb0>] (__kmalloc_large_node_noprof) from [<80523678>] (__kmalloc_noprof+0x2e0/0x39c) [ 1252.631646][ T9991] r8:3d008000 r7:824ad730 r6:00000000 r5:00000cc0 r4:00002200 [ 1252.631671][ T9991] [<80523398>] (__kmalloc_noprof) from [<814149a8>] (vhost_dev_set_owner+0xe8/0x1fc) [ 1252.631788][ T9991] r10:840a6000 r9:0000010b r8:3d008000 r7:824ad730 r6:00000000 r5:85fd0000 [ 1252.631812][ T9991] r4:85fd2070 [ 1252.631833][ T9991] [<814148c0>] (vhost_dev_set_owner) from [<8140a2d8>] (vhost_net_ioctl+0x394/0xd60) [ 1252.631896][ T9991] r7:85fd0004 r6:85fd4000 r5:85fd0000 r4:8280e848 [ 1252.631914][ T9991] [<81409f44>] (vhost_net_ioctl) from [<80590598>] (sys_ioctl+0x244/0xb5c) [ 1252.632012][ T9991] r10:840a6000 r9:00000003 r8:8617f9c0 r7:00000000 r6:0000af01 r5:8617f9c1 [ 1252.632042][ T9991] r4:00000000 [ 1252.632059][ T9991] [<80590354>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1252.632118][ T9991] Exception stack(0xea9e9fa8 to 0xea9e9ff0) [ 1252.632158][ T9991] 9fa0: 00000000 00000000 00000003 0000af01 00000000 00000000 [ 1252.632248][ T9991] 9fc0: 00000000 00000000 0012ece4 00000036 003462d8 00000000 00000001 76f7b0dc [ 1252.632286][ T9991] 9fe0: 76f7ae88 76f7ae78 00018ba0 001302e0 [ 1252.632348][ T9991] r10:00000036 r9:840a6000 r8:8020029c r7:00000036 r6:0012ece4 r5:00000000 [ 1252.632416][ T9991] r4:00000000 [ 1257.716628][T10002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10002 comm=syz.0.2068 [ 1258.903102][T10004] FAULT_INJECTION: forcing a failure. [ 1258.903102][T10004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.903480][T10004] CPU: 1 UID: 0 PID: 10004 Comm: syz.0.2069 Tainted: G L syzkaller #0 PREEMPT [ 1258.903540][T10004] Tainted: [L]=SOFTLOCKUP [ 1258.903550][T10004] Hardware name: ARM-Versatile Express [ 1258.903562][T10004] Call trace: [ 1258.903585][T10004] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1258.903645][T10004] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1258.903654][T10004] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1258.903680][T10004] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1258.903709][T10004] r7:00000003 r6:00000000 r5:85072400 r4:8295129c [ 1258.903718][T10004] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1258.903745][T10004] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1258.903774][T10004] r8:85072400 r7:00000003 r6:00000100 r5:20000b00 r4:20000b00 [ 1258.903782][T10004] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1258.903805][T10004] [<809bc164>] (should_fail_usercopy) from [<809c20e0>] (strncpy_from_user+0x20/0x1b0) [ 1258.903830][T10004] [<809c20c0>] (strncpy_from_user) from [<805af71c>] (path_removexattrat+0x58/0x298) [ 1258.903865][T10004] r10:000000ed r9:85072400 r8:85072400 r7:00000003 r6:00000000 r5:00001000 [ 1258.903875][T10004] r4:20000b00 [ 1258.903882][T10004] [<805af6c4>] (path_removexattrat) from [<805b0b40>] (sys_fremovexattr+0x1c/0x20) [ 1258.903912][T10004] r9:85072400 r8:8020029c r7:000000ed r6:0012ece4 r5:00000000 r4:00000000 [ 1258.903921][T10004] [<805b0b24>] (sys_fremovexattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1258.903944][T10004] Exception stack(0xeab09fa8 to 0xeab09ff0) [ 1258.903963][T10004] 9fa0: 00000000 00000000 00000003 20000b00 00000000 00000000 [ 1258.903980][T10004] 9fc0: 00000000 00000000 0012ece4 000000ed 003462d8 00000000 00000001 76f7b0dc [ 1258.903993][T10004] 9fe0: 76f7ae88 76f7ae78 00018ba0 001302e0 [ 1262.162844][T10010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=10010 comm=syz.0.2072 [ 1263.843162][T10022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10022 comm=syz.0.2075 [ 1263.872163][T10022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10022 comm=syz.0.2075 [ 1269.793522][T10040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10040 comm=syz.0.2080 [ 1270.319132][T10039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10039 comm=syz.0.2080 [ 1278.813381][T10055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10055 comm=syz.1.2085 [ 1278.856419][T10055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10055 comm=syz.1.2085 [ 1279.907046][T10057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10057 comm=syz.1.2086 [ 1282.803487][T10061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10061 comm=syz.1.2088 [ 1290.272885][T10069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10069 comm=syz.0.2090 [ 1290.300108][T10069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10069 comm=syz.0.2090 [ 1300.928142][T10107] FAULT_INJECTION: forcing a failure. [ 1300.928142][T10107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.933941][T10107] CPU: 1 UID: 0 PID: 10107 Comm: syz.1.2103 Tainted: G L syzkaller #0 PREEMPT [ 1300.934066][T10107] Tainted: [L]=SOFTLOCKUP [ 1300.934081][T10107] Hardware name: ARM-Versatile Express [ 1300.934101][T10107] Call trace: [ 1300.934137][T10107] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1300.934230][T10107] r7:60000113 r6:60000113 r5:822a7e1c r4:00000000 [ 1300.934244][T10107] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1300.934285][T10107] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1300.934334][T10107] r7:00000000 r6:00000000 r5:839a6c00 r4:8295129c [ 1300.934347][T10107] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1300.934391][T10107] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1300.934439][T10107] r8:76f67f08 r7:00000000 r6:00000000 r5:eb079f68 r4:00000002 [ 1300.934452][T10107] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1300.934489][T10107] [<809bc164>] (should_fail_usercopy) from [<805b256c>] (simple_read_from_buffer+0x80/0x140) [ 1300.934534][T10107] [<805b24ec>] (simple_read_from_buffer) from [<806361f0>] (proc_fail_nth_read+0xb8/0x108) [ 1300.934594][T10107] r10:80636138 r9:00000001 r8:00000002 r7:eb079f68 r6:0000000f r5:76f67f08 [ 1300.934618][T10107] r4:839a6c00 r3:eb079e9f [ 1300.934631][T10107] [<80636138>] (proc_fail_nth_read) from [<80574dac>] (vfs_read+0xc0/0x328) [ 1300.934685][T10107] r8:839a6c00 r7:eb079f68 r6:76f67f08 r5:86149480 r4:0000000f [ 1300.934699][T10107] [<80574cec>] (vfs_read) from [<80575a40>] (ksys_read+0x74/0xec) [ 1300.934751][T10107] r10:00000003 r9:839a6c00 r8:8020029c r7:00000000 r6:00000000 r5:86149480 [ 1300.934767][T10107] r4:86149483 [ 1300.934779][T10107] [<805759cc>] (ksys_read) from [<80575ac8>] (sys_read+0x10/0x14) [ 1300.934825][T10107] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1300.934837][T10107] [<80575ab8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1300.934873][T10107] Exception stack(0xeb079fa8 to 0xeb079ff0) [ 1300.934902][T10107] 9fa0: 00000000 00000000 00000004 76f67f08 0000000f 00000000 [ 1300.934930][T10107] 9fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f680dc [ 1300.934952][T10107] 9fe0: 76f67e58 76f67e44 0010b504 001120e8 [ 1310.137658][T10136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10136 comm=syz.1.2115 [ 1312.393872][T10146] syz.1.2119 uses obsolete (PF_INET,SOCK_PACKET) [ 1313.532000][T10151] FAULT_INJECTION: forcing a failure. [ 1313.532000][T10151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.533469][T10151] CPU: 1 UID: 0 PID: 10151 Comm: syz.0.2121 Tainted: G L syzkaller #0 PREEMPT [ 1313.533610][T10151] Tainted: [L]=SOFTLOCKUP [ 1313.533621][T10151] Hardware name: ARM-Versatile Express [ 1313.533634][T10151] Call trace: [ 1313.533656][T10151] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1313.533752][T10151] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1313.533778][T10151] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1313.533834][T10151] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1313.533911][T10151] r7:00000000 r6:00000000 r5:850fd400 r4:8295129c [ 1313.533933][T10151] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1313.534028][T10151] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1313.534068][T10151] r8:76f7af08 r7:00000000 r6:00000000 r5:eb33df68 r4:00000002 [ 1313.534090][T10151] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1313.534114][T10151] [<809bc164>] (should_fail_usercopy) from [<805b256c>] (simple_read_from_buffer+0x80/0x140) [ 1313.534142][T10151] [<805b24ec>] (simple_read_from_buffer) from [<806361f0>] (proc_fail_nth_read+0xb8/0x108) [ 1313.534180][T10151] r10:80636138 r9:00000001 r8:00000002 r7:eb33df68 r6:0000000f r5:76f7af08 [ 1313.534192][T10151] r4:850fd400 r3:eb33de9f [ 1313.534200][T10151] [<80636138>] (proc_fail_nth_read) from [<80574dac>] (vfs_read+0xc0/0x328) [ 1313.534233][T10151] r8:850fd400 r7:eb33df68 r6:76f7af08 r5:838dbcc0 r4:0000000f [ 1313.534241][T10151] [<80574cec>] (vfs_read) from [<80575a40>] (ksys_read+0x74/0xec) [ 1313.534277][T10151] r10:00000003 r9:850fd400 r8:8020029c r7:00000000 r6:00000000 r5:838dbcc0 [ 1313.534287][T10151] r4:838dbcc3 [ 1313.534294][T10151] [<805759cc>] (ksys_read) from [<80575ac8>] (sys_read+0x10/0x14) [ 1313.534322][T10151] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1313.534329][T10151] [<80575ab8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1313.534350][T10151] Exception stack(0xeb33dfa8 to 0xeb33dff0) [ 1313.534369][T10151] dfa0: 00000000 00000000 00000004 76f7af08 0000000f 00000000 [ 1313.534385][T10151] dfc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f7b0dc [ 1313.534398][T10151] dfe0: 76f7ae58 76f7ae44 0010b504 001120e8 [ 1317.518824][T10164] FAULT_INJECTION: forcing a failure. [ 1317.518824][T10164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1317.532187][T10164] CPU: 1 UID: 0 PID: 10164 Comm: syz.1.2126 Tainted: G L syzkaller #0 PREEMPT [ 1317.532354][T10164] Tainted: [L]=SOFTLOCKUP [ 1317.532377][T10164] Hardware name: ARM-Versatile Express [ 1317.532403][T10164] Call trace: [ 1317.532448][T10164] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1317.532565][T10164] r7:60000113 r6:60000113 r5:822a7e1c r4:00000000 [ 1317.532584][T10164] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1317.532638][T10164] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1317.532701][T10164] r7:00000001 r6:00000000 r5:831e9800 r4:82919464 [ 1317.532719][T10164] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1317.532777][T10164] [<809bbf28>] (should_fail_ex) from [<80543b10>] (should_fail_alloc_page+0x68/0x74) [ 1317.532881][T10164] r8:eb2fdbc4 r7:00000001 r6:00000000 r5:00440dc2 r4:eb2fdbd0 [ 1317.532903][T10164] [<80543aa8>] (should_fail_alloc_page) from [<8050a510>] (prepare_alloc_pages+0xf8/0x1b4) [ 1317.532958][T10164] [<8050a418>] (prepare_alloc_pages) from [<805138b8>] (__alloc_frozen_pages_noprof+0xb0/0x1644) [ 1317.533026][T10164] r10:20000000 r9:85037480 r8:00000000 r7:00440dc2 r6:831e9800 r5:00000000 [ 1317.533048][T10164] r4:85038000 [ 1317.533067][T10164] [<80513808>] (__alloc_frozen_pages_noprof) from [<80514e5c>] (__alloc_pages_noprof+0x10/0x60) [ 1317.533139][T10164] r10:20000000 r9:85037480 r8:00000020 r7:21000000 r6:ffe00000 r5:85038000 [ 1317.533160][T10164] r4:85038000 [ 1317.533177][T10164] [<80514e4c>] (__alloc_pages_noprof) from [<804daa8c>] (pte_alloc_one+0x28/0x104) [ 1317.533230][T10164] [<804daa64>] (pte_alloc_one) from [<804dcb04>] (__pte_alloc+0x2c/0x130) [ 1317.533285][T10164] r5:86287800 r4:85038000 [ 1317.533305][T10164] [<804dcad8>] (__pte_alloc) from [<804e5094>] (copy_page_range+0x1168/0x1ed0) [ 1317.533359][T10164] r5:86291808 r4:85493f80 [ 1317.533377][T10164] [<804e3f2c>] (copy_page_range) from [<804ecd2c>] (dup_mmap+0x374/0xa3c) [ 1317.533495][T10164] r10:00000001 r9:85038000 r8:82c4735c r7:85037480 r6:85038000 r5:84d0de80 [ 1317.533518][T10164] r4:86156200 [ 1317.533535][T10164] [<804ec9b8>] (dup_mmap) from [<8024f220>] (copy_process+0x17a8/0x1928) [ 1317.533610][T10164] r10:00000000 r9:85037480 r8:85038000 r7:00000000 r6:00000000 r5:00300000 [ 1317.533632][T10164] r4:839a6c00 [ 1317.533648][T10164] [<8024da78>] (copy_process) from [<8024f4e4>] (kernel_clone+0xac/0x428) [ 1317.533710][T10164] r10:831e9800 r9:831e9800 r8:00000000 r7:00100000 r6:eb2fdf30 r5:00000000 [ 1317.533728][T10164] r4:00300000 [ 1317.533744][T10164] [<8024f438>] (kernel_clone) from [<8024fc10>] (sys_clone+0x78/0x9c) [ 1317.533815][T10164] r10:00000078 r9:831e9800 r8:8020029c r7:200002c0 r6:20000200 r5:00000000 [ 1317.533834][T10164] r4:00000000 [ 1317.533847][T10164] [<8024fb98>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1317.533895][T10164] Exception stack(0xeb2fdfa8 to 0xeb2fdff0) [ 1317.533935][T10164] dfa0: 00000000 00000000 00300000 200002c0 00000000 20000200 [ 1317.533970][T10164] dfc0: 00000000 00000000 00000003 00000078 003462d8 00000000 003d0f00 76f680dc [ 1317.533995][T10164] dfe0: 76f67e60 76f67e50 00018ebc 001302e0 [ 1317.534024][T10164] r7:00000078 r6:00000003 r5:00000000 r4:00000000 [ 1343.594750][T10185] FAULT_INJECTION: forcing a failure. [ 1343.594750][T10185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1343.608048][T10185] CPU: 1 UID: 0 PID: 10185 Comm: syz.1.2134 Tainted: G L syzkaller #0 PREEMPT [ 1343.608171][T10185] Tainted: [L]=SOFTLOCKUP [ 1343.608193][T10185] Hardware name: ARM-Versatile Express [ 1343.608215][T10185] Call trace: [ 1343.608259][T10185] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1343.608325][T10185] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1343.608334][T10185] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1343.608359][T10185] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1343.608388][T10185] r7:00000001 r6:00000000 r5:85109800 r4:82919464 [ 1343.608396][T10185] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1343.608422][T10185] [<809bbf28>] (should_fail_ex) from [<80543b10>] (should_fail_alloc_page+0x68/0x74) [ 1343.608455][T10185] r8:eb4edbc4 r7:00000001 r6:00000000 r5:00440dc2 r4:eb4edbd0 [ 1343.608463][T10185] [<80543aa8>] (should_fail_alloc_page) from [<8050a510>] (prepare_alloc_pages+0xf8/0x1b4) [ 1343.608489][T10185] [<8050a418>] (prepare_alloc_pages) from [<805138b8>] (__alloc_frozen_pages_noprof+0xb0/0x1644) [ 1343.608556][T10185] r10:20000000 r9:85038000 r8:00000000 r7:00440dc2 r6:85109800 r5:00000000 [ 1343.608575][T10185] r4:85037c00 [ 1343.608590][T10185] [<80513808>] (__alloc_frozen_pages_noprof) from [<80514e5c>] (__alloc_pages_noprof+0x10/0x60) [ 1343.608626][T10185] r10:20000000 r9:85038000 r8:00000020 r7:21000000 r6:ffe00000 r5:85037c00 [ 1343.608635][T10185] r4:85037c00 [ 1343.608642][T10185] [<80514e4c>] (__alloc_pages_noprof) from [<804daa8c>] (pte_alloc_one+0x28/0x104) [ 1343.608666][T10185] [<804daa64>] (pte_alloc_one) from [<804dcb04>] (__pte_alloc+0x2c/0x130) [ 1343.608692][T10185] r5:862ad800 r4:85037c00 [ 1343.608700][T10185] [<804dcad8>] (__pte_alloc) from [<804e5094>] (copy_page_range+0x1168/0x1ed0) [ 1343.608725][T10185] r5:8560f808 r4:838e8740 [ 1343.608732][T10185] [<804e3f2c>] (copy_page_range) from [<804ecd2c>] (dup_mmap+0x374/0xa3c) [ 1343.608768][T10185] r10:00000001 r9:85037c00 r8:82c4735c r7:85038000 r6:85037c00 r5:85219980 [ 1343.608778][T10185] r4:86044280 [ 1343.608785][T10185] [<804ec9b8>] (dup_mmap) from [<8024f220>] (copy_process+0x17a8/0x1928) [ 1343.608820][T10185] r10:00000000 r9:85038000 r8:85037c00 r7:00000000 r6:00000000 r5:00300000 [ 1343.608829][T10185] r4:844c6000 [ 1343.608836][T10185] [<8024da78>] (copy_process) from [<8024f4e4>] (kernel_clone+0xac/0x428) [ 1343.608868][T10185] r10:85109800 r9:85109800 r8:00000000 r7:00100000 r6:eb4edf30 r5:00000000 [ 1343.608877][T10185] r4:00300000 [ 1343.608884][T10185] [<8024f438>] (kernel_clone) from [<8024fc10>] (sys_clone+0x78/0x9c) [ 1343.608915][T10185] r10:00000078 r9:85109800 r8:8020029c r7:200002c0 r6:20000200 r5:00000000 [ 1343.608924][T10185] r4:00000000 [ 1343.608931][T10185] [<8024fb98>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1343.608954][T10185] Exception stack(0xeb4edfa8 to 0xeb4edff0) [ 1343.608973][T10185] dfa0: 00000000 00000000 00300000 200002c0 00000000 20000200 [ 1343.609038][T10185] dfc0: 00000000 00000000 00000003 00000078 003462d8 00000000 003d0f00 76f680dc [ 1343.609054][T10185] dfe0: 76f67e60 76f67e50 00018ebc 001302e0 [ 1343.609071][T10185] r7:00000078 r6:00000003 r5:00000000 r4:00000000 [ 1346.006161][T10190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10190 comm=syz.1.2136 [ 1346.463855][ T28] audit: type=1400 audit(2000000554.210:397): avc: denied { connect } for pid=10191 comm="syz.1.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1346.491841][ T28] audit: type=1400 audit(2000000554.230:398): avc: denied { read } for pid=10191 comm="syz.1.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1346.971636][ T28] audit: type=1400 audit(2000000554.690:399): avc: denied { setattr } for pid=10191 comm="syz.1.2137" name="NETLINK" dev="sockfs" ino=22511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1348.452212][T10197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10197 comm=syz.1.2139 [ 1348.689126][T10198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10198 comm=syz.1.2139 [ 1349.836954][T10204] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10204 comm=syz.1.2141 [ 1350.935339][T10209] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 1351.068677][ T28] audit: type=1400 audit(2000000558.810:400): avc: denied { create } for pid=10207 comm="syz.1.2143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1351.105471][T10209] 8021q: VLANs not supported on wg2 [ 1351.309967][ T28] audit: type=1400 audit(2000000559.050:401): avc: denied { unlink } for pid=3089 comm="syz-executor" name="file0" dev="tmpfs" ino=6179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1352.871986][ T28] audit: type=1400 audit(2000000560.580:402): avc: granted { setsecparam } for pid=10212 comm="syz.1.2145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1353.769456][ T8474] hid_parser_main: 152 callbacks suppressed [ 1353.769841][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770150][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770265][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770357][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770443][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770528][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770652][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770749][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770837][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.770924][ T8474] hid-generic 84FB:0006:0003.000B: unknown main item tag 0x0 [ 1353.832900][ T8474] hid-generic 84FB:0006:0003.000B: hidraw0: HID v0.08 Device [syz0] on syz0 [ 1354.161885][ T28] audit: type=1400 audit(2000000561.870:403): avc: granted { setsecparam } for pid=10217 comm="syz.1.2146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1354.162282][ T28] audit: type=1400 audit(2000000561.880:404): avc: granted { setsecparam } for pid=10217 comm="syz.1.2146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1355.274434][T10226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10226 comm=syz.1.2147 [ 1357.942865][T10230] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 1357.994768][T10230] 8021q: VLANs not supported on wg2 [ 1360.322645][T10238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10238 comm=syz.1.2151 [ 1361.605726][T10245] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 1364.667469][T10255] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 1380.192105][T10269] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 1385.183700][T10281] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 1389.486176][T10297] FAULT_INJECTION: forcing a failure. [ 1389.486176][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.486677][T10297] CPU: 1 UID: 0 PID: 10297 Comm: syz.1.2174 Tainted: G L syzkaller #0 PREEMPT [ 1389.486776][T10297] Tainted: [L]=SOFTLOCKUP [ 1389.486809][T10297] Hardware name: ARM-Versatile Express [ 1389.486833][T10297] Call trace: [ 1389.486876][T10297] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1389.487082][T10297] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1389.487231][T10297] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1389.487311][T10297] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1389.487461][T10297] r7:00000cc0 r6:00000000 r5:831eec00 r4:82919410 [ 1389.487489][T10297] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1389.487666][T10297] [<809bbf28>] (should_fail_ex) from [<80543a80>] (should_failslab+0x6c/0x94) [ 1389.487810][T10297] r8:82c4735c r7:00000cc0 r6:00000000 r5:00000000 r4:83019400 [ 1389.487838][T10297] [<80543a14>] (should_failslab) from [<805224e4>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1389.487999][T10297] [<80522490>] (kmem_cache_alloc_noprof) from [<804f8ae4>] (anon_vma_fork+0x6c/0x1d0) [ 1389.488114][T10297] r10:00000001 r9:00000001 r8:82c4735c r7:8615bd80 r6:82ad3618 r5:84d23180 [ 1389.488323][T10297] r4:84d18348 [ 1389.488362][T10297] [<804f8a78>] (anon_vma_fork) from [<804ed010>] (dup_mmap+0x658/0xa3c) [ 1389.488468][T10297] r10:00000001 r9:00001000 r8:82c4735c r7:85035e00 r6:85036940 r5:8615bd80 [ 1389.488541][T10297] r4:84d23180 r3:00100077 [ 1389.488586][T10297] [<804ec9b8>] (dup_mmap) from [<8024f220>] (copy_process+0x17a8/0x1928) [ 1389.488670][T10297] r10:00000000 r9:85035e00 r8:85036940 r7:00000000 r6:00000000 r5:00200000 [ 1389.488724][T10297] r4:850e6000 [ 1389.488749][T10297] [<8024da78>] (copy_process) from [<8024f4e4>] (kernel_clone+0xac/0x428) [ 1389.488834][T10297] r10:831eec00 r9:831eec00 r8:00000000 r7:00000000 r6:ec529f30 r5:00000000 [ 1389.488860][T10297] r4:00200000 [ 1389.488882][T10297] [<8024f438>] (kernel_clone) from [<8024fc10>] (sys_clone+0x78/0x9c) [ 1389.489056][T10297] r10:00000078 r9:831eec00 r8:8020029c r7:20000000 r6:20000200 r5:00000000 [ 1389.489142][T10297] r4:00000000 [ 1389.489184][T10297] [<8024fb98>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1389.489247][T10297] Exception stack(0xec529fa8 to 0xec529ff0) [ 1389.489461][T10297] 9fa0: 00000000 00000000 00200000 20000000 00000000 20000200 [ 1389.489575][T10297] 9fc0: 00000000 00000000 00000004 00000078 003462d8 00000000 003d0f00 76f680dc [ 1389.489635][T10297] 9fe0: 76f67e60 76f67e50 00018ebc 001302e0 [ 1389.489765][T10297] r7:00000078 r6:00000004 r5:00000000 r4:00000000 [ 1397.694257][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10321 comm=syz.1.2184 [ 1403.362270][T10335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=152 sclass=netlink_route_socket pid=10335 comm=syz.1.2190 [ 1414.570380][T10357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10357 comm=syz.1.2200 [ 1415.371948][T10357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10357 comm=syz.1.2200 [ 1416.493549][T10365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10365 comm=syz.1.2203 [ 1435.712067][T10374] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1437.057301][T10392] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5138 sclass=netlink_xfrm_socket pid=10392 comm=syz.1.2211 [ 1438.352784][T10396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10396 comm=syz.1.2212 [ 1439.643453][ T28] audit: type=1400 audit(2000000647.390:405): avc: denied { relabelfrom } for pid=10399 comm="syz.1.2214" name="NETLINK" dev="sockfs" ino=24608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1454.122256][T10431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10431 comm=syz.0.2224 [ 1457.899508][ T28] audit: type=1400 audit(2000000665.640:406): avc: denied { read } for pid=10443 comm="syz.1.2228" name="system" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cpu_device_t:s0" [ 1457.900782][ T28] audit: type=1400 audit(2000000665.640:407): avc: denied { open } for pid=10443 comm="syz.1.2228" path="/dev/dma_heap/system" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cpu_device_t:s0" [ 1478.629717][T10506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10506 comm=syz.1.2251 [ 1481.449632][T10508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10508 comm=syz.1.2254 [ 1503.631538][ T28] audit: type=1400 audit(2000000711.370:408): avc: denied { listen } for pid=10574 comm="syz.1.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1512.251911][ T8467] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1512.422157][ T8467] usb 2-1: device descriptor read/64, error -71 [ 1512.672008][ T8467] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1512.822312][ T8467] usb 2-1: device descriptor read/64, error -71 [ 1512.932654][ T8467] usb usb2-port1: attempt power cycle [ 1513.282502][ T8467] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1513.321831][ T8467] usb 2-1: device descriptor read/8, error -71 [ 1513.563910][ T8467] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1513.632907][ T8467] usb 2-1: device descriptor read/8, error -71 [ 1513.752615][ T8467] usb usb2-port1: unable to enumerate USB device [ 1525.762235][T10634] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10634 comm=syz.1.2300 [ 1533.212838][T10648] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10648 comm=syz.1.2305 [ 1538.049055][T10661] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10661 comm=syz.1.2310 [ 1541.002357][T10673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10673 comm=syz.1.2315 [ 1545.805272][T10685] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10685 comm=syz.0.2321 [ 1556.453340][T10699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10699 comm=syz.0.2326 [ 1558.204743][T10704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10704 comm=syz.0.2328 [ 1561.620997][T10712] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10712 comm=syz.1.2332 [ 1570.950050][T10725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10725 comm=syz.1.2337 [ 1575.470594][T10736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10736 comm=syz.1.2342 [ 1579.695715][T10751] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10751 comm=syz.1.2348 [ 1583.583553][T10761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10761 comm=syz.1.2353 [ 1583.629272][T10761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10761 comm=syz.1.2353 [ 1583.762715][T10761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=10761 comm=syz.1.2353 [ 1583.942027][T10761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10761 comm=syz.1.2353 [ 1585.178980][T10764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10764 comm=syz.1.2354 [ 1591.053244][ T28] audit: type=1400 audit(2000000798.800:409): avc: denied { accept } for pid=10765 comm="syz.1.2355" lport=51699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1601.013618][T10787] FAULT_INJECTION: forcing a failure. [ 1601.013618][T10787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.027869][T10787] CPU: 0 UID: 0 PID: 10787 Comm: syz.0.2362 Tainted: G L syzkaller #0 PREEMPT [ 1601.028006][T10787] Tainted: [L]=SOFTLOCKUP [ 1601.028025][T10787] Hardware name: ARM-Versatile Express [ 1601.028046][T10787] Call trace: [ 1601.028089][T10787] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1601.028194][T10787] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1601.028211][T10787] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1601.028261][T10787] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1601.028313][T10787] r7:20000000 r6:00000000 r5:831dc800 r4:8295129c [ 1601.028329][T10787] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1601.028377][T10787] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1601.028430][T10787] r8:04008800 r7:20000000 r6:ee50de28 r5:00000000 r4:ee50df20 [ 1601.028446][T10787] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1601.028489][T10787] [<809bc164>] (should_fail_usercopy) from [<815c4798>] (copy_msghdr_from_user+0x50/0x1e0) [ 1601.028541][T10787] [<815c4748>] (copy_msghdr_from_user) from [<815c49a0>] (___sys_sendmsg+0x78/0xd0) [ 1601.028600][T10787] r8:04008800 r7:00000000 r6:85934c80 r5:ee50df20 r4:ee50de6c [ 1601.028618][T10787] [<815c4928>] (___sys_sendmsg) from [<815c6a2c>] (__sys_sendmsg+0x8c/0xe0) [ 1601.028681][T10787] r9:831dc800 r8:84d9e000 r7:04008800 r6:20000000 r5:84d9e001 r4:00000004 [ 1601.028700][T10787] [<815c69a0>] (__sys_sendmsg) from [<815c6a94>] (sys_sendmsg+0x14/0x18) [ 1601.028760][T10787] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 1601.028774][T10787] [<815c6a80>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1601.028809][T10787] Exception stack(0xee50dfa8 to 0xee50dff0) [ 1601.028840][T10787] dfa0: 00000000 00000000 00000004 20000000 04008800 00000000 [ 1601.028868][T10787] dfc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76f7b0dc [ 1601.028890][T10787] dfe0: 76f7ae88 76f7ae78 00018ba0 001302e0 [ 1606.013047][T10796] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10796 comm=syz.0.2366 [ 1606.186034][T10796] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10796 comm=syz.0.2366 [ 1606.394120][T10796] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=10796 comm=syz.0.2366 [ 1608.982287][ T8468] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1609.302459][ T8468] usb 2-1: not running at top speed; connect to a high speed hub [ 1609.585539][ T8468] usb 2-1: config 64 has an invalid interface number: 85 but max is 2 [ 1609.586580][ T8468] usb 2-1: config 64 has an invalid interface number: 205 but max is 2 [ 1609.587578][ T8468] usb 2-1: config 64 has an invalid interface number: 81 but max is 2 [ 1609.588409][ T8468] usb 2-1: config 64 has an invalid interface number: 62 but max is 2 [ 1609.589307][ T8468] usb 2-1: config 64 has 4 interfaces, different from the descriptor's value: 3 [ 1609.590295][ T8468] usb 2-1: config 64 has no interface number 0 [ 1609.591026][ T8468] usb 2-1: config 64 has no interface number 1 [ 1609.592444][ T8468] usb 2-1: config 64 has no interface number 2 [ 1609.593609][ T8468] usb 2-1: config 64 has no interface number 3 [ 1609.594516][ T8468] usb 2-1: config 64 interface 85 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1609.595705][ T8468] usb 2-1: config 64 interface 205 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1609.596879][ T8468] usb 2-1: config 64 interface 205 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1609.598059][ T8468] usb 2-1: config 64 interface 205 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1609.599136][ T8468] usb 2-1: config 64 interface 205 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1609.600185][ T8468] usb 2-1: config 64 interface 205 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1609.601634][ T8468] usb 2-1: config 64 interface 205 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1609.602878][ T8468] usb 2-1: config 64 interface 205 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1609.603789][ T8468] usb 2-1: config 64 interface 81 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1609.604915][ T8468] usb 2-1: config 64 interface 81 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1609.605756][ T8468] usb 2-1: config 64 interface 81 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 1609.606716][ T8468] usb 2-1: too many endpoints for config 64 interface 62 altsetting 14: 240, using maximum allowed: 30 [ 1609.607723][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 1609.609008][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1609.610060][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0x8A, skipping [ 1609.611370][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 1609.614346][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 1609.615741][ T8468] usb 2-1: config 64 interface 62 altsetting 14 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1609.616765][ T8468] usb 2-1: config 64 interface 62 altsetting 14 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1609.617823][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0x4, skipping [ 1609.618793][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 1609.619703][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 1609.621058][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 1609.634264][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 1609.635161][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 1609.635955][ T8468] usb 2-1: config 64 interface 62 altsetting 14 has 14 endpoint descriptors, different from the interface descriptor's value: 240 [ 1609.636936][ T8468] usb 2-1: config 64 interface 85 has no altsetting 0 [ 1609.637658][ T8468] usb 2-1: config 64 interface 205 has no altsetting 0 [ 1609.638310][ T8468] usb 2-1: config 64 interface 81 has no altsetting 0 [ 1609.638947][ T8468] usb 2-1: config 64 interface 62 has no altsetting 0 [ 1610.005655][ T8468] usb 2-1: New USB device found, idVendor=0403, idProduct=f06c, bcdDevice=3f.29 [ 1610.006280][ T8468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.006810][ T8468] usb 2-1: Product: ⠁ [ 1610.007178][ T8468] usb 2-1: Manufacturer: 搱넉뗭챁ᢙ戋鋥诙ჾ⍡Ẽ䓠퇾叔數靜鳭蠶︮繋㼠⁩鸀啛⚉瑫졅秮ᇴ鲅菳詐鑺䕤篐沸恈脙큫꤄殞⿲숝妏쬕睩እ铔椲緶擀ꒅ꘎画⚞暃῕齶汆냞䤰羉鍿氘딪렢齣濾ሥණῐ叱读⋿輕ꖜ꼐拺䋖怅澺줏啅欤笉纇㌆솪뇐樀쥈㇛䠐㱕챣 [ 1610.008236][ T8468] usb 2-1: SerialNumber: 䠊 [ 1610.027312][T10793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1614.730722][ T8468] ftdi_sio 2-1:64.85: FTDI USB Serial Device converter detected [ 1614.735123][ T8468] ftdi_sio ttyUSB0: unknown device type: 0x3f29 [ 1614.746655][ T8468] ftdi_sio 2-1:64.205: FTDI USB Serial Device converter detected [ 1614.749729][ T8468] ftdi_sio ttyUSB1: unknown device type: 0x3f29 [ 1614.763465][ T8468] ftdi_sio 2-1:64.81: FTDI USB Serial Device converter detected [ 1614.765994][ T8468] ftdi_sio ttyUSB2: unknown device type: 0x3f29 [ 1614.777507][ T8468] ftdi_sio 2-1:64.62: FTDI USB Serial Device converter detected [ 1614.780232][ T8468] ftdi_sio ttyUSB3: unknown device type: 0x3f29 [ 1614.790652][ T8468] usb 2-1: USB disconnect, device number 24 [ 1614.799091][ T8468] ftdi_sio 2-1:64.85: device disconnected [ 1614.809858][ T8468] ftdi_sio 2-1:64.205: device disconnected [ 1614.825295][ T8468] ftdi_sio 2-1:64.81: device disconnected [ 1614.838048][ T8468] ftdi_sio 2-1:64.62: device disconnected [ 1616.656455][T10850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10850 comm=syz.1.2371 [ 1616.687905][T10850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10850 comm=syz.1.2371 [ 1616.814522][T10850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=10850 comm=syz.1.2371 [ 1622.552556][T10868] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10868 comm=syz.0.2376 [ 1622.568539][T10868] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10868 comm=syz.0.2376 [ 1622.693054][T10868] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=10868 comm=syz.0.2376 [ 1625.138869][T10881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10881 comm=syz.1.2382 [ 1625.336715][T10881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10881 comm=syz.1.2382 [ 1625.403711][ T28] audit: type=1400 audit(2000000833.080:410): avc: denied { setattr } for pid=10877 comm="syz.0.2381" name="KCM" dev="sockfs" ino=25315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1629.768631][ T28] audit: type=1400 audit(2000000837.410:411): avc: denied { ioctl } for pid=10893 comm="syz.1.2386" path="socket:[25331]" dev="sockfs" ino=25331 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1630.532315][T10899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10899 comm=syz.1.2387 [ 1630.612391][T10899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10899 comm=syz.1.2387 [ 1631.372369][T10902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10902 comm=syz.1.2388 [ 1631.375725][T10901] FAULT_INJECTION: forcing a failure. [ 1631.375725][T10901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1631.412493][T10901] CPU: 1 UID: 0 PID: 10901 Comm: syz.1.2388 Tainted: G L syzkaller #0 PREEMPT [ 1631.412640][T10901] Tainted: [L]=SOFTLOCKUP [ 1631.412659][T10901] Hardware name: ARM-Versatile Express [ 1631.412684][T10901] Call trace: [ 1631.412727][T10901] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1631.412922][T10901] r7:60000113 r6:60000113 r5:822a7e1c r4:00000000 [ 1631.412947][T10901] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1631.413007][T10901] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1631.413072][T10901] r7:00000000 r6:00000000 r5:850e8c00 r4:8295129c [ 1631.413091][T10901] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1631.413144][T10901] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1631.413203][T10901] r8:76f67f08 r7:00000000 r6:00000000 r5:dfa39f68 r4:00000002 [ 1631.413220][T10901] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1631.413269][T10901] [<809bc164>] (should_fail_usercopy) from [<805b256c>] (simple_read_from_buffer+0x80/0x140) [ 1631.413326][T10901] [<805b24ec>] (simple_read_from_buffer) from [<806361f0>] (proc_fail_nth_read+0xb8/0x108) [ 1631.413391][T10901] r10:80636138 r9:00000001 r8:00000002 r7:dfa39f68 r6:0000000f r5:76f67f08 [ 1631.413452][T10901] r4:850e8c00 r3:dfa39e9f [ 1631.413471][T10901] [<80636138>] (proc_fail_nth_read) from [<80574dac>] (vfs_read+0xc0/0x328) [ 1631.413577][T10901] r8:850e8c00 r7:dfa39f68 r6:76f67f08 r5:86185d80 r4:0000000f [ 1631.413600][T10901] [<80574cec>] (vfs_read) from [<80575a40>] (ksys_read+0x74/0xec) [ 1631.413698][T10901] r10:00000003 r9:850e8c00 r8:8020029c r7:00000000 r6:00000000 r5:86185d80 [ 1631.413720][T10901] r4:86185d83 [ 1631.413738][T10901] [<805759cc>] (ksys_read) from [<80575ac8>] (sys_read+0x10/0x14) [ 1631.413809][T10901] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1631.413831][T10901] [<80575ab8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1631.413878][T10901] Exception stack(0xdfa39fa8 to 0xdfa39ff0) [ 1631.413915][T10901] 9fa0: 00000000 00000000 00000004 76f67f08 0000000f 00000000 [ 1631.413949][T10901] 9fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f680dc [ 1631.413981][T10901] 9fe0: 76f67e58 76f67e44 0010b504 001120e8 [ 1632.255826][ T28] audit: type=1400 audit(2000000840.000:412): avc: denied { append } for pid=10903 comm="syz.1.2389" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1632.482507][T10883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10883 comm=syz.0.2381 [ 1635.533765][T10910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10910 comm=syz.1.2392 [ 1635.572494][T10910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10910 comm=syz.1.2392 [ 1639.105027][T10920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10920 comm=syz.1.2397 [ 1639.152924][T10920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10920 comm=syz.1.2397 [ 1640.462983][T10928] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10928 comm=syz.1.2400 [ 1641.709159][T10932] FAULT_INJECTION: forcing a failure. [ 1641.709159][T10932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.802102][T10932] CPU: 0 UID: 0 PID: 10932 Comm: syz.1.2401 Tainted: G L syzkaller #0 PREEMPT [ 1641.802262][T10932] Tainted: [L]=SOFTLOCKUP [ 1641.802284][T10932] Hardware name: ARM-Versatile Express [ 1641.802312][T10932] Call trace: [ 1641.802355][T10932] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1641.802479][T10932] r7:60000113 r6:60000113 r5:822a7e1c r4:00000000 [ 1641.802500][T10932] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1641.802548][T10932] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1641.802603][T10932] r7:200024c0 r6:00000000 r5:8510ec00 r4:8295129c [ 1641.802619][T10932] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1641.802673][T10932] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1641.802730][T10932] r8:00000040 r7:200024c0 r6:dfac9e28 r5:00000000 r4:dfac9f20 [ 1641.802747][T10932] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1641.802805][T10932] [<809bc164>] (should_fail_usercopy) from [<815c4798>] (copy_msghdr_from_user+0x50/0x1e0) [ 1641.802866][T10932] [<815c4748>] (copy_msghdr_from_user) from [<815c49a0>] (___sys_sendmsg+0x78/0xd0) [ 1641.802926][T10932] r8:00000040 r7:00000000 r6:85932500 r5:dfac9f20 r4:dfac9e6c [ 1641.802944][T10932] [<815c4928>] (___sys_sendmsg) from [<815c6a2c>] (__sys_sendmsg+0x8c/0xe0) [ 1641.803002][T10932] r9:8510ec00 r8:84d9d600 r7:00000040 r6:200024c0 r5:84d9d601 r4:00000003 [ 1641.803023][T10932] [<815c69a0>] (__sys_sendmsg) from [<815c6a94>] (sys_sendmsg+0x14/0x18) [ 1641.803077][T10932] r8:8020029c r7:00000128 r6:0012ece4 r5:00000000 r4:00000000 [ 1641.803094][T10932] [<815c6a80>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1641.803136][T10932] Exception stack(0xdfac9fa8 to 0xdfac9ff0) [ 1641.803174][T10932] 9fa0: 00000000 00000000 00000003 200024c0 00000040 00000000 [ 1641.803210][T10932] 9fc0: 00000000 00000000 0012ece4 00000128 003462d8 00000000 00000001 76f680dc [ 1641.803238][T10932] 9fe0: 76f67e88 76f67e78 00018ba0 001302e0 [ 1643.328807][T10934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10934 comm=syz.1.2402 [ 1643.435496][T10934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10934 comm=syz.1.2402 [ 1645.533684][ T28] audit: type=1400 audit(2000000853.230:413): avc: denied { lock } for pid=10941 comm="syz.1.2405" path="socket:[25422]" dev="sockfs" ino=25422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1650.154590][T10952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10952 comm=syz.0.2408 [ 1650.212500][T10952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10952 comm=syz.0.2408 [ 1653.252940][T10962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10962 comm=syz.0.2412 [ 1653.302771][T10962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10962 comm=syz.0.2412 [ 1653.403124][T10962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=10962 comm=syz.0.2412 [ 1655.392215][ T28] audit: type=1400 audit(2000000863.130:414): avc: denied { read } for pid=10966 comm="syz.0.2414" path="socket:[25448]" dev="sockfs" ino=25448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1668.812909][T10987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10987 comm=syz.1.2420 [ 1669.432512][T10989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10989 comm=syz.1.2421 [ 1669.512803][T10989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10989 comm=syz.1.2421 [ 1669.523271][T10989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=10989 comm=syz.1.2421 [ 1674.118497][T11014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11014 comm=syz.1.2425 [ 1675.033809][T11016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11016 comm=syz.1.2426 [ 1675.113017][T11016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11016 comm=syz.1.2426 [ 1675.219365][T11016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=11016 comm=syz.1.2426 [ 1682.316161][T11024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11024 comm=syz.0.2429 [ 1683.732135][T11032] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11032 comm=syz.0.2430 [ 1685.014471][T11034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11034 comm=syz.0.2431 [ 1685.057187][T11034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11034 comm=syz.0.2431 [ 1685.125679][T11034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=11034 comm=syz.0.2431 [ 1687.539977][T11041] FAULT_INJECTION: forcing a failure. [ 1687.539977][T11041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.540398][T11041] CPU: 0 UID: 0 PID: 11041 Comm: syz.1.2434 Tainted: G L syzkaller #0 PREEMPT [ 1687.540493][T11041] Tainted: [L]=SOFTLOCKUP [ 1687.540513][T11041] Hardware name: ARM-Versatile Express [ 1687.540536][T11041] Call trace: [ 1687.540580][T11041] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1687.540686][T11041] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1687.540705][T11041] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1687.540756][T11041] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1687.540817][T11041] r7:00000000 r6:00000000 r5:85101800 r4:8295129c [ 1687.540834][T11041] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1687.540888][T11041] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1687.540949][T11041] r8:76f67f08 r7:00000000 r6:00000000 r5:e0451f68 r4:00000002 [ 1687.540968][T11041] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1687.541020][T11041] [<809bc164>] (should_fail_usercopy) from [<805b256c>] (simple_read_from_buffer+0x80/0x140) [ 1687.541092][T11041] [<805b24ec>] (simple_read_from_buffer) from [<806361f0>] (proc_fail_nth_read+0xb8/0x108) [ 1687.541168][T11041] r10:80636138 r9:00000001 r8:00000002 r7:e0451f68 r6:0000000f r5:76f67f08 [ 1687.541194][T11041] r4:85101800 r3:e0451e9f [ 1687.541211][T11041] [<80636138>] (proc_fail_nth_read) from [<80574dac>] (vfs_read+0xc0/0x328) [ 1687.541290][T11041] r8:85101800 r7:e0451f68 r6:76f67f08 r5:85cd90c0 r4:0000000f [ 1687.541310][T11041] [<80574cec>] (vfs_read) from [<80575a40>] (ksys_read+0x74/0xec) [ 1687.541375][T11041] r10:00000003 r9:85101800 r8:8020029c r7:00000000 r6:00000000 r5:85cd90c0 [ 1687.541531][T11041] r4:85cd90c3 [ 1687.541557][T11041] [<805759cc>] (ksys_read) from [<80575ac8>] (sys_read+0x10/0x14) [ 1687.541618][T11041] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1687.541635][T11041] [<80575ab8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1687.541680][T11041] Exception stack(0xe0451fa8 to 0xe0451ff0) [ 1687.541718][T11041] 1fa0: 00000000 00000000 00000004 76f67f08 0000000f 00000000 [ 1687.541754][T11041] 1fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f680dc [ 1687.541788][T11041] 1fe0: 76f67e58 76f67e44 0010b504 001120e8 [ 1688.762365][T11043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11043 comm=syz.1.2435 [ 1689.401752][ T28] audit: type=1400 audit(2000000897.130:415): avc: denied { listen } for pid=11044 comm="syz.1.2436" path=2F313336352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1707.851591][ T28] audit: type=1400 audit(2000000915.530:416): avc: denied { ioctl } for pid=11064 comm="syz.1.2443" path="/dev/dma_heap/system" dev="devtmpfs" ino=661 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cpu_device_t:s0" [ 1718.692476][T11080] SELinux: Context system_u:object_r:insmod_exec_t:s0 is not valid (left unmapped). [ 1718.692599][ T28] audit: type=1400 audit(2000000926.440:417): avc: denied { relabelfrom } for pid=11078 comm="syz.0.2449" name="UDPv6" dev="sockfs" ino=26011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1718.696353][ T28] audit: type=1400 audit(2000000926.440:418): avc: denied { relabelto } for pid=11078 comm="syz.0.2449" name="UDPv6" dev="sockfs" ino=26011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:insmod_exec_t:s0" [ 1722.452123][T11090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11090 comm=syz.1.2453 [ 1743.594489][T11123] ======================================================= [ 1743.594489][T11123] WARNING: The mand mount option has been deprecated and [ 1743.594489][T11123] and is ignored by this kernel. Remove the mand [ 1743.594489][T11123] option from the mount to silence this warning. [ 1743.594489][T11123] ======================================================= [ 1745.707972][ T28] audit: type=1400 audit(2000000953.450:419): avc: denied { unmount } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1754.777772][T11132] FAULT_INJECTION: forcing a failure. [ 1754.777772][T11132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1754.802551][T11132] CPU: 0 UID: 0 PID: 11132 Comm: syz.0.2466 Tainted: G L syzkaller #0 PREEMPT [ 1754.802707][T11132] Tainted: [L]=SOFTLOCKUP [ 1754.802795][T11132] Hardware name: ARM-Versatile Express [ 1754.802827][T11132] Call trace: [ 1754.802873][T11132] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1754.802979][T11132] r7:60000013 r6:60000013 r5:822a7e1c r4:00000000 [ 1754.803002][T11132] [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70) [ 1754.803052][T11132] [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c) [ 1754.803106][T11132] r7:00000000 r6:00000000 r5:831e8000 r4:8295129c [ 1754.803123][T11132] [<8021e458>] (dump_stack) from [<809bc0e8>] (should_fail_ex+0x1c0/0x224) [ 1754.803177][T11132] [<809bbf28>] (should_fail_ex) from [<809bc160>] (should_fail+0x14/0x18) [ 1754.803232][T11132] r8:00346378 r7:00000000 r6:003d0f00 r5:831e882c r4:76f59b48 [ 1754.803252][T11132] [<809bc14c>] (should_fail) from [<809bc180>] (should_fail_usercopy+0x1c/0x20) [ 1754.803300][T11132] [<809bc164>] (should_fail_usercopy) from [<8022a17c>] (setup_sigframe+0xe4/0x1c8) [ 1754.803350][T11132] [<8022a098>] (setup_sigframe) from [<8022a8f0>] (do_work_pending+0x3ac/0x4e8) [ 1754.803468][T11132] r10:b5403587 r9:76f59b48 r8:00000000 r7:831e882c r6:76f59ac8 r5:ea9e5fb0 [ 1754.803492][T11132] r4:831e8000 [ 1754.803509][T11132] [<8022a544>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1754.803557][T11132] Exception stack(0xea9e5fb0 to 0xea9e5ff8) [ 1754.803595][T11132] 5fa0: 00000001 76f59ef8 00000001 00000000 [ 1754.803632][T11132] 5fc0: 00000000 00000000 00000000 00000004 00346378 00000000 003d0f00 76f5a0dc [ 1754.803665][T11132] 5fe0: 76f59e58 76f59e44 0010b504 001120e8 60000010 ffffffff [ 1754.803705][T11132] r10:003d0f00 r9:831e8000 r8:00000000 r7:831e8000 r6:ffffffff r5:60000010 [ 1754.803727][T11132] r4:001120e8 [ 1762.325112][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.394839][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.470807][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.528761][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.835620][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.847836][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.863721][ T64] bond0 (unregistering): Released all slaves [ 1762.952559][ T64] hsr_slave_0: left promiscuous mode [ 1762.954836][ T64] hsr_slave_1: left promiscuous mode [ 1762.965030][ T64] veth1_macvtap: left promiscuous mode [ 1762.966661][ T64] veth0_macvtap: left promiscuous mode [ 1762.967593][ T64] veth1_vlan: left promiscuous mode [ 1762.968395][ T64] veth0_vlan: left promiscuous mode [ 1765.372321][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.378608][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.217037][T11145] hsr_slave_0: entered promiscuous mode [ 1767.218036][T11145] hsr_slave_1: entered promiscuous mode [ 1768.260018][T11145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1768.287074][T11145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1768.310353][T11145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1768.329361][T11145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1769.708429][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.065094][T11145] veth0_vlan: entered promiscuous mode [ 1775.093879][T11145] veth1_vlan: entered promiscuous mode [ 1775.223593][T11145] veth0_macvtap: entered promiscuous mode [ 1775.252728][T11145] veth1_macvtap: entered promiscuous mode [ 1775.375231][T11173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.375859][T11173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.375985][T11173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.376058][T11173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.570034][ T28] audit: type=1400 audit(2000000983.310:420): avc: denied { unmount } for pid=11145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1776.450338][ T7225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.520708][ T7225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.582205][ T7225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.656485][ T7225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.955089][ T7225] dvmrp0 (unregistering): left allmulticast mode [ 1776.967067][ T7225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1776.976351][ T7225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.979433][ T7225] bond0 (unregistering): Released all slaves [ 1777.058343][ T7225] hsr_slave_0: left promiscuous mode [ 1777.059888][ T7225] hsr_slave_1: left promiscuous mode [ 1777.073940][ T7225] veth1_macvtap: left promiscuous mode [ 1777.074833][ T7225] veth0_macvtap: left promiscuous mode [ 1777.077530][ T7225] veth1_vlan: left promiscuous mode [ 1777.078136][ T7225] veth0_vlan: left promiscuous mode [ 1779.176359][T11572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.183657][T11572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.109974][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 1780.114076][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 1780.116270][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 1781.348147][T11572] hsr_slave_0: entered promiscuous mode [ 1781.360750][T11572] hsr_slave_1: entered promiscuous mode [ 1781.370237][T11572] debugfs: 'hsr0' already exists in 'hsr' [ 1781.373967][T11572] Cannot create hsr debugfs directory [ 1782.048989][T11572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1782.057366][T11572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1782.067970][T11572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1782.077050][T11572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1783.402971][T11572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1787.539870][T11572] veth0_vlan: entered promiscuous mode [ 1787.551644][T11572] veth1_vlan: entered promiscuous mode [ 1787.631037][T11572] veth0_macvtap: entered promiscuous mode [ 1787.637484][T11572] veth1_macvtap: entered promiscuous mode [ 1787.734766][T11173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.735154][T11173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.735466][T11173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.735555][T11173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.280813][ C0] vcan0: j1939_tp_rxtimer: 0x85757b00: rx timeout, send abort [ 1788.301689][ T28] audit: type=1400 audit(2000000996.040:421): avc: denied { read } for pid=2895 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1788.307632][ T28] audit: type=1400 audit(2000000996.050:422): avc: denied { search } for pid=2895 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.317313][ T28] audit: type=1400 audit(2000000996.050:423): avc: denied { search } for pid=2895 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.319246][ T28] audit: type=1400 audit(2000000996.050:424): avc: denied { add_name } for pid=2895 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.324419][ T28] audit: type=1400 audit(2000000996.050:425): avc: denied { create } for pid=2895 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.328560][ T28] audit: type=1400 audit(2000000996.050:426): avc: denied { append open } for pid=2895 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.330498][ T28] audit: type=1400 audit(2000000996.050:427): avc: denied { getattr } for pid=2895 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.782035][ C0] vcan0: j1939_tp_rxtimer: 0x85757b00: abort rx timeout. Force session deactivation [ 1788.783521][ C0] vcan0: j1939_tp_rxtimer: 0x86072200: rx timeout, send abort [ 1789.284289][ C0] vcan0: j1939_tp_rxtimer: 0x86072200: abort rx timeout. Force session deactivation [ 1791.772918][ T8467] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1791.933603][ T8467] usb 1-1: config 0 has an invalid interface number: 70 but max is 0 [ 1791.933941][ T8467] usb 1-1: config 0 has no interface number 0 [ 1791.934228][ T8467] usb 1-1: config 0 interface 70 has no altsetting 0 [ 1791.953673][ T8467] usb 1-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 1791.954085][ T8467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.954346][ T8467] usb 1-1: Product: syz [ 1791.954430][ T8467] usb 1-1: Manufacturer: syz [ 1791.954513][ T8467] usb 1-1: SerialNumber: syz [ 1791.963896][ T8467] usb 1-1: config 0 descriptor?? [ 1792.184441][ T8467] ti_usb_3410_5052 1-1:0.70: TI USB 3410 1 port adapter converter detected [ 1792.185248][ T8467] ti_usb_3410_5052 1-1:0.70: missing endpoints [ 1792.197482][ T8467] usb 1-1: USB disconnect, device number 20 [ 1795.282260][ T28] audit: type=1400 audit(2000001003.020:428): avc: denied { create } for pid=12018 comm="syz.0.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1795.284381][ T28] audit: type=1400 audit(2000001003.020:429): avc: denied { sys_admin } for pid=12018 comm="syz.0.2487" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1800.812184][ T28] audit: type=1326 audit(2000001008.550:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.815569][ T28] audit: type=1326 audit(2000001008.550:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.834201][ T28] audit: type=1326 audit(2000001008.580:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=116 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.837485][ T28] audit: type=1326 audit(2000001008.580:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.839988][ T28] audit: type=1326 audit(2000001008.580:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.851790][ T28] audit: type=1326 audit(2000001008.590:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.852575][ T28] audit: type=1326 audit(2000001008.590:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.852689][ T28] audit: type=1326 audit(2000001008.590:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.852734][ T28] audit: type=1326 audit(2000001008.590:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1800.852761][ T28] audit: type=1326 audit(2000001008.590:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1806.712204][ T8467] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1806.872007][ T8467] usb 2-1: Using ep0 maxpacket: 32 [ 1806.970205][ T8467] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1806.970632][ T8467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.970929][ T8467] usb 2-1: Product: syz [ 1806.971019][ T8467] usb 2-1: Manufacturer: syz [ 1806.972069][ T8467] usb 2-1: SerialNumber: syz [ 1806.978119][ T8467] usb 2-1: config 0 descriptor?? [ 1807.608725][ T8467] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1807.724997][ T8467] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1807.760453][ T8467] usb 2-1: USB disconnect, device number 25 [ 1808.573690][T12057] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2492'. [ 1808.574005][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 1814.097058][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1814.100525][ T28] audit: type=1326 audit(2000001021.840:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.105377][ T28] audit: type=1326 audit(2000001021.850:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.112175][ T28] audit: type=1326 audit(2000001021.850:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.117065][ T28] audit: type=1326 audit(2000001021.860:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=105 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.120420][ T28] audit: type=1326 audit(2000001021.860:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.128041][ T28] audit: type=1326 audit(2000001021.870:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.135259][ T28] audit: type=1326 audit(2000001021.880:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.140078][ T28] audit: type=1326 audit(2000001021.880:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1814.149729][ T28] audit: type=1326 audit(2000001021.890:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.2496" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x1302e0 code=0x7ffc0000 [ 1821.702832][T10183] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1821.895792][T10183] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1821.897999][T10183] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1821.899497][T10183] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1821.925120][T10183] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1821.925478][T10183] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1821.925801][T10183] usb 1-1: Product: syz [ 1821.926073][T10183] usb 1-1: Manufacturer: syz [ 1821.926231][T10183] usb 1-1: SerialNumber: syz [ 1821.933929][T10183] usb 1-1: config 0 descriptor?? [ 1821.953217][T10183] hub 1-1:0.0: bad descriptor, ignoring hub [ 1821.955114][T10183] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1821.960876][T10183] usb 1-1: selecting invalid altsetting 0 [ 1822.284336][T10183] usb 1-1: USB disconnect, device number 21 [ 1822.622587][T10183] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1822.787894][T10183] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1822.789703][T10183] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1822.795188][T10183] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1822.825541][T10183] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1822.826624][T10183] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1822.830269][T10183] usb 1-1: Product: syz [ 1822.841970][T10183] usb 1-1: Manufacturer: syz [ 1822.846275][T10183] usb 1-1: SerialNumber: syz [ 1822.853089][T10183] usb 1-1: config 0 descriptor?? [ 1822.866215][T10183] hub 1-1:0.0: bad descriptor, ignoring hub [ 1822.869528][T10183] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1822.876006][T10183] usb 1-1: selecting invalid altsetting 0 [ 1823.225186][ T8464] usb 1-1: USB disconnect, device number 22 [ 1824.901982][T11564] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1825.051823][T11564] usb 2-1: Using ep0 maxpacket: 32 [ 1825.063691][T11564] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.063978][T11564] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.072119][T11564] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1825.072445][T11564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.077751][T11564] usb 2-1: config 0 descriptor?? [ 1825.097374][T11564] hub 2-1:0.0: USB hub found [ 1825.304009][T11564] hub 2-1:0.0: 1 port detected [ 1826.071907][ T55] hub 2-1:0.0: activate --> -90 [ 1826.488540][ T9680] usb 2-1: USB disconnect, device number 26 [ 1826.707118][T10183] usb 2-1-port1: config error [ 1827.715530][T12173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12173 comm=syz.1.2508 [ 1827.739489][T12173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=12173 comm=syz.1.2508 [ 1830.176860][T12175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12175 comm=syz.1.2509 [ 1832.281943][T12023] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1832.447672][T12023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.449199][T12023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.450624][T12023] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1832.452998][T12023] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1832.459528][T12023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.465098][T12023] usb 2-1: config 0 descriptor?? [ 1832.976075][T12023] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1834.141846][T12178] usb 2-1: string descriptor 0 read error: -71 [ 1834.946056][ T8467] usb 2-1: USB disconnect, device number 27 [ 1837.502358][T12023] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1837.652072][T12023] usb 1-1: Using ep0 maxpacket: 8 [ 1837.664930][T12023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1837.665465][T12023] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1837.665871][T12023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.670277][T12023] usb 1-1: config 0 descriptor?? [ 1837.898888][T12023] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1843.891819][T11564] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1844.048360][T11564] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1844.048654][T11564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.056985][T11564] usb 2-1: config 0 descriptor?? [ 1844.069067][T11564] cp210x 2-1:0.0: cp210x converter detected [ 1844.483135][T11564] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1844.496599][T11564] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1844.692110][T11564] usb 2-1: USB disconnect, device number 28 [ 1844.705480][T11564] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1844.724775][T11564] cp210x 2-1:0.0: device disconnected [ 1848.116550][T10183] usb 1-1: USB disconnect, device number 23 [ 1848.257891][T12282] syzkaller0: entered promiscuous mode [ 1848.258547][T12282] syzkaller0: entered allmulticast mode [ 1848.492570][ T28] audit: type=1400 audit(2000001056.240:457): avc: denied { create } for pid=12287 comm="syz.0.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1851.292099][ T8467] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1851.441960][ T8467] usb 1-1: Using ep0 maxpacket: 16 [ 1851.460879][ T8467] usb 1-1: config 0 has no interfaces? [ 1851.478130][ T8467] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1851.478422][ T8467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.478656][ T8467] usb 1-1: Product: syz [ 1851.478849][ T8467] usb 1-1: Manufacturer: syz [ 1851.479003][ T8467] usb 1-1: SerialNumber: syz [ 1851.488346][ T8467] usb 1-1: config 0 descriptor?? [ 1851.700481][T12306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2527'. [ 1851.714056][ T8467] usb 1-1: USB disconnect, device number 24 [ 1853.412052][T10183] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1853.585790][T10183] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1853.586140][T10183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.595675][T10183] usb 2-1: config 0 descriptor?? [ 1853.603137][T10183] cp210x 2-1:0.0: cp210x converter detected [ 1854.036536][T10183] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1854.038111][T10183] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1854.038497][T10183] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1854.053824][T10183] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1854.063270][T10183] usb 2-1: USB disconnect, device number 29 [ 1854.073369][T10183] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1854.074113][T10183] cp210x 2-1:0.0: device disconnected [ 1854.671856][T10183] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1854.993812][T10183] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1854.994181][T10183] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1854.994294][T10183] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1854.994367][T10183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.033040][T12372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1855.093953][T10183] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1855.575674][T11564] usb 2-1: USB disconnect, device number 30 [ 1865.321856][ T28] audit: type=1400 audit(2000001073.060:458): avc: denied { bind } for pid=12417 comm="syz.0.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1865.332598][ T28] audit: type=1400 audit(2000001073.080:459): avc: denied { name_bind } for pid=12417 comm="syz.0.2538" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1865.363391][ T28] audit: type=1400 audit(2000001073.110:460): avc: denied { node_bind } for pid=12417 comm="syz.0.2538" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1879.528663][ T28] audit: type=1400 audit(2000001087.270:461): avc: denied { mount } for pid=12509 comm="syz.1.2545" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1879.544728][ T28] audit: type=1400 audit(2000001087.290:462): avc: denied { mounton } for pid=12509 comm="syz.1.2545" path="/34/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1879.567671][ T28] audit: type=1400 audit(2000001087.310:463): avc: denied { unmount } for pid=11145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1884.487724][ T28] audit: type=1400 audit(2000001092.230:464): avc: denied { mount } for pid=12542 comm="syz.0.2559" name="/" dev="ramfs" ino=29046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1885.988389][ T28] audit: type=1400 audit(2000001093.730:465): avc: denied { unmount } for pid=11145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1893.782010][T12586] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1893.961012][T12586] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.962763][T12586] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1894.005827][T12586] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1894.007767][T12586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1894.008896][T12586] usb 2-1: SerialNumber: syz [ 1894.252021][T12586] usb 2-1: 0:2 : does not exist [ 1894.314650][T12586] usb 2-1: USB disconnect, device number 31 [ 1895.919877][ T28] audit: type=1400 audit(2000001103.660:466): avc: denied { map } for pid=12632 comm="syz.1.2580" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1896.713935][T12586] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1896.871998][T12586] usb 2-1: Using ep0 maxpacket: 16 [ 1896.904881][T12586] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1896.906200][T12586] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.907592][T12586] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1896.916791][T12586] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1896.917380][T12586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.918277][T12586] usb 2-1: Product: syz [ 1896.918881][T12586] usb 2-1: Manufacturer: syz [ 1896.919582][T12586] usb 2-1: SerialNumber: syz [ 1897.386442][T12586] usb 2-1: 0:2 : does not exist [ 1898.032929][T12586] usb 2-1: USB disconnect, device number 32 [ 1904.772995][T12023] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1904.933821][T12023] usb 1-1: Using ep0 maxpacket: 16 [ 1904.959470][T12023] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.959871][T12023] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1905.014778][T12023] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1905.015141][T12023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.015411][T12023] usb 1-1: Product: syz [ 1905.015463][T12023] usb 1-1: Manufacturer: syz [ 1905.015492][T12023] usb 1-1: SerialNumber: syz [ 1905.498032][T12023] usb 1-1: cannot find UAC_HEADER [ 1905.537155][T12023] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1905.547307][T12023] usb 1-1: USB disconnect, device number 25 [ 1907.632292][T12023] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1907.822079][T12023] usb 1-1: Using ep0 maxpacket: 16 [ 1907.850759][T12023] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.851523][T12023] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1907.904929][T12023] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1907.905283][T12023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.905610][T12023] usb 1-1: Product: syz [ 1907.905666][T12023] usb 1-1: Manufacturer: syz [ 1907.905696][T12023] usb 1-1: SerialNumber: syz [ 1908.150924][T12023] usb 1-1: 0:2 : does not exist [ 1908.157640][T12023] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1908.192962][T12023] usb 1-1: USB disconnect, device number 26 [ 1910.553035][T12023] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1910.702192][T12023] usb 2-1: Using ep0 maxpacket: 8 [ 1910.716657][T12023] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 1910.716949][T12023] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 1910.717342][T12023] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1910.717736][T12023] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1910.734078][T12023] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1910.734420][T12023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1910.734930][T12023] usb 2-1: SerialNumber: syz [ 1910.749544][T12769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1910.756708][T12769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1910.966556][T12769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1910.983453][T12769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1911.461834][T12023] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1913.422418][T11564] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1913.584003][T11564] usb 1-1: Using ep0 maxpacket: 32 [ 1913.593318][T11564] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1913.593664][T11564] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1913.594082][T11564] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1913.594284][T11564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1913.594440][T11564] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1913.594659][T11564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1913.594823][T11564] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1913.595024][T11564] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1913.595179][T11564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.622023][T11564] usb 1-1: config 0 descriptor?? [ 1913.732098][ C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 7c! [ 1913.848123][T11564] usb 1-1: USB disconnect, device number 27 [ 1914.377031][T11564] usb 2-1: USB disconnect, device number 33 [ 1914.379553][T11564] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1914.832837][T10183] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1915.162434][T10183] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1915.261908][T10183] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1915.262262][T10183] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1915.262337][T10183] usb 1-1: Product: syz [ 1915.262365][T10183] usb 1-1: SerialNumber: syz [ 1916.509106][T10183] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1916.512012][T10183] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1916.535182][T10183] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1916.725027][T10615] usb 1-1: USB disconnect, device number 28 [ 1916.726542][T10615] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1917.473960][T12853] syzkaller0: entered promiscuous mode [ 1917.474309][T12853] syzkaller0: entered allmulticast mode [ 1917.554274][T12853] syzkaller0: tun_net_xmit 1 [ 1918.723883][T12863] syzkaller0: entered promiscuous mode [ 1918.731936][T12863] syzkaller0: entered allmulticast mode [ 1920.266634][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1921.628512][T12880] syzkaller0: entered promiscuous mode [ 1921.634139][T12880] syzkaller0: entered allmulticast mode [ 1924.206918][T12023] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1924.382927][T12023] usb 1-1: Using ep0 maxpacket: 16 [ 1924.455714][T12023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.456668][T12023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1924.458053][T12023] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1924.458463][T12023] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1924.458642][T12023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.464493][T12023] usb 1-1: config 0 descriptor?? [ 1925.034735][T12023] microsoft 0003:045E:07DA.000D: unbalanced collection at end of report description [ 1925.037796][T12023] microsoft 0003:045E:07DA.000D: parse failed [ 1925.038822][T12023] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22 [ 1925.222715][T11564] usb 1-1: USB disconnect, device number 29 [ 1925.740728][T12911] syzkaller0: entered promiscuous mode [ 1925.743502][T12911] syzkaller0: entered allmulticast mode [ 1927.370646][ T8467] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 1927.544118][ T8467] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1927.544474][ T8467] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1927.547765][ T8467] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1927.608960][ T8467] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.40 [ 1927.609290][ T8467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.609602][ T8467] usb 1-1: Manufacturer: 䤤쵉ᦄㅧ䶷䃩矧鈘싁פּ桋웅᪜蔄⠴ⱝ眭认⧸⏥럗ﳙ吏㧦ꁤ泺鐋⎋쎠甘売ᔜ򮦷檐粸䐞ᠳ뱺嗌瀈烜ꙹ뢢␃䮎쨛ⴏԻ楷ꛝ [ 1927.634111][T12923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1927.884971][ T8467] usbhid 1-1:1.0: can't add hid device: -71 [ 1927.885804][ T8467] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1927.900866][ T8467] usb 1-1: USB disconnect, device number 30 [ 1928.145668][T12939] syzkaller0: entered promiscuous mode [ 1928.146088][T12939] syzkaller0: entered allmulticast mode [ 1933.246931][T12956] syzkaller0: entered promiscuous mode [ 1933.247323][T12956] syzkaller0: entered allmulticast mode [ 1944.961016][ T28] audit: type=1400 audit(2000001152.700:467): avc: denied { watch } for pid=12971 comm="syz.1.2633" path="/75" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1945.238072][T12976] syzkaller0: entered promiscuous mode [ 1945.241935][T12976] syzkaller0: entered allmulticast mode [ 1948.637180][T12990] syzkaller0: entered promiscuous mode [ 1948.643956][T12990] syzkaller0: entered allmulticast mode [ 1951.162239][ T8467] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1951.322505][ T8467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.323752][ T8467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1951.327264][ T8467] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1951.330833][ T8467] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1951.333572][ T8467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.340272][ T8467] usb 2-1: config 0 descriptor?? [ 1951.785195][ T8467] hid_parser_main: 194 callbacks suppressed [ 1951.789054][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.790191][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.794363][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.797309][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.800940][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.804883][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.807751][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.812469][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.815547][ T8467] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1951.825900][ T8467] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1953.058561][T10615] usb 2-1: USB disconnect, device number 34 [ 1953.062186][T13002] usb 2-1: string descriptor 0 read error: -71 [ 1953.271949][T13028] syzkaller0: entered promiscuous mode [ 1953.272267][T13028] syzkaller0: entered allmulticast mode [ 1953.932500][T10615] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1954.091836][T10615] usb 2-1: Using ep0 maxpacket: 8 [ 1954.104842][T10615] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1954.105161][T10615] usb 2-1: config 179 has no interface number 0 [ 1954.105445][T10615] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1954.105543][T10615] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1954.105599][T10615] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1954.105644][T10615] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1954.105719][T10615] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1954.105808][T10615] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1954.105845][T10615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.130524][T13040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1961.012920][ T28] audit: type=1400 audit(2000001168.760:468): avc: denied { map } for pid=13039 comm="syz.1.2647" path="socket:[29446]" dev="sockfs" ino=29446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1961.013851][ T28] audit: type=1400 audit(2000001168.760:469): avc: denied { accept } for pid=13039 comm="syz.1.2647" path="socket:[29446]" dev="sockfs" ino=29446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1961.064258][T10615] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input21 [ 1968.767921][ T8467] usb 2-1: USB disconnect, device number 35 [ 1968.769589][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1968.769761][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1972.887193][T13072] syzkaller0: entered promiscuous mode [ 1972.891721][T13072] syzkaller0: entered allmulticast mode [ 1973.762220][ T8467] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1973.931955][ T8467] usb 2-1: Using ep0 maxpacket: 8 [ 1973.940062][ T8467] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1973.946903][ T8467] usb 2-1: config 179 has no interface number 0 [ 1973.947910][ T8467] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1973.948955][ T8467] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1973.950140][ T8467] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1973.952247][ T8467] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1973.953620][ T8467] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1973.954829][ T8467] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1973.955913][ T8467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.964625][T13082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1974.220295][ T8467] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input22 [ 1974.476994][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1974.477035][ T8464] usb 2-1: USB disconnect, device number 36 [ 1974.477498][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1975.717937][T13115] syzkaller0: entered promiscuous mode [ 1975.742638][T13115] syzkaller0: entered allmulticast mode [ 1982.058883][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1982.078047][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1985.538851][T13109] hsr_slave_0: entered promiscuous mode [ 1985.544364][T13109] hsr_slave_1: entered promiscuous mode [ 1985.546583][T13109] debugfs: 'hsr0' already exists in 'hsr' [ 1985.549820][T13109] Cannot create hsr debugfs directory [ 1985.888954][T13109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1985.902811][T13109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1985.910967][T13109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1985.926213][T13109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1986.748741][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1989.600484][T13109] veth0_vlan: entered promiscuous mode [ 1989.622451][T13109] veth1_vlan: entered promiscuous mode [ 1989.720842][T13109] veth0_macvtap: entered promiscuous mode [ 1989.732541][T13109] veth1_macvtap: entered promiscuous mode [ 1989.877006][T11602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.878592][T11602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.879191][T11602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.879497][T11602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.096066][ T28] audit: type=1400 audit(2000001197.830:470): avc: denied { mount } for pid=13109 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1990.998926][T13434] netlink: 'syz.1.2660': attribute type 10 has an invalid length. [ 1994.016875][ T28] audit: type=1400 audit(2000001201.760:471): avc: denied { bind } for pid=13450 comm="syz.1.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1995.943998][ T28] audit: type=1400 audit(2000001203.690:472): avc: denied { setopt } for pid=13457 comm="syz.2.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1997.692988][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1999.564559][T11147] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.566549][T11147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.575976][T11147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.578819][T11147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.100419][ T28] audit: type=1400 audit(2000001207.840:473): avc: denied { connect } for pid=13474 comm="syz.1.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2001.212306][T13480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2678'. [ 2009.707282][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.713630][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.532248][ T28] audit: type=1400 audit(2000001218.330:474): avc: denied { execmem } for pid=13549 comm="syz.2.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2025.497791][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 2025.598836][T13588] bond1: entered promiscuous mode [ 2025.600118][T13588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2025.673238][T13588] macvlan2: entered promiscuous mode [ 2025.673495][T13588] macvlan2: entered allmulticast mode [ 2025.674768][T13588] bond1: (slave macvlan2): Opening slave failed [ 2029.351617][ T28] audit: type=1400 audit(2000001237.090:475): avc: denied { mount } for pid=13652 comm="syz.1.2721" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2029.375982][ T28] audit: type=1400 audit(2000001237.120:476): avc: denied { search } for pid=13652 comm="syz.1.2721" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2029.385970][ T28] audit: type=1400 audit(2000001237.130:477): avc: denied { search } for pid=13652 comm="syz.1.2721" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2029.392791][ T28] audit: type=1400 audit(2000001237.140:478): avc: denied { read open } for pid=13652 comm="syz.1.2721" path="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2029.851899][ T8467] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2030.027394][ T28] audit: type=1400 audit(2000001237.770:479): avc: denied { sqpoll } for pid=13659 comm="syz.2.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2030.043863][ T8467] usb 2-1: Using ep0 maxpacket: 8 [ 2030.074880][ T8467] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2030.075153][ T8467] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.075418][ T8467] usb 2-1: config 179 has no interface number 0 [ 2030.075788][ T8467] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2030.075971][ T8467] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2030.076146][ T8467] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2030.076440][ T8467] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2030.076606][ T8467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.094651][T13655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2030.301747][T10183] usb 2-1: USB disconnect, device number 37 [ 2031.819367][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.968150][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.048189][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.154579][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.675353][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2032.694637][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2032.705971][ T55] bond0 (unregistering): Released all slaves [ 2032.863059][ T55] hsr_slave_0: left promiscuous mode [ 2032.872368][ T55] hsr_slave_1: left promiscuous mode [ 2032.883187][ T55] veth1_macvtap: left promiscuous mode [ 2032.883579][ T55] veth0_macvtap: left promiscuous mode [ 2032.883876][ T55] veth1_vlan: left promiscuous mode [ 2032.884093][ T55] veth0_vlan: left promiscuous mode [ 2054.834017][T11564] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2055.024651][T11564] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2055.024953][T11564] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2055.033812][T11564] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2055.034114][T11564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.034389][T11564] usb 2-1: Product: syz [ 2055.034542][T11564] usb 2-1: Manufacturer: syz [ 2055.034689][T11564] usb 2-1: SerialNumber: syz [ 2055.044715][T11564] usb 2-1: config 0 descriptor?? [ 2055.049008][T13777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2055.049813][T13777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2055.263055][T13777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2055.264260][T13777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2055.480516][T11564] Error reading MAC address [ 2055.492742][T11564] usb 2-1: USB disconnect, device number 38 [ 2059.331894][T11564] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2059.502046][T11564] usb 2-1: Using ep0 maxpacket: 16 [ 2059.514839][T11564] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 2059.536334][T11564] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2059.536644][T11564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.536930][T11564] usb 2-1: Product: syz [ 2059.536983][T11564] usb 2-1: Manufacturer: syz [ 2059.537011][T11564] usb 2-1: SerialNumber: syz [ 2059.574226][T11564] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2059.574628][T11564] r8152-cfgselector 2-1: config 0 descriptor?? [ 2059.833208][T11564] r8152-cfgselector 2-1: Needed 2 retries to read version [ 2060.044849][T11564] r8152-cfgselector 2-1: USB disconnect, device number 39 [ 2063.192034][T12023] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2063.342329][T12023] usb 2-1: Using ep0 maxpacket: 8 [ 2063.377555][T12023] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2063.399486][T12023] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.399848][T12023] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 2063.400134][T12023] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2063.449041][T12023] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 2063.450653][T12023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.452251][T12023] usb 2-1: Product: syz [ 2063.454149][T12023] usb 2-1: Manufacturer: syz [ 2063.455410][T12023] usb 2-1: SerialNumber: syz [ 2063.697594][T12023] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2063.714837][T12023] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2063.789878][T12023] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2063.803205][T12023] usb 2-1: USB disconnect, device number 40 [ 2066.481623][T11564] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2066.645935][T11564] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.646314][T11564] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.648627][T11564] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2066.649028][T11564] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2066.649096][T11564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.663568][T11564] usb 2-1: config 0 descriptor?? [ 2067.084938][T11564] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x1 [ 2067.085594][T11564] kovaplus 0003:1E7D:2D50.000F: item fetching failed at offset 3/5 [ 2067.086784][T11564] kovaplus 0003:1E7D:2D50.000F: parse failed [ 2067.089190][T11564] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -22 [ 2067.452324][ T28] audit: type=1400 audit(2000001275.190:480): avc: denied { bind } for pid=13892 comm="syz.1.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2067.466358][ T28] audit: type=1400 audit(2000001275.210:481): avc: denied { name_bind } for pid=13892 comm="syz.1.2755" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2067.466765][ T28] audit: type=1400 audit(2000001275.210:482): avc: denied { node_bind } for pid=13892 comm="syz.1.2755" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2067.474074][T10183] usb 2-1: USB disconnect, device number 41 [ 2072.831862][ T8468] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 2072.989673][ T8468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2072.990011][ T8468] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2072.993199][ T8468] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 2072.993283][ T8468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.000532][ T8468] usb 2-1: config 0 descriptor?? [ 2073.454745][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.455258][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.458291][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.458747][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.458924][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.459034][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.459163][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.459274][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.459378][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.459515][ T8468] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 2073.474067][ T8468] lg-g15 0003:046D:C22E.0010: hidraw0: USB HID v0.00 Device [HID 046d:c22e] on usb-dummy_hcd.1-1/input0 [ 2073.653837][T12023] usb 2-1: USB disconnect, device number 42 [ 2074.573501][T13956] syzkaller0: entered promiscuous mode [ 2074.573833][T13956] syzkaller0: entered allmulticast mode [ 2075.074062][T13962] 8<--- cut here --- [ 2075.075355][T13962] Unable to handle kernel paging request at virtual address fee04f27 when write [ 2075.076645][T13962] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 2075.118038][T13962] Internal error: Oops: a06 [#1] SMP ARM [ 2075.123056][T13962] Modules linked in: [ 2075.123693][T13962] CPU: 1 UID: 0 PID: 13962 Comm: syz.1.2767 Tainted: G L syzkaller #0 PREEMPT [ 2075.124692][T13962] Tainted: [L]=SOFTLOCKUP [ 2075.124980][T13962] Hardware name: ARM-Versatile Express [ 2075.125517][T13962] PC is at parport_attach+0x174/0x1d0 [ 2075.125952][T13962] LR is at parport_attach+0x164/0x1d0 [ 2075.126448][T13962] pc : [<81433874>] lr : [<81433864>] psr: 60000013 [ 2075.126844][T13962] sp : dfa35d30 ip : dfa35d30 fp : dfa35d54 [ 2075.127562][T13962] r10: 82b2f064 r9 : 00000003 r8 : 8337e6c0 [ 2075.128075][T13962] r7 : dfa35d90 r6 : 8337e6c0 r5 : 00000000 r4 : 00000000 [ 2075.128701][T13962] r3 : fee04f27 r2 : 81e24a18 r1 : 00000001 r0 : 814334e4 [ 2075.131254][T13962] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 2075.131892][T13962] Control: 30c5387d Table: 85477900 DAC: 00000000 [ 2075.132653][T13962] Register r0 information: non-slab/vmalloc memory [ 2075.133971][T13962] Register r1 information: non-paged memory [ 2075.136627][T13962] Register r2 information: non-slab/vmalloc memory [ 2075.141214][T13962] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 2075.142206][T13962] Register r4 information: NULL pointer [ 2075.142716][T13962] Register r5 information: NULL pointer [ 2075.143174][T13962] Register r6 information: slab kmalloc-192 start 8337e6c0 pointer offset 0 size 192 [ 2075.144762][T13962] Register r7 information: 2-page vmalloc region starting at 0xdfa34000 allocated at kernel_clone+0xac/0x428 [ 2075.145881][T13962] Register r8 information: slab kmalloc-192 start 8337e6c0 pointer offset 0 size 192 [ 2075.151135][T13962] Register r9 information: non-paged memory [ 2075.151795][T13962] Register r10 information: non-slab/vmalloc memory [ 2075.152224][T13962] Register r11 information: 2-page vmalloc region starting at 0xdfa34000 allocated at kernel_clone+0xac/0x428 [ 2075.153358][T13962] Register r12 information: 2-page vmalloc region starting at 0xdfa34000 allocated at kernel_clone+0xac/0x428 [ 2075.154548][T13962] Process syz.1.2767 (pid: 13962, stack limit = 0xdfa34000) [ 2075.155070][T13962] Stack: (0xdfa35d30 to 0xdfa36000) [ 2075.156108][T13962] 5d20: dfa35d4c dfa35d40 829d6700 829d6700 [ 2075.160304][T13962] 5d40: 81e24ed8 00000000 dfa35d8c dfa35d58 8142f3ec 8143370c 40946400 00000000 [ 2075.161774][T13962] 5d60: dfa35d7c 200000c0 8337e6c0 b5403587 40946400 00000003 00000003 85183c00 [ 2075.162402][T13962] 5d80: dfa35e4c dfa35d90 8142abf8 8142f2ec 656d6f63 705f6964 6f707261 00007472 [ 2075.163276][T13962] 5da0: 00000000 00004f27 00000000 0000fffe 00000004 00000003 00000cc7 00000004 [ 2075.163927][T13962] 5dc0: 00080008 0000000e 00000006 00000002 00000001 00000007 00000001 00000006 [ 2075.164540][T13962] 5de0: 10000103 00000000 0001a44d 00000003 3fff7fff 00000089 00000010 00000000 [ 2075.165674][T13962] 5e00: 20001e58 00000007 00000e69 0000003c 00000008 0000000a ffffffff effffff8 [ 2075.166293][T13962] 5e20: 00000000 5e905d13 00000000 862d3600 8337e6c0 200000c0 40946400 00000003 [ 2075.166852][T13962] 5e40: dfa35f14 dfa35e50 8142bf1c 8142ab30 00000000 5e905d13 00000000 00000000 [ 2075.167550][T13962] 5e60: 824b857c dfa35ea4 0000005f 841a6e20 00000064 8337e6f0 dfa35ee4 dfa35e88 [ 2075.168321][T13962] 5e80: 807cf0d0 807c54a8 00000064 00000001 00000000 dfa35ea4 830e3310 834343b8 [ 2075.169109][T13962] 5ea0: 00006400 0000000b dfa35e98 00000000 00000000 5e905d13 00000000 862d3600 [ 2075.171178][T13962] 5ec0: 40946400 200000c0 200000c0 862d3600 00000003 85183c00 dfa35ef4 dfa35ee8 [ 2075.171609][T13962] 5ee0: 807cf200 5e905d13 dfa35f14 00000000 862d3601 40946400 200000c0 862d3600 [ 2075.172117][T13962] 5f00: 00000003 85183c00 dfa35fa4 dfa35f18 80590598 8142bbd4 ecac8b10 85183c00 [ 2075.172566][T13962] 5f20: dfa35f3c dfa35f30 81ae45f4 81ae44c0 dfa35f54 dfa35f40 8025a824 8028c290 [ 2075.173519][T13962] 5f40: dfa35fb0 40000000 dfa35f84 dfa35f58 80220bf8 8025a7e0 00000000 8281d2bc [ 2075.173879][T13962] 5f60: dfa35fb0 0013e480 ecac8b10 80220b4c 00000000 5e905d13 dfa35fac 00000000 [ 2075.174215][T13962] 5f80: 00000000 00346310 00000036 8020029c 85183c00 00000036 00000000 dfa35fa8 [ 2075.174548][T13962] 5fa0: 80200060 80590360 00000000 00000000 00000003 40946400 200000c0 00000000 [ 2075.174894][T13962] 5fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f410dc [ 2075.175221][T13962] 5fe0: 76f40e88 76f40e78 00018ba0 001302e0 60000010 00000003 00000000 00000000 [ 2075.175647][T13962] Call trace: [ 2075.175895][T13962] [<81433700>] (parport_attach) from [<8142f3ec>] (comedi_device_attach+0x10c/0x248) [ 2075.176311][T13962] r6:00000000 r5:81e24ed8 r4:829d6700 [ 2075.176526][T13962] [<8142f2e0>] (comedi_device_attach) from [<8142abf8>] (do_devconfig_ioctl+0xd4/0x21c) [ 2075.176908][T13962] r10:85183c00 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:8337e6c0 [ 2075.177213][T13962] r4:200000c0 [ 2075.177457][T13962] [<8142ab24>] (do_devconfig_ioctl) from [<8142bf1c>] (comedi_unlocked_ioctl+0x354/0x1dbc) [ 2075.177889][T13962] r8:00000003 r7:40946400 r6:200000c0 r5:8337e6c0 r4:862d3600 [ 2075.178186][T13962] [<8142bbc8>] (comedi_unlocked_ioctl) from [<80590598>] (sys_ioctl+0x244/0xb5c) [ 2075.178580][T13962] r10:85183c00 r9:00000003 r8:862d3600 r7:200000c0 r6:40946400 r5:862d3601 [ 2075.178903][T13962] r4:00000000 [ 2075.179082][T13962] [<80590354>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2075.179430][T13962] Exception stack(0xdfa35fa8 to 0xdfa35ff0) [ 2075.179685][T13962] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 2075.180039][T13962] 5fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f410dc [ 2075.180372][T13962] 5fe0: 76f40e88 76f40e78 00018ba0 001302e0 [ 2075.180625][T13962] r10:00000036 r9:85183c00 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 2075.180950][T13962] r4:00000000 [ 2075.181718][T13962] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 2075.192394][T13962] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2075.204195][T13962] Kernel panic - not syncing: Fatal exception [ 2075.206638][T13962] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:19:45 Registers: info registers vcpu 0 CPU#0 R00=dddd1400 R01=5b705000 R02=003cd18f R03=81ae4ec0 R04=00000006 R05=828f8388 R06=8280c82c R07=828f8380 R08=833c5400 R09=828f8388 R10=00000000 R11=ebe99e44 R12=ebe99e48 R13=ebe99e38 R14=803418c0 R15=81ae4ed0 PSR=600b0193 -ZC- A S svc32 s00=77203732 s01=206e6568 d00=206e656877203732 s02=33353730 s03=5b5d3535 d01=5b5d353533353730 s04=39333154 s05=205d3236 d02=205d323639333154 s06=62616e55 s07=7420656c d03=7420656c62616e55 s08=6168206f s09=656c646e d04=656c646e6168206f s10=72656b20 s11=206c656e d05=206c656e72656b20 s12=69676170 s13=7220676e d06=7220676e69676170 s14=65757165 s15=61207473 d07=6120747365757165 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=0000005f R01=0000005f R02=84d19d80 R03=83390e88 R04=84d9f000 R05=845e4580 R06=824b857c R07=00000002 R08=835d0300 R09=0000000c R10=0000005f R11=df969e54 R12=df969e58 R13=df969e10 R14=807cfd14 R15=807c641c PSR=60000193 -ZC- A S svc32 s00=c8030804 s01=0002000b d00=0002000bc8030804 s02=000bd003 s03=d4032404 d01=d4032404000bd003 s04=08001388 s05=180301b0 d02=180301b008001388 s06=03020800 s07=00080020 d03=0008002003020800 s08=08002803 s09=00300300 d04=0030030008002803 s10=80818608 s11=58f004c0 d05=58f004c080818608 s12=08060601 s13=01000000 d06=0100000008060601 s14=08000002 s15=00000100 d07=0000010008000002 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=0c98030a s33=03040200 d16=030402000c98030a s34=04000ca0 s35=0ca4030a d17=0ca4030a04000ca0 s36=03020400 s37=02000ca8 d18=02000ca803020400 s38=1388030c s39=01b00800 d19=01b008001388030c s40=08001803 s41=00200302 d20=0020030208001803 s42=28030008 s43=03000800 d21=0300080028030008 s44=86080030 s45=04c08081 d22=04c0808186080030 s46=060158f0 s47=00000806 d23=00000806060158f0 s48=192dd34c s49=0603b5bd d24=0603b5bd192dd34c s50=96bbe8d9 s51=4aaaf8d9 d25=4aaaf8d996bbe8d9 s52=8520f3a1 s53=40e55b7e d26=40e55b7e8520f3a1 s54=959cb6bf s55=8f0988c0 d27=8f0988c0959cb6bf s56=d028d6b7 s57=1959183e d28=1959183ed028d6b7 s58=855903a4 s59=14651bfe d29=14651bfe855903a4 s60=e240fbed s61=f65143cc d30=f65143cce240fbed s62=cc6a1639 s63=93a94642 d31=93a94642cc6a1639 FPSCR: 00000000