last executing test programs: 3m21.199843865s ago: executing program 1 (id=573): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004700)={0x50, 0x0, r1, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004780)="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", 0x2000, &(0x7f0000006780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006840)={0x90, 0x0, 0x4, {0x4, 0x3, 0x0, 0x7e34, 0xf, 0x0, {0x0, 0xfffff7fffffffff7, 0x4b6, 0x1, 0x9, 0x1, 0x1, 0x200, 0x0, 0xa000, 0xf8, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000006900)='./file0/../file0/file0\x00', &(0x7f0000006940)='./file0/../file0/file0\x00') 3m21.099812456s ago: executing program 1 (id=574): r0 = socket(0x840000000002, 0x3, 0x8) setsockopt$inet_buf(r0, 0x0, 0x24, 0x0, 0x55) 3m21.020087815s ago: executing program 1 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x1}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x0) 3m20.929073926s ago: executing program 1 (id=576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket(0xa, 0x3, 0x3a) r1 = mq_open(&(0x7f0000000340)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f00000005c0)={0x0, 0x1, 0x3}) mq_timedreceive(r1, &(0x7f0000000600)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 3m19.790011635s ago: executing program 1 (id=577): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m19.105488533s ago: executing program 1 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) 2m33.297994194s ago: executing program 32 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) 12.469217717s ago: executing program 0 (id=850): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x201, 0x0, 0x0, @by_dev, {0x97, 0x20, 0x9a, 0x20, 0xf, 0x20, 0x1889}}) 12.359861059s ago: executing program 0 (id=851): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 9.731390007s ago: executing program 2 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) 9.101160508s ago: executing program 2 (id=863): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20048840) 8.691535505s ago: executing program 2 (id=864): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) getpid() r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a80)={0x1, 0x0, [{0xb8269c70b7b4d7a4, 0x1000, &(0x7f00000008c0)=""/4096}]}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 7.820233264s ago: executing program 2 (id=865): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_SET_GEOMETRY(0xffffffffffffffff, 0xc138fd0f, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x201, 0x0, 0x0, @by_dev={r0}, {0x97, 0x20, 0x9a, 0x20, 0xf, 0x20, 0x1889}}) 7.340179928s ago: executing program 2 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000000010800074000000001"], 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 6.79573973s ago: executing program 2 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x9, &(0x7f0000000ac0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x18}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x0, 0xe, 0x0, &(0x7f0000000c00)="11223344556677889900aabbccdd", 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ecm(0x0, 0x61, 0x0, 0x0) 610.461531ms ago: executing program 0 (id=868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20048840) 340.249572ms ago: executing program 0 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@typed={0x6, 0x167, 0x0, 0x0, @str='$\x00'}]}, 0x1c}}, 0x0) 130.779735ms ago: executing program 0 (id=870): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_SET_GEOMETRY(0xffffffffffffffff, 0xc138fd0f, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x201, 0x0, 0x0, @by_dev={r0}, {0x97, 0x20, 0x9a, 0x20, 0xf, 0x20, 0x1889}}) 0s ago: executing program 0 (id=871): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x2000, 0x10001, 0x4, 0x9b8, 0xffff, 0x2, 0xc6b9, 0x6, 0x54c6cff3, 0xfa, 0xffffffff, 0x3, 0xfbfffff3, 0x400001, 0x10000003, 0x401, 0x0, 0x7f, 0x3, 0x40000003, 0x20008d, 0x4, 0x7, 0x20001e5b, 0x1, 0xe6c, 0xffffffff, 0x7, 0x4006, 0x8a]}) kernel console output (not intermixed with test programs): or -90 [ 266.007188][ T24] usb 1-1: USB disconnect, device number 15 [ 270.191665][ T3744] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 270.344364][ T3744] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 270.347901][ T3744] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.348017][ T3744] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 270.348109][ T3744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.578915][ T3744] rtsx_usb 1-1:1.0: probe with driver rtsx_usb failed with error -71 [ 270.588908][ T3744] usb 1-1: USB disconnect, device number 16 [ 270.680631][ T4796] FAULT_INJECTION: forcing a failure. [ 270.680631][ T4796] name failslab, interval 1, probability 0, space 0, times 0 [ 270.680790][ T4796] CPU: 0 UID: 0 PID: 4796 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT [ 270.680921][ T4796] Hardware name: ARM-Versatile Express [ 270.680949][ T4796] Call trace: [ 270.680994][ T4796] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 270.681108][ T4796] r7:60000013 r6:60000013 r5:82542868 r4:00000000 [ 270.681127][ T4796] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 270.681208][ T4796] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 270.681326][ T4796] r7:86400cc0 r6:00000000 r5:86400cc0 r4:83516624 [ 270.681345][ T4796] [<8021f5fc>] (dump_stack) from [<80a5f9c0>] (should_fail_ex+0x1c0/0x220) [ 270.681401][ T4796] [<80a5f800>] (should_fail_ex) from [<8059bf4c>] (should_failslab+0x6c/0x94) [ 270.681470][ T4796] r8:00000000 r7:86400cc0 r6:83c01240 r5:00000dc0 r4:00000018 [ 270.681604][ T4796] [<8059bee0>] (should_failslab) from [<80579864>] (__kmalloc_noprof+0xa8/0x3c8) [ 270.681664][ T4796] [<805797bc>] (__kmalloc_noprof) from [<8083cd5c>] (lsm_blob_alloc+0x28/0x3c) [ 270.681740][ T4796] r10:8383f05c r9:00000800 r8:84462c00 r7:00000dc0 r6:00000002 r5:86a4b800 [ 270.681760][ T4796] r4:86a4ba04 [ 270.681774][ T4796] [<8083cd34>] (lsm_blob_alloc) from [<8084efac>] (security_sk_alloc+0x2c/0x21c) [ 270.681833][ T4796] r5:86a4b800 r4:86a4b800 [ 270.681848][ T4796] [<8084ef80>] (security_sk_alloc) from [<816d3458>] (sk_prot_alloc+0x70/0x108) [ 270.681912][ T4796] r7:00000002 r6:00000dc0 r5:835f856c r4:86a4b800 [ 270.681929][ T4796] [<816d33e8>] (sk_prot_alloc) from [<816d690c>] (sk_alloc+0x30/0x308) [ 270.681992][ T4796] r9:00000002 r8:00000cc0 r7:00000001 r6:835f856c r5:87215000 r4:835f856c [ 270.682008][ T4796] [<816d68dc>] (sk_alloc) from [<8192e290>] (inet_create+0x100/0x398) [ 270.682080][ T4796] r9:00000001 r8:00000006 r7:87215000 r6:861362c0 r5:00000006 r4:835f856c [ 270.682097][ T4796] [<8192e190>] (inet_create) from [<816ce1b4>] (__sock_create+0xfc/0x22c) [ 270.682170][ T4796] r10:820981fc r9:87215000 r8:861362c0 r7:00000006 r6:8192e190 r5:00000001 [ 270.682189][ T4796] r4:00000002 [ 270.682203][ T4796] [<816ce0b8>] (__sock_create) from [<816ce34c>] (sock_create_kern+0x24/0x2c) [ 270.682269][ T4796] r10:00000000 r9:00000000 r8:00000006 r7:00000000 r6:dfa01dc0 r5:8735a580 [ 270.682289][ T4796] r4:8735a580 [ 270.682303][ T4796] [<816ce328>] (sock_create_kern) from [<81bbf3d8>] (mptcp_subflow_create_socket+0x54/0x2a0) [ 270.682364][ T4796] [<81bbf384>] (mptcp_subflow_create_socket) from [<81baf64c>] (__mptcp_nmpc_sk.part.0+0x64/0x1cc) [ 270.682431][ T4796] r8:00000006 r7:00000000 r6:00000000 r5:0000001a r4:8735a580 [ 270.682448][ T4796] [<81baf5e8>] (__mptcp_nmpc_sk.part.0) from [<81bb23d4>] (__mptcp_nmpc_sk+0x24/0x30) [ 270.682510][ T4796] r7:00000000 r6:00000000 r5:0000001a r4:8735a580 [ 270.682527][ T4796] [<81bb23b0>] (__mptcp_nmpc_sk) from [<81bcc468>] (mptcp_getsockopt+0x544/0x598) [ 270.682590][ T4796] [<81bcbf24>] (mptcp_getsockopt) from [<816d3258>] (sock_common_getsockopt+0x28/0x30) [ 270.682658][ T4796] r9:00000000 r8:00000000 r7:816d3230 r6:0000001a r5:00000006 r4:81bcbf24 [ 270.682674][ T4796] [<816d3230>] (sock_common_getsockopt) from [<816d24e0>] (do_sock_getsockopt+0x13c/0x238) [ 270.682728][ T4796] r4:862936c0 [ 270.682744][ T4796] [<816d23a4>] (do_sock_getsockopt) from [<816d2670>] (__sys_getsockopt+0x94/0xdc) [ 270.682814][ T4796] r10:00000127 r9:86400cc0 r8:86de3e00 r7:dfa01f50 r6:0000001a r5:dfa01f58 [ 270.682835][ T4796] r4:86de3e01 [ 270.682850][ T4796] [<816d25dc>] (__sys_getsockopt) from [<816d26d4>] (sys_getsockopt+0x1c/0x24) [ 270.682918][ T4796] r8:8020029c r7:00000127 r6:00356318 r5:00000000 r4:00000000 [ 270.682934][ T4796] [<816d26b8>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 270.682984][ T4796] Exception stack(0xdfa01fa8 to 0xdfa01ff0) [ 270.683026][ T4796] 1fa0: 00000000 00000000 00000004 00000006 0000001a 00000000 [ 270.683062][ T4796] 1fc0: 00000000 00000000 00356318 00000127 003562d8 00000000 00000001 76f650dc [ 270.683090][ T4796] 1fe0: 76f64e88 76f64e78 00018ff8 001311f0 [ 272.969808][ T24] usb 2-1: USB disconnect, device number 23 [ 273.276990][ T29] audit: type=1400 audit(273.180:242): avc: denied { create } for pid=4816 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.285670][ T29] audit: type=1400 audit(273.180:243): avc: denied { getopt } for pid=4816 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.592531][ T4828] syzkaller1: entered promiscuous mode [ 273.592885][ T4828] syzkaller1: entered allmulticast mode [ 273.652424][ T3071] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 273.836629][ T3071] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 273.896568][ T3071] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.896716][ T3071] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.896772][ T3071] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.896861][ T3071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.133580][ T3071] usb 2-1: USB disconnect, device number 24 [ 274.272003][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 274.435064][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 274.488563][ T24] usb 1-1: New USB device found: idVendor=1235, idProduct=800c, bcdDevice=0.40 [ 274.679826][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.679938][ T24] usb 1-1: config 0 has no interfaces? [ 274.702993][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.703122][ T24] usb 1-1: Product: syz [ 274.703150][ T24] usb 1-1: Manufacturer: syz [ 274.703173][ T24] usb 1-1: SerialNumber: syz [ 274.726028][ T24] usb 1-1: config 0 descriptor?? [ 274.935248][ T3744] usb 1-1: USB disconnect, device number 17 [ 277.858857][ T44] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 278.051386][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 278.056968][ T44] usb 2-1: New USB device found: idVendor=1235, idProduct=800c, bcdDevice=0.40 [ 278.088812][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.090043][ T44] usb 2-1: config 0 has no interfaces? [ 278.138571][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.138716][ T44] usb 2-1: Product: syz [ 278.138747][ T44] usb 2-1: Manufacturer: syz [ 278.138771][ T44] usb 2-1: SerialNumber: syz [ 278.186520][ T44] usb 2-1: config 0 descriptor?? [ 278.397554][ T3071] usb 2-1: USB disconnect, device number 25 [ 278.841716][ T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 278.971825][ T44] usb 2-1: device descriptor read/64, error -71 [ 279.212726][ T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 279.342057][ T44] usb 2-1: device descriptor read/64, error -71 [ 279.452757][ T44] usb usb2-port1: attempt power cycle [ 279.801988][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 279.826766][ T44] usb 2-1: device descriptor read/8, error -71 [ 280.064812][ T44] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 280.120791][ T44] usb 2-1: device descriptor read/8, error -71 [ 280.244086][ T44] usb usb2-port1: unable to enumerate USB device [ 280.331975][ T4871] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 284.812073][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 284.966363][ T24] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 284.973100][ T24] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 284.973208][ T24] usb 1-1: config 0 has no interface number 0 [ 284.973266][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.989420][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.989548][ T24] usb 1-1: Product: syz [ 284.989584][ T24] usb 1-1: Manufacturer: syz [ 284.989611][ T24] usb 1-1: SerialNumber: syz [ 284.994063][ T24] usb 1-1: config 0 descriptor?? [ 285.019672][ T24] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 285.240042][ T3071] usb 1-1: USB disconnect, device number 18 [ 285.249815][ T3071] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 285.336285][ T29] audit: type=1400 audit(285.240:244): avc: denied { connect } for pid=4938 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.348131][ T29] audit: type=1400 audit(285.250:245): avc: denied { write } for pid=4938 comm="syz.0.231" path="socket:[3969]" dev="sockfs" ino=3969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 289.041528][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 289.191931][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 289.196120][ T24] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 289.206797][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.206911][ T24] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.206962][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 289.224109][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.224302][ T24] usb 2-1: Product: syz [ 289.224341][ T24] usb 2-1: Manufacturer: syz [ 289.224365][ T24] usb 2-1: SerialNumber: syz [ 289.228411][ T24] usb 2-1: config 0 descriptor?? [ 289.666230][ T24] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 289.666444][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 290.437551][ T29] audit: type=1400 audit(290.340:246): avc: denied { write } for pid=4970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.696596][ T29] audit: type=1400 audit(290.600:247): avc: denied { write } for pid=4973 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.301800][ T3744] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 294.451961][ T3744] usb 1-1: Using ep0 maxpacket: 16 [ 294.456445][ T3744] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 294.464226][ T3744] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.464360][ T3744] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.486340][ T3744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.486467][ T3744] usb 1-1: Product: syz [ 294.486498][ T3744] usb 1-1: Manufacturer: syz [ 294.486525][ T3744] usb 1-1: SerialNumber: syz [ 294.496938][ T3744] usb 1-1: config 0 descriptor?? [ 299.899026][ T3744] usb 2-1: USB disconnect, device number 30 [ 301.011690][ T3744] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 301.164722][ T3744] usb 2-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 301.168608][ T3744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.175487][ T3744] usb 2-1: config 0 descriptor?? [ 304.731783][ T44] usb 1-1: USB disconnect, device number 19 [ 305.202638][ T3744] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 305.351486][ T3744] usb 1-1: Using ep0 maxpacket: 8 [ 305.358840][ T3744] usb 1-1: unable to get BOS descriptor or descriptor too short [ 305.359052][ T3744] usb 1-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 305.364291][ T3744] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 305.364387][ T3744] usb 1-1: config 0 has no interface number 0 [ 305.364444][ T3744] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 305.364493][ T3744] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 305.364536][ T3744] usb 1-1: config 0 interface 88 has no altsetting 0 [ 305.379735][ T3744] usb 1-1: string descriptor 0 read error: -22 [ 305.379929][ T3744] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 305.384972][ T3744] usb 1-1: config 0 descriptor?? [ 305.396067][ T3744] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 305.609340][ T29] audit: type=1326 audit(305.510:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.0.249" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x0 [ 306.144344][ T3071] usb 1-1: USB disconnect, device number 20 [ 311.408347][ T3744] usb 2-1: USB disconnect, device number 31 [ 316.523198][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 316.691777][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 316.696615][ T44] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 316.723350][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.723468][ T44] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.743713][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.743831][ T44] usb 1-1: Product: syz [ 316.743863][ T44] usb 1-1: Manufacturer: syz [ 316.743888][ T44] usb 1-1: SerialNumber: syz [ 316.748899][ T44] usb 1-1: config 0 descriptor?? [ 319.679377][ T5074] fuse: Bad value for 'fd' [ 326.996083][ T3071] usb 1-1: USB disconnect, device number 21 [ 327.582714][ T5094] fuse: Bad value for 'fd' [ 328.929501][ T29] audit: type=1400 audit(328.830:249): avc: denied { setopt } for pid=5100 comm="syz.1.262" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.932934][ T5101] raw_sendmsg: syz.1.262 forgot to set AF_INET. Fix it! [ 329.861682][ T3071] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 330.023769][ T3071] usb 2-1: New USB device found: idVendor=0458, idProduct=7003, bcdDevice=0.00 [ 330.029742][ T3071] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 330.044204][ T3071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=32 [ 330.044362][ T3071] usb 2-1: SerialNumber: syz [ 336.009132][ T5121] fuse: Bad value for 'group_id' [ 336.009281][ T5121] fuse: Bad value for 'group_id' [ 336.507346][ T5132] fuse: Bad value for 'group_id' [ 336.507410][ T5132] fuse: Bad value for 'group_id' [ 340.290415][ T44] usb 2-1: USB disconnect, device number 32 [ 340.512890][ T5156] fuse: Bad value for 'group_id' [ 340.512993][ T5156] fuse: Bad value for 'group_id' [ 341.853254][ T5139] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 342.192488][ T29] audit: type=1400 audit(342.090:250): avc: denied { create } for pid=5164 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.204165][ T29] audit: type=1400 audit(342.110:251): avc: denied { setopt } for pid=5164 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.434621][ T29] audit: type=1400 audit(342.340:252): avc: denied { create } for pid=5166 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.453297][ T29] audit: type=1400 audit(342.360:253): avc: denied { bind } for pid=5166 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.478955][ T29] audit: type=1400 audit(342.380:254): avc: denied { setopt } for pid=5166 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.483190][ T29] audit: type=1400 audit(342.390:255): avc: denied { accept } for pid=5166 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.492930][ T29] audit: type=1400 audit(342.400:256): avc: denied { write } for pid=5166 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.512602][ T29] audit: type=1400 audit(342.420:257): avc: denied { read } for pid=5166 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.472091][ T3071] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 343.631774][ T3071] usb 1-1: Using ep0 maxpacket: 8 [ 343.636459][ T3071] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.685800][ T3071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.685928][ T3071] usb 1-1: Product: syz [ 343.685957][ T3071] usb 1-1: Manufacturer: syz [ 343.685981][ T3071] usb 1-1: SerialNumber: syz [ 343.694502][ T3071] usb 1-1: config 0 descriptor?? [ 347.970586][ T29] audit: type=1400 audit(347.870:258): avc: denied { sqpoll } for pid=5182 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 349.598400][ T29] audit: type=1400 audit(349.500:259): avc: denied { create } for pid=5193 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.112211][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 350.271874][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 350.274372][ T24] usb 2-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 350.279888][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.279989][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.280100][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 350.280202][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 350.280349][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.298729][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 350.298880][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 350.299879][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 350.299950][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 350.308479][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 350.851777][ T3071] usb 2-1: USB disconnect, device number 33 [ 351.016125][ T29] audit: type=1400 audit(350.920:260): avc: denied { ioctl } for pid=5217 comm="syz.1.293" path="socket:[4667]" dev="sockfs" ino=4667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 351.235399][ T29] audit: type=1400 audit(351.140:261): avc: denied { write } for pid=5217 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 351.330607][ T5222] fuse: Bad value for 'fd' [ 351.443409][ T29] audit: type=1326 audit(351.350:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.1.295" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 351.445115][ T29] audit: type=1326 audit(351.350:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.1.295" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 351.446038][ T29] audit: type=1326 audit(351.350:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.1.295" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 351.446517][ T29] audit: type=1326 audit(351.350:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.1.295" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 351.447168][ T29] audit: type=1326 audit(351.350:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.1.295" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 351.447643][ T29] audit: type=1326 audit(351.350:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.1.295" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x112ff8 code=0x7ffc0000 [ 353.979697][ T44] usb 1-1: USB disconnect, device number 22 [ 354.441643][ T3049] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 354.497877][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 354.497968][ T29] audit: type=1400 audit(354.400:288): avc: denied { unmount } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 354.596514][ T3049] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 354.640628][ T3049] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 354.640749][ T3049] usb 1-1: config 0 has no interface number 0 [ 354.640831][ T3049] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.685976][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.686100][ T3049] usb 1-1: Product: syz [ 354.686131][ T3049] usb 1-1: Manufacturer: syz [ 354.686154][ T3049] usb 1-1: SerialNumber: syz [ 354.694353][ T3049] usb 1-1: config 0 descriptor?? [ 354.803180][ T3049] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 355.073197][ T3071] usb 1-1: USB disconnect, device number 23 [ 355.209281][ T3071] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 355.752410][ T5262] fuse: Bad value for 'fd' [ 356.581702][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 356.853654][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 356.860704][ T24] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 356.869128][ T24] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 356.869251][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.869290][ T24] usb 1-1: config 0 has no interface number 0 [ 356.869574][ T24] usb 1-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.869682][ T24] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.996424][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.996547][ T24] usb 1-1: Product: syz [ 356.996579][ T24] usb 1-1: Manufacturer: syz [ 356.996606][ T24] usb 1-1: SerialNumber: syz [ 357.013039][ T24] usb 1-1: config 0 descriptor?? [ 357.154690][ T24] asix 1-1:0.34: probe with driver asix failed with error -22 [ 358.219362][ T5280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.305'. [ 358.308796][ T5280] ip6tnl1: entered allmulticast mode [ 358.492134][ T119] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.502553][ T119] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.502608][ T3049] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 359.212176][ T3071] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 359.292079][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.491857][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.235079][ T5290] fuse: Bad value for 'fd' [ 367.387435][ T3744] usb 1-1: USB disconnect, device number 24 [ 367.804798][ T3744] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 367.959171][ T3744] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 367.978037][ T3744] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.978161][ T3744] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.978196][ T3744] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.978254][ T3744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.978296][ T3744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.002618][ T3744] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.002723][ T3744] usb 1-1: Product: syz [ 368.002747][ T3744] usb 1-1: Manufacturer: syz [ 368.023301][ T3744] cdc_wdm 1-1:1.0: skipping garbage [ 368.023407][ T3744] cdc_wdm 1-1:1.0: skipping garbage [ 368.032101][ T3744] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 368.229193][ T3049] usb 1-1: USB disconnect, device number 25 [ 368.663002][ T3049] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 368.811594][ T3049] usb 1-1: Using ep0 maxpacket: 16 [ 368.814478][ T3049] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 368.827626][ T3049] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 368.827741][ T3049] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.827776][ T3049] usb 1-1: config 0 has no interface number 0 [ 368.827828][ T3049] usb 1-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.827872][ T3049] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.842528][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.842654][ T3049] usb 1-1: Product: syz [ 368.842683][ T3049] usb 1-1: Manufacturer: syz [ 368.842709][ T3049] usb 1-1: SerialNumber: syz [ 368.846319][ T3049] usb 1-1: config 0 descriptor?? [ 368.853678][ T3049] asix 1-1:0.34: probe with driver asix failed with error -22 [ 370.491868][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.071960][ T11] usb 1-1: USB disconnect, device number 26 [ 379.396745][ T5348] fuse: Unknown parameter 'grou00000000000000000000' [ 379.713245][ T3049] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 379.871799][ T3049] usb 1-1: Using ep0 maxpacket: 32 [ 379.874585][ T3049] usb 1-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 379.878458][ T3049] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 379.878575][ T3049] usb 1-1: config 0 has no interface number 0 [ 379.900633][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.900758][ T3049] usb 1-1: Product: syz [ 379.904759][ T3049] usb 1-1: Manufacturer: syz [ 379.904825][ T3049] usb 1-1: SerialNumber: syz [ 379.910159][ T3049] usb 1-1: config 0 descriptor?? [ 380.336039][ T3049] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 380.336192][ T3049] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 380.691796][ T11] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 380.841720][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 380.845933][ T11] usb 2-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 380.855322][ T11] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 380.855454][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.855498][ T11] usb 2-1: config 0 has no interface number 0 [ 380.855604][ T11] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 380.855701][ T11] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.891813][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.891939][ T11] usb 2-1: Product: syz [ 380.891973][ T11] usb 2-1: Manufacturer: syz [ 380.891999][ T11] usb 2-1: SerialNumber: syz [ 380.905567][ T11] usb 2-1: config 0 descriptor?? [ 380.933806][ T5357] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 380.943247][ T11] asix 2-1:0.34: probe with driver asix failed with error -22 [ 383.454473][ T3049] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 383.455077][ T3049] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 383.468056][ T3049] usb 1-1: USB disconnect, device number 27 [ 383.862207][ T3049] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 384.021790][ T3049] usb 1-1: Using ep0 maxpacket: 16 [ 384.025162][ T3049] usb 1-1: New USB device found: idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 384.040019][ T3049] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 384.040102][ T3049] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.040123][ T3049] usb 1-1: config 0 has no interface number 0 [ 384.040155][ T3049] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 384.040180][ T3049] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 384.040202][ T3049] usb 1-1: config 0 interface 98 has no altsetting 0 [ 384.057248][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.057318][ T3049] usb 1-1: Product: syz [ 384.057333][ T3049] usb 1-1: Manufacturer: syz [ 384.057345][ T3049] usb 1-1: SerialNumber: syz [ 384.061362][ T3049] usb 1-1: config 0 descriptor?? [ 384.065699][ T5372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.067271][ T5372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.349817][ T5372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.353797][ T5372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.571763][ T3049] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.572301][ T3049] asix 1-1:0.98: probe with driver asix failed with error -71 [ 384.585215][ T3049] usb 1-1: USB disconnect, device number 28 [ 384.778857][ T5389] fuse: Unknown parameter 'grou00000000000000000000' [ 385.500528][ T5394] Zero length message leads to an empty skb [ 385.821748][ T11] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 385.982131][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 385.984818][ T11] usb 1-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 385.993941][ T11] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.994054][ T11] usb 1-1: config 0 has no interface number 0 [ 386.024003][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.024123][ T11] usb 1-1: Product: syz [ 386.024155][ T11] usb 1-1: Manufacturer: syz [ 386.024181][ T11] usb 1-1: SerialNumber: syz [ 386.028468][ T11] usb 1-1: config 0 descriptor?? [ 386.491854][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.170690][ T3049] usb 2-1: USB disconnect, device number 34 [ 391.692938][ T5414] fuse: Unknown parameter 'grou00000000000000000000' [ 394.333358][ T3049] usb 1-1: USB disconnect, device number 29 [ 394.692098][ T11] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 394.792059][ T3049] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 394.847800][ T11] usb 2-1: not running at top speed; connect to a high speed hub [ 394.847973][ T11] usb 2-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 394.856014][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.856163][ T11] usb 2-1: config 1 interface 1 has no altsetting 0 [ 394.856310][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.951720][ T3049] usb 1-1: Using ep0 maxpacket: 16 [ 394.955284][ T3049] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 394.961936][ T3049] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 394.962042][ T3049] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.962084][ T3049] usb 1-1: config 0 has no interface number 0 [ 394.962174][ T3049] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 394.962244][ T3049] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.979217][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.979334][ T3049] usb 1-1: Product: syz [ 394.979363][ T3049] usb 1-1: Manufacturer: syz [ 394.979387][ T3049] usb 1-1: SerialNumber: syz [ 394.986122][ T3049] usb 1-1: config 0 descriptor?? [ 394.990816][ T5428] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 395.001758][ T3049] asix 1-1:0.34: probe with driver asix failed with error -22 [ 395.088651][ T24] usb 2-1: USB disconnect, device number 35 [ 395.378417][ T5453] fuse: Unknown parameter 'group_i00000000000000000000' [ 396.082132][ T11] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 396.233379][ T11] usb 2-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 396.236438][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.226265][ T3744] usb 1-1: USB disconnect, device number 30 [ 406.473788][ T11] usb 2-1: USB disconnect, device number 36 [ 407.136354][ T11] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 407.321864][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 407.342922][ T11] usb 2-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 407.403168][ T11] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 407.403247][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.403269][ T11] usb 2-1: config 0 has no interface number 0 [ 407.403306][ T11] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 407.403331][ T11] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.413998][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.414108][ T11] usb 2-1: Product: syz [ 407.414125][ T11] usb 2-1: Manufacturer: syz [ 407.414139][ T11] usb 2-1: SerialNumber: syz [ 407.419315][ T11] usb 2-1: config 0 descriptor?? [ 407.424916][ T5499] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 407.429463][ T11] asix 2-1:0.34: probe with driver asix failed with error -22 [ 409.302829][ T5515] fuse: Bad value for 'fd' [ 416.571934][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.760620][ T3744] usb 2-1: USB disconnect, device number 37 [ 418.021611][ T29] audit: type=1326 audit(417.920:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.021802][ T29] audit: type=1326 audit(417.920:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.021859][ T29] audit: type=1326 audit(417.920:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.021912][ T29] audit: type=1326 audit(417.920:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.021964][ T29] audit: type=1326 audit(417.920:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.022017][ T29] audit: type=1326 audit(417.920:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.022067][ T29] audit: type=1326 audit(417.920:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.022131][ T29] audit: type=1326 audit(417.930:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.022862][ T29] audit: type=1326 audit(417.930:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.023421][ T29] audit: type=1326 audit(417.930:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.346" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 418.592999][ T5534] FAULT_INJECTION: forcing a failure. [ 418.592999][ T5534] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 418.593492][ T5534] CPU: 1 UID: 0 PID: 5534 Comm: syz.1.347 Tainted: G L syzkaller #0 PREEMPT [ 418.593627][ T5534] Tainted: [L]=SOFTLOCKUP [ 418.593655][ T5534] Hardware name: ARM-Versatile Express [ 418.593680][ T5534] Call trace: [ 418.593723][ T5534] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 418.593841][ T5534] r7:60000013 r6:60000013 r5:82542868 r4:00000000 [ 418.593859][ T5534] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 418.593911][ T5534] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 418.593973][ T5534] r7:00000000 r6:00000000 r5:854c8cc0 r4:835166b4 [ 418.593989][ T5534] [<8021f5fc>] (dump_stack) from [<80a5f9c0>] (should_fail_ex+0x1c0/0x220) [ 418.594045][ T5534] [<80a5f800>] (should_fail_ex) from [<8059bfdc>] (should_fail_alloc_page+0x68/0x74) [ 418.594129][ T5534] r8:00000000 r7:00000000 r6:00000cc0 r5:00000000 r4:00000001 [ 418.594148][ T5534] [<8059bf74>] (should_fail_alloc_page) from [<80567ca4>] (__alloc_frozen_pages_noprof+0x120/0x1ac0) [ 418.594207][ T5534] [<80567b84>] (__alloc_frozen_pages_noprof) from [<80569864>] (get_free_pages_noprof+0x24/0x84) [ 418.594278][ T5534] r10:00000000 r9:866e0800 r8:86de0300 r7:00000001 r6:00001000 r5:00000cc0 [ 418.594299][ T5534] r4:00000000 [ 418.594314][ T5534] [<80569840>] (get_free_pages_noprof) from [<80569904>] (alloc_pages_exact_noprof+0x40/0x90) [ 418.594368][ T5534] [<805698c4>] (alloc_pages_exact_noprof) from [<815e10b8>] (snd_pcm_attach_substream+0x198/0x35c) [ 418.594439][ T5534] r7:00000001 r6:e83d5ca8 r5:85511800 r4:85971e00 [ 418.594455][ T5534] [<815e0f20>] (snd_pcm_attach_substream) from [<815e7254>] (snd_pcm_open_substream+0x38/0x900) [ 418.594527][ T5534] r10:00000000 r9:85511800 r8:85511920 r7:00000000 r6:00000000 r5:e83d5cec [ 418.594549][ T5534] r4:85511800 r3:e83d5ca8 [ 418.594563][ T5534] [<815e721c>] (snd_pcm_open_substream) from [<815e7c0c>] (snd_pcm_open+0xf0/0x224) [ 418.594660][ T5534] r10:00000000 r9:00000001 r8:85511920 r7:00000000 r6:854c8cc0 r5:86de0300 [ 418.594691][ T5534] r4:85511800 [ 418.594706][ T5534] [<815e7b1c>] (snd_pcm_open) from [<815e7d7c>] (snd_pcm_capture_open+0x3c/0x5c) [ 418.594773][ T5534] r10:00000000 r9:00000060 r8:00000018 r7:07400018 r6:8502bc00 r5:86de0300 [ 418.594790][ T5534] r4:85511800 [ 418.594806][ T5534] [<815e7d40>] (snd_pcm_capture_open) from [<815cde94>] (snd_open+0xac/0x18c) [ 418.594874][ T5534] r5:86de0300 r4:8204c310 [ 418.594889][ T5534] [<815cdde8>] (snd_open) from [<805de944>] (chrdev_open+0xbc/0x234) [ 418.594988][ T5534] r9:844a35ac r8:85512ea0 r7:8204b74c r6:86de0300 r5:8502bc00 r4:844a3580 [ 418.595042][ T5534] [<805de888>] (chrdev_open) from [<805d1bac>] (do_dentry_open+0x12c/0x500) [ 418.595132][ T5534] r9:86de0300 r8:854c8cc0 r7:805de888 r6:8502bc00 r5:00000000 r4:86de0300 [ 418.595151][ T5534] [<805d1a80>] (do_dentry_open) from [<805d39b8>] (vfs_open_consume+0x3c/0xf8) [ 418.595216][ T5534] r7:e83d5f20 r6:86de0328 r5:00000000 r4:86de0300 [ 418.595233][ T5534] [<805d397c>] (vfs_open_consume) from [<805efa20>] (path_openat+0x438/0xa98) [ 418.595292][ T5534] r6:00000000 r5:00000000 r4:e83d5e58 [ 418.595309][ T5534] [<805ef5e8>] (path_openat) from [<805f0138>] (do_file_open+0xb8/0x150) [ 418.595371][ T5534] r10:00000142 r9:854c8cc0 r8:00000001 r7:ffffff9c r6:e83d5f20 r5:854c8cc0 [ 418.595392][ T5534] r4:83dfb480 [ 418.595407][ T5534] [<805f0080>] (do_file_open) from [<805d3da0>] (do_sys_openat2+0xb8/0xf0) [ 418.595470][ T5534] r8:8020029c r7:76fe7a78 r6:ffffff9c r5:83dfb480 r4:00000004 [ 418.595488][ T5534] [<805d3ce8>] (do_sys_openat2) from [<805d428c>] (sys_openat+0x88/0xd8) [ 418.595553][ T5534] r7:00000142 r6:76fe7e59 r5:76fe7a78 r4:ffffff9c [ 418.595572][ T5534] [<805d4204>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 418.596074][ T5534] Exception stack(0xe83d5fa8 to 0xe83d5ff0) [ 418.596270][ T5534] 5fa0: 00000000 00000000 ffffff9c 76fe7a78 00020000 00000000 [ 418.596305][ T5534] 5fc0: 00000000 00000000 76fe7e59 00000142 003562d8 00000000 00000001 76fe80dc [ 418.596327][ T5534] 5fe0: 76fe79f8 76fe79e4 0010c414 00112ff8 [ 418.598177][ T5534] r5:00000000 r4:00000000 [ 418.892654][ T5536] fuse: Bad value for 'fd' [ 421.914886][ T5540] fuse: Bad value for 'user_id' [ 421.915039][ T5540] fuse: Bad value for 'user_id' [ 423.531743][ T5551] fuse: Bad value for 'user_id' [ 423.531860][ T5551] fuse: Bad value for 'user_id' [ 427.002852][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 427.002962][ T29] audit: type=1400 audit(426.910:460): avc: denied { create } for pid=5565 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 429.457128][ T29] audit: type=1400 audit(429.360:461): avc: denied { watch } for pid=5565 comm="syz.0.359" path="/156" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 435.203173][ T5570] fuse: Bad value for 'fd' [ 436.790154][ T29] audit: type=1400 audit(436.690:462): avc: denied { write } for pid=5573 comm="syz.1.362" name="functions" dev="configfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.804496][ T29] audit: type=1400 audit(436.710:463): avc: denied { write } for pid=5573 comm="syz.1.362" name="c.1" dev="configfs" ino=2686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.805679][ T29] audit: type=1400 audit(436.710:464): avc: denied { write } for pid=5573 comm="syz.1.362" name="c.1" dev="configfs" ino=2686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.695429][ T5582] fuse: Bad value for 'fd' [ 438.691740][ T44] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 438.916096][ T44] usb 2-1: New USB device found: idVendor=046d, idProduct=c225, bcdDevice=0.00 [ 438.931671][ T44] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 438.931765][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 438.931838][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.948992][ T44] usb 2-1: config 0 descriptor?? [ 438.972650][ T5586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.428617][ T44] hid_parser_main: 5 callbacks suppressed [ 439.428765][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.428932][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429042][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429145][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429243][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429380][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429484][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429636][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429744][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.429847][ T44] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 439.430284][ T44] lg-g15 0003:046D:C225.0002: unbalanced collection at end of report description [ 439.451490][ T44] lg-g15 0003:046D:C225.0002: probe with driver lg-g15 failed with error -22 [ 439.599039][ T11] usb 2-1: USB disconnect, device number 38 [ 441.790724][ T5609] fuse: Bad value for 'fd' [ 443.781630][ T3049] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 443.933749][ T3049] usb 2-1: New USB device found: idVendor=046d, idProduct=c225, bcdDevice=0.00 [ 443.937140][ T3049] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 443.937202][ T3049] usb 2-1: config 0 interface 0 has no altsetting 0 [ 443.937270][ T3049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.940045][ T3049] usb 2-1: config 0 descriptor?? [ 443.954925][ T5613] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.183280][ T3049] usbhid 2-1:0.0: can't add hid device: -71 [ 444.183525][ T3049] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 444.188044][ T3049] usb 2-1: USB disconnect, device number 39 [ 445.833646][ T29] audit: type=1400 audit(445.740:465): avc: denied { mount } for pid=5629 comm="syz.1.374" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 446.092445][ T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 446.246785][ T44] usb 2-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 446.267359][ T44] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 446.267526][ T44] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 446.267584][ T44] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 446.267632][ T44] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 446.286083][ T44] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 446.286246][ T44] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 446.286290][ T44] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 446.286336][ T44] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 446.311976][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.312115][ T44] usb 2-1: Product: syz [ 446.312149][ T44] usb 2-1: Manufacturer: syz [ 446.312177][ T44] usb 2-1: SerialNumber: syz [ 446.347764][ T44] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 446.362743][ T44] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 446.369914][ T44] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 446.566760][ T5630] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 446.578506][ T44] usb 2-1: USB disconnect, device number 40 [ 446.613662][ T44] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 446.629701][ T29] audit: type=1400 audit(446.530:466): avc: denied { unmount } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 446.636602][ T44] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 446.637943][ T44] ti_usb_3410_5052 2-1:2.0: device disconnected [ 446.708147][ T5658] fuse: Bad value for 'fd' [ 453.131810][ T5664] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 453.408215][ T29] audit: type=1400 audit(453.310:467): avc: denied { ioctl } for pid=5678 comm="syz.0.380" path="socket:[5594]" dev="sockfs" ino=5594 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.622572][ T5687] fuse: Bad value for 'fd' [ 453.744223][ T5689] fuse: Bad value for 'group_id' [ 453.744358][ T5689] fuse: Bad value for 'group_id' [ 454.101600][ T44] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 454.275784][ T44] usb 1-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 454.280561][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.280669][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.280748][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.289264][ T44] usb 1-1: config 0 descriptor?? [ 454.411865][ T3049] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 454.571939][ T3049] usb 2-1: Using ep0 maxpacket: 32 [ 454.575644][ T3049] usb 2-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 454.584041][ T3049] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.584463][ T3049] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.584743][ T3049] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.585048][ T3049] usb 2-1: config 0 interface 0 has no altsetting 0 [ 454.585344][ T3049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.609711][ T3049] usb 2-1: config 0 descriptor?? [ 454.724872][ T44] hid_parser_main: 4 callbacks suppressed [ 454.725184][ T44] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 454.735060][ T44] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 454.930739][ T44] cp2112 0003:10C4:EA90.0003: error requesting version [ 454.947521][ T44] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 455.049634][ T3049] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 455.114988][ T3049] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-38) [ 455.119587][ T3049] corsair-psu 0003:1B1C:1C09.0004: probe with driver corsair-psu failed with error -38 [ 455.447170][ T3049] usb 2-1: USB disconnect, device number 41 [ 455.649838][ T5726] fuse: Bad value for 'fd' [ 456.442922][ T5733] FAULT_INJECTION: forcing a failure. [ 456.442922][ T5733] name failslab, interval 1, probability 0, space 0, times 0 [ 456.443109][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.1.389 Tainted: G L syzkaller #0 PREEMPT [ 456.443174][ T5733] Tainted: [L]=SOFTLOCKUP [ 456.443191][ T5733] Hardware name: ARM-Versatile Express [ 456.443217][ T5733] Call trace: [ 456.443263][ T5733] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 456.443382][ T5733] r7:60000013 r6:60000013 r5:82542868 r4:00000000 [ 456.443401][ T5733] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 456.443459][ T5733] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 456.443526][ T5733] r7:854a3fc0 r6:00000000 r5:854a3fc0 r4:83516624 [ 456.443543][ T5733] [<8021f5fc>] (dump_stack) from [<80a5f9c0>] (should_fail_ex+0x1c0/0x220) [ 456.443604][ T5733] [<80a5f800>] (should_fail_ex) from [<8059bf4c>] (should_failslab+0x6c/0x94) [ 456.443677][ T5733] r8:00000000 r7:854a3fc0 r6:8064ec30 r5:00000cc0 r4:83cba180 [ 456.443693][ T5733] [<8059bee0>] (should_failslab) from [<80578890>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 456.443753][ T5733] [<80578834>] (kmem_cache_alloc_noprof) from [<8064ec30>] (ep_ptable_queue_proc+0x34/0x90) [ 456.443900][ T5733] r10:8340b7d0 r9:00000000 r8:82088e74 r7:dfbf9ec4 r6:8629ea80 r5:83d17900 [ 456.443925][ T5733] r4:8629ea40 [ 456.443943][ T5733] [<8064ebfc>] (ep_ptable_queue_proc) from [<816edee0>] (datagram_poll_queue+0x30/0x100) [ 456.444011][ T5733] r7:00000000 r6:83cc7c88 r5:83cc7c00 r4:8629ea40 [ 456.444027][ T5733] [<816edeb0>] (datagram_poll_queue) from [<816edfc8>] (datagram_poll+0x18/0x1c) [ 456.444094][ T5733] r7:00000000 r6:86de3e80 r5:dfbf9ec4 r4:8629ea40 [ 456.444109][ T5733] [<816edfb0>] (datagram_poll) from [<816ce994>] (sock_poll+0x58/0xdc) [ 456.444165][ T5733] [<816ce93c>] (sock_poll) from [<8064f3ec>] (ep_item_poll+0x74/0xb0) [ 456.444233][ T5733] r8:00000000 r7:86de3e80 r6:87735500 r5:86de3e80 r4:83d17900 [ 456.444294][ T5733] [<8064f378>] (ep_item_poll) from [<80651070>] (do_epoll_ctl_file+0x894/0xc90) [ 456.444363][ T5733] r7:86de3e80 r6:87735500 r5:83d1790c r4:83d17900 [ 456.444381][ T5733] [<806507dc>] (do_epoll_ctl_file) from [<806514e4>] (do_epoll_ctl+0x78/0xdc) [ 456.444448][ T5733] r10:000000fb r9:00000000 r8:86de3e81 r7:86de0881 r6:dfbf9f68 r5:86de3e80 [ 456.444468][ T5733] r4:00000006 [ 456.444486][ T5733] [<8065146c>] (do_epoll_ctl) from [<806515fc>] (sys_epoll_ctl+0xb4/0x108) [ 456.444555][ T5733] r9:854a3fc0 r8:b5403587 r7:00000007 r6:00000006 r5:20000680 r4:00000001 [ 456.444573][ T5733] [<80651548>] (sys_epoll_ctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 456.444624][ T5733] Exception stack(0xdfbf9fa8 to 0xdfbf9ff0) [ 456.444670][ T5733] 9fa0: 00000000 00000000 00000007 00000001 00000006 20000680 [ 456.444706][ T5733] 9fc0: 00000000 00000000 003563b4 000000fb 00356378 00000000 00000001 76fc70dc [ 456.444734][ T5733] 9fe0: 76fc6e88 76fc6e78 00018ff8 001311f0 [ 456.444768][ T5733] r8:8020029c r7:000000fb r6:003563b4 r5:00000000 r4:00000000 [ 459.273277][ T29] audit: type=1400 audit(459.180:468): avc: denied { ioctl } for pid=5734 comm="syz.1.390" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5634 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.062520][ T5738] fuse: Invalid rootmode [ 460.698104][ T5750] fuse: Invalid rootmode [ 464.316858][ T5763] fuse: Invalid rootmode [ 465.362640][ T3071] usb 1-1: USB disconnect, device number 31 [ 465.487744][ T5784] fuse: Bad value for 'rootmode' [ 470.616113][ T5817] fuse: Unknown parameter 'grou00000000000000000000' [ 471.313167][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 471.395197][ T5829] fuse: Unknown parameter 'grou00000000000000000000' [ 471.877119][ T5846] FAULT_INJECTION: forcing a failure. [ 471.877119][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 471.877225][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.1.425 Tainted: G L syzkaller #0 PREEMPT [ 471.877258][ T5846] Tainted: [L]=SOFTLOCKUP [ 471.877266][ T5846] Hardware name: ARM-Versatile Express [ 471.877278][ T5846] Call trace: [ 471.877302][ T5846] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 471.877364][ T5846] r7:60000013 r6:60000013 r5:82542868 r4:00000000 [ 471.877373][ T5846] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 471.877399][ T5846] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 471.877430][ T5846] r7:86439980 r6:00000000 r5:86439980 r4:83516624 [ 471.877445][ T5846] [<8021f5fc>] (dump_stack) from [<80a5f9c0>] (should_fail_ex+0x1c0/0x220) [ 471.877504][ T5846] [<80a5f800>] (should_fail_ex) from [<8059bf4c>] (should_failslab+0x6c/0x94) [ 471.877577][ T5846] r8:00000000 r7:86439980 r6:816ce684 r5:00000cc0 r4:844620c0 [ 471.877593][ T5846] [<8059bee0>] (should_failslab) from [<80578c74>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 471.877644][ T5846] [<80578c14>] (kmem_cache_alloc_lru_noprof) from [<816ce684>] (sock_alloc_inode+0x24/0x84) [ 471.877713][ T5846] r10:00000119 r9:8704a000 r8:8020029c r7:00000010 r6:82077880 r5:8442c800 [ 471.877729][ T5846] r4:00000010 [ 471.877741][ T5846] [<816ce660>] (sock_alloc_inode) from [<80601c10>] (alloc_inode+0x24/0xd0) [ 471.877773][ T5846] r5:8442c800 r4:00000010 [ 471.877779][ T5846] [<80601bec>] (alloc_inode) from [<816cdf34>] (sock_alloc+0x20/0x78) [ 471.877809][ T5846] r7:00000010 r6:00000000 r5:00000003 r4:00000010 [ 471.877815][ T5846] [<816cdf14>] (sock_alloc) from [<816ce138>] (__sock_create+0x80/0x22c) [ 471.877854][ T5846] r5:00000003 r4:00000010 [ 471.877869][ T5846] [<816ce0b8>] (__sock_create) from [<816d11b8>] (__sys_socket+0x94/0x118) [ 471.877931][ T5846] r10:00000119 r9:86439980 r8:8020029c r7:00000119 r6:86439980 r5:00000010 [ 471.877948][ T5846] r4:00000003 [ 471.877965][ T5846] [<816d1124>] (__sys_socket) from [<816d124c>] (sys_socket+0x10/0x14) [ 471.878023][ T5846] r6:ffffffff r5:00000000 r4:76fe6e78 [ 471.878039][ T5846] [<816d123c>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 471.878086][ T5846] Exception stack(0xdfb2dfa8 to 0xdfb2dff0) [ 471.878131][ T5846] dfa0: 76fe6e78 00000000 00000010 00000003 00000010 00000000 [ 471.878162][ T5846] dfc0: 76fe6e78 00000000 ffffffff 00000119 003562d8 00000000 00000001 76fe80dc [ 471.878183][ T5846] dfe0: 00000000 76fe6e44 0001cdc0 00132fbc [ 471.878386][ T5846] socket: no more sockets [ 471.985734][ T5850] fuse: Unknown parameter 'grou00000000000000000000' [ 472.128491][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 472.128598][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 472.388383][ T5862] FAULT_INJECTION: forcing a failure. [ 472.388383][ T5862] name failslab, interval 1, probability 0, space 0, times 0 [ 472.388483][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz.1.432 Tainted: G L syzkaller #0 PREEMPT [ 472.388517][ T5862] Tainted: [L]=SOFTLOCKUP [ 472.388525][ T5862] Hardware name: ARM-Versatile Express [ 472.388537][ T5862] Call trace: [ 472.388558][ T5862] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 472.388622][ T5862] r7:60000013 r6:60000013 r5:82542868 r4:00000000 [ 472.388630][ T5862] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 472.388658][ T5862] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 472.388689][ T5862] r7:85483300 r6:00000000 r5:85483300 r4:83516624 [ 472.388696][ T5862] [<8021f5fc>] (dump_stack) from [<80a5f9c0>] (should_fail_ex+0x1c0/0x220) [ 472.388723][ T5862] [<80a5f800>] (should_fail_ex) from [<8059bf4c>] (should_failslab+0x6c/0x94) [ 472.388757][ T5862] r8:00000000 r7:85483300 r6:83c02000 r5:00400dc0 r4:00000018 [ 472.388764][ T5862] [<8059bee0>] (should_failslab) from [<80579864>] (__kmalloc_noprof+0xa8/0x3c8) [ 472.388791][ T5862] [<805797bc>] (__kmalloc_noprof) from [<8185640c>] (cttimeout_new_timeout+0x168/0x240) [ 472.388828][ T5862] r10:8208fc3c r9:83f71800 r8:86666c40 r7:00006558 r6:dfc05b44 r5:86666c40 [ 472.388837][ T5862] r4:dfc05b58 [ 472.388843][ T5862] [<818562a4>] (cttimeout_new_timeout) from [<818373dc>] (nfnetlink_rcv_msg+0x29c/0x2d4) [ 472.388879][ T5862] r10:8383c21c r9:820902a8 r8:86735200 r7:86666d40 r6:820902a8 r5:dfc05c10 [ 472.388887][ T5862] r4:82090284 [ 472.388893][ T5862] [<81837140>] (nfnetlink_rcv_msg) from [<818078e0>] (netlink_rcv_skb+0xc0/0x120) [ 472.388928][ T5862] r10:8340f6b0 r9:8704a000 r8:86663d00 r7:86735200 r6:81837140 r5:84468540 [ 472.388937][ T5862] r4:00000000 [ 472.388943][ T5862] [<81807820>] (netlink_rcv_skb) from [<81837e64>] (nfnetlink_rcv+0x98/0x15c) [ 472.388973][ T5862] r7:86ce0c64 r6:86735200 r5:00000000 r4:84468540 [ 472.388979][ T5862] [<81837dcc>] (nfnetlink_rcv) from [<81807114>] (netlink_unicast+0x3a0/0x420) [ 472.389011][ T5862] r8:86663d00 r7:86ce0c64 r6:84468540 r5:00000034 r4:86ce0c00 [ 472.389019][ T5862] [<81806d74>] (netlink_unicast) from [<81807370>] (netlink_sendmsg+0x1dc/0x46c) [ 472.389054][ T5862] r10:00000000 r9:873f8400 r8:00000000 r7:00000000 r6:00000034 r5:84468540 [ 472.389062][ T5862] r4:dfc05f28 [ 472.389068][ T5862] [<81807194>] (netlink_sendmsg) from [<816cf1c8>] (__sock_sendmsg+0x44/0xb0) [ 472.389122][ T5862] r10:00000804 r9:00000000 r8:dfc05dd4 r7:00000000 r6:8629c040 r5:dfc05f28 [ 472.389131][ T5862] r4:00000000 [ 472.389138][ T5862] [<816cf184>] (__sock_sendmsg) from [<816d00bc>] (____sys_sendmsg+0x238/0x2fc) [ 472.389169][ T5862] r7:00000000 r6:00000000 r5:8629c040 r4:dfc05f28 [ 472.389176][ T5862] [<816cfe84>] (____sys_sendmsg) from [<816d04f4>] (___sys_sendmsg+0x9c/0xd0) [ 472.389210][ T5862] r10:00000128 r9:20000140 r8:00000804 r7:00000000 r6:8629c040 r5:dfc05f28 [ 472.389218][ T5862] r4:00000000 [ 472.389225][ T5862] [<816d0458>] (___sys_sendmsg) from [<816d2988>] (__sys_sendmsg+0x8c/0xe0) [ 472.389260][ T5862] r9:85483300 r8:86de0800 r7:00000804 r6:20000140 r5:86de0801 r4:00000004 [ 472.389268][ T5862] [<816d28fc>] (__sys_sendmsg) from [<816d29f0>] (sys_sendmsg+0x14/0x18) [ 472.389302][ T5862] r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [ 472.389309][ T5862] [<816d29dc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 472.389333][ T5862] Exception stack(0xdfc05fa8 to 0xdfc05ff0) [ 472.389353][ T5862] 5fa0: 00000000 00000000 00000004 20000140 00000804 00000000 [ 472.389369][ T5862] 5fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000001 76fe80dc [ 472.389381][ T5862] 5fe0: 76fe7e88 76fe7e78 00018ff8 001311f0 [ 472.525897][ T5867] fuse: Unknown parameter 'group_i00000000000000000000' [ 472.881989][ T3049] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 473.031997][ T3049] usb 2-1: Using ep0 maxpacket: 32 [ 473.036935][ T3049] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.067623][ T3049] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 473.117736][ T3049] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.117855][ T3049] usb 2-1: Product: syz [ 473.117882][ T3049] usb 2-1: Manufacturer: syz [ 473.117905][ T3049] usb 2-1: SerialNumber: syz [ 473.125688][ T3049] usb 2-1: config 0 descriptor?? [ 473.135036][ T5869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.143169][ T3049] hub 2-1:0.0: bad descriptor, ignoring hub [ 473.143305][ T3049] hub 2-1:0.0: probe with driver hub failed with error -5 [ 473.873741][ T3744] usb 2-1: USB disconnect, device number 42 [ 474.222061][ T3744] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 474.375853][ T3744] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 474.391984][ T3744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 474.413478][ T3744] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 474.413594][ T3744] usb 2-1: Product: syz [ 474.413617][ T3744] usb 2-1: Manufacturer: syz [ 474.413639][ T3744] usb 2-1: SerialNumber: syz [ 474.417671][ T3744] usb 2-1: config 0 descriptor?? [ 474.448933][ T5869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.462840][ T3744] hub 2-1:0.0: bad descriptor, ignoring hub [ 474.462968][ T3744] hub 2-1:0.0: probe with driver hub failed with error -5 [ 474.792483][ T3049] usb 2-1: USB disconnect, device number 43 [ 475.203612][ T5914] fuse: Unknown parameter 'group_i00000000000000000000' [ 475.502781][ T5916] syzkaller0: entered promiscuous mode [ 475.502901][ T5916] syzkaller0: entered allmulticast mode [ 475.842120][ T5925] fuse: Bad value for 'rootmode' [ 476.364427][ T29] audit: type=1400 audit(476.270:469): avc: denied { write } for pid=5906 comm="syz.1.438" name="functions" dev="configfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 476.395974][ T5912] UDC core: g1: couldn't find an available UDC or it's busy [ 476.396040][ T5932] fuse: Unknown parameter 'group_i00000000000000000000' [ 476.712744][ T5943] fuse: Unknown parameter 'use00000000000000000000' [ 476.751885][ T3049] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 476.901835][ T3049] usb 1-1: Using ep0 maxpacket: 32 [ 476.906266][ T3049] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 476.915988][ T3049] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.916099][ T3049] usb 1-1: config 0 has no interface number 0 [ 476.916156][ T3049] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 476.916346][ T3049] usb 1-1: config 0 interface 1 has no altsetting 0 [ 477.113493][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.113620][ T3049] usb 1-1: Product: syz [ 477.113654][ T3049] usb 1-1: Manufacturer: syz [ 477.113678][ T3049] usb 1-1: SerialNumber: syz [ 477.117936][ T3049] usb 1-1: config 0 descriptor?? [ 477.371625][ T3049] usb 1-1: USB disconnect, device number 32 [ 477.739615][ T5969] fuse: Unknown parameter 'use00000000000000000000' [ 477.811976][ T3049] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 477.962100][ T3049] usb 1-1: Using ep0 maxpacket: 32 [ 477.964365][ T3049] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 477.968981][ T3049] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.969087][ T3049] usb 1-1: config 0 has no interface number 0 [ 477.969144][ T3049] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 477.969190][ T3049] usb 1-1: config 0 interface 1 has no altsetting 0 [ 477.990297][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.990412][ T3049] usb 1-1: Product: syz [ 477.990441][ T3049] usb 1-1: Manufacturer: syz [ 477.990467][ T3049] usb 1-1: SerialNumber: syz [ 477.994857][ T3049] usb 1-1: config 0 descriptor?? [ 478.132590][ T3071] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 478.282792][ T3071] usb 2-1: Using ep0 maxpacket: 16 [ 478.284941][ T3071] usb 2-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 478.288464][ T3071] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 478.288581][ T3071] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.288631][ T3071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 478.288694][ T3071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.298986][ T3071] usb 2-1: config 0 descriptor?? [ 478.727717][ T3071] hid-steam 0003:28DE:1142.0005: hiddev0: USB HID v0.96 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 478.787007][ T3071] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 478.788476][ T3071] hid-steam 0003:28DE:1142.0005: steam_probe:steam_get_conn_status failed with error -22 [ 478.825288][ T3071] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.96 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 479.291531][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 488.256673][ T3049] usb 1-1: USB disconnect, device number 33 [ 491.265547][ T6003] fuse: Unknown parameter 'use00000000000000000000' [ 491.636842][ T29] audit: type=1400 audit(491.540:470): avc: denied { setopt } for pid=6006 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 492.481591][ T3071] usb 2-1: USB disconnect, device number 44 [ 492.495590][ T3071] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 493.002270][ T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 493.162348][ T44] usb 2-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 493.190348][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.218130][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.218202][ T44] usb 2-1: Product: syz [ 493.218217][ T44] usb 2-1: Manufacturer: syz [ 493.218229][ T44] usb 2-1: SerialNumber: syz [ 494.802531][ T6037] fuse: Unknown parameter 'user_i00000000000000000000' [ 495.441761][ T3071] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 495.611957][ T3071] usb 1-1: Using ep0 maxpacket: 16 [ 495.617160][ T3071] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 495.624346][ T3071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.624484][ T3071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.624649][ T3071] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.625005][ T3071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.628811][ T3071] usb 1-1: config 0 descriptor?? [ 496.055080][ T3071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 496.055269][ T3071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 496.055371][ T3071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 496.055472][ T3071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 496.055583][ T3071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 496.063477][ T3071] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input6 [ 496.068965][ T3071] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 496.254283][ T3744] usb 1-1: USB disconnect, device number 34 [ 496.512675][ T6072] fuse: Unknown parameter 'user_i00000000000000000000' [ 496.793383][ T6076] fuse: Bad value for 'user_id' [ 496.793555][ T6076] fuse: Bad value for 'user_id' [ 497.092712][ T6083] fuse: Unknown parameter 'user_i00000000000000000000' [ 497.317985][ T6087] fuse: Bad value for 'user_id' [ 497.318102][ T6087] fuse: Bad value for 'user_id' [ 497.653106][ T29] audit: type=1400 audit(497.560:471): avc: denied { bind } for pid=6091 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 497.763066][ T6094] fuse: Unknown parameter 'user_id00000000000000000000' [ 497.870046][ T6096] fuse: Unknown parameter 'grou00000000000000000000' [ 497.989450][ T6098] fuse: Bad value for 'fd' [ 499.268313][ T29] audit: type=1400 audit(499.170:472): avc: denied { write } for pid=6108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.503179][ T29] audit: type=1400 audit(499.410:473): avc: denied { write } for pid=6111 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.462465][ T3049] usb 2-1: USB disconnect, device number 45 [ 503.692400][ T6099] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 503.875621][ T6126] fuse: Unknown parameter 'user_id00000000000000000000' [ 505.195202][ T6130] fuse: Bad value for 'fd' [ 511.301837][ T6135] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 511.432013][ T6148] fuse: Unknown parameter 'user_id00000000000000000000' [ 513.232701][ T29] audit: type=1400 audit(513.140:474): avc: denied { write } for pid=6152 comm="syz.0.489" name="nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 513.254646][ T29] audit: type=1400 audit(513.160:475): avc: denied { map } for pid=6152 comm="syz.0.489" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 515.517701][ T6162] fuse: Bad value for 'fd' [ 516.094587][ T6173] fuse: Invalid rootmode [ 517.531435][ T29] audit: type=1400 audit(517.430:476): avc: denied { write } for pid=6176 comm="syz.0.499" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 518.323669][ T29] audit: type=1400 audit(518.230:477): avc: denied { create } for pid=6167 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 518.355148][ T29] audit: type=1400 audit(518.260:478): avc: denied { write } for pid=6167 comm="syz.1.496" name="target" dev="configfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 525.106600][ T6187] fuse: Invalid rootmode [ 525.374579][ T6193] fuse: Unknown parameter 'group_id00000000000000000000' [ 525.533314][ T29] audit: type=1400 audit(525.440:479): avc: denied { relabelfrom } for pid=6194 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 525.533509][ T29] audit: type=1400 audit(525.440:480): avc: denied { relabelto } for pid=6194 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 525.728637][ T6205] fuse: Invalid rootmode [ 526.635323][ T6211] fuse: Bad value for 'user_id' [ 526.635432][ T6211] fuse: Bad value for 'user_id' [ 527.002145][ T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 527.169168][ T44] usb 2-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 527.195169][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.195492][ T44] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.207636][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.207744][ T44] usb 2-1: Product: syz [ 527.207774][ T44] usb 2-1: Manufacturer: syz [ 527.207800][ T44] usb 2-1: SerialNumber: syz [ 527.233068][ T44] usb 2-1: 1:1 : unsupported format bits 0x20000 [ 527.332532][ T6221] fuse: Bad value for 'rootmode' [ 527.433937][ T44] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 527.434082][ T44] usb 2-1: 2:1 : unsupported format bits 0x20000 [ 527.475298][ T44] usb 2-1: USB disconnect, device number 46 [ 527.623336][ T6250] fuse: Bad value for 'user_id' [ 527.623398][ T6250] fuse: Bad value for 'user_id' [ 527.961534][ T6254] fuse: Bad value for 'rootmode' [ 528.183725][ T6256] random: crng reseeded on system resumption [ 528.814397][ T6265] fuse: Unknown parameter '0x0000000000000003' [ 528.861969][ T3071] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 528.922374][ T6267] fuse: Bad value for 'user_id' [ 528.922498][ T6267] fuse: Bad value for 'user_id' [ 529.021560][ T3071] usb 2-1: Using ep0 maxpacket: 32 [ 529.023672][ T3071] usb 2-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 529.024547][ T6269] fuse: Bad value for 'rootmode' [ 529.028118][ T3071] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 529.028280][ T3071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 529.028354][ T3071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 529.028407][ T3071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 529.028453][ T3071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 529.046379][ T3071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.046451][ T3071] usb 2-1: Product: syz [ 529.046472][ T3071] usb 2-1: Manufacturer: syz [ 529.046488][ T3071] usb 2-1: SerialNumber: syz [ 529.048743][ T3071] usb 2-1: config 0 descriptor?? [ 529.476449][ T3071] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 529.476670][ T3071] input input7: Device does not respond to id packet M [ 529.487656][ T3071] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 529.487858][ T3071] input input7: Device does not respond to id packet P [ 529.492106][ T3071] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 529.492301][ T3071] input input7: Device does not respond to id packet B [ 529.504936][ T3071] input input7: Limiting number of effects to 32 (device reports 85) [ 529.514208][ T6278] fuse: Unknown parameter '0x0000000000000003' [ 529.616719][ T6280] fuse: Bad value for 'fd' [ 529.713705][ T3071] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 529.714727][ T3071] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 529.715493][ T3071] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 529.716281][ T3071] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 529.727297][ T3071] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 529.775337][ T3071] usb 2-1: USB disconnect, device number 47 [ 529.787258][ T6290] fuse: Unknown parameter 'use00000000000000000000' [ 530.082298][ T6304] fuse: Unknown parameter '0x0000000000000003' [ 530.228575][ T6307] fuse: Bad value for 'fd' [ 530.630694][ T6314] fuse: Unknown parameter 'use00000000000000000000' [ 530.698527][ T6316] fuse: Unknown parameter '0x0000000000000003' [ 530.778533][ T6318] fuse: Bad value for 'fd' [ 531.102640][ T44] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 531.275319][ T44] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 531.282059][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.282133][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 531.282195][ T44] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 531.282222][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.282265][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.761412][ T44] gud 1-1:1.0: probe with driver gud failed with error -71 [ 531.777139][ T44] usb 1-1: USB disconnect, device number 35 [ 531.892894][ T6346] fuse: Unknown parameter 'use00000000000000000000' [ 532.027607][ T6348] fuse: Bad value for 'fd' [ 532.234481][ T6350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.307839][ T6350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.395417][ T6350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.538977][ T6350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.652690][ T39] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.762735][ T119] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.762984][ T119] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.772796][ T39] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.357214][ T6375] bond0: (slave bond_slave_0): Releasing backup interface [ 533.383582][ T6375] bond0: (slave bond_slave_1): Releasing backup interface [ 533.413928][ T6375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 534.037932][ T6380] fuse: Unknown parameter 'user_i00000000000000000000' [ 534.184970][ T6382] fuse: Bad value for 'fd' [ 534.553964][ T6388] vlan2: entered promiscuous mode [ 534.554046][ T6388] bond0: entered promiscuous mode [ 534.634423][ T6392] fuse: Unknown parameter 'user_i00000000000000000000' [ 534.768614][ T6394] fuse: Bad value for 'fd' [ 534.910154][ T6396] device-mapper: cache-policy-smq: tunable 'sequential_threshold' no longer has any effect, mq policy is now an alias for smq [ 535.003255][ T6396] device-mapper: table: 248:1: ram1 too small for target: start=0, len=9280, dev_size=8192 [ 535.003425][ T6396] device-mapper: core: Cannot calculate initial queue limits [ 535.003464][ T6396] device-mapper: ioctl: unable to set up device queue for new table. [ 535.705056][ T6406] fuse: Unknown parameter 'user_i00000000000000000000' [ 535.817466][ T6408] fuse: Invalid rootmode [ 535.948010][ T6410] block nbd0: not configured, cannot reconfigure [ 536.426986][ T6416] fuse: Unknown parameter 'user_id00000000000000000000' [ 536.563350][ T6418] fuse: Invalid rootmode [ 538.443966][ T6427] fuse: Unknown parameter 'user_id00000000000000000000' [ 538.536876][ T6429] fuse: Invalid rootmode [ 540.386189][ T6446] fuse: Unknown parameter 'user_id00000000000000000000' [ 544.579473][ T6436] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 560.612160][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 560.791895][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 560.823351][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.823492][ T24] usb 1-1: New USB device found: idVendor=0557, idProduct=2022, bcdDevice=e6.aa [ 560.828509][ T24] usb 1-1: config 15 has an invalid interface number: 145 but max is 1 [ 560.828612][ T24] usb 1-1: config 15 has an invalid interface number: 239 but max is 1 [ 560.828645][ T24] usb 1-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 560.828677][ T24] usb 1-1: config 15 has no interface number 0 [ 560.828702][ T24] usb 1-1: config 15 has no interface number 1 [ 560.828749][ T24] usb 1-1: config 15 interface 145 altsetting 8 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 560.828793][ T24] usb 1-1: config 15 interface 145 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 560.828842][ T24] usb 1-1: config 15 interface 145 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 560.828886][ T24] usb 1-1: config 15 interface 239 altsetting 13 bulk endpoint 0x8 has invalid maxpacket 1024 [ 560.828922][ T24] usb 1-1: config 15 interface 239 altsetting 13 has an endpoint descriptor with address 0x97, changing to 0x87 [ 560.828963][ T24] usb 1-1: config 15 interface 239 altsetting 13 endpoint 0x87 has invalid wMaxPacketSize 0 [ 560.829000][ T24] usb 1-1: config 15 interface 239 altsetting 13 bulk endpoint 0x87 has invalid maxpacket 0 [ 560.829039][ T24] usb 1-1: config 15 interface 145 has no altsetting 0 [ 560.829067][ T24] usb 1-1: config 15 interface 239 has no altsetting 0 [ 560.884682][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.884752][ T24] usb 1-1: Product: syz [ 560.884766][ T24] usb 1-1: Manufacturer: syz [ 560.884779][ T24] usb 1-1: SerialNumber: syz [ 560.907806][ T6467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 561.154766][ T24] pl2303 1-1:15.145: required endpoints missing [ 561.175390][ T24] pl2303 1-1:15.239: pl2303 converter detected [ 561.178565][ T24] pl2303 1-1:15.239: pl2303_vendor_read - failed to read [8484]: -71 [ 561.190638][ T24] pl2303 1-1:15.239: pl2303_vendor_write - failed to write [0404]: -71 [ 561.192738][ T24] pl2303 1-1:15.239: pl2303_vendor_read - failed to read [8484]: -71 [ 561.195569][ T24] pl2303 1-1:15.239: pl2303_vendor_read - failed to read [8383]: -71 [ 561.196538][ T24] pl2303 1-1:15.239: pl2303_vendor_read - failed to read [8484]: -71 [ 561.197320][ T24] pl2303 1-1:15.239: pl2303_vendor_write - failed to write [0404]: -71 [ 561.198044][ T24] pl2303 1-1:15.239: pl2303_vendor_read - failed to read [8484]: -71 [ 561.205552][ T24] pl2303 1-1:15.239: pl2303_vendor_read - failed to read [8383]: -71 [ 561.212966][ T24] pl2303 1-1:15.239: pl2303_vendor_write - failed to write [0000]: -71 [ 561.216433][ T24] pl2303 1-1:15.239: pl2303_vendor_write - failed to write [0001]: -71 [ 561.232767][ T24] pl2303 1-1:15.239: pl2303_vendor_write - failed to write [0002]: -71 [ 561.239801][ T24] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 561.283129][ T24] usb 1-1: USB disconnect, device number 36 [ 561.316365][ T24] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 561.317106][ T24] pl2303 1-1:15.239: device disconnected [ 562.226530][ T29] audit: type=1326 audit(562.130:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.0.582" exe="/syz-executor" sig=9 arch=40000028 syscall=20 compat=0 ip=0x12a0bc code=0x0 [ 570.723035][ T29] audit: type=1400 audit(570.630:482): avc: denied { read write } for pid=6511 comm="syz.0.587" name="md0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 570.723734][ T29] audit: type=1400 audit(570.630:483): avc: denied { open } for pid=6511 comm="syz.0.587" path="/287/md0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 570.750056][ T6512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 570.750549][ T6512] block device autoloading is deprecated and will be removed. [ 570.766913][ T29] audit: type=1400 audit(570.670:484): avc: denied { ioctl } for pid=6511 comm="syz.0.587" path="/287/md0" dev="tmpfs" ino=1545 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 571.103333][ T6512] md/raid1:md0: active with 1 out of 3 mirrors [ 571.105585][ T6512] md0: detected capacity change from 0 to 5884 [ 573.942174][ T29] audit: type=1400 audit(573.850:485): avc: denied { remount } for pid=6523 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 573.947805][ T6524] tmpfs: Too few inodes for current use [ 573.967473][ T29] audit: type=1400 audit(573.870:486): avc: denied { unmount } for pid=3121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 574.391807][ T24] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 574.571774][ T24] usb 1-1: New USB device found: idVendor=0458, idProduct=5016, bcdDevice=0.00 [ 574.582799][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 574.582914][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.583001][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.587664][ T24] usb 1-1: config 0 descriptor?? [ 575.046968][ T24] kye 0003:0458:5016.0008: control desc unexpectedly large [ 575.058660][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0008/input/input8 [ 575.068406][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0008/input/input9 [ 575.129997][ T24] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 575.244992][ T24] usb 1-1: USB disconnect, device number 37 [ 575.483238][ T6562] md: couldn't update array info. -22 [ 575.533661][ T6562] md: could not open device unknown-block(1,1). [ 575.534154][ T6562] md: md_import_device returned -16 [ 579.221587][ T6578] md: couldn't update array info. -22 [ 579.261875][ T6578] md: could not open device unknown-block(1,1). [ 579.262257][ T6578] md: md_import_device returned -16 [ 584.301676][ T6594] md: couldn't update array info. -22 [ 584.342455][ T6594] md: could not open device unknown-block(1,1). [ 584.342637][ T6594] md: md_import_device returned -16 [ 589.085870][ T29] audit: type=1400 audit(588.990:487): avc: denied { ioctl } for pid=6604 comm="syz.0.606" path="socket:[6753]" dev="sockfs" ino=6753 ioctlcmd=0x40809440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 590.849958][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.856342][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.646207][ T6627] hsr_slave_0: entered promiscuous mode [ 591.650716][ T6627] hsr_slave_1: entered promiscuous mode [ 591.653612][ T6627] debugfs: 'hsr0' already exists in 'hsr' [ 591.653696][ T6627] Cannot create hsr debugfs directory [ 592.123492][ T6627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 592.130778][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.144994][ T6627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 592.163963][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.170162][ T6627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 592.203368][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.218635][ T6627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 592.263990][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.648161][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.437493][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 597.272686][ T6627] veth0_vlan: entered promiscuous mode [ 597.302446][ T6627] veth1_vlan: entered promiscuous mode [ 597.377447][ T6627] veth0_macvtap: entered promiscuous mode [ 597.397501][ T6627] veth1_macvtap: entered promiscuous mode [ 597.576311][ T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.577410][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.577512][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.577583][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.133918][ T6959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 598.134057][ T6959] block device autoloading is deprecated and will be removed. [ 598.417330][ T6963] syz.2.613 uses obsolete (PF_INET,SOCK_PACKET) [ 599.502025][ T6976] md: couldn't update array info. -22 [ 599.552643][ T6976] md: could not open device unknown-block(1,0). [ 599.552822][ T6976] md: md_import_device returned -16 [ 600.753214][ T6990] md: couldn't update array info. -22 [ 600.822522][ T6990] md: could not open device unknown-block(1,0). [ 600.822700][ T6990] md: md_import_device returned -16 [ 601.431763][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 601.581852][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 601.585358][ T24] usb 1-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 601.595900][ T24] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.596065][ T24] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.596115][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 601.596180][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.604807][ T24] usb 1-1: config 0 descriptor?? [ 602.065374][ T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 602.065626][ T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 602.065733][ T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 602.065833][ T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 602.065933][ T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 602.066589][ T24] mcp2221 0003:04D8:00DD.0009: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 602.171708][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 602.286628][ T24] usb 1-1: USB disconnect, device number 38 [ 602.911680][ T11] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 603.062690][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 603.065754][ T11] usb 1-1: New USB device found: idVendor=5543, idProduct=0522, bcdDevice=0.00 [ 603.094625][ T11] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 603.094737][ T11] usb 1-1: config 0 has no interface number 0 [ 603.094854][ T11] usb 1-1: too many endpoints for config 0 interface 2 altsetting 10: 254, using maximum allowed: 30 [ 603.094949][ T11] usb 1-1: config 0 interface 2 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.094996][ T11] usb 1-1: config 0 interface 2 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.095047][ T11] usb 1-1: config 0 interface 2 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 603.095096][ T11] usb 1-1: config 0 interface 2 has no altsetting 0 [ 603.095152][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.100098][ T11] usb 1-1: config 0 descriptor?? [ 603.627452][ T11] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 603.627691][ T11] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 603.627794][ T11] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 603.627895][ T11] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 603.627993][ T11] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 603.649531][ T11] uclogic 0003:5543:0522.000A: hidraw0: USB HID v0.05 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input2 [ 603.815841][ T44] usb 1-1: USB disconnect, device number 39 [ 604.341964][ T7051] md: could not open device unknown-block(1,1). [ 604.342149][ T7051] md: md_import_device returned -16 [ 604.412203][ T7051] md: could not open device unknown-block(1,0). [ 604.412408][ T7051] md: md_import_device returned -16 [ 606.133707][ T7067] md/raid1:md2: active with 1 out of 3 mirrors [ 606.134780][ T7067] md2: detected capacity change from 0 to 5884 [ 608.288500][ T119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.385225][ T119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.456400][ T119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.539704][ T119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.915007][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.932884][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.938144][ T119] bond0 (unregistering): Released all slaves [ 609.037607][ T119] hsr_slave_0: left promiscuous mode [ 609.040653][ T119] hsr_slave_1: left promiscuous mode [ 609.058738][ T119] veth1_macvtap: left promiscuous mode [ 609.059133][ T119] veth0_macvtap: left promiscuous mode [ 609.059361][ T119] veth1_vlan: left promiscuous mode [ 609.059682][ T119] veth0_vlan: left promiscuous mode [ 610.307137][ T29] audit: type=1400 audit(610.210:488): avc: denied { write } for pid=7106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.566751][ T29] audit: type=1400 audit(610.470:489): avc: denied { write } for pid=7109 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.777907][ T2975] 8021q: adding VLAN 0 to HW filter on device eth1 [ 610.796240][ T29] audit: type=1400 audit(610.700:490): avc: denied { map } for pid=7112 comm="syz.0.639" path="/dev/dsp" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 611.554859][ T29] audit: type=1400 audit(611.460:491): avc: denied { write } for pid=7116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.662437][ T7127] fuse: Unknown parameter '0x0000000000000003' [ 611.985515][ T29] audit: type=1400 audit(611.890:492): avc: denied { write } for pid=7130 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.209401][ T2975] 8021q: adding VLAN 0 to HW filter on device eth2 [ 612.455825][ T7149] fuse: Unknown parameter 'fd0x0000000000000003' [ 612.721664][ T29] audit: type=1400 audit(612.620:493): avc: denied { write } for pid=7150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.168633][ T29] audit: type=1400 audit(613.070:494): avc: denied { write } for pid=7157 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.492651][ T2975] 8021q: adding VLAN 0 to HW filter on device eth3 [ 613.519513][ T7168] netlink: 'syz.2.651': attribute type 10 has an invalid length. [ 613.526980][ T7168] netlink: 'syz.2.651': attribute type 10 has an invalid length. [ 613.537095][ T29] audit: type=1400 audit(613.440:495): avc: denied { create } for pid=7167 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 613.868232][ T7173] fuse: Unknown parameter 'fd0x0000000000000003' [ 614.170048][ T29] audit: type=1400 audit(614.070:496): avc: denied { write } for pid=7174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.349523][ T29] audit: type=1400 audit(614.250:497): avc: denied { write } for pid=7179 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.639959][ T2975] 8021q: adding VLAN 0 to HW filter on device eth4 [ 616.632490][ T7203] fuse: Unknown parameter 'fd0x0000000000000003' [ 617.252764][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 617.252887][ T29] audit: type=1400 audit(617.160:499): avc: denied { create } for pid=7215 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 618.226919][ T29] audit: type=1400 audit(618.130:500): avc: denied { bind } for pid=7175 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 618.241470][ T29] audit: type=1400 audit(618.140:501): avc: denied { connect } for pid=7175 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 618.277922][ T29] audit: type=1400 audit(618.180:502): avc: denied { write } for pid=7175 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 620.453475][ T7233] misc userio: Begin command sent, but we're already running [ 621.541730][ T6954] atkbd serio2: keyboard reset failed on [ 622.306754][ T7242] FAULT_INJECTION: forcing a failure. [ 622.306754][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 622.306917][ T7242] CPU: 1 UID: 0 PID: 7242 Comm: syz.0.668 Tainted: G L syzkaller #0 PREEMPT [ 622.306982][ T7242] Tainted: [L]=SOFTLOCKUP [ 622.307003][ T7242] Hardware name: ARM-Versatile Express [ 622.307029][ T7242] Call trace: [ 622.307078][ T7242] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 622.307195][ T7242] r7:60000013 r6:60000013 r5:82542868 r4:00000000 [ 622.307214][ T7242] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 622.307271][ T7242] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 622.307330][ T7242] r7:854872c0 r6:00000000 r5:854872c0 r4:83516624 [ 622.307343][ T7242] [<8021f5fc>] (dump_stack) from [<80a5f9c0>] (should_fail_ex+0x1c0/0x220) [ 622.307393][ T7242] [<80a5f800>] (should_fail_ex) from [<8059bf4c>] (should_failslab+0x6c/0x94) [ 622.307457][ T7242] r8:00000000 r7:854872c0 r6:80840ef8 r5:00000d40 r4:83cba6c0 [ 622.307471][ T7242] [<8059bee0>] (should_failslab) from [<80578890>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 622.307532][ T7242] [<80578834>] (kmem_cache_alloc_noprof) from [<80840ef8>] (security_inode_alloc+0x30/0x1d0) [ 622.307601][ T7242] r10:861361c0 r9:00000000 r8:00000000 r7:00000c40 r6:8442c800 r5:861360c0 [ 622.307619][ T7242] r4:861360c0 [ 622.307632][ T7242] [<80840ec8>] (security_inode_alloc) from [<805fe1d4>] (inode_init_always_gfp+0x184/0x1d8) [ 622.307688][ T7242] r5:00000000 r4:861360c0 [ 622.307701][ T7242] [<805fe050>] (inode_init_always_gfp) from [<80601c2c>] (alloc_inode+0x40/0xd0) [ 622.307760][ T7242] r10:00000119 r9:87215000 r8:8020029c r7:00000010 r6:82077880 r5:8442c800 [ 622.307780][ T7242] r4:861360c0 r3:00000001 [ 622.307794][ T7242] [<80601bec>] (alloc_inode) from [<816cdf34>] (sock_alloc+0x20/0x78) [ 622.307856][ T7242] r7:00000010 r6:00000000 r5:00000003 r4:00000010 [ 622.307869][ T7242] [<816cdf14>] (sock_alloc) from [<816ce138>] (__sock_create+0x80/0x22c) [ 622.307919][ T7242] r5:00000003 r4:00000010 [ 622.307931][ T7242] [<816ce0b8>] (__sock_create) from [<816d11b8>] (__sys_socket+0x94/0x118) [ 622.307995][ T7242] r10:00000119 r9:854872c0 r8:8020029c r7:00000119 r6:854872c0 r5:00000010 [ 622.308015][ T7242] r4:00000003 [ 622.308029][ T7242] [<816d1124>] (__sys_socket) from [<816d124c>] (sys_socket+0x10/0x14) [ 622.308086][ T7242] r6:ffffffff r5:00000000 r4:76f63e78 [ 622.308099][ T7242] [<816d123c>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 622.308145][ T7242] Exception stack(0xeadc1fa8 to 0xeadc1ff0) [ 622.308181][ T7242] 1fa0: 76f63e78 00000000 00000010 00000003 00000010 00000000 [ 622.308212][ T7242] 1fc0: 76f63e78 00000000 ffffffff 00000119 003562d8 00000000 00000001 76f650dc [ 622.308236][ T7242] 1fe0: 00000000 76f63e44 0001cdc0 00132fbc [ 622.308506][ T7242] socket: no more sockets [ 625.324490][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 625.324906][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 627.019677][ T29] audit: type=1400 audit(626.920:503): avc: denied { write } for pid=7267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.719646][ T29] audit: type=1400 audit(627.620:504): avc: denied { write } for pid=7273 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.373540][ T29] audit: type=1400 audit(629.280:505): avc: denied { write } for pid=7279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.719497][ T29] audit: type=1400 audit(629.620:506): avc: denied { write } for pid=7282 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.560359][ T29] audit: type=1400 audit(630.460:507): avc: denied { write } for pid=7285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.330238][ T29] audit: type=1400 audit(631.230:508): avc: denied { write } for pid=7288 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.835273][ T29] audit: type=1400 audit(632.740:509): avc: denied { write } for pid=7294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.545939][ T29] audit: type=1400 audit(633.450:510): avc: denied { write } for pid=7298 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.411777][ T7311] netlink: 'syz.2.685': attribute type 39 has an invalid length. [ 636.721679][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.728164][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.629813][ T29] audit: type=1400 audit(641.520:511): avc: denied { read } for pid=7351 comm="syz.0.696" name="set_event" dev="tracefs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 644.107650][ T7355] device-mapper: raid: Choosing default region size of 4MiB [ 644.117446][ T7355] device-mapper: table: 248:2: raid: Not enough devices to satisfy specification (-EINVAL) [ 644.117785][ T7355] device-mapper: ioctl: error adding target to table [ 648.219349][ T29] audit: type=1400 audit(648.120:512): avc: denied { write } for pid=7368 comm="syz.2.701" name="functions" dev="configfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.220147][ T7369] file system registered [ 648.232170][ T29] audit: type=1400 audit(648.130:513): avc: denied { write } for pid=7368 comm="syz.2.701" name="functions" dev="configfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.232363][ T29] audit: type=1400 audit(648.130:514): avc: denied { remove_name } for pid=7368 comm="syz.2.701" name="ffs.usb0" dev="configfs" ino=9386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.232467][ T29] audit: type=1400 audit(648.130:515): avc: denied { rmdir } for pid=7368 comm="syz.2.701" name="ffs.usb0" dev="configfs" ino=9386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.232616][ T7369] unloading [ 651.760198][ T29] audit: type=1400 audit(651.660:516): avc: denied { setopt } for pid=7395 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 656.671912][ T6954] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 656.823556][ T6954] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 656.827665][ T6954] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 656.827871][ T6954] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 656.827929][ T6954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.842537][ T6954] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 656.842656][ T6954] usb 1-1: Product: syz [ 656.842685][ T6954] usb 1-1: Manufacturer: syz [ 656.842713][ T6954] usb 1-1: SerialNumber: syz [ 656.854066][ T6954] usb 1-1: config 0 descriptor?? [ 656.858214][ T6954] hub 1-1:0.0: bad descriptor, ignoring hub [ 656.858344][ T6954] hub 1-1:0.0: probe with driver hub failed with error -5 [ 656.866432][ T6954] usb 1-1: selecting invalid altsetting 0 [ 657.192748][ T6954] usb 1-1: USB disconnect, device number 40 [ 657.532289][ T6954] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 657.714876][ T6954] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 657.734718][ T6954] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 657.734871][ T6954] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 657.734926][ T6954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 657.771296][ T6954] usb 1-1: string descriptor 0 read error: -22 [ 657.771491][ T6954] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 657.776654][ T6954] usb 1-1: config 0 descriptor?? [ 657.790638][ T6954] hub 1-1:0.0: bad descriptor, ignoring hub [ 657.790776][ T6954] hub 1-1:0.0: probe with driver hub failed with error -5 [ 657.799929][ T6954] usb 1-1: selecting invalid altsetting 0 [ 658.112637][ T24] usb 1-1: USB disconnect, device number 41 [ 666.271708][ T7497] md: could not open device unknown-block(1,5). [ 666.272086][ T7497] md: md_import_device returned -16 [ 667.185808][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.187003][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.765994][ T29] audit: type=1400 audit(667.670:517): avc: denied { create } for pid=7515 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 667.985675][ T7519] netlink: 'syz.2.731': attribute type 10 has an invalid length. [ 667.989928][ T7519] syz_tun: entered promiscuous mode [ 669.626694][ T29] audit: type=1400 audit(669.530:518): avc: denied { create } for pid=7530 comm="syz.0.737" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 669.908040][ T29] audit: type=1400 audit(669.810:519): avc: denied { unlink } for pid=3121 comm="syz-executor" name="file0" dev="tmpfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 670.239069][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 679.713137][ T7593] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/bus@8000000/bus@8000000:motherboard-bus/bus@8000000:motherboard-bus:iofpga-bus@300000000/1c070000.kmi/serio1/input/input11 [ 680.066416][ T7608] syzkaller0: entered promiscuous mode [ 680.066539][ T7608] syzkaller0: entered allmulticast mode [ 681.363397][ T29] audit: type=1326 audit(681.270:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.364228][ T29] audit: type=1326 audit(681.270:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=451 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.365015][ T29] audit: type=1326 audit(681.270:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.365531][ T29] audit: type=1326 audit(681.270:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.365897][ T29] audit: type=1326 audit(681.270:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.366277][ T29] audit: type=1326 audit(681.270:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.367224][ T29] audit: type=1326 audit(681.270:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.367691][ T29] audit: type=1326 audit(681.270:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.368107][ T29] audit: type=1326 audit(681.270:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 681.368589][ T29] audit: type=1326 audit(681.270:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.2.769" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7fc00000 [ 683.822022][ T3744] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 684.001544][ T3744] usb 1-1: Using ep0 maxpacket: 16 [ 684.006257][ T3744] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 684.035592][ T3744] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 684.035733][ T3744] usb 1-1: config 0 has no interface number 0 [ 684.035805][ T3744] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 684.035862][ T3744] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 684.126229][ T3744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.126341][ T3744] usb 1-1: Product: syz [ 684.126364][ T3744] usb 1-1: Manufacturer: syz [ 684.126385][ T3744] usb 1-1: SerialNumber: syz [ 684.146785][ T3744] usb 1-1: config 0 descriptor?? [ 684.152744][ T7636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 684.153144][ T7636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 684.374987][ T7636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 684.375884][ T7636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 684.622137][ T3744] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 684.832289][ T3744] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 684.832491][ T3744] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 684.832861][ T3744] asix 1-1:0.34: probe with driver asix failed with error -61 [ 685.196447][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.197251][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.513156][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 687.513281][ T29] audit: type=1400 audit(687.420:539): avc: denied { mounton } for pid=7654 comm="syz.2.779" path="/68/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 690.550015][ T29] audit: type=1400 audit(690.450:540): avc: denied { execute } for pid=7660 comm="syz.2.780" path="/dev/audio1" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.075247][ T6955] usb 1-1: USB disconnect, device number 42 [ 695.931990][ T6955] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 696.093610][ T6955] usb 1-1: Using ep0 maxpacket: 16 [ 696.098609][ T6955] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 696.117674][ T6955] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 696.117814][ T6955] usb 1-1: config 0 has no interface number 0 [ 696.117894][ T6955] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 696.117947][ T6955] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 696.183550][ T6955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.183672][ T6955] usb 1-1: Product: syz [ 696.183702][ T6955] usb 1-1: Manufacturer: syz [ 696.183728][ T6955] usb 1-1: SerialNumber: syz [ 696.188427][ T6955] usb 1-1: config 0 descriptor?? [ 696.208566][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 696.208960][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 696.435188][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 696.435416][ T7706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 696.641954][ T6955] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 696.847897][ T6955] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 696.847995][ T6955] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 696.848184][ T6955] asix 1-1:0.34: probe with driver asix failed with error -61 [ 703.842011][ T29] audit: type=1400 audit(703.740:541): avc: denied { mount } for pid=7745 comm="syz.2.805" name="/" dev="ramfs" ino=10279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 707.263626][ T24] usb 1-1: USB disconnect, device number 43 [ 707.497573][ T29] audit: type=1400 audit(707.400:542): avc: denied { checkpoint_restore } for pid=7759 comm="syz.0.810" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.205221][ T29] audit: type=1400 audit(708.050:543): avc: denied { create } for pid=7768 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 708.205404][ T29] audit: type=1400 audit(708.070:544): avc: denied { setopt } for pid=7768 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 708.704058][ T29] audit: type=1400 audit(708.600:545): avc: denied { getopt } for pid=7768 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 713.072694][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.080437][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.192026][ T29] audit: type=1400 audit(713.100:546): avc: denied { write } for pid=7779 comm="syz.2.815" name="functions" dev="configfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 713.212512][ T29] audit: type=1400 audit(713.120:547): avc: denied { write } for pid=7779 comm="syz.2.815" name="functions" dev="configfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 713.645152][ T29] audit: type=1400 audit(713.550:548): avc: denied { allowed } for pid=7785 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 714.108655][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.109344][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.298693][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.300133][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.027179][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.034006][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.229013][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.229805][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.976087][ T29] audit: type=1400 audit(719.880:549): avc: denied { create } for pid=7817 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 720.010605][ T29] audit: type=1400 audit(719.910:550): avc: denied { ioctl } for pid=7817 comm="syz.2.826" path="socket:[11365]" dev="sockfs" ino=11365 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 720.041873][ T29] audit: type=1400 audit(719.940:551): avc: denied { write } for pid=7817 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 721.729458][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.738692][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.154739][ T29] audit: type=1400 audit(722.060:552): avc: denied { getopt } for pid=7832 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 722.435261][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.435980][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.652065][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.657489][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.829011][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.913051][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.545500][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.546822][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.573073][ T44] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 729.719248][ T7896] FAULT_INJECTION: forcing a failure. [ 729.719248][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 729.719400][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.2.854 Tainted: G L syzkaller #0 PREEMPT [ 729.719457][ T7896] Tainted: [L]=SOFTLOCKUP [ 729.719470][ T7896] Hardware name: ARM-Versatile Express [ 729.719490][ T7896] Call trace: [ 729.719527][ T7896] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 729.719625][ T7896] r7:60000013 r6:60000013 r5:82542868 r4:00000000 [ 729.719640][ T7896] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 729.719684][ T7896] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 729.719733][ T7896] r7:854a2640 r6:00000000 r5:854a2640 r4:83516624 [ 729.719745][ T7896] [<8021f5fc>] (dump_stack) from [<80a5f9c0>] (should_fail_ex+0x1c0/0x220) [ 729.719788][ T7896] [<80a5f800>] (should_fail_ex) from [<8059bf4c>] (should_failslab+0x6c/0x94) [ 729.719842][ T7896] r8:00000cc0 r7:854a2640 r6:816e1c80 r5:00000cc0 r4:83cf5d80 [ 729.719854][ T7896] [<8059bee0>] (should_failslab) from [<80579058>] (kmem_cache_alloc_node_noprof+0x60/0x3ec) [ 729.719897][ T7896] [<80578ff8>] (kmem_cache_alloc_node_noprof) from [<816e1c80>] (__alloc_skb+0x74/0x2ec) [ 729.719957][ T7896] r10:dfc6da60 r9:816e1e70 r8:00000cc0 r7:00000000 r6:83cf5d80 r5:ffffffff [ 729.719972][ T7896] r4:ddde3c00 [ 729.719983][ T7896] [<816e1c0c>] (__alloc_skb) from [<8179b638>] (tcf_action_add+0x240/0x2cc) [ 729.720057][ T7896] r9:dfc6dc48 r8:87214000 r7:00000000 r6:dfc6dae4 r5:0000011c r4:dfc6da64 [ 729.720070][ T7896] [<8179b3f8>] (tcf_action_add) from [<8179b7b8>] (tc_ctl_action+0xf4/0x174) [ 729.720126][ T7896] r10:00000000 r9:00000000 r8:8383aadc r7:00000123 r6:87214000 r5:dfc6dc48 [ 729.720140][ T7896] r4:85a11b00 [ 729.720151][ T7896] [<8179b6c4>] (tc_ctl_action) from [<81724058>] (rtnetlink_rcv_msg+0x12c/0x340) [ 729.720205][ T7896] r7:83dfd600 r6:8383aadc r5:00000020 r4:85a11b00 [ 729.720217][ T7896] [<81723f2c>] (rtnetlink_rcv_msg) from [<818078e0>] (netlink_rcv_skb+0xc0/0x120) [ 729.720314][ T7896] r10:8340f6b0 r9:87214000 r8:87590f80 r7:85a11b00 r6:81723f2c r5:83dfd600 [ 729.720331][ T7896] r4:00000000 [ 729.720346][ T7896] [<81807820>] (netlink_rcv_skb) from [<81722a0c>] (rtnetlink_rcv+0x18/0x1c) [ 729.720404][ T7896] r7:87288864 r6:83dfd600 r5:00000060 r4:87288800 [ 729.720416][ T7896] [<817229f4>] (rtnetlink_rcv) from [<81807114>] (netlink_unicast+0x3a0/0x420) [ 729.720460][ T7896] [<81806d74>] (netlink_unicast) from [<81807370>] (netlink_sendmsg+0x1dc/0x46c) [ 729.720516][ T7896] r10:00000000 r9:86ce2400 r8:00000000 r7:00000000 r6:00000060 r5:83dfd600 [ 729.720533][ T7896] r4:dfc6df28 [ 729.720544][ T7896] [<81807194>] (netlink_sendmsg) from [<816cf1c8>] (__sock_sendmsg+0x44/0xb0) [ 729.720602][ T7896] r10:00000080 r9:00000000 r8:dfc6ddd4 r7:00000000 r6:86293440 r5:dfc6df28 [ 729.720616][ T7896] r4:00000000 [ 729.720627][ T7896] [<816cf184>] (__sock_sendmsg) from [<816d00bc>] (____sys_sendmsg+0x238/0x2fc) [ 729.720676][ T7896] r7:00000000 r6:00000000 r5:86293440 r4:dfc6df28 [ 729.720689][ T7896] [<816cfe84>] (____sys_sendmsg) from [<816d04f4>] (___sys_sendmsg+0x9c/0xd0) [ 729.720742][ T7896] r10:00000128 r9:20000600 r8:00000080 r7:00000000 r6:86293440 r5:dfc6df28 [ 729.720755][ T7896] r4:00000000 [ 729.720767][ T7896] [<816d0458>] (___sys_sendmsg) from [<816d2988>] (__sys_sendmsg+0x8c/0xe0) [ 729.720854][ T7896] r9:854a2640 r8:86cb7e00 r7:00000080 r6:20000600 r5:86cb7e01 r4:00000004 [ 729.720875][ T7896] [<816d28fc>] (__sys_sendmsg) from [<816d29f0>] (sys_sendmsg+0x14/0x18) [ 729.720932][ T7896] r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [ 729.720944][ T7896] [<816d29dc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 729.720984][ T7896] Exception stack(0xdfc6dfa8 to 0xdfc6dff0) [ 729.721025][ T7896] dfa0: 00000000 00000000 00000004 20000600 00000080 00000000 [ 729.721057][ T7896] dfc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000001 76ff40dc [ 729.721078][ T7896] dfe0: 76ff3e88 76ff3e78 00018ff8 001311f0 [ 729.792693][ C1] net_ratelimit: 12 callbacks suppressed [ 729.849900][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 729.867161][ T44] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 729.880115][ T44] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 729.880292][ T44] usb 1-1: config 0 has no interface number 0 [ 729.880358][ T44] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 729.880404][ T44] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 729.901243][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.901284][ T44] usb 1-1: Product: syz [ 729.901309][ T44] usb 1-1: Manufacturer: syz [ 729.901332][ T44] usb 1-1: SerialNumber: syz [ 729.906886][ T44] usb 1-1: config 0 descriptor?? [ 729.912466][ T7887] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 729.912689][ T7887] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 730.146835][ T7887] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 730.147284][ T7887] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 730.233904][ T7903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 730.322928][ T7903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 730.386959][ T44] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 730.812946][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.817460][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.829514][ T44] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 730.830052][ T44] asix 1-1:0.34: probe with driver asix failed with error -32 [ 734.981318][ C1] net_ratelimit: 16 callbacks suppressed [ 740.181284][ C1] net_ratelimit: 22 callbacks suppressed [ 740.853118][ T3049] usb 1-1: USB disconnect, device number 44 [ 741.645453][ T7947] 8<--- cut here --- [ 741.645594][ T7947] Unable to handle kernel paging request at virtual address fee02003 when write [ 741.645710][ T7947] [fee02003] *pgd=80000080007003, *pmd=00000000 [ 741.646780][ T7947] Internal error: Oops: a06 [#1] SMP ARM [ 741.650261][ T7947] Modules linked in: [ 741.650953][ T7947] CPU: 0 UID: 0 PID: 7947 Comm: syz.0.871 Tainted: G L syzkaller #0 PREEMPT [ 741.651564][ T7947] Tainted: [L]=SOFTLOCKUP [ 741.651828][ T7947] Hardware name: ARM-Versatile Express [ 741.652114][ T7947] PC is at subdev_8255_io+0x60/0x6c [ 741.652598][ T7947] LR is at subdev_8255_io+0x4c/0x6c [ 741.653147][ T7947] pc : [<8155ad50>] lr : [<8155ad3c>] psr: 60000013 [ 741.653759][ T7947] sp : df9b1cc0 ip : df9b1cc0 fp : df9b1cdc [ 741.654063][ T7947] r10: 00002000 r9 : 00000004 r8 : df9b1dac [ 741.654379][ T7947] r7 : 00000000 r6 : 0000009b r5 : 83c1a0c0 r4 : 00002003 [ 741.654760][ T7947] r3 : 0000009b r2 : fee02003 r1 : 00000001 r0 : 83c1a0c0 [ 741.655232][ T7947] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 741.655681][ T7947] Control: 30c5387d Table: 872d9d80 DAC: fffffffd [ 741.656138][ T7947] Register r0 information: slab kmalloc-192 start 83c1a0c0 pointer offset 0 size 192 [ 741.657547][ T7947] Register r1 information: non-paged memory [ 741.658177][ T7947] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 741.658920][ T7947] Register r3 information: non-paged memory [ 741.659269][ T7947] Register r4 information: non-paged memory [ 741.659625][ T7947] Register r5 information: slab kmalloc-192 start 83c1a0c0 pointer offset 0 size 192 [ 741.660153][ T7947] Register r6 information: non-paged memory [ 741.660498][ T7947] Register r7 information: NULL pointer [ 741.660901][ T7947] Register r8 information: 2-page vmalloc region starting at 0xdf9b0000 allocated at kernel_clone+0xc4/0x440 [ 741.661515][ T7947] Register r9 information: non-paged memory [ 741.661817][ T7947] Register r10 information: non-paged memory [ 741.662087][ T7947] Register r11 information: 2-page vmalloc region starting at 0xdf9b0000 allocated at kernel_clone+0xc4/0x440 [ 741.662597][ T7947] Register r12 information: 2-page vmalloc region starting at 0xdf9b0000 allocated at kernel_clone+0xc4/0x440 [ 741.663194][ T7947] Process syz.0.871 (pid: 7947, stack limit = 0xdf9b0000) [ 741.663585][ T7947] Stack: (0xdf9b1cc0 to 0xdf9b2000) [ 741.663846][ T7947] 1cc0: 8155acf0 00002000 83c1a0c0 00000000 df9b1cfc df9b1ce0 8155aa2c 8155acfc [ 741.664406][ T7947] 1ce0: 00002000 805797c8 83cee000 83cee000 df9b1d1c df9b1d00 8155ade4 8155a9e0 [ 741.664946][ T7947] 1d00: 83c1a0c0 00000000 83cee000 00000000 df9b1d5c df9b1d20 8155af94 8155ad68 [ 741.665322][ T7947] 1d20: ffffffff 00000004 8341e380 00000000 00000000 835dfc28 83c1a0c0 00000000 [ 741.665741][ T7947] 1d40: df9b1d98 83c1a0c0 00000000 83737400 df9b1d94 df9b1d60 81549990 8155af2c [ 741.666142][ T7947] 1d60: 40946400 00000000 df9b1d84 20000140 83c1a0c0 b5403587 40946400 8642d940 [ 741.666536][ T7947] 1d80: 83c1a0f0 00000003 df9b1e54 df9b1d98 815450dc 81549894 35353238 00000000 [ 741.666867][ T7947] 1da0: 00000000 00000000 00000000 00002000 00010001 00000004 000009b8 0000ffff [ 741.667252][ T7947] 1dc0: 00000002 0000c6b9 00000006 54c6cff3 000000fa ffffffff 00000003 fbfffff3 [ 741.667604][ T7947] 1de0: 00400001 10000003 00000401 00000000 0000007f 00000003 40000003 0020008d [ 741.669232][ T7947] 1e00: 00000004 00000007 20001e5b 00000001 00000e6c ffffffff 00000007 00004006 [ 741.669657][ T7947] 1e20: 0000008a 00000000 00000000 ceeb026c 00000000 86cb7980 83c1a0c0 20000140 [ 741.670135][ T7947] 1e40: 40946400 8642d940 df9b1f14 df9b1e58 815463e8 8154501c 00000064 84f2acb4 [ 741.670473][ T7947] 1e60: df9b1ee4 df9b1e70 8085ed34 808550a0 00000064 00000001 00000000 df9b1e90 [ 741.671091][ T7947] 1e80: 00000000 85420610 840e4dd0 40946400 0000000b 00000000 df9b1e84 00000000 [ 741.671838][ T7947] 1ea0: 00000000 00000000 00000000 00000000 00000000 ceeb026c 803108d0 86cb7980 [ 741.673830][ T7947] 1ec0: 40946400 20000140 20000140 86cb7980 00000003 8642d940 df9b1ef4 df9b1ee8 [ 741.675996][ T7947] 1ee0: 8085ee64 ceeb026c df9b1f14 00000000 86cb7981 40946400 20000140 86cb7980 [ 741.677112][ T7947] 1f00: 00000003 8642d940 df9b1fa4 df9b1f18 805f3ed4 815460a4 ecac8b10 8642d940 [ 741.679166][ T7947] 1f20: df9b1f3c df9b1f30 81c11690 81c1155c df9b1f54 df9b1f40 8025bc8c 80291138 [ 741.679800][ T7947] 1f40: df9b1fb0 40000000 df9b1f84 df9b1f58 80221c2c 8025bc44 00000000 8341a14c [ 741.680282][ T7947] 1f60: df9b1fb0 0013f390 ecac8b10 80221b80 00000000 ceeb026c df9b1fac 00000000 [ 741.680673][ T7947] 1f80: 00000000 00356310 00000036 8020029c 8642d940 00000036 00000000 df9b1fa8 [ 741.681239][ T7947] 1fa0: 80200060 805f3c9c 00000000 00000000 00000003 40946400 20000140 00000000 [ 741.681725][ T7947] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f650dc [ 741.682101][ T7947] 1fe0: 76f64e88 76f64e78 00018ff8 001311f0 60000010 00000003 00000000 00000000 [ 741.682495][ T7947] Call trace: [ 741.682717][ T7947] [<8155acf0>] (subdev_8255_io) from [<8155aa2c>] (subdev_8255_do_config+0x58/0x60) [ 741.683216][ T7947] r7:00000000 r6:83c1a0c0 r5:00002000 r4:8155acf0 [ 741.683474][ T7947] [<8155a9d4>] (subdev_8255_do_config) from [<8155ade4>] (subdev_8255_io_init+0x88/0x98) [ 741.683856][ T7947] r4:83cee000 [ 741.684063][ T7947] [<8155ad5c>] (subdev_8255_io_init) from [<8155af94>] (dev_8255_attach+0x74/0x138) [ 741.684526][ T7947] r7:00000000 r6:83cee000 r5:00000000 r4:83c1a0c0 [ 741.684997][ T7947] [<8155af20>] (dev_8255_attach) from [<81549990>] (comedi_device_attach+0x108/0x244) [ 741.686209][ T7947] r10:83737400 r9:00000000 r8:83c1a0c0 r7:df9b1d98 r6:00000000 r5:83c1a0c0 [ 741.686656][ T7947] r4:835dfc28 [ 741.686806][ T7947] [<81549888>] (comedi_device_attach) from [<815450dc>] (do_devconfig_ioctl+0xcc/0x218) [ 741.687241][ T7947] r10:00000003 r9:83c1a0f0 r8:8642d940 r7:40946400 r6:b5403587 r5:83c1a0c0 [ 741.687856][ T7947] r4:20000140 [ 741.688178][ T7947] [<81545010>] (do_devconfig_ioctl) from [<815463e8>] (comedi_unlocked_ioctl+0x350/0x1e90) [ 741.688993][ T7947] r8:8642d940 r7:40946400 r6:20000140 r5:83c1a0c0 r4:86cb7980 [ 741.689635][ T7947] [<81546098>] (comedi_unlocked_ioctl) from [<805f3ed4>] (sys_ioctl+0x244/0xb5c) [ 741.690374][ T7947] r10:8642d940 r9:00000003 r8:86cb7980 r7:20000140 r6:40946400 r5:86cb7981 [ 741.691002][ T7947] r4:00000000 [ 741.691351][ T7947] [<805f3c90>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 741.691915][ T7947] Exception stack(0xdf9b1fa8 to 0xdf9b1ff0) [ 741.692392][ T7947] 1fa0: 00000000 00000000 00000003 40946400 20000140 00000000 [ 741.692768][ T7947] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f650dc [ 741.693121][ T7947] 1fe0: 76f64e88 76f64e78 00018ff8 001311f0 [ 741.693360][ T7947] r10:00000036 r9:8642d940 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 741.693683][ T7947] r4:00000000 [ 741.694239][ T7947] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 741.696168][ C0] virtqueue callback for 84ea4540 (80e62ea0) [ 741.696616][ C0] virtqueue interrupt with no work for 84ea4480 [ 741.696871][ C0] virtqueue interrupt with no work for 84ea43c0 [ 741.697380][ C0] No more buffers in queue [ 741.697742][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 741.698048][ C0] No more buffers in queue [ 741.698815][ C0] eth0: xmit 87a05c00 52:55:0a:00:02:02 [ 741.699134][ C0] Added buffer head 61 to 84ea4480 [ 741.699678][ C0] virtqueue interrupt with no work for 84ea4540 [ 741.700039][ C0] virtqueue callback for 84ea4480 (80e65214) [ 741.700426][ C0] virtqueue interrupt with no work for 84ea43c0 [ 741.701596][ C0] Sent skb 87a05c00 [ 741.702631][ C0] No more buffers in queue [ 741.703872][ T7947] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 741.735874][ T3115] eth0: xmit 86725b00 52:55:0a:00:02:02 [ 741.736112][ T3115] Added buffer head 61 to 84ea4480 [ 741.736661][ C0] virtqueue callback for 84ea4540 (80e62ea0) [ 741.736763][ C0] virtqueue callback for 84ea4480 (80e65214) [ 741.736809][ C0] virtqueue interrupt with no work for 84ea43c0 [ 741.736949][ C0] Sent skb 86725b00 [ 741.737013][ C0] No more buffers in queue [ 741.737166][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 741.737238][ C0] No more buffers in queue [ 741.737609][ C0] No more buffers in queue [ 741.771579][ T29] audit: type=1400 audit(741.660:553): avc: denied { read } for pid=2927 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 741.771732][ T29] audit: type=1400 audit(741.670:554): avc: denied { search } for pid=2927 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.771795][ T29] audit: type=1400 audit(741.670:555): avc: denied { write search } for pid=2927 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.772130][ T29] audit: type=1400 audit(741.670:556): avc: denied { add_name } for pid=2927 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.772214][ T29] audit: type=1400 audit(741.670:557): avc: denied { create } for pid=2927 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 741.785963][ T29] audit: type=1400 audit(741.690:558): avc: denied { append open } for pid=2927 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 741.790434][ T29] audit: type=1400 audit(741.690:559): avc: denied { getattr } for pid=2927 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 741.802650][ T3115] eth0: xmit 86725b00 52:55:0a:00:02:02 [ 741.802827][ T3115] Added buffer head 61 to 84ea4480 [ 741.803163][ C0] virtqueue callback for 84ea4540 (80e62ea0) [ 741.803253][ C0] virtqueue callback for 84ea4480 (80e65214) [ 741.803355][ C0] virtqueue interrupt with no work for 84ea43c0 [ 741.803482][ C0] Sent skb 86725b00 [ 741.803550][ C0] No more buffers in queue [ 741.803654][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 741.803749][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 741.803794][ C0] No more buffers in queue [ 741.804386][ C0] eth0: xmit 83f01180 52:55:0a:00:02:02 [ 741.804461][ C0] Added buffer head 61 to 84ea4480 [ 741.804617][ C0] No more buffers in queue [ 741.804676][ C0] Sent skb 83f01180 [ 741.804720][ C0] No more buffers in queue [ 741.810802][ T3115] eth0: xmit 86725b00 52:55:0a:00:02:02 [ 741.811609][ T3115] Added buffer head 61 to 84ea4480 [ 741.812328][ C0] virtqueue callback for 84ea4540 (80e62ea0) [ 741.812395][ C0] virtqueue callback for 84ea4480 (80e65214) [ 741.812433][ C0] virtqueue interrupt with no work for 84ea43c0 [ 741.812917][ C0] Sent skb 86725b00 [ 741.813100][ C0] No more buffers in queue [ 741.813216][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 741.813319][ C0] Receiving skb proto 0x0800 len 136 type 0 [ 741.813384][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 741.813422][ C0] No more buffers in queue [ 741.813485][ C0] Added buffer head 497 to 84ea4540 [ 741.813524][ C0] Added buffer head 498 to 84ea4540 [ 741.813558][ C0] Added buffer head 499 to 84ea4540 [ 741.813595][ C0] Added buffer head 326 to 84ea4540 [ 741.813628][ C0] Added buffer head 327 to 84ea4540 [ 741.813658][ C0] Added buffer head 328 to 84ea4540 [ 741.813689][ C0] Added buffer head 329 to 84ea4540 [ 741.813743][ C0] Added buffer head 330 to 84ea4540 [ 741.813781][ C0] Added buffer head 331 to 84ea4540 [ 741.813815][ C0] Added buffer head 332 to 84ea4540 [ 741.813848][ C0] Added buffer head 628 to 84ea4540 [ 741.813879][ C0] Added buffer head 629 to 84ea4540 [ 741.813910][ C0] Added buffer head 630 to 84ea4540 [ 741.813941][ C0] Added buffer head 631 to 84ea4540 [ 741.813975][ C0] Added buffer head 632 to 84ea4540 [ 741.814005][ C0] Added buffer head 633 to 84ea4540 [ 741.814037][ C0] Added buffer head 634 to 84ea4540 [ 741.814068][ C0] Added buffer head 635 to 84ea4540 [ 741.814111][ C0] Added buffer head 636 to 84ea4540 [ 741.814146][ C0] Added buffer head 543 to 84ea4540 [ 741.814178][ C0] Added buffer head 512 to 84ea4540 [ 741.814215][ C0] Added buffer head 513 to 84ea4540 [ 741.814246][ C0] Added buffer head 514 to 84ea4540 [ 741.814276][ C0] Added buffer head 515 to 84ea4540 [ 741.814306][ C0] Added buffer head 516 to 84ea4540 [ 741.814335][ C0] Added buffer head 517 to 84ea4540 [ 741.814367][ C0] Added buffer head 518 to 84ea4540 [ 741.814398][ C0] Added buffer head 519 to 84ea4540 [ 741.814428][ C0] Added buffer head 520 to 84ea4540 [ 741.814459][ C0] Added buffer head 593 to 84ea4540 [ 741.814488][ C0] Added buffer head 594 to 84ea4540 [ 741.814518][ C0] Added buffer head 595 to 84ea4540 [ 741.814550][ C0] Added buffer head 596 to 84ea4540 [ 741.814912][ C0] No more buffers in queue [ 741.882406][ T7947] Kernel panic - not syncing: Fatal exception [ 741.884554][ T7947] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:19:13 Registers: info registers vcpu 0 CPU#0 R00=852f0c40 R01=00000061 R02=eb3e7000 R03=00000000 R04=85bae01d R05=852f0c40 R06=80b73f30 R07=85bae038 R08=00000000 R09=00000000 R10=0000118d R11=df9b1914 R12=00000002 R13=df9b1908 R14=8355ee54 R15=80b73f88 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=835d5e18 R01=82708f14 R02=a9043480 R03=81c11f50 R04=836cd640 R05=870ab200 R06=0002416c R07=000000ac R08=0000000f R09=000000ac R10=00000003 R11=df805e64 R12=df805e68 R13=df805e58 R14=8147f910 R15=81c11f60 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000