last executing test programs: 17.360441764s ago: executing program 0 (id=22224): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="057a695e23a2594b02", 0x9, 0x0, 0x0, 0x0) 14.767355435s ago: executing program 0 (id=22229): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=""/192, &(0x7f0000000140)=0xc0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000780)="6b10b7101b8e05524818ba10491b3d4662ff5e93", 0x14}) 14.451342213s ago: executing program 0 (id=22230): timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, &(0x7f00000003c0)) 14.360981881s ago: executing program 0 (id=22231): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 14.049886249s ago: executing program 0 (id=22232): close(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 13.48035084s ago: executing program 0 (id=22233): socket$kcm(0x10, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0xffffff6e) lseek(r3, 0x80000001, 0x0) read$FUSE(r3, &(0x7f0000001200)={0x2020}, 0x12d0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 1.849954676s ago: executing program 1 (id=22242): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f00000003c0)=""/143, 0x8f}], 0x2}}], 0x1, 0x0, 0x0) 1.56858282s ago: executing program 1 (id=22243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x8100}, @val={0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @broadcast}}}}, 0x66) 890.529631ms ago: executing program 1 (id=22244): r0 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x10, 0x4, 0x3e0, 0x1f0, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@arp={@private, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="bd22fdd68c29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vcan0\x00', 'geneve0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'xfrm0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 431.851292ms ago: executing program 1 (id=22245): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x18) 220.3521ms ago: executing program 1 (id=22246): openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) clock_settime(0x0, &(0x7f00000000c0)={0x0, 0x3938700}) 0s ago: executing program 1 (id=22247): socket(0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) kernel console output (not intermixed with test programs): awcon="system_u:object_r:dhcp_state_t:s0" [ 4346.947496][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 4347.154581][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 4347.196359][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 4347.198377][ T45] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 4347.198906][ T45] usb 2-1: Product: syz [ 4347.203083][ T45] usb 2-1: Manufacturer: syz [ 4347.234757][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 4347.236211][ T45] r8152-cfgselector 2-1: config 0 descriptor?? [ 4347.475392][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 4347.478114][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 4347.478967][ T45] r8152-cfgselector 2-1: bad CDC descriptors [ 4347.499184][ T45] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 4349.949342][ T7433] trusted_key: syz.1.20055 sent an empty control message without MSG_MORE. [ 4361.114417][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4373.937341][ T7572] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7572 comm=syz.1.20109 [ 4392.843226][T10471] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 4393.022951][T10471] usb 2-1: Using ep0 maxpacket: 8 [ 4393.058204][T10471] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4393.058808][T10471] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 4393.059208][T10471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4393.068400][T10471] usb 2-1: config 0 descriptor?? [ 4393.088725][T10471] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 4393.090682][T10471] usb 2-1: Detected SIO [ 4393.105363][T10471] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 4403.375328][ T6404] usb 2-1: USB disconnect, device number 22 [ 4403.424319][ T6404] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 4403.428573][ T6404] ftdi_sio 2-1:0.0: device disconnected [ 4411.693108][ T1006] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 4411.922999][ T1006] usb 2-1: Using ep0 maxpacket: 32 [ 4411.938069][ T1006] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 4411.939565][ T1006] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 4411.940148][ T1006] usb 2-1: config 1 has no interface number 1 [ 4411.941426][ T1006] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 4411.944732][ T1006] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 4411.989839][ T1006] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 4411.990721][ T1006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4411.991409][ T1006] usb 2-1: Product: syz [ 4411.991653][ T1006] usb 2-1: Manufacturer: syz [ 4411.991902][ T1006] usb 2-1: SerialNumber: syz [ 4412.345147][ T1006] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 4412.346064][ T1006] usb 2-1: 2:1 : sample bitwidth 44 in over sample bytes 4 [ 4412.346726][ T1006] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 4412.347160][ T1006] usb 2-1: 2:1 : invalid channels 0 [ 4412.400431][ T1006] usb 2-1: USB disconnect, device number 23 [ 4418.218482][ T7819] tmpfs: Bad value for 'size' [ 4422.283182][T10471] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 4422.492878][T10471] usb 2-1: Using ep0 maxpacket: 32 [ 4422.509644][T10471] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 4422.510332][T10471] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4422.510695][T10471] usb 2-1: config 0 has no interfaces? [ 4422.559017][T10471] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 4422.559546][T10471] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 4422.559941][T10471] usb 2-1: Product: syz [ 4422.560190][T10471] usb 2-1: Manufacturer: syz [ 4422.560506][T10471] usb 2-1: SerialNumber: syz [ 4422.594433][T10471] usb 2-1: config 0 descriptor?? [ 4423.750132][T10471] usb 2-1: USB disconnect, device number 24 [ 4454.127680][ T8104] serio: Serial port pts0 [ 4459.248294][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4459.829024][ T8146] vmap allocation for size 536875008 failed: use vmalloc= to increase size [ 4459.829711][ T8146] syz.1.20322: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 4459.830450][ T8146] CPU: 0 PID: 8146 Comm: syz.1.20322 Not tainted 6.10.0-rc6-syzkaller #0 [ 4459.830788][ T8146] Hardware name: ARM-Versatile Express [ 4459.831224][ T8146] Call trace: [ 4459.831417][ T8146] [<818d4f38>] (dump_backtrace) from [<818d5034>] (show_stack+0x18/0x1c) [ 4459.831873][ T8146] r7:ffffffff r6:81ff9e84 r5:60000013 r4:81fe1510 [ 4459.832166][ T8146] [<818d501c>] (show_stack) from [<818f26b8>] (dump_stack_lvl+0x70/0x7c) [ 4459.832637][ T8146] [<818f2648>] (dump_stack_lvl) from [<818f26dc>] (dump_stack+0x18/0x1c) [ 4459.833426][ T8146] r5:83620000 r4:00000000 [ 4459.833641][ T8146] [<818f26c4>] (dump_stack) from [<804b1ab0>] (warn_alloc+0xd8/0x178) [ 4459.834118][ T8146] [<804b19d8>] (warn_alloc) from [<804a8b74>] (__vmalloc_node_range_noprof+0xc8/0x5a0) [ 4459.834654][ T8146] r3:20000000 r2:81ff9e84 [ 4459.834903][ T8146] r6:20000000 r5:00000dc0 r4:81ff9ebc [ 4459.835210][ T8146] [<804a8aac>] (__vmalloc_node_range_noprof) from [<8046111c>] (kvmalloc_node_noprof+0xc0/0x110) [ 4459.835799][ T8146] r10:dfb29d00 r9:85362800 r8:815803d4 r7:ffffffff r6:00000dc0 r5:20000000 [ 4459.836295][ T8146] r4:00000000 [ 4459.836929][ T8146] [<8046105c>] (kvmalloc_node_noprof) from [<815803d4>] (xt_alloc_entry_offsets+0x24/0x30) [ 4459.837560][ T8146] r8:b5403587 r7:00000000 r6:20000420 r5:85362840 r4:08000000 [ 4459.837948][ T8146] [<815803b0>] (xt_alloc_entry_offsets) from [<81638c0c>] (translate_table+0x70/0x78c) [ 4459.838316][ T8146] [<81638b9c>] (translate_table) from [<81639dc8>] (do_replace+0xe8/0x5a0) [ 4459.838693][ T8146] r10:00000126 r9:85362840 r8:b5403587 r7:00000240 r6:20000420 r5:85362800 [ 4459.839202][ T8146] r4:84a3b300 [ 4459.839405][ T8146] [<81639ce0>] (do_replace) from [<8163a3b4>] (do_ipt_set_ctl+0x134/0x2a0) [ 4459.839828][ T8146] r10:00000126 r9:813d5208 r8:851e3a40 r7:000002a0 r6:dfb29da8 r5:843e1f00 [ 4459.840256][ T8146] r4:00000040 [ 4459.840447][ T8146] [<8163a280>] (do_ipt_set_ctl) from [<8150e934>] (nf_setsockopt+0x60/0x7c) [ 4459.841075][ T8146] r10:00000126 r9:813d5208 r8:851e3a40 r7:000002a0 r6:843e1f00 r5:8163a280 [ 4459.841503][ T8146] r4:827d64e0 [ 4459.841685][ T8146] [<8150e8d8>] (nf_setsockopt) from [<815a5f38>] (ip_setsockopt+0x88/0x98) [ 4459.842163][ T8146] r6:843e1f00 r5:000002a0 r4:00000040 [ 4459.842591][ T8146] [<815a5eb4>] (ip_setsockopt) from [<815b5938>] (tcp_setsockopt+0x3c/0x58) [ 4459.843274][ T8146] r6:00000000 r5:851e3600 r4:815a5eb0 [ 4459.843519][ T8146] [<815b5900>] (tcp_setsockopt) from [<813d5240>] (sock_common_setsockopt+0x38/0x40) [ 4459.844011][ T8146] r4:815b58fc [ 4459.844390][ T8146] [<813d520c>] (sock_common_setsockopt) from [<817e0b00>] (smc_setsockopt+0xa8/0x3c8) [ 4459.844982][ T8146] r4:00000040 [ 4459.845209][ T8146] [<817e0a5c>] (smc_setsockopt) from [<813d0a5c>] (do_sock_setsockopt+0xb0/0x17c) [ 4459.845664][ T8146] r9:83620000 r8:8020029c r7:00000000 r6:83174280 r5:00000000 r4:817e0a58 [ 4459.846026][ T8146] [<813d09ac>] (do_sock_setsockopt) from [<813d3d5c>] (sys_setsockopt+0x78/0xbc) [ 4459.846517][ T8146] r6:83174280 r5:00000040 r4:00000000 [ 4459.846815][ T8146] [<813d3ce4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4459.847210][ T8146] Exception stack(0xdfb29fa8 to 0xdfb29ff0) [ 4459.847541][ T8146] 9fa0: 000002a0 00000000 00000003 00000000 00000040 200003c0 [ 4459.847947][ T8146] 9fc0: 000002a0 00000000 002542e8 00000126 7ef3f776 7ef3f777 003d0f00 76b790bc [ 4459.848362][ T8146] 9fe0: 76b78ec8 76b78eb8 00018374 00130460 [ 4459.848637][ T8146] r7:00000126 r6:002542e8 r5:00000000 r4:000002a0 [ 4459.866181][ T8146] Mem-Info: [ 4459.866539][ T8146] active_anon:2084 inactive_anon:0 isolated_anon:0 [ 4459.866539][ T8146] active_file:98 inactive_file:41046 isolated_file:0 [ 4459.866539][ T8146] unevictable:0 dirty:13 writeback:0 [ 4459.866539][ T8146] slab_reclaimable:1123 slab_unreclaimable:5763 [ 4459.866539][ T8146] mapped:1694 shmem:871 pagetables:217 [ 4459.866539][ T8146] sec_pagetables:0 bounce:0 [ 4459.866539][ T8146] kernel_misc_reclaimable:0 [ 4459.866539][ T8146] free:435619 free_pcp:323 free_cma:4032 [ 4459.868383][ T8146] Node 0 active_anon:8336kB inactive_anon:0kB active_file:392kB inactive_file:164184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6776kB dirty:52kB writeback:0kB shmem:3484kB writeback_tmp:0kB kernel_stack:1408kB pagetables:868kB sec_pagetables:0kB all_unreclaimable? no [ 4459.869328][ T8146] Normal free:1384172kB boost:0kB min:4780kB low:6208kB high:7636kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:7424kB unevictable:0kB writepending:24kB present:1556480kB managed:1430124kB mlocked:0kB bounce:0kB free_pcp:1292kB local_pcp:748kB free_cma:0kB [ 4459.870568][ T8146] lowmem_reserve[]: 0 4224 0 [ 4459.870972][ T8146] Normal: 67*4kB (UME) 62*8kB (UME) 40*16kB (UE) 31*32kB (UME) 18*64kB (UME) 8*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UM) 4*2048kB (UME) 334*4096kB (UM) = 1384156kB [ 4459.872189][ T8146] 42015 total pagecache pages [ 4459.887333][ T8146] 0 pages in swap cache [ 4459.887728][ T8146] Free swap = 124988kB [ 4459.888058][ T8146] Total swap = 124996kB [ 4459.888274][ T8146] 524288 pages RAM [ 4459.888442][ T8146] 135168 pages HighMem/MovableOnly [ 4459.888717][ T8146] 31589 pages reserved [ 4459.888928][ T8146] 4096 pages cma reserved [ 4460.267000][ T1479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4460.320232][ T1479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4460.405627][ T1479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4460.465380][ T1479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4460.793248][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4460.804768][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4460.809727][ T1479] bond0 (unregistering): Released all slaves [ 4460.944024][ T1479] hsr_slave_0: left promiscuous mode [ 4460.956835][ T1479] hsr_slave_1: left promiscuous mode [ 4460.971831][ T1479] veth1_macvtap: left promiscuous mode [ 4460.974038][ T1479] veth0_macvtap: left promiscuous mode [ 4460.974771][ T1479] veth1_vlan: left promiscuous mode [ 4460.975238][ T1479] veth0_vlan: left promiscuous mode [ 4462.926751][ T8323] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 4462.941853][ T31] audit: type=1400 audit(4462.850:511): avc: denied { relabelto } for pid=8322 comm="syz.1.20334" name="file0" dev="tmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:policy_config_t:s0" [ 4462.949779][ T31] audit: type=1400 audit(4462.870:512): avc: denied { associate } for pid=8322 comm="syz.1.20334" name="file0" dev="tmpfs" ino=1544 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:policy_config_t:s0" [ 4463.007174][ T31] audit: type=1400 audit(4462.930:513): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:policy_config_t:s0" [ 4463.480723][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4463.493940][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4464.904043][ T8156] hsr_slave_0: entered promiscuous mode [ 4464.909325][ T8156] hsr_slave_1: entered promiscuous mode [ 4465.526418][ T8156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4465.531458][ T8156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4465.546769][ T8156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4465.557658][ T8156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4466.502067][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4470.894327][ T8156] veth0_vlan: entered promiscuous mode [ 4470.937384][ T8156] veth1_vlan: entered promiscuous mode [ 4471.026186][ T8156] veth0_macvtap: entered promiscuous mode [ 4471.048233][ T8156] veth1_macvtap: entered promiscuous mode [ 4471.180579][ T8156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4471.181339][ T8156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4471.181993][ T8156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4471.203929][ T8156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4475.383111][ T957] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 4475.573673][ T957] usb 1-1: Using ep0 maxpacket: 16 [ 4475.586279][ T957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4475.586978][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 4475.587830][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 4475.588333][ T957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 4475.588959][ T957] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 4475.602910][ T957] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 4475.603482][ T957] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 4475.603801][ T957] usb 1-1: Manufacturer: syz [ 4475.608968][ T957] usb 1-1: config 0 descriptor?? [ 4475.644050][ T5108] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 4475.859526][ T5108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4475.865340][ T5108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4475.866432][ T5108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4475.869253][ T5108] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 4475.870420][ T5108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4475.880381][ T5108] usb 2-1: config 0 descriptor?? [ 4476.311671][ T5108] acrux 0003:1A34:0802.0019: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 4476.312857][ T5108] acrux 0003:1A34:0802.0019: no inputs found [ 4476.313162][ T5108] acrux 0003:1A34:0802.0019: Failed to enable force feedback support, error: -19 [ 4476.403022][ T957] rc_core: IR keymap rc-hauppauge not found [ 4476.403528][ T957] Registered IR keymap rc-empty [ 4476.405048][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.433422][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.458594][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4476.459572][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4476.464744][ T957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 4476.465689][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4476.466168][ T957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52 [ 4476.467713][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4476.481547][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.527730][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.565856][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.605742][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.644148][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.674791][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.715317][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.754483][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.783336][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.814062][ T957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 4476.845602][ T957] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 4476.845921][ T957] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 4476.850442][ T957] usb 1-1: USB disconnect, device number 43 [ 4478.255529][ T5562] usb 2-1: USB disconnect, device number 25 [ 4482.330265][ T1479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4482.404013][ T1479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4482.463280][ T1479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4482.519739][ T1479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4482.817718][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4482.827646][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4482.831626][ T1479] bond0 (unregistering): Released all slaves [ 4482.963740][ T1479] hsr_slave_0: left promiscuous mode [ 4482.969174][ T1479] hsr_slave_1: left promiscuous mode [ 4482.978890][ T1479] veth1_macvtap: left promiscuous mode [ 4482.979398][ T1479] veth0_macvtap: left promiscuous mode [ 4482.979797][ T1479] veth1_vlan: left promiscuous mode [ 4482.980257][ T1479] veth0_vlan: left promiscuous mode [ 4485.937436][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4485.952128][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4487.259239][ T8824] hsr_slave_0: entered promiscuous mode [ 4487.274851][ T8824] hsr_slave_1: entered promiscuous mode [ 4487.276976][ T8824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4487.277458][ T8824] Cannot create hsr debugfs directory [ 4488.100885][ T8824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4488.104755][ T8824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4488.110418][ T8824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4488.114213][ T8824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4489.133257][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4493.109068][ T8824] veth0_vlan: entered promiscuous mode [ 4493.146208][ T8824] veth1_vlan: entered promiscuous mode [ 4493.230915][ T8824] veth0_macvtap: entered promiscuous mode [ 4493.238930][ T8824] veth1_macvtap: entered promiscuous mode [ 4493.277131][ T8824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4493.277471][ T8824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4493.277721][ T8824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4493.278040][ T8824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4496.556865][ T31] audit: type=1400 audit(4496.480:514): avc: denied { setattr } for pid=9268 comm="syz.1.20421" name="NETLINK" dev="sockfs" ino=183714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 4496.866015][ T31] audit: type=1800 audit(4496.790:515): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.20421" name="/" dev="sockfs" ino=183714 res=0 errno=0 [ 4497.789116][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4511.389345][ T9311] input: syz0 as /devices/virtual/input/input53 [ 4520.190599][ T9326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9326 comm=syz.0.20442 [ 4541.099042][ T9430] serio: Serial port pts0 [ 4544.222134][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4544.231947][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4545.148951][ T9435] hsr_slave_0: entered promiscuous mode [ 4545.151106][ T9435] hsr_slave_1: entered promiscuous mode [ 4545.154738][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4545.155118][ T9435] Cannot create hsr debugfs directory [ 4545.480436][ T9435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4545.541555][ T9435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4545.599698][ T9435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4545.658433][ T9435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4545.781574][ T9435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4545.789673][ T9435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4545.797643][ T9435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4545.803927][ T9435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4546.631733][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4548.705199][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4548.719850][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4548.724345][ T1479] bond0 (unregistering): Released all slaves [ 4548.846448][ T1479] hsr_slave_0: left promiscuous mode [ 4548.848489][ T1479] hsr_slave_1: left promiscuous mode [ 4548.851835][ T1479] veth1_macvtap: left promiscuous mode [ 4548.852171][ T1479] veth0_macvtap: left promiscuous mode [ 4548.853321][ T1479] veth1_vlan: left promiscuous mode [ 4548.853588][ T1479] veth0_vlan: left promiscuous mode [ 4550.456259][ T9435] veth0_vlan: entered promiscuous mode [ 4550.474125][ T9435] veth1_vlan: entered promiscuous mode [ 4550.532389][ T9435] veth0_macvtap: entered promiscuous mode [ 4550.542325][ T9435] veth1_macvtap: entered promiscuous mode [ 4550.598304][ T9435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4550.598821][ T9435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4550.599205][ T9435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4550.599576][ T9435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4567.460468][ T31] audit: type=1400 audit(4567.380:516): avc: denied { mount } for pid=9972 comm="syz.1.20552" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 4567.461465][ T31] audit: type=1400 audit(4567.380:517): avc: denied { remount } for pid=9972 comm="syz.1.20552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 4567.491350][ T31] audit: type=1400 audit(4567.410:518): avc: denied { unmount } for pid=9435 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 4572.294273][ T5562] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 4572.503425][ T5562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4572.504042][ T5562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4572.504845][ T5562] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 4572.505352][ T5562] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 4572.505720][ T5562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4572.511117][ T5562] usb 1-1: config 0 descriptor?? [ 4572.989634][ T5562] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 4572.990268][ T5562] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 4572.991001][ T5562] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 4572.999507][ T5562] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 4573.269497][ T5562] usb 1-1: USB disconnect, device number 44 [ 4574.596344][T10032] serio: Serial port pts0 [ 4583.453832][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4585.294050][T10133] serio: Serial port pts0 [ 4587.196500][T10170] serio: Serial port pts1 [ 4591.777145][T10184] cgroup: fork rejected by pids controller in /syz0 [ 4592.488236][T29407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4592.605033][T29407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4592.634504][ T31] audit: type=1400 audit(4592.550:519): avc: denied { rename } for pid=2817 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4592.656064][ T31] audit: type=1400 audit(4592.580:520): avc: denied { unlink } for pid=2817 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4592.686625][ T31] audit: type=1400 audit(4592.610:521): avc: denied { create } for pid=2817 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4592.695425][T29407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4592.798984][T29407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4593.507953][T29407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4593.535715][T29407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4593.540867][T29407] bond0 (unregistering): Released all slaves [ 4593.763441][T29407] hsr_slave_0: left promiscuous mode [ 4593.771132][T29407] hsr_slave_1: left promiscuous mode [ 4593.782189][T29407] veth1_macvtap: left promiscuous mode [ 4593.793255][T29407] veth0_macvtap: left promiscuous mode [ 4593.793995][T29407] veth1_vlan: left promiscuous mode [ 4593.794345][T29407] veth0_vlan: left promiscuous mode [ 4596.166422][ T31] audit: type=1400 audit(4596.080:522): avc: denied { create } for pid=10304 comm="syz.1.20637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4596.176063][ T31] audit: type=1400 audit(4596.090:523): avc: denied { setopt } for pid=10304 comm="syz.1.20637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4599.916055][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4599.922029][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4601.284735][T10265] hsr_slave_0: entered promiscuous mode [ 4601.289105][T10265] hsr_slave_1: entered promiscuous mode [ 4601.891761][T10265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4601.901746][T10265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4601.911274][T10265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4601.920829][T10265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4602.905301][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4604.456175][T10703] serio: Serial port pts0 [ 4605.900323][T10265] veth0_vlan: entered promiscuous mode [ 4605.914866][T10265] veth1_vlan: entered promiscuous mode [ 4605.964822][T10265] veth0_macvtap: entered promiscuous mode [ 4605.976528][T10265] veth1_macvtap: entered promiscuous mode [ 4606.023451][T10265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4606.023900][T10265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4606.024182][T10265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4606.024414][T10265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4616.604261][T10831] serio: Serial port pts0 [ 4622.245029][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 4623.836208][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4626.301584][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4627.763617][ T957] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 4627.968002][ T957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 4627.969278][ T957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 4627.969599][ T957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 4627.969923][ T957] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 4627.970123][ T957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4627.976507][ T957] usb 2-1: config 0 descriptor?? [ 4628.409149][ T957] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 4628.409698][ T957] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 4628.410059][ T957] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 4628.410418][ T957] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 4628.410800][ T957] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 4628.411177][ T957] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 4628.411540][ T957] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 4628.414921][ T957] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 4628.421627][ T957] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 4630.534377][ T1027] usb 2-1: USB disconnect, device number 26 [ 4631.894061][ T1027] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 4632.084541][ T1027] usb 2-1: config 252 has an invalid interface number: 254 but max is 0 [ 4632.085153][ T1027] usb 2-1: config 252 has no interface number 0 [ 4632.085432][ T1027] usb 2-1: config 252 interface 254 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 4632.085835][ T1027] usb 2-1: New USB device found, idVendor=0908, idProduct=01ff, bcdDevice=e6.39 [ 4632.086177][ T1027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4632.098927][T11053] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 4632.114622][ T1027] cp210x 2-1:252.254: cp210x converter detected [ 4632.313551][ T1027] cp210x 2-1:252.254: failed to get vendor val 0x370b size 1: -71 [ 4632.314293][ T1027] cp210x 2-1:252.254: querying part number failed [ 4632.330886][ T1027] usb 2-1: cp210x converter now attached to ttyUSB0 [ 4632.346329][ T1027] usb 2-1: USB disconnect, device number 27 [ 4632.359242][ T1027] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 4632.365260][ T1027] cp210x 2-1:252.254: device disconnected [ 4637.904824][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4641.398073][T11152] syz.0.20790 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 4641.398898][T11152] CPU: 0 PID: 11152 Comm: syz.0.20790 Not tainted 6.10.0-rc6-syzkaller #0 [ 4641.399420][T11152] Hardware name: ARM-Versatile Express [ 4641.400024][T11152] Call trace: [ 4641.400320][T11152] [<818d4f38>] (dump_backtrace) from [<818d5034>] (show_stack+0x18/0x1c) [ 4641.400858][T11152] r7:81a19950 r6:81ff3298 r5:60000113 r4:81fe1510 [ 4641.401277][T11152] [<818d501c>] (show_stack) from [<818f26b8>] (dump_stack_lvl+0x70/0x7c) [ 4641.401871][T11152] [<818f2648>] (dump_stack_lvl) from [<818f26dc>] (dump_stack+0x18/0x1c) [ 4641.402807][T11152] r5:e898dc10 r4:85172400 [ 4641.403181][T11152] [<818f26c4>] (dump_stack) from [<818d97e0>] (dump_header+0x4c/0x1ac) [ 4641.403568][T11152] [<818d9794>] (dump_header) from [<8043b15c>] (oom_kill_process+0x218/0x290) [ 4641.403981][T11152] r6:81ff3298 r5:e898dc10 r4:85172400 [ 4641.404267][T11152] [<8043af44>] (oom_kill_process) from [<8043b91c>] (out_of_memory+0x114/0x378) [ 4641.404900][T11152] r9:824b2ec0 r8:82716300 r7:85172400 r6:828ab0f8 r5:85172400 r4:e898dc10 [ 4641.405384][T11152] [<8043b808>] (out_of_memory) from [<804e049c>] (mem_cgroup_out_of_memory+0xd8/0xf4) [ 4641.405811][T11152] r6:00100cca r5:84bd8800 r4:00000000 [ 4641.406277][T11152] [<804e03c4>] (mem_cgroup_out_of_memory) from [<804e5a6c>] (try_charge_memcg+0x578/0x634) [ 4641.406814][T11152] r7:84bd8800 r6:00000001 r5:84bd8800 r4:00000001 [ 4641.407263][T11152] [<804e54f4>] (try_charge_memcg) from [<804e821c>] (mem_cgroup_swapin_charge_folio+0x90/0x1d8) [ 4641.407989][T11152] r10:0000055c r9:8260cb08 r8:e898dd4b r7:00000000 r6:00100cca r5:ded5a188 [ 4641.408335][T11152] r4:84bd8800 [ 4641.408529][T11152] [<804e818c>] (mem_cgroup_swapin_charge_folio) from [<804c693c>] (__read_swap_cache_async+0x2d4/0x378) [ 4641.409116][T11152] r7:00100cca r6:0000055c r5:8457eb40 r4:ded5a188 [ 4641.409499][T11152] [<804c6668>] (__read_swap_cache_async) from [<804c6c04>] (swap_cluster_readahead+0x1a0/0x34c) [ 4641.410020][T11152] r10:00000000 r9:0000055f r8:e898dd4b r7:00000000 r6:00000000 r5:00100cca [ 4641.410487][T11152] r4:0000055c [ 4641.410690][T11152] [<804c6a64>] (swap_cluster_readahead) from [<804c6f7c>] (swapin_readahead+0x68/0x4a8) [ 4641.411171][T11152] r10:e898deb8 r9:00000000 r8:00100cca r7:84112ea0 r6:0000055f r5:00000000 [ 4641.411632][T11152] r4:00000001 [ 4641.411917][T11152] [<804c6f14>] (swapin_readahead) from [<8048658c>] (do_swap_page+0x200/0xcf0) [ 4641.412815][T11152] r10:e898dfb0 r9:00000000 r8:8457eb40 r7:84112ea0 r6:0000055f r5:00000000 [ 4641.413335][T11152] r4:e898deb8 [ 4641.413567][T11152] [<8048638c>] (do_swap_page) from [<80487de8>] (handle_mm_fault+0x3dc/0x12fc) [ 4641.414036][T11152] r10:e898dfb0 r9:842aaa00 r8:845d0ac8 r7:00000040 r6:7ee247a8 r5:85172400 [ 4641.414669][T11152] r4:00001255 [ 4641.414891][T11152] [<80487a0c>] (handle_mm_fault) from [<80215c90>] (do_page_fault+0x1c8/0x3d8) [ 4641.415566][T11152] r10:00000002 r9:842aaa00 r8:00000255 r7:85172400 r6:00000a07 r5:7ee247a8 [ 4641.416029][T11152] r4:e898dfb0 [ 4641.416321][T11152] [<80215ac8>] (do_page_fault) from [<80216088>] (do_DataAbort+0x38/0xa8) [ 4641.416879][T11152] r10:00240000 r9:00240000 r8:80215ac8 r7:e898dfb0 r6:7ee247a8 r5:00000a07 [ 4641.417318][T11152] r4:8261cfd8 [ 4641.417467][T11152] [<80216050>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60) [ 4641.417965][T11152] Exception stack(0xe898dfb0 to 0xe898dff8) [ 4641.418448][T11152] dfa0: 00000000 00000000 00228000 0000049c [ 4641.419034][T11152] dfc0: 00000000 7ee247c4 00000000 00000109 00000000 00240000 00240000 002554a8 [ 4641.419542][T11152] dfe0: 00000000 7ee247c0 0015d700 00157b8c 40000010 ffffffff [ 4641.420135][T11152] r8:824aa044 r7:85172400 r6:ffffffff r5:40000010 r4:00157b8c [ 4641.434884][T11152] memory: usage 304080kB, limit 307200kB, failcnt 2831 [ 4641.435524][T11152] memory+swap: usage 303936kB, limit 8589934588kB, failcnt 0 [ 4641.435858][T11152] kmem: usage 303324kB, limit 8589934588kB, failcnt 0 [ 4641.436200][T11152] Memory cgroup stats for /syz0: [ 4641.437515][T11152] cache 12288 [ 4641.437908][T11152] rss 0 [ 4641.438054][T11152] shmem 0 [ 4641.438221][T11152] mapped_file 12288 [ 4641.438395][T11152] dirty 12288 [ 4641.438564][T11152] writeback 0 [ 4641.438704][T11152] workingset_refault_anon 6 [ 4641.438880][T11152] workingset_refault_file 0 [ 4641.439089][T11152] swap 118784 [ 4641.439269][T11152] swapcached 8192 [ 4641.439461][T11152] pgpgin 1837269 [ 4641.439667][T11152] pgpgout 1837264 [ 4641.439851][T11152] pgfault 2237677 [ 4641.440036][T11152] pgmajfault 5 [ 4641.440321][T11152] inactive_anon 0 [ 4641.440502][T11152] active_anon 0 [ 4641.440991][T11152] inactive_file 0 [ 4641.441194][T11152] active_file 12288 [ 4641.441382][T11152] unevictable 0 [ 4641.441659][T11152] hierarchical_memory_limit 314572800 [ 4641.441905][T11152] hierarchical_memsw_limit 8796093018112 [ 4641.442142][T11152] total_cache 12288 [ 4641.482986][T11152] total_rss 0 [ 4641.483354][T11152] total_shmem 0 [ 4641.483486][T11152] total_mapped_file 12288 [ 4641.483663][T11152] total_dirty 12288 [ 4641.483824][T11152] total_writeback 0 [ 4641.484008][T11152] total_workingset_refault_anon 6 [ 4641.484252][T11152] total_workingset_refault_file 0 [ 4641.484452][T11152] total_swap 118784 [ 4641.484967][T11152] total_swapcached 8192 [ 4641.485293][T11152] total_pgpgin 1837269 [ 4641.485613][T11152] total_pgpgout 1837264 [ 4641.485762][T11152] total_pgfault 2238143 [ 4641.486092][T11152] total_pgmajfault 5 [ 4641.486239][T11152] total_inactive_anon 0 [ 4641.486373][T11152] total_active_anon 0 [ 4641.486508][T11152] total_inactive_file 0 [ 4641.486640][T11152] total_active_file 12288 [ 4641.486982][T11152] total_unevictable 0 [ 4641.487128][T11152] anon_cost 0 [ 4641.487306][T11152] file_cost 0 [ 4641.487655][T11152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.20790,pid=11152,uid=0 [ 4641.489471][T11152] Memory cgroup out of memory: Killed process 11152 (syz.0.20790) total-vm:38928kB, anon-rss:0kB, file-rss:1316kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:1000 [ 4645.213033][ T942] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 4645.407266][ T942] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 4645.407902][ T942] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 4645.417086][ T942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 4645.417851][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 4645.418163][ T942] usb 1-1: SerialNumber: syz [ 4646.065144][ T942] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 4647.158327][T10471] usb 1-1: USB disconnect, device number 45 [ 4647.162236][T10471] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 4650.093381][T11227] serio: Serial port pts0 [ 4652.143276][ T31] audit: type=1400 audit(4652.060:524): avc: denied { map } for pid=11234 comm="syz.1.20808" path="pipe:[187605]" dev="pipefs" ino=187605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 4656.065874][T11259] serio: Serial port pts0 [ 4672.808046][T11304] serio: Serial port pts0 [ 4676.724295][T11316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11316 comm=syz.1.20834 [ 4678.779475][ T1479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4678.837849][ T1479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4678.900196][ T1479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4678.959556][ T1479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4679.201977][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4679.227286][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4679.235178][ T1479] bond0 (unregistering): Released all slaves [ 4679.371249][ T1479] hsr_slave_0: left promiscuous mode [ 4679.375550][ T1479] hsr_slave_1: left promiscuous mode [ 4679.388715][ T1479] veth1_macvtap: left promiscuous mode [ 4679.389350][ T1479] veth0_macvtap: left promiscuous mode [ 4679.389775][ T1479] veth1_vlan: left promiscuous mode [ 4679.390319][ T1479] veth0_vlan: left promiscuous mode [ 4681.687147][T11335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4681.694902][T11335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4682.828446][T11335] hsr_slave_0: entered promiscuous mode [ 4682.836155][T11335] hsr_slave_1: entered promiscuous mode [ 4682.839420][T11335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4682.839894][T11335] Cannot create hsr debugfs directory [ 4683.104014][ T5108] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 4683.489386][ T5108] usb 1-1: device not accepting address 46, error -71 [ 4683.650246][T11335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4683.660881][T11335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4683.673808][T11335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4683.684936][T11335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4684.163519][ T5108] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 4684.357505][ T5108] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 4684.358018][ T5108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4684.358332][ T5108] usb 1-1: Product: syz [ 4684.358537][ T5108] usb 1-1: Manufacturer: syz [ 4684.358811][ T5108] usb 1-1: SerialNumber: syz [ 4684.554115][T11335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4685.286674][ T5562] usb 1-1: USB disconnect, device number 47 [ 4688.147880][T11335] veth0_vlan: entered promiscuous mode [ 4688.164339][T11335] veth1_vlan: entered promiscuous mode [ 4688.199443][T11335] veth0_macvtap: entered promiscuous mode [ 4688.207697][T11335] veth1_macvtap: entered promiscuous mode [ 4688.244224][T11335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4688.244534][T11335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4688.244745][T11335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4688.244952][T11335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4695.409692][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20889'. [ 4706.189380][T11892] serio: Serial port pts0 [ 4720.669389][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20915'. [ 4720.859670][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20915'. [ 4721.374160][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20915'. [ 4725.307846][T11971] bpf: Bad value for 'context' [ 4729.410935][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4734.608535][ T31] audit: type=1400 audit(4734.530:525): avc: denied { connect } for pid=12048 comm="syz.0.20960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4735.115218][ T31] audit: type=1400 audit(4735.040:526): avc: denied { ioctl } for pid=12048 comm="syz.0.20960" path="socket:[188358]" dev="sockfs" ino=188358 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4735.188440][ T31] audit: type=1800 audit(4735.110:527): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.20964" name="/newroot/17/file0" dev="tmpfs" ino=110 res=0 errno=0 [ 4737.723727][ T31] audit: type=1400 audit(4737.640:528): avc: denied { create } for pid=12131 comm="syz.0.20994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 4739.833050][ T6404] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 4740.027328][ T6404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 10 [ 4740.027928][ T6404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 4740.028439][ T6404] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 4740.029072][ T6404] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 4740.029448][ T6404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4740.053319][ T6404] usb 1-1: config 0 descriptor?? [ 4740.491753][ T6404] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 4740.492163][ T6404] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 4740.494359][ T6404] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 4740.583041][ T6404] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 4740.821897][ T942] usb 1-1: USB disconnect, device number 48 [ 4762.272054][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 4765.360154][T12263] tmpfs: Bad value for 'size' [ 4770.585164][ T6404] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 4770.838572][ T6404] usb 1-1: Using ep0 maxpacket: 32 [ 4770.859160][ T6404] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 4770.861063][ T6404] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4770.861472][ T6404] usb 1-1: config 0 has no interfaces? [ 4770.884893][ T6404] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 4770.886609][ T6404] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 4770.894161][ T6404] usb 1-1: Product: syz [ 4770.894475][ T6404] usb 1-1: Manufacturer: syz [ 4770.894684][ T6404] usb 1-1: SerialNumber: syz [ 4770.897863][ T6404] usb 1-1: config 0 descriptor?? [ 4772.234746][T10471] usb 1-1: USB disconnect, device number 49 [ 4791.985663][T12468] serio: Serial port pts0 [ 4798.889185][T12525] serio: Serial port pts0 [ 4805.400727][T12553] syz.1.21156[12553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 4805.401061][T12553] syz.1.21156[12553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 4812.946685][T12583] serio: Serial port pts0 [ 4818.954222][ T6404] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 4818.973824][ T5108] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 4819.150182][ T6404] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 4819.150915][ T6404] usb 1-1: config 1 has no interface number 0 [ 4819.151214][ T6404] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4819.151815][ T6404] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 4819.152319][ T6404] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 4819.153593][ T5108] usb 2-1: Using ep0 maxpacket: 16 [ 4819.177849][ T5108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4819.178747][ T5108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 4819.180891][ T5108] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 4819.181051][ T6404] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 4819.181295][ T5108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4819.181546][ T6404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4819.182073][ T6404] usb 1-1: Product: syz [ 4819.182270][ T6404] usb 1-1: Manufacturer: syz [ 4819.189115][ T6404] usb 1-1: SerialNumber: syz [ 4819.195854][ T5108] usb 2-1: config 0 descriptor?? [ 4819.655882][ T5108] HID 045e:07da: Invalid code 65791 type 1 [ 4819.664242][ T5108] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001D/input/input54 [ 4819.671995][ T5108] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 4820.008178][ T6404] cdc_ncm 1-1:1.1: bind() failure [ 4820.024051][ T6404] usb 1-1: USB disconnect, device number 50 [ 4821.324853][T12635] serio: Serial port pts0 [ 4827.685248][ T31] audit: type=1800 audit(4827.610:529): pid=12650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.21180" name="/" dev="sockfs" ino=190320 res=0 errno=0 [ 4833.588815][ T942] usb 2-1: USB disconnect, device number 28 [ 4838.033464][ T31] audit: type=1400 audit(4837.950:530): avc: denied { read } for pid=12698 comm="syz.1.21193" path="socket:[190376]" dev="sockfs" ino=190376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4853.773433][T12785] serio: Serial port pts0 [ 4854.823424][ T31] audit: type=1326 audit(4854.740:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.0.21247" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x0 [ 4860.506992][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4861.710936][ T31] audit: type=1400 audit(4861.630:532): avc: denied { bind } for pid=12864 comm="syz.1.21268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4861.714548][ T31] audit: type=1400 audit(4861.630:533): avc: denied { write } for pid=12864 comm="syz.1.21268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4871.867815][T12977] syz.1.21315[12977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 4871.868203][T12977] syz.1.21315[12977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 4885.236664][ T942] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 4885.427716][ T942] usb 1-1: device descriptor read/64, error -71 [ 4885.773914][ T942] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 4885.948183][ T942] usb 1-1: device descriptor read/64, error -71 [ 4886.075918][ T942] usb usb1-port1: attempt power cycle [ 4886.544926][ T942] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 4886.588756][ T942] usb 1-1: device descriptor read/8, error -71 [ 4886.877534][ T942] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 4886.921451][ T942] usb 1-1: device descriptor read/8, error -71 [ 4887.054128][ T942] usb usb1-port1: unable to enumerate USB device [ 4893.128047][T13113] netlink: 'syz.1.21363': attribute type 27 has an invalid length. [ 4893.435389][T13113] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4893.436006][T13113] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4893.436415][T13113] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4893.436798][T13113] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4898.764580][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 4899.087270][ T1479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4899.148197][ T1479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4899.234144][ T1479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4899.310938][ T1479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4899.657931][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4899.671006][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4899.682049][ T1479] bond0 (unregistering): Released all slaves [ 4899.814509][ T1479] hsr_slave_0: left promiscuous mode [ 4899.825988][ T1479] hsr_slave_1: left promiscuous mode [ 4899.832200][ T1479] veth1_macvtap: left promiscuous mode [ 4899.834035][ T1479] veth0_macvtap: left promiscuous mode [ 4899.834523][ T1479] veth1_vlan: left promiscuous mode [ 4899.834841][ T1479] veth0_vlan: left promiscuous mode [ 4901.807795][T13149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4901.814846][T13149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4903.227138][T13149] hsr_slave_0: entered promiscuous mode [ 4903.233999][T13149] hsr_slave_1: entered promiscuous mode [ 4904.058481][T13149] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4904.065111][T13149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4904.094266][T13149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4904.104554][T13149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4905.034398][T13149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4909.548064][T13149] veth0_vlan: entered promiscuous mode [ 4909.578881][T13149] veth1_vlan: entered promiscuous mode [ 4909.663297][T13149] veth0_macvtap: entered promiscuous mode [ 4909.671378][T13149] veth1_macvtap: entered promiscuous mode [ 4909.736746][T13149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4909.737267][T13149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4909.737655][T13149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4909.738015][T13149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4911.305968][T13584] vmap allocation for size 536875008 failed: use vmalloc= to increase size [ 4911.306467][T13584] syz.0.21383: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 4911.307147][T13584] CPU: 0 PID: 13584 Comm: syz.0.21383 Not tainted 6.10.0-rc6-syzkaller #0 [ 4911.307549][T13584] Hardware name: ARM-Versatile Express [ 4911.307904][T13584] Call trace: [ 4911.308005][T13584] [<818d4f38>] (dump_backtrace) from [<818d5034>] (show_stack+0x18/0x1c) [ 4911.308448][T13584] r7:ffffffff r6:81ff9e84 r5:60000013 r4:81fe1510 [ 4911.308640][T13584] [<818d501c>] (show_stack) from [<818f26b8>] (dump_stack_lvl+0x70/0x7c) [ 4911.308866][T13584] [<818f2648>] (dump_stack_lvl) from [<818f26dc>] (dump_stack+0x18/0x1c) [ 4911.309136][T13584] r5:834b0c00 r4:00000000 [ 4911.309263][T13584] [<818f26c4>] (dump_stack) from [<804b1ab0>] (warn_alloc+0xd8/0x178) [ 4911.309572][T13584] [<804b19d8>] (warn_alloc) from [<804a8b74>] (__vmalloc_node_range_noprof+0xc8/0x5a0) [ 4911.309842][T13584] r3:20000000 r2:81ff9e84 [ 4911.309987][T13584] r6:20000000 r5:00000dc0 r4:81ff9ebc [ 4911.310189][T13584] [<804a8aac>] (__vmalloc_node_range_noprof) from [<8046111c>] (kvmalloc_node_noprof+0xc0/0x110) [ 4911.310504][T13584] r10:e0291d00 r9:8480d000 r8:815803d4 r7:ffffffff r6:00000dc0 r5:20000000 [ 4911.310726][T13584] r4:00000000 [ 4911.310861][T13584] [<8046105c>] (kvmalloc_node_noprof) from [<815803d4>] (xt_alloc_entry_offsets+0x24/0x30) [ 4911.311052][T13584] r8:b5403587 r7:00000000 r6:20000360 r5:8480d040 r4:08000000 [ 4911.311211][T13584] [<815803b0>] (xt_alloc_entry_offsets) from [<81638c0c>] (translate_table+0x70/0x78c) [ 4911.311419][T13584] [<81638b9c>] (translate_table) from [<81639dc8>] (do_replace+0xe8/0x5a0) [ 4911.311685][T13584] r10:00000126 r9:8480d040 r8:b5403587 r7:00000238 r6:20000360 r5:8480d000 [ 4911.311868][T13584] r4:8464b300 [ 4911.311979][T13584] [<81639ce0>] (do_replace) from [<8163a3b4>] (do_ipt_set_ctl+0x134/0x2a0) [ 4911.312266][T13584] r10:00000126 r9:813d5208 r8:851e3a40 r7:00000298 r6:e0291da8 r5:843e3e00 [ 4911.312618][T13584] r4:00000040 [ 4911.312731][T13584] [<8163a280>] (do_ipt_set_ctl) from [<8150e934>] (nf_setsockopt+0x60/0x7c) [ 4911.313072][T13584] r10:00000126 r9:813d5208 r8:851e3a40 r7:00000298 r6:843e3e00 r5:8163a280 [ 4911.313294][T13584] r4:827d64e0 [ 4911.313412][T13584] [<8150e8d8>] (nf_setsockopt) from [<815a5f38>] (ip_setsockopt+0x88/0x98) [ 4911.313700][T13584] r6:843e3e00 r5:00000298 r4:00000040 [ 4911.313950][T13584] [<815a5eb4>] (ip_setsockopt) from [<815b5938>] (tcp_setsockopt+0x3c/0x58) [ 4911.314191][T13584] r6:00000000 r5:851e3600 r4:815a5eb0 [ 4911.314375][T13584] [<815b5900>] (tcp_setsockopt) from [<813d5240>] (sock_common_setsockopt+0x38/0x40) [ 4911.314595][T13584] r4:815b58fc [ 4911.314697][T13584] [<813d520c>] (sock_common_setsockopt) from [<817e0b00>] (smc_setsockopt+0xa8/0x3c8) [ 4911.314930][T13584] r4:00000040 [ 4911.315045][T13584] [<817e0a5c>] (smc_setsockopt) from [<813d0a5c>] (do_sock_setsockopt+0xb0/0x17c) [ 4911.315449][T13584] r9:834b0c00 r8:8020029c r7:00000000 r6:833cc000 r5:00000000 r4:817e0a58 [ 4911.315759][T13584] [<813d09ac>] (do_sock_setsockopt) from [<813d3d5c>] (sys_setsockopt+0x78/0xbc) [ 4911.316410][T13584] r6:833cc000 r5:00000040 r4:00000000 [ 4911.316562][T13584] [<813d3ce4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4911.316868][T13584] Exception stack(0xe0291fa8 to 0xe0291ff0) [ 4911.317117][T13584] 1fa0: 00000298 00000000 00000003 00000000 00000040 20000300 [ 4911.317430][T13584] 1fc0: 00000298 00000000 002542e8 00000126 7ec98776 7ec98777 003d0f00 76b2b0bc [ 4911.317729][T13584] 1fe0: 76b2aec8 76b2aeb8 00018374 00130460 [ 4911.317928][T13584] r7:00000126 r6:002542e8 r5:00000000 r4:00000298 [ 4911.333009][T13584] Mem-Info: [ 4911.333304][T13584] active_anon:2108 inactive_anon:0 isolated_anon:0 [ 4911.333304][T13584] active_file:2626 inactive_file:36101 isolated_file:0 [ 4911.333304][T13584] unevictable:26621 dirty:16 writeback:0 [ 4911.333304][T13584] slab_reclaimable:1130 slab_unreclaimable:5741 [ 4911.333304][T13584] mapped:3898 shmem:840 pagetables:280 [ 4911.333304][T13584] sec_pagetables:0 bounce:0 [ 4911.333304][T13584] kernel_misc_reclaimable:0 [ 4911.333304][T13584] free:412009 free_pcp:592 free_cma:4032 [ 4911.336133][T13584] Node 0 active_anon:8432kB inactive_anon:0kB active_file:10504kB inactive_file:144404kB unevictable:106484kB isolated(anon):0kB isolated(file):0kB mapped:15592kB dirty:64kB writeback:0kB shmem:3360kB writeback_tmp:0kB kernel_stack:1432kB pagetables:1120kB sec_pagetables:0kB all_unreclaimable? no [ 4911.337380][T13584] Normal free:1382332kB boost:0kB min:4780kB low:6208kB high:7636kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8088kB unevictable:0kB writepending:52kB present:1556480kB managed:1430124kB mlocked:0kB bounce:0kB free_pcp:2368kB local_pcp:508kB free_cma:0kB [ 4911.338451][T13584] lowmem_reserve[]: 0 4224 0 [ 4911.338949][T13584] Normal: 53*4kB (UE) 47*8kB (UE) 7*16kB (UE) 12*32kB (UE) 14*64kB (UE) 10*128kB (UM) 5*256kB (UE) 3*512kB (UME) 2*1024kB (U) 5*2048kB (UME) 333*4096kB (UM) = 1382332kB [ 4911.352034][T13584] 42152 total pagecache pages [ 4911.352763][T13584] 2 pages in swap cache [ 4911.353030][T13584] Free swap = 124436kB [ 4911.353199][T13584] Total swap = 124996kB [ 4911.353370][T13584] 524288 pages RAM [ 4911.353552][T13584] 135168 pages HighMem/MovableOnly [ 4911.353764][T13584] 31589 pages reserved [ 4911.353954][T13584] 4096 pages cma reserved [ 4914.846756][T29407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4914.897967][T29407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4914.970142][T29407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4915.056209][T29407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4915.398181][T29407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4915.406494][T29407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4915.410588][T29407] bond0 (unregistering): Released all slaves [ 4915.546751][T29407] hsr_slave_0: left promiscuous mode [ 4915.549773][T29407] hsr_slave_1: left promiscuous mode [ 4915.559133][T29407] veth1_macvtap: left promiscuous mode [ 4915.559727][T29407] veth0_macvtap: left promiscuous mode [ 4915.560300][T29407] veth1_vlan: left promiscuous mode [ 4915.560761][T29407] veth0_vlan: left promiscuous mode [ 4920.934324][T13608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4920.960596][T13608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4924.014215][T13608] hsr_slave_0: entered promiscuous mode [ 4924.016957][T13608] hsr_slave_1: entered promiscuous mode [ 4925.117577][T13608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4925.131029][T13608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4925.140281][T13608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4925.150814][T13608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4925.967897][T13608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4926.719093][T13608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 4929.866435][T13608] veth0_vlan: entered promiscuous mode [ 4929.898530][T13608] veth1_vlan: entered promiscuous mode [ 4930.026665][T13608] veth0_macvtap: entered promiscuous mode [ 4930.045482][T13608] veth1_macvtap: entered promiscuous mode [ 4930.158564][T13608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4930.159127][T13608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4930.159512][T13608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4930.159873][T13608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4931.586674][ T957] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 4931.787283][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4931.787671][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4931.787902][ T957] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4931.788236][ T957] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 4931.788441][ T957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4931.791374][ T957] usb 1-1: config 0 descriptor?? [ 4932.210547][ T957] acrux 0003:1A34:0802.001E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 4932.211247][ T957] acrux 0003:1A34:0802.001E: no inputs found [ 4932.211547][ T957] acrux 0003:1A34:0802.001E: Failed to enable force feedback support, error: -19 [ 4932.412419][ T6404] usb 1-1: USB disconnect, device number 55 [ 4944.144595][ T5562] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 4944.425780][ T5562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 4944.426577][ T5562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 4944.426954][ T5562] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 4944.427524][ T5562] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 4944.427945][ T5562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4944.441491][ T5562] usb 1-1: config 0 descriptor?? [ 4944.923561][ T5562] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 4944.924345][ T5562] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 4944.924862][ T5562] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 4944.925250][ T5562] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 4944.925694][ T5562] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 4944.926212][ T5562] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 4944.926587][ T5562] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 4944.927445][ T5562] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 4944.933388][ T5562] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 4947.013888][ T5562] usb 1-1: USB disconnect, device number 56 [ 4966.255933][T14403] serio: Serial port pts0 [ 4975.140934][ T31] audit: type=1400 audit(4975.060:534): avc: denied { map } for pid=14434 comm="syz.1.21535" path="/dev/vsock" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 4978.894047][ T31] audit: type=1400 audit(4978.810:535): avc: denied { setopt } for pid=14442 comm="syz.1.21537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 4978.896584][ T31] audit: type=1400 audit(4978.820:536): avc: denied { accept } for pid=14442 comm="syz.1.21537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 4981.272471][ C0] vxcan0: j1939_tp_rxtimer: 0x83d3a400: rx timeout, send abort [ 4981.273944][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x83d3a400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 4981.946125][ T31] audit: type=1400 audit(4981.860:537): avc: denied { listen } for pid=14470 comm="syz.0.21545" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 4983.345233][ T31] audit: type=1400 audit(4983.270:538): avc: denied { setattr } for pid=14506 comm="syz.0.21553" name="NETLINK" dev="sockfs" ino=194552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 4984.203168][T14530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=14530 comm=syz.1.21559 [ 4984.300580][ T31] audit: type=1400 audit(4984.220:539): avc: denied { write } for pid=14533 comm="syz.1.21561" name="fb0" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:man_t:s0" [ 4984.326905][ T31] audit: type=1400 audit(4984.250:540): avc: denied { ioctl } for pid=14533 comm="syz.1.21561" path="/dev/fb0" dev="devtmpfs" ino=617 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:man_t:s0" [ 4984.563766][ T31] audit: type=1400 audit(4984.480:541): avc: denied { bind } for pid=14532 comm="syz.0.21560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 4984.565125][ T31] audit: type=1400 audit(4984.480:542): avc: denied { name_bind } for pid=14532 comm="syz.0.21560" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 4984.784782][ T31] audit: type=1400 audit(4984.710:543): avc: denied { create } for pid=14548 comm="syz.0.21563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 4985.989386][T14574] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 4985.989377][ T31] audit: type=1400 audit(4985.910:544): avc: denied { relabelfrom } for pid=14573 comm="syz.1.21569" name="NETLINK" dev="sockfs" ino=195118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 4985.991372][ T31] audit: type=1400 audit(4985.910:545): avc: denied { relabelto } for pid=14573 comm="syz.1.21569" name="NETLINK" dev="sockfs" ino=195118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 4986.977162][T14581] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14581 comm=syz.0.21572 [ 4987.179932][T14595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14595 comm=syz.0.21577 [ 4990.225356][T14621] binder: 14620:14621 ioctl 4008662c 20001a00 returned -22 [ 4990.488353][T14624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14624 comm=syz.1.21585 [ 4990.874234][ T6404] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 4991.081793][ T6404] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 4991.083177][ T6404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4991.083505][ T6404] usb 2-1: Product: syz [ 4991.083717][ T6404] usb 2-1: Manufacturer: syz [ 4991.083922][ T6404] usb 2-1: SerialNumber: syz [ 4994.504135][T14651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=14651 comm=syz.0.21591 [ 4995.459086][T14667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14667 comm=syz.0.21596 [ 4996.004474][T14678] fuse: Unknown parameter 'oä{«' [ 4999.584649][ T31] audit: type=1400 audit(4999.500:546): avc: denied { getopt } for pid=14711 comm="syz.0.21609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4999.788449][T14713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14713 comm=syz.0.21609 [ 5000.625438][ T5562] usb 2-1: USB disconnect, device number 29 [ 5001.443914][ T6404] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 5001.594687][ T6404] usb 2-1: device descriptor read/64, error -71 [ 5001.737942][ T31] audit: type=1400 audit(5001.660:547): avc: denied { append } for pid=14733 comm="syz.0.21613" name="nbd0" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 5001.863681][ T6404] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 5002.033395][ T6404] usb 2-1: device descriptor read/64, error -71 [ 5002.155104][ T6404] usb usb2-port1: attempt power cycle [ 5002.563531][ T6404] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 5002.598350][ T6404] usb 2-1: device descriptor read/8, error -71 [ 5002.742299][T14740] A link change request failed with some changes committed already. Interface sit0.3 may have been left with an inconsistent configuration, please check. [ 5002.865388][ T6404] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 5002.897514][ T6404] usb 2-1: device descriptor read/8, error -71 [ 5003.015916][ T6404] usb usb2-port1: unable to enumerate USB device [ 5012.155831][T14831] SELinux: Context system_u:object_r:ifconfig_exec_t:s0 is not valid (left unmapped). [ 5012.161260][ T31] audit: type=1400 audit(5012.080:548): avc: denied { relabelfrom } for pid=14829 comm="syz.1.21635" name="UNIX" dev="sockfs" ino=196047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 5012.170805][ T31] audit: type=1400 audit(5012.080:549): avc: denied { relabelto } for pid=14829 comm="syz.1.21635" name="UNIX" dev="sockfs" ino=196047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:ifconfig_exec_t:s0" [ 5012.196171][T14831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14831 comm=syz.1.21635 [ 5018.013418][ T957] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 5018.268011][ T957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5018.270285][ T957] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 5018.277010][ T957] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 5018.277587][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5018.278903][ T957] usb 2-1: Product: syz [ 5018.280780][ T957] usb 2-1: Manufacturer: syz [ 5018.281205][ T957] usb 2-1: SerialNumber: syz [ 5018.520210][T14881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5019.188817][T14881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5019.436020][ T957] cdc_ncm 2-1:1.0: failed to get mac address [ 5019.437468][ T957] cdc_ncm 2-1:1.0: bind() failure [ 5019.453602][ T957] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 5019.464978][ T957] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 5019.473584][ T957] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 5019.496885][ T957] usb 2-1: USB disconnect, device number 34 [ 5020.067033][T14907] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 5024.023847][ T957] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 5024.273158][ T957] usb 2-1: Using ep0 maxpacket: 32 [ 5024.335941][ T957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5024.339325][ T957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5024.362779][ T957] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 5024.363760][ T957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5024.373311][ T957] usb 2-1: config 0 descriptor?? [ 5024.866338][ T957] uclogic 0003:28BD:0094.0020: interface is invalid, ignoring [ 5025.045649][T14891] usb 2-1: USB disconnect, device number 35 [ 5043.652996][ T957] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 5043.843133][ T957] usb 2-1: Using ep0 maxpacket: 32 [ 5043.856799][ T957] usb 2-1: config 0 has an invalid interface number: 250 but max is 1 [ 5043.857218][ T957] usb 2-1: config 0 has no interface number 1 [ 5043.857399][ T957] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 5043.895629][ T957] usb 2-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 5043.896047][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5043.896255][ T957] usb 2-1: Product: syz [ 5043.896369][ T957] usb 2-1: Manufacturer: syz [ 5043.896510][ T957] usb 2-1: SerialNumber: syz [ 5043.898245][ T957] usb 2-1: config 0 descriptor?? [ 5052.273698][T14956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5052.281306][T14956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5053.238766][T14956] hsr_slave_0: entered promiscuous mode [ 5053.244980][T14956] hsr_slave_1: entered promiscuous mode [ 5053.247238][T14956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5053.247693][T14956] Cannot create hsr debugfs directory [ 5053.620798][T14956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5053.663004][T14956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5053.724981][T14956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5053.789750][T14956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5053.928905][T14956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5053.940486][T14956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5053.954772][T14956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5053.967496][T14956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5054.180279][ T5108] usb 2-1: USB disconnect, device number 36 [ 5055.101411][T15292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21664'. [ 5055.873246][T14956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5060.129839][T15332] netlink: 'syz.1.21673': attribute type 9 has an invalid length. [ 5060.130216][T15332] netlink: 'syz.1.21673': attribute type 7 has an invalid length. [ 5060.130412][T15332] netlink: 'syz.1.21673': attribute type 8 has an invalid length. [ 5063.804539][T14956] veth0_vlan: entered promiscuous mode [ 5063.849496][T14956] veth1_vlan: entered promiscuous mode [ 5064.075712][T14956] veth0_macvtap: entered promiscuous mode [ 5064.107872][T14956] veth1_macvtap: entered promiscuous mode [ 5064.209099][T14956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5064.209974][T14956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5064.210475][T14956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5064.210947][T14956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5072.401765][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21688'. [ 5079.927439][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21713'. [ 5083.370537][T15504] loop7: detected capacity change from 0 to 16384 [ 5084.217703][T15504] I/O error, dev loop7, sector 3200 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 5084.220784][T15504] I/O error, dev loop7, sector 3200 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 5084.221454][T15504] Buffer I/O error on dev loop7, logical block 400, async page read [ 5091.967158][T15531] deleting an unspecified loop device is not supported. [ 5111.963184][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21747'. [ 5112.723367][ T31] audit: type=1326 audit(5112.630:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.1.21749" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x0 [ 5119.423442][T15562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5119.427250][T15562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5120.674646][T29407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5120.764992][T15797] loop0: detected capacity change from 0 to 16384 [ 5120.794217][T29407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5120.937772][T29407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5121.068965][T29407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5121.357957][T15797] I/O error, dev loop0, sector 1408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 5121.649442][T29407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5121.656621][T29407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5121.661757][T29407] bond0 (unregistering): Released all slaves [ 5121.780206][T29407] hsr_slave_0: left promiscuous mode [ 5121.804026][T29407] hsr_slave_1: left promiscuous mode [ 5121.815022][T29407] veth1_macvtap: left promiscuous mode [ 5121.815530][T29407] veth0_macvtap: left promiscuous mode [ 5121.815904][T29407] veth1_vlan: left promiscuous mode [ 5121.816576][T29407] veth0_vlan: left promiscuous mode [ 5122.906333][T15562] hsr_slave_0: entered promiscuous mode [ 5122.931522][T15562] hsr_slave_1: entered promiscuous mode [ 5122.945926][T15562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5122.946549][T15562] Cannot create hsr debugfs directory [ 5123.643558][T15885] sctp: [Deprecated]: syz.1.21763 (pid 15885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 5123.643558][T15885] Use struct sctp_sack_info instead [ 5124.520174][T15562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5124.551183][T15562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5124.571465][T15562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5124.601183][T15562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5126.721710][T15562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5129.057279][T15972] EXT4-fs warning (device vda): verify_group_input:136: Cannot add at group 1 (only 8 groups) [ 5129.440557][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21771'. [ 5129.441692][T15975] netem: invalid attributes len -24 [ 5129.441911][T15975] netem: change failed [ 5129.868626][ T31] audit: type=1326 audit(5129.790:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.1.21773" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x0 [ 5132.703147][T15425] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 5132.939135][T15425] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5132.975126][T15425] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 5132.975707][T15425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5132.976244][T15425] usb 2-1: Product: syz [ 5132.976595][T15425] usb 2-1: Manufacturer: syz [ 5132.977034][T15425] usb 2-1: SerialNumber: syz [ 5134.067036][T15425] cdc_ncm 2-1:1.0: failed to get mac address [ 5134.275144][T15425] cdc_ncm 2-1:1.0: bind() failure [ 5134.295505][T15425] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 5134.301064][T15425] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 5134.304532][T15425] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 5134.323566][T15425] usb 2-1: USB disconnect, device number 37 [ 5136.849359][T15562] veth0_vlan: entered promiscuous mode [ 5136.893503][T15562] veth1_vlan: entered promiscuous mode [ 5137.040418][T15562] veth0_macvtap: entered promiscuous mode [ 5137.069336][T15562] veth1_macvtap: entered promiscuous mode [ 5137.337701][T15562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5137.338521][T15562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5137.338967][T15562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5137.339505][T15562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5163.245434][T16116] pim6reg1: entered promiscuous mode [ 5163.253478][T16116] pim6reg1: entered allmulticast mode [ 5164.040886][T16130] netem: unknown loss type 8 [ 5164.041274][T16130] netem: change failed [ 5165.593248][ T942] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 5165.783696][ T942] usb 2-1: Using ep0 maxpacket: 8 [ 5165.811679][ T942] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 5165.812253][ T942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 5165.813252][ T942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 5165.813637][ T942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 5165.813995][ T942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 5165.814352][ T942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5165.814848][ T942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 5165.815209][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5165.865149][ T942] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 5165.870215][T16150] vlan2: entered promiscuous mode [ 5165.871006][T16150] vlan2: entered allmulticast mode [ 5166.976261][T16159] vlan2: entered promiscuous mode [ 5166.976676][T16159] vlan2: entered allmulticast mode [ 5167.904559][T16167] tracefs: Bad value for 'gid' [ 5169.523169][T15487] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 5169.792777][T15487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5169.793420][T15487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5169.794231][T15487] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 5169.794637][T15487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5169.820832][T15487] usb 1-1: config 0 descriptor?? [ 5170.416649][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.418106][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.418466][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.418758][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.419047][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.419336][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.419645][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.419948][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.420325][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.420614][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.420898][T15487] lg-g15 0003:046D:C222.0021: unknown main item tag 0x0 [ 5170.446307][T15487] lg-g15 0003:046D:C222.0021: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 5170.676859][T15487] usb 1-1: USB disconnect, device number 57 [ 5179.638539][T15475] usb 2-1: USB disconnect, device number 38 [ 5182.447326][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5182.457925][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5182.463130][ T1479] bond0 (unregistering): Released all slaves [ 5182.638974][ T1479] hsr_slave_0: left promiscuous mode [ 5182.662196][ T1479] hsr_slave_1: left promiscuous mode [ 5182.670544][ T1479] veth1_macvtap: left promiscuous mode [ 5182.670912][ T1479] veth0_macvtap: left promiscuous mode [ 5182.671476][ T1479] veth1_vlan: left promiscuous mode [ 5182.671859][ T1479] veth0_vlan: left promiscuous mode [ 5184.944530][T16225] EXT4-fs warning (device vda): verify_group_input:136: Cannot add at group 1 (only 8 groups) [ 5187.914856][T16240] netlink: 280 bytes leftover after parsing attributes in process `syz.0.21846'. [ 5199.223676][T16284] netlink: 17 bytes leftover after parsing attributes in process `syz.0.21861'. [ 5199.978151][T16294] netlink: 116 bytes leftover after parsing attributes in process `syz.0.21866'. [ 5207.067298][ T31] audit: type=1400 audit(5206.970:552): avc: denied { listen } for pid=16311 comm="syz.1.21873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 5207.598608][ T31] audit: type=1400 audit(5207.520:553): avc: denied { accept } for pid=16311 comm="syz.1.21873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 5210.661796][T16312] vmap allocation for size 536875008 failed: use vmalloc= to increase size [ 5210.663152][T16312] syz.1.21873: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 5210.663960][T16312] CPU: 0 PID: 16312 Comm: syz.1.21873 Not tainted 6.10.0-rc6-syzkaller #0 [ 5210.664441][T16312] Hardware name: ARM-Versatile Express [ 5210.664681][T16312] Call trace: [ 5210.664884][T16312] [<818d4f38>] (dump_backtrace) from [<818d5034>] (show_stack+0x18/0x1c) [ 5210.665330][T16312] r7:ffffffff r6:81ff9e84 r5:60000113 r4:81fe1510 [ 5210.665601][T16312] [<818d501c>] (show_stack) from [<818f26b8>] (dump_stack_lvl+0x70/0x7c) [ 5210.666344][T16312] [<818f2648>] (dump_stack_lvl) from [<818f26dc>] (dump_stack+0x18/0x1c) [ 5210.666727][T16312] r5:82e3c800 r4:00000000 [ 5210.666888][T16312] [<818f26c4>] (dump_stack) from [<804b1ab0>] (warn_alloc+0xd8/0x178) [ 5210.667260][T16312] [<804b19d8>] (warn_alloc) from [<804a8b74>] (__vmalloc_node_range_noprof+0xc8/0x5a0) [ 5210.667891][T16312] r3:20000000 r2:81ff9e84 [ 5210.668140][T16312] r6:20000000 r5:00000dc0 r4:81ff9ebc [ 5210.668376][T16312] [<804a8aac>] (__vmalloc_node_range_noprof) from [<8046111c>] (kvmalloc_node_noprof+0xc0/0x110) [ 5210.669012][T16312] r10:df841d00 r9:84b5b000 r8:815803d4 r7:ffffffff r6:00000dc0 r5:20000000 [ 5210.669495][T16312] r4:00000000 [ 5210.669654][T16312] [<8046105c>] (kvmalloc_node_noprof) from [<815803d4>] (xt_alloc_entry_offsets+0x24/0x30) [ 5210.670060][T16312] r8:b5403587 r7:00000000 r6:20000420 r5:84b5b040 r4:08000000 [ 5210.670483][T16312] [<815803b0>] (xt_alloc_entry_offsets) from [<81638c0c>] (translate_table+0x70/0x78c) [ 5210.670980][T16312] [<81638b9c>] (translate_table) from [<81639dc8>] (do_replace+0xe8/0x5a0) [ 5210.671660][T16312] r10:00000126 r9:84b5b040 r8:b5403587 r7:00000240 r6:20000420 r5:84b5b000 [ 5210.672158][T16312] r4:84a3a640 [ 5210.672333][T16312] [<81639ce0>] (do_replace) from [<8163a3b4>] (do_ipt_set_ctl+0x134/0x2a0) [ 5210.672928][T16312] r10:00000126 r9:813d5208 r8:851d75c0 r7:000002a0 r6:df841da8 r5:8459f440 [ 5210.673419][T16312] r4:00000040 [ 5210.673759][T16312] [<8163a280>] (do_ipt_set_ctl) from [<8150e934>] (nf_setsockopt+0x60/0x7c) [ 5210.674338][T16312] r10:00000126 r9:813d5208 r8:851d75c0 r7:000002a0 r6:8459f440 r5:8163a280 [ 5210.674752][T16312] r4:827d64e0 [ 5210.675103][T16312] [<8150e8d8>] (nf_setsockopt) from [<815a5f38>] (ip_setsockopt+0x88/0x98) [ 5210.675615][T16312] r6:8459f440 r5:000002a0 r4:00000040 [ 5210.675890][T16312] [<815a5eb4>] (ip_setsockopt) from [<815b5938>] (tcp_setsockopt+0x3c/0x58) [ 5210.676342][T16312] r6:00000000 r5:851d7180 r4:815a5eb0 [ 5210.676706][T16312] [<815b5900>] (tcp_setsockopt) from [<813d5240>] (sock_common_setsockopt+0x38/0x40) [ 5210.677313][T16312] r4:815b58fc [ 5210.677586][T16312] [<813d520c>] (sock_common_setsockopt) from [<817e0b00>] (smc_setsockopt+0xa8/0x3c8) [ 5210.678086][T16312] r4:00000040 [ 5210.678263][T16312] [<817e0a5c>] (smc_setsockopt) from [<813d0a5c>] (do_sock_setsockopt+0xb0/0x17c) [ 5210.678977][T16312] r9:82e3c800 r8:8020029c r7:00000000 r6:833cc500 r5:00000000 r4:817e0a58 [ 5210.679363][T16312] [<813d09ac>] (do_sock_setsockopt) from [<813d3d5c>] (sys_setsockopt+0x78/0xbc) [ 5210.680028][T16312] r6:833cc500 r5:00000040 r4:00000000 [ 5210.680358][T16312] [<813d3ce4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5210.680834][T16312] Exception stack(0xdf841fa8 to 0xdf841ff0) [ 5210.681224][T16312] 1fa0: 000002a0 00000000 00000003 00000000 00000040 200003c0 [ 5210.681633][T16312] 1fc0: 000002a0 00000000 002542e8 00000126 7eef8776 7eef8777 003d0f00 76bc20bc [ 5210.682117][T16312] 1fe0: 76bc1ec8 76bc1eb8 00018374 00130460 [ 5210.682562][T16312] r7:00000126 r6:002542e8 r5:00000000 r4:000002a0 [ 5210.683515][T16312] Mem-Info: [ 5210.683753][T16312] active_anon:2169 inactive_anon:0 isolated_anon:0 [ 5210.683753][T16312] active_file:2626 inactive_file:38794 isolated_file:0 [ 5210.683753][T16312] unevictable:0 dirty:13 writeback:0 [ 5210.683753][T16312] slab_reclaimable:1151 slab_unreclaimable:6257 [ 5210.683753][T16312] mapped:1748 shmem:854 pagetables:202 [ 5210.683753][T16312] sec_pagetables:0 bounce:0 [ 5210.683753][T16312] kernel_misc_reclaimable:0 [ 5210.683753][T16312] free:433924 free_pcp:568 free_cma:4032 [ 5210.686225][T16312] Node 0 active_anon:8676kB inactive_anon:0kB active_file:10504kB inactive_file:155176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6992kB dirty:52kB writeback:0kB shmem:3416kB writeback_tmp:0kB kernel_stack:1632kB pagetables:808kB sec_pagetables:0kB all_unreclaimable? no [ 5210.687219][T16312] Normal free:1379792kB boost:0kB min:4780kB low:6208kB high:7636kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8528kB unevictable:0kB writepending:28kB present:1556480kB managed:1430124kB mlocked:0kB bounce:0kB free_pcp:2272kB local_pcp:904kB free_cma:0kB [ 5210.688388][T16312] lowmem_reserve[]: 0 4224 0 [ 5210.688815][T16312] Normal: 38*4kB (UME) 33*8kB (UE) 35*16kB (UME) 14*32kB (UE) 15*64kB (UME) 1*128kB (U) 6*256kB (UME) 3*512kB (UE) 0*1024kB 5*2048kB (UME) 333*4096kB (UM) = 1379792kB [ 5210.690048][T16312] 42276 total pagecache pages [ 5210.690354][T16312] 2 pages in swap cache [ 5210.690558][T16312] Free swap = 124436kB [ 5210.690772][T16312] Total swap = 124996kB [ 5210.691036][T16312] 524288 pages RAM [ 5210.691197][T16312] 135168 pages HighMem/MovableOnly [ 5210.691415][T16312] 31589 pages reserved [ 5210.691572][T16312] 4096 pages cma reserved [ 5219.844370][T16336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21880'. [ 5220.585236][T16329] vmap allocation for size 536875008 failed: use vmalloc= to increase size [ 5220.946335][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21882'. [ 5222.609708][T16349] vmap allocation for size 536875008 failed: use vmalloc= to increase size [ 5222.610331][T16349] warn_alloc: 1 callbacks suppressed [ 5222.610435][T16349] syz.1.21885: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 5222.613565][T16349] CPU: 0 PID: 16349 Comm: syz.1.21885 Not tainted 6.10.0-rc6-syzkaller #0 [ 5222.614031][T16349] Hardware name: ARM-Versatile Express [ 5222.614288][T16349] Call trace: [ 5222.614482][T16349] [<818d4f38>] (dump_backtrace) from [<818d5034>] (show_stack+0x18/0x1c) [ 5222.614927][T16349] r7:ffffffff r6:81ff9e84 r5:60000013 r4:81fe1510 [ 5222.615199][T16349] [<818d501c>] (show_stack) from [<818f26b8>] (dump_stack_lvl+0x70/0x7c) [ 5222.615587][T16349] [<818f2648>] (dump_stack_lvl) from [<818f26dc>] (dump_stack+0x18/0x1c) [ 5222.615993][T16349] r5:83652400 r4:00000000 [ 5222.616234][T16349] [<818f26c4>] (dump_stack) from [<804b1ab0>] (warn_alloc+0xd8/0x178) [ 5222.616885][T16349] [<804b19d8>] (warn_alloc) from [<804a8b74>] (__vmalloc_node_range_noprof+0xc8/0x5a0) [ 5222.617261][T16349] r3:20000000 r2:81ff9e84 [ 5222.617491][T16349] r6:20000000 r5:00000dc0 r4:81ff9ebc [ 5222.617740][T16349] [<804a8aac>] (__vmalloc_node_range_noprof) from [<8046111c>] (kvmalloc_node_noprof+0xc0/0x110) [ 5222.618225][T16349] r10:df991d00 r9:85696400 r8:815803d4 r7:ffffffff r6:00000dc0 r5:20000000 [ 5222.618579][T16349] r4:00000000 [ 5222.618769][T16349] [<8046105c>] (kvmalloc_node_noprof) from [<815803d4>] (xt_alloc_entry_offsets+0x24/0x30) [ 5222.619228][T16349] r8:b5403587 r7:00000000 r6:20000360 r5:85696440 r4:08000000 [ 5222.619522][T16349] [<815803b0>] (xt_alloc_entry_offsets) from [<81638c0c>] (translate_table+0x70/0x78c) [ 5222.620003][T16349] [<81638b9c>] (translate_table) from [<81639dc8>] (do_replace+0xe8/0x5a0) [ 5222.620469][T16349] r10:00000126 r9:85696440 r8:b5403587 r7:00000238 r6:20000360 r5:85696400 [ 5222.620833][T16349] r4:84a3a640 [ 5222.621031][T16349] [<81639ce0>] (do_replace) from [<8163a3b4>] (do_ipt_set_ctl+0x134/0x2a0) [ 5222.621465][T16349] r10:00000126 r9:813d5208 r8:851e3ec0 r7:00000298 r6:df991da8 r5:843e64c0 [ 5222.621872][T16349] r4:00000040 [ 5222.622068][T16349] [<8163a280>] (do_ipt_set_ctl) from [<8150e934>] (nf_setsockopt+0x60/0x7c) [ 5222.623066][T16349] r10:00000126 r9:813d5208 r8:851e3ec0 r7:00000298 r6:843e64c0 r5:8163a280 [ 5222.623960][T16349] r4:827d64e0 [ 5222.624481][T16349] [<8150e8d8>] (nf_setsockopt) from [<815a5f38>] (ip_setsockopt+0x88/0x98) [ 5222.624858][T16349] r6:843e64c0 r5:00000298 r4:00000040 [ 5222.625082][T16349] [<815a5eb4>] (ip_setsockopt) from [<815b5938>] (tcp_setsockopt+0x3c/0x58) [ 5222.625462][T16349] r6:00000000 r5:851e3a80 r4:815a5eb0 [ 5222.625720][T16349] [<815b5900>] (tcp_setsockopt) from [<813d5240>] (sock_common_setsockopt+0x38/0x40) [ 5222.626079][T16349] r4:815b58fc [ 5222.626235][T16349] [<813d520c>] (sock_common_setsockopt) from [<817e0b00>] (smc_setsockopt+0xa8/0x3c8) [ 5222.626620][T16349] r4:00000040 [ 5222.626806][T16349] [<817e0a5c>] (smc_setsockopt) from [<813d0a5c>] (do_sock_setsockopt+0xb0/0x17c) [ 5222.627259][T16349] r9:83652400 r8:8020029c r7:00000000 r6:84c64280 r5:00000000 r4:817e0a58 [ 5222.627638][T16349] [<813d09ac>] (do_sock_setsockopt) from [<813d3d5c>] (sys_setsockopt+0x78/0xbc) [ 5222.628073][T16349] r6:84c64280 r5:00000040 r4:00000000 [ 5222.628347][T16349] [<813d3ce4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5222.628731][T16349] Exception stack(0xdf991fa8 to 0xdf991ff0) [ 5222.629046][T16349] 1fa0: 00000298 00000000 00000003 00000000 00000040 20000300 [ 5222.629422][T16349] 1fc0: 00000298 00000000 002542e8 00000126 7eef8776 7eef8777 003d0f00 76bc20bc [ 5222.629801][T16349] 1fe0: 76bc1ec8 76bc1eb8 00018374 00130460 [ 5222.630146][T16349] r7:00000126 r6:002542e8 r5:00000000 r4:00000298 [ 5222.632913][T16349] Mem-Info: [ 5222.633644][T16349] active_anon:5055 inactive_anon:0 isolated_anon:0 [ 5222.633644][T16349] active_file:2626 inactive_file:38796 isolated_file:0 [ 5222.633644][T16349] unevictable:0 dirty:13 writeback:0 [ 5222.633644][T16349] slab_reclaimable:1151 slab_unreclaimable:6265 [ 5222.633644][T16349] mapped:4634 shmem:3720 pagetables:221 [ 5222.633644][T16349] sec_pagetables:0 bounce:0 [ 5222.633644][T16349] kernel_misc_reclaimable:0 [ 5222.633644][T16349] free:430634 free_pcp:621 free_cma:4032 [ 5222.635074][T16349] Node 0 active_anon:20220kB inactive_anon:0kB active_file:10504kB inactive_file:155184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18536kB dirty:52kB writeback:0kB shmem:14880kB writeback_tmp:0kB kernel_stack:1616kB pagetables:884kB sec_pagetables:0kB all_unreclaimable? no [ 5222.636022][T16349] Normal free:1379540kB boost:0kB min:4780kB low:6208kB high:7636kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8536kB unevictable:0kB writepending:24kB present:1556480kB managed:1430124kB mlocked:0kB bounce:0kB free_pcp:2484kB local_pcp:1144kB free_cma:0kB [ 5222.637136][T16349] lowmem_reserve[]: 0 4224 0 [ 5222.637595][T16349] Normal: 37*4kB (UE) 34*8kB (UME) 35*16kB (UME) 14*32kB (UE) 15*64kB (UME) 1*128kB (U) 5*256kB (UE) 3*512kB (UE) 0*1024kB 5*2048kB (UME) 333*4096kB (UM) = 1379540kB [ 5222.638746][T16349] 45144 total pagecache pages [ 5222.638949][T16349] 2 pages in swap cache [ 5222.639115][T16349] Free swap = 124436kB [ 5222.639296][T16349] Total swap = 124996kB [ 5222.639466][T16349] 524288 pages RAM [ 5222.639667][T16349] 135168 pages HighMem/MovableOnly [ 5222.639881][T16349] 31589 pages reserved [ 5222.640063][T16349] 4096 pages cma reserved [ 5223.271239][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5223.280827][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5223.284498][ T1479] bond0 (unregistering): Released all slaves [ 5223.414881][ T1479] hsr_slave_0: left promiscuous mode [ 5223.418903][ T1479] hsr_slave_1: left promiscuous mode [ 5226.467186][T16353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5226.474790][T16353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5227.921291][T16353] hsr_slave_0: entered promiscuous mode [ 5227.924948][T16353] hsr_slave_1: entered promiscuous mode [ 5228.826910][T16353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 5228.849038][T16353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 5228.869159][T16353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 5228.887223][T16353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 5229.538915][T16353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5233.583317][T16353] veth0_vlan: entered promiscuous mode [ 5233.616200][T16353] veth1_vlan: entered promiscuous mode [ 5233.728603][T16353] veth0_macvtap: entered promiscuous mode [ 5233.749262][T16353] veth1_macvtap: entered promiscuous mode [ 5233.859278][T16353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5233.860080][T16353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5233.860423][T16353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5233.860711][T16353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5262.695463][T16878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21917'. [ 5264.454215][T15475] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 5264.668031][T15475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5264.671001][T15475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5264.676263][T15475] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 5264.679747][T15475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5264.711159][T15475] usb 1-1: config 0 descriptor?? [ 5265.347300][T15475] wacom 0003:056A:0031.0022: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.0-1/input0 [ 5265.434783][ T942] usb 1-1: USB disconnect, device number 58 [ 5266.517805][T16922] input: syz0 as /devices/virtual/input/input59 [ 5269.748963][ T31] audit: type=1326 audit(5269.670:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16935 comm="syz.0.21932" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x0 [ 5271.205697][T16953] syz.0.21934 (16953): attempted to duplicate a private mapping with mremap. This is not supported. [ 5272.230673][ T1479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5272.355553][ T1479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5272.444682][ T1479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5272.595333][ T1479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5273.221087][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5273.232139][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5273.237006][ T1479] bond0 (unregistering): Released all slaves [ 5273.376044][ T1479] hsr_slave_0: left promiscuous mode [ 5273.379563][ T1479] hsr_slave_1: left promiscuous mode [ 5273.397098][ T1479] veth1_macvtap: left promiscuous mode [ 5273.397569][ T1479] veth0_macvtap: left promiscuous mode [ 5273.398050][ T1479] veth1_vlan: left promiscuous mode [ 5278.620480][T16960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5278.626855][T16960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5280.928328][T16960] hsr_slave_0: entered promiscuous mode [ 5280.931443][T16960] hsr_slave_1: entered promiscuous mode [ 5280.956060][T16960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5280.956738][T16960] Cannot create hsr debugfs directory [ 5282.267524][T16960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5282.311381][T16960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5282.379857][T16960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5282.425241][T16960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5284.494216][T16960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5287.886323][T17349] pim6reg1: entered promiscuous mode [ 5287.886786][T17349] pim6reg1: entered allmulticast mode [ 5289.218623][T16960] veth0_vlan: entered promiscuous mode [ 5289.226984][T16960] veth1_vlan: entered promiscuous mode [ 5289.263830][T16960] veth0_macvtap: entered promiscuous mode [ 5289.271104][T16960] veth1_macvtap: entered promiscuous mode [ 5289.311113][T16960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5289.311398][T16960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5289.311584][T16960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5289.311848][T16960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5290.418627][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21940'. [ 5291.443601][ T942] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 5291.627859][ T942] usb 1-1: Using ep0 maxpacket: 32 [ 5291.647190][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5291.647711][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5291.648052][ T942] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 5291.648478][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5291.658882][ T942] usb 1-1: config 0 descriptor?? [ 5291.691850][ T942] hub 1-1:0.0: USB hub found [ 5291.903475][ T942] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 5291.922887][ T942] usbhid 1-1:0.0: can't add hid device: -71 [ 5291.923323][ T942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 5291.965484][ T942] usb 1-1: USB disconnect, device number 59 [ 5326.106448][ T31] audit: type=1326 audit(5326.030:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5326.113359][ T31] audit: type=1326 audit(5326.030:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5326.116396][ T31] audit: type=1326 audit(5326.030:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x12e318 code=0x7ffc0000 [ 5326.118520][ T31] audit: type=1326 audit(5326.030:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x12e318 code=0x7ffc0000 [ 5326.119305][ T31] audit: type=1326 audit(5326.030:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5326.133574][ T31] audit: type=1326 audit(5326.030:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5326.134530][ T31] audit: type=1326 audit(5326.050:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130460 code=0x7ffc0000 [ 5326.137140][ T31] audit: type=1326 audit(5326.050:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5326.138386][ T31] audit: type=1326 audit(5326.050:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17482 comm="syz.1.21950" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5340.556987][T17511] syz.1.21952[17511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 5340.557325][T17511] syz.1.21952[17511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 5351.749499][T17554] Process accounting resumed [ 5354.457020][T17575] vlan2: entered allmulticast mode [ 5354.457488][T17575] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 5354.461452][T17575] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 5358.913458][ T31] audit: type=1400 audit(5358.820:564): avc: denied { create } for pid=17619 comm="syz.0.21987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 5382.035875][ T31] audit: type=1400 audit(5381.960:565): avc: denied { relabelfrom } for pid=17710 comm="syz.1.22014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 5382.037689][ T31] audit: type=1400 audit(5381.960:566): avc: denied { relabelto } for pid=17710 comm="syz.1.22014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 5387.919151][T17724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22017'. [ 5387.921453][T17724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22017'. [ 5398.493964][T17742] input: syz0 as /devices/virtual/input/input60 [ 5419.063214][ T1006] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 5419.253329][ T1006] usb 2-1: Using ep0 maxpacket: 32 [ 5419.269376][ T1006] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 5419.269902][ T1006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5419.270239][ T1006] usb 2-1: Product: syz [ 5419.270435][ T1006] usb 2-1: Manufacturer: syz [ 5419.270784][ T1006] usb 2-1: SerialNumber: syz [ 5419.274823][ T1006] usb 2-1: config 0 descriptor?? [ 5419.915794][ T1006] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 5420.114915][T15507] usb 2-1: USB disconnect, device number 39 [ 5423.372935][ T5108] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 5423.611252][ T5108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5423.612176][ T5108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5423.613269][ T5108] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 5423.613636][ T5108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5423.621656][ T5108] usb 2-1: config 0 descriptor?? [ 5424.322098][ T5108] usb 2-1: string descriptor 0 read error: -71 [ 5424.323597][ T5108] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71 [ 5424.324127][ T5108] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71 [ 5424.324389][ T5108] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71 [ 5424.324673][ T5108] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 5424.325470][ T5108] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 5424.334299][ T5108] usb 2-1: USB disconnect, device number 40 [ 5426.807515][T15507] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 5427.057621][T15507] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 5427.059575][T15507] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5427.069658][T15507] usb 1-1: config 0 has no interface number 0 [ 5427.070078][T15507] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 5427.070591][T15507] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 5427.070958][T15507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5427.124146][T15507] usb 1-1: config 0 descriptor?? [ 5427.475172][T15507] usb 1-1: USB disconnect, device number 60 [ 5427.917680][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22036'. [ 5428.703330][T15507] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 5428.978828][T15507] usb 1-1: Using ep0 maxpacket: 8 [ 5429.080582][T15507] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 5429.089253][T15507] usb 1-1: config 179 has no interface number 0 [ 5429.089755][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 5429.098774][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 5429.103833][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 5429.111415][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 5429.113129][T15507] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 5429.113802][T15507] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 5429.114093][T15507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5429.202980][T17845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5429.570544][T15507] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input61 [ 5429.736302][T14939] usb 1-1: USB disconnect, device number 61 [ 5429.736396][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 5429.736451][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 5429.738063][T14939] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 5430.624408][T17878] vlan2: entered promiscuous mode [ 5430.624965][T17878] vlan2: entered allmulticast mode [ 5432.644619][T15507] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 5432.913067][T15507] usb 1-1: Using ep0 maxpacket: 8 [ 5432.948078][T15507] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 5432.948613][T15507] usb 1-1: config 179 has no interface number 0 [ 5432.948976][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 5432.949405][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 5432.950863][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 5432.951596][T15507] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 5432.952327][T15507] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 5432.953429][T15507] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 5432.953810][T15507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5432.975704][T17893] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 5433.243906][T15507] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input62 [ 5433.421488][T15475] usb 1-1: USB disconnect, device number 62 [ 5433.421719][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 5433.421870][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 5433.423672][T15475] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 5434.914598][T15507] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 5435.179141][T15507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5435.180282][T15507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5435.193423][T15507] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 5435.201723][T15507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5435.255065][T15507] usb 1-1: config 0 descriptor?? [ 5436.267157][T15507] usb 1-1: string descriptor 0 read error: -71 [ 5436.274417][T15507] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #200: -71 [ 5436.277554][T15507] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71 [ 5436.278243][T15507] uclogic 0003:256C:006D.0024: failed probing pen v2 parameters: -71 [ 5436.278690][T15507] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 5436.286993][T15507] uclogic 0003:256C:006D.0024: probe with driver uclogic failed with error -71 [ 5436.298919][T15507] usb 1-1: USB disconnect, device number 63 [ 5436.924206][T15507] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 5437.158725][T15507] usb 1-1: Using ep0 maxpacket: 16 [ 5437.179449][T15507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 5437.193292][T15507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 5437.193971][T15507] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 5437.194288][T15507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5437.224904][T15507] usb 1-1: config 0 descriptor?? [ 5437.928793][T17947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5437.943494][T17947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5438.011029][T15507] hid (null): report_id 0 is invalid [ 5438.026165][T15507] hid-generic 0003:0158:0100.0025: unknown main item tag 0x1 [ 5438.026888][T15507] hid-generic 0003:0158:0100.0025: unexpected long global item [ 5438.027576][T15507] hid-generic 0003:0158:0100.0025: probe with driver hid-generic failed with error -22 [ 5438.165350][T14890] usb 1-1: USB disconnect, device number 64 [ 5445.446039][T17982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22060'. [ 5453.021339][ T31] audit: type=1326 audit(5452.940:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.025209][ T31] audit: type=1326 audit(5452.940:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.034435][ T31] audit: type=1326 audit(5452.940:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.035627][ T31] audit: type=1326 audit(5452.940:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.036555][ T31] audit: type=1326 audit(5452.940:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.037320][ T31] audit: type=1326 audit(5452.940:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.038570][ T31] audit: type=1326 audit(5452.940:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.039482][ T31] audit: type=1326 audit(5452.950:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=174 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.040680][ T31] audit: type=1326 audit(5452.950:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5453.041580][ T31] audit: type=1326 audit(5452.950:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.0.22077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130460 code=0x7ffc0000 [ 5458.970710][ T6404] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 5459.170550][ T6404] usb 2-1: Using ep0 maxpacket: 32 [ 5459.253675][ T6404] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 5459.256056][ T6404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5459.261607][ T6404] usb 2-1: Product: syz [ 5459.283029][ T6404] usb 2-1: Manufacturer: syz [ 5459.285762][ T6404] usb 2-1: SerialNumber: syz [ 5459.297315][ T6404] usb 2-1: config 0 descriptor?? [ 5460.167477][ T6404] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:cf:9f:80:4b:58 [ 5460.190469][ T6404] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 5460.387763][T15483] usb 2-1: USB disconnect, device number 41 [ 5483.045929][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22092'. [ 5483.086405][T18095] veth2: entered promiscuous mode [ 5498.371834][T18140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18140 comm=syz.0.22106 [ 5502.666570][T18174] pim6reg1: entered promiscuous mode [ 5502.667053][T18174] pim6reg1: entered allmulticast mode [ 5503.256551][T18180] pim6reg1: entered promiscuous mode [ 5503.256987][T18180] pim6reg1: entered allmulticast mode [ 5514.267389][T18251] netlink: 'syz.1.22145': attribute type 3 has an invalid length. [ 5514.267945][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22145'. [ 5535.825805][T15475] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 5536.048352][T15475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5536.063269][T15475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5536.065229][T15475] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 5536.065843][T15475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5536.117441][T15475] usb 1-1: config 0 descriptor?? [ 5537.140688][T15475] uclogic 0003:256C:006D.0026: failed retrieving Huion firmware version: -71 [ 5537.141248][T15475] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 5537.141716][T15475] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 5537.170672][T15475] usb 1-1: USB disconnect, device number 65 [ 5537.332275][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22158'. [ 5552.115112][T14890] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 5552.334005][T14890] usb 1-1: Using ep0 maxpacket: 32 [ 5552.344951][T14890] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 5552.345530][T14890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5552.406132][T14890] usb 1-1: config 0 descriptor?? [ 5555.633819][T15458] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 5555.835184][T15458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5555.835889][T15458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5555.836371][T15458] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 5555.837068][T15458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5555.844774][T15458] usb 2-1: config 0 descriptor?? [ 5556.472759][T15458] usb 2-1: language id specifier not provided by device, defaulting to English [ 5556.897177][T15458] uclogic 0003:256C:006D.0027: interface is invalid, ignoring [ 5557.119403][T15482] usb 2-1: USB disconnect, device number 42 [ 5559.263185][ T942] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 5559.463278][ T942] usb 2-1: Using ep0 maxpacket: 32 [ 5559.516696][ T942] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 5559.525576][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5559.532885][ T942] usb 2-1: Product: syz [ 5559.533287][ T942] usb 2-1: Manufacturer: syz [ 5559.533462][ T942] usb 2-1: SerialNumber: syz [ 5559.590344][ T942] usb 2-1: config 0 descriptor?? [ 5560.343884][ T942] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5a:3e:0f:3e:ec:b3 [ 5560.376838][ T942] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 5560.593803][ T942] usb 2-1: USB disconnect, device number 43 [ 5560.923777][T18437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22190'. [ 5562.687801][T15372] usb 1-1: USB disconnect, device number 66 [ 5571.405202][T18534] netlink: 'syz.1.22214': attribute type 21 has an invalid length. [ 5572.928776][T18541] netlink: 'syz.1.22217': attribute type 10 has an invalid length. [ 5572.929298][T18541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22217'. [ 5572.931138][T18541] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 5573.021648][T18545] netlink: 'syz.1.22218': attribute type 1 has an invalid length. [ 5573.022092][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22218'. [ 5593.033480][T15475] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 5593.213089][T15475] usb 2-1: Using ep0 maxpacket: 8 [ 5593.220344][T15475] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 5593.220943][T15475] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 5593.221316][T15475] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 5593.221716][T15475] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 5593.222142][T15475] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 5593.223046][T15475] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 5593.223494][T15475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5593.439765][T15475] usb 2-1: GET_CAPABILITIES returned 0 [ 5593.440263][T15475] usbtmc 2-1:16.0: can't read capabilities [ 5593.648812][T15475] usb 2-1: USB disconnect, device number 44 [ 5593.979457][T18618] netlink: 'syz.1.22238': attribute type 1 has an invalid length. [ 5593.980011][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22238'. [ 5594.063502][T18620] tunl0: entered promiscuous mode [ 5594.068410][T18620] netlink: 'syz.1.22239': attribute type 1 has an invalid length. [ 5594.068841][T18620] netlink: 9 bytes leftover after parsing attributes in process `syz.1.22239'. [ 5594.423282][T15475] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 5594.634631][T15475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 5594.635387][T15475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 5594.635800][T15475] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 5594.636310][T15475] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 5594.636671][T15475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5594.640964][T15475] usb 2-1: config 0 descriptor?? [ 5594.644507][T18622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 5595.073107][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.073683][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.074076][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.074458][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.076508][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.076967][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.077328][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.077697][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.078082][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.078453][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.078800][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.079174][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.079534][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.079941][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.080347][T15475] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 5595.081149][T15475] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 5595.089133][T15475] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 5595.359175][T15475] usb 2-1: USB disconnect, device number 45 [ 5598.532197][T18663] ------------[ cut here ]------------ [ 5598.534015][T18663] WARNING: CPU: 0 PID: 18663 at mm/highmem.c:611 kunmap_local_indexed+0x20c/0x224 [ 5598.544524][T18663] Modules linked in: [ 5598.545451][T18663] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 5598.546177][T18663] CPU: 0 PID: 18663 Comm: syz.1.22247 Not tainted 6.10.0-rc6-syzkaller #0 [ 5598.546643][T18663] Hardware name: ARM-Versatile Express [ 5598.547377][T18663] Call trace: [ 5598.548629][T18663] [<818d4f38>] (dump_backtrace) from [<818d5034>] (show_stack+0x18/0x1c) [ 5598.552858][T18663] r7:00000000 r6:82622d44 r5:00000000 r4:81fe1510 [ 5598.554015][T18663] [<818d501c>] (show_stack) from [<818f269c>] (dump_stack_lvl+0x54/0x7c) [ 5598.555286][T18663] [<818f2648>] (dump_stack_lvl) from [<818f26dc>] (dump_stack+0x18/0x1c) [ 5598.556025][T18663] r5:00000000 r4:8285fd18 [ 5598.556591][T18663] [<818f26c4>] (dump_stack) from [<818d5adc>] (panic+0x120/0x358) [ 5598.557498][T18663] [<818d59bc>] (panic) from [<80243dcc>] (print_tainted+0x0/0xa0) [ 5598.561931][T18663] r3:8260c5c4 r2:00000001 r1:81fca17c r0:81fd1dd4 [ 5598.564643][T18663] r7:80480f00 [ 5598.567085][T18663] [<80243d58>] (check_panic_on_warn) from [<80243fc0>] (__warn+0x7c/0x180) [ 5598.567964][T18663] [<80243f44>] (__warn) from [<8024423c>] (warn_slowpath_fmt+0x178/0x1f4) [ 5598.568530][T18663] r8:00000009 r7:81ff8a54 r6:dfb85d14 r5:82e3d400 r4:00000000 [ 5598.568913][T18663] [<802440c8>] (warn_slowpath_fmt) from [<80480f00>] (kunmap_local_indexed+0x20c/0x224) [ 5598.572471][T18663] r10:ffefd0a8 r9:83f08f00 r8:20508000 r7:fffffffe r6:00000003 r5:82e3d400 [ 5598.577819][T18663] r4:ffefd000 [ 5598.578860][T18663] [<80480cf4>] (kunmap_local_indexed) from [<804f28c4>] (move_pages+0x7e8/0x149c) [ 5598.580141][T18663] r7:fffffffe r6:00000000 r5:84716810 r4:ffefb840 [ 5598.581188][T18663] [<804f20dc>] (move_pages) from [<8056b0c8>] (userfaultfd_ioctl+0x1278/0x2314) [ 5598.581633][T18663] r10:20c16000 r9:dfb85e98 r8:20000080 r7:83f08f00 r6:00000001 r5:00000000 [ 5598.582875][T18663] r4:8452a100 [ 5598.585527][T18663] [<80569e50>] (userfaultfd_ioctl) from [<8051a5c8>] (sys_ioctl+0x134/0xda4) [ 5598.591983][T18663] r10:82e3d400 r9:00000003 r8:85220cc0 r7:20000080 r6:85220cc1 r5:00000000 [ 5598.592689][T18663] r4:c028aa05 [ 5598.592961][T18663] [<8051a494>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5598.593375][T18663] Exception stack(0xdfb85fa8 to 0xdfb85ff0) [ 5598.594592][T18663] 5fa0: 00000000 00000000 00000003 c028aa05 20000080 00000000 [ 5598.602763][T18663] 5fc0: 00000000 00000000 00254370 00000036 7ef21776 7ef21777 003d0f00 76aff0bc [ 5598.603678][T18663] 5fe0: 76afeec8 76afeeb8 00018374 00130460 [ 5598.604045][T18663] r10:00000036 r9:82e3d400 r8:8020029c r7:00000036 r6:00254370 r5:00000000 [ 5598.604433][T18663] r4:00000000 [ 5598.606606][T18663] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:32:49 Registers: info registers vcpu 0 CPU#0 R00=827531c0 R01=eba57030 R02=827532b0 R03=00000030 R04=84298040 R05=00000001 R06=20000093 R07=00000f01 R08=00000000 R09=00000024 R10=60000093 R11=dfb85ad4 R12=00000002 R13=dfb85ab0 R14=00000008 R15=809b18b4 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=0000002f R02=00000000 R03=00000000 R04=005ada07 R05=00000000 R06=005adf15 R07=00000014 R08=005adae3 R09=00000000 R10=7e8efbd4 R11=005e2afc R12=005e0924 R13=7e8efbbc R14=0055dc34 R15=76b2acec PSR=60000010 -ZC- A S usr32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005a27e9 s17=00000000 d08=00000000005a27e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=013db600 d16=013db60000000000 s34=02100606 s35=06000000 d17=0600000002100606 s36=00000410 s37=aa000200 d18=aa00020000000410 s38=060c0108 s39=00000008 d19=00000008060c0108 s40=f4080001 s41=0800029f d20=0800029ff4080001 s42=00080000 s43=ffffff02 d21=ffffff0200080000 s44=080003ff s45=00000100 d22=00000100080003ff s46=9d430000 s47=2e2e4f02 d23=2e2e4f029d430000 s48=7eb19597 s49=614d7194 d24=614d71947eb19597 s50=e205ec98 s51=f48c5959 d25=f48c5959e205ec98 s52=5b365204 s53=a436cf92 d26=a436cf925b365204 s54=4cf71700 s55=d7564e11 d27=d7564e114cf71700 s56=b1e1ff43 s57=4bd9d30f d28=4bd9d30fb1e1ff43 s58=74e1b15b s59=335a12b5 d29=335a12b574e1b15b s60=7533e0d6 s61=25723e7e d30=25723e7e7533e0d6 s62=86f266f5 s63=dbb69001 d31=dbb6900186f266f5 FPSCR: 00000000