last executing test programs: 5m34.432167895s ago: executing program 0 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) io_setup(0x8, 0x0) io_submit(0x0, 0x0, &(0x7f0000001300)) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x3}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, 0x0, 0x44044) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x18, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) 5m10.264481209s ago: executing program 0 (id=676): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x403, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0xbc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xac, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, 's'}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_INFO={0x91, 0x3, "7199738759461eb50de67ebc85d24fa0d6e368c85e0717f7ce2f2bd33f6ca72e1f687023893c4510a14c293cd5ee64b4377f3e69cadae3becc397d6e7ece3488d4fce78e4d3d9021fe4a5bf298c28c0cf9fbb1c030e376904b0c5280e8b85a133fbb61bb1727046e9a79d1084c7b8140c1307ecdb6aa0f2ced188c8c6d593763988513aefef7bf86852741d9df"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000015}, 0x20008040) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) 4m44.419808657s ago: executing program 0 (id=679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 4m18.944419922s ago: executing program 0 (id=681): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) close(r1) sendmsg$NFT_BATCH(r0, 0x0, 0x20008040) 3m55.555068575s ago: executing program 0 (id=683): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) setresuid(0x0, 0xee00, 0x0) symlink(0x0, 0x0) socket(0x40000000015, 0x5, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) 3m30.469727195s ago: executing program 0 (id=685): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) unshare(0x40000000) 2m44.463487032s ago: executing program 32 (id=685): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) unshare(0x40000000) 2m36.847220686s ago: executing program 1 (id=688): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="0100"}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2m15.845748302s ago: executing program 1 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000680)=[{0x6, 0x9, 0x7, 0x6}, {0xfff8, 0x2, 0x0, 0x4}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route(r2, 0x0, 0x4004850) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4810}, 0x0) close(0x3) 1m33.866200361s ago: executing program 1 (id=690): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}}, 0x2) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) 1m0.444738918s ago: executing program 1 (id=691): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='=:', 0x2}], 0x1}}], 0x1, 0x801) 31.937750405s ago: executing program 1 (id=692): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) write$binfmt_elf64(r0, 0x0, 0x78) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=693): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000000000000ffe0000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): >] (ret_fast_syscall+0x0/0x1c) [ 155.574399][ T4309] Exception stack(0xdfcc1fa8 to 0xdfcc1ff0) [ 155.574442][ T4309] 1fa0: 4c2e4ff4 000e01d0 00000020 20000040 00000000 00000000 [ 155.574478][ T4309] 1fc0: 4c2e4ff4 000e01d0 00000001 000001a9 00000000 00000000 00000001 76f280dc [ 155.574506][ T4309] 1fe0: 76f27e48 76f27e38 00014854 00130ac0 [ 155.574537][ T4309] r7:000001a9 r6:00000001 r5:000e01d0 r4:4c2e4ff4 [ 156.757574][ T3735] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.757717][ T3735] usb 1-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00 [ 156.757940][ T3735] usb 1-1: no configurations [ 156.758025][ T3735] usb 1-1: can't read configurations, error -22 [ 159.539906][ T4333] input: syz1 as /devices/virtual/input/input4 [ 159.617467][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 159.617562][ T28] audit: type=1400 audit(159.510:218): avc: denied { write } for pid=4332 comm="syz.0.149" name="mcfilter6" dev="proc" ino=4026532802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 159.639723][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 161.689679][ T4347] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/bus@8000000/bus@8000000:motherboard-bus/bus@8000000:motherboard-bus:iofpga-bus@300000000/1c070000.kmi/serio1/input/input6 [ 163.831353][ T4362] Zero length message leads to an empty skb [ 169.527513][ C0] net_ratelimit: 20 callbacks suppressed [ 169.658045][ T4367] FAULT_INJECTION: forcing a failure. [ 169.658045][ T4367] name failslab, interval 1, probability 0, space 0, times 0 [ 169.659108][ T4367] CPU: 0 UID: 0 PID: 4367 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT [ 169.659379][ T4367] Hardware name: ARM-Versatile Express [ 169.659619][ T4367] Call trace: [ 169.660561][ T4367] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 169.661799][ T4367] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 169.661982][ T4367] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 169.662068][ T4367] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 169.662141][ T4367] r7:859f0c80 r6:00000000 r5:859f0c80 r4:83315fdc [ 169.662162][ T4367] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 169.662234][ T4367] [<80a237ac>] (should_fail_ex) from [<8057c9d0>] (should_failslab+0x6c/0x94) [ 169.662312][ T4367] r8:00000000 r7:859f0c80 r6:8080e434 r5:00000d40 r4:838ba600 [ 169.662333][ T4367] [<8057c964>] (should_failslab) from [<8055a3c8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 169.662396][ T4367] [<8055a36c>] (kmem_cache_alloc_noprof) from [<8080e434>] (security_inode_alloc+0x30/0x1d0) [ 169.662502][ T4367] r10:86ba7560 r9:00000000 r8:00000000 r7:00000c40 r6:86b45000 r5:86ba7460 [ 169.662539][ T4367] r4:86ba7460 [ 169.662563][ T4367] [<8080e404>] (security_inode_alloc) from [<805dd854>] (inode_init_always_gfp+0x184/0x1d8) [ 169.662638][ T4367] r5:00000000 r4:86ba7460 [ 169.662659][ T4367] [<805dd6d0>] (inode_init_always_gfp) from [<805e1284>] (alloc_inode+0x40/0xd0) [ 169.662735][ T4367] r10:00000001 r9:86a5b600 r8:84034081 r7:868f7a40 r6:81c1aed0 r5:86b45000 [ 169.662762][ T4367] r4:86ba7460 r3:00000000 [ 169.662781][ T4367] [<805e1244>] (alloc_inode) from [<805e1324>] (new_inode+0x10/0x68) [ 169.662849][ T4367] r7:868f7a40 r6:81c1aed0 r5:86a5b600 r4:86b45000 [ 169.662868][ T4367] [<805e1314>] (new_inode) from [<8041d2d4>] (bpf_fill_super+0x98/0x2e0) [ 169.662947][ T4367] r9:86a5b600 r8:84034081 r7:868f7a40 r6:81c1aed0 r5:86a5b600 r4:86b45000 [ 169.662968][ T4367] [<8041d23c>] (bpf_fill_super) from [<805bd410>] (get_tree_nodev+0x60/0x90) [ 169.663041][ T4367] r10:84034080 r9:86a5b600 r8:84034081 r7:8041d23c r6:00000000 r5:86a5b600 [ 169.663076][ T4367] r4:86b45000 [ 169.663097][ T4367] [<805bd3b0>] (get_tree_nodev) from [<8041c548>] (bpf_get_tree+0x18/0x1c) [ 169.663170][ T4367] r7:00000000 r6:86a5b604 r5:86a5b600 r4:00000000 [ 169.663192][ T4367] [<8041c530>] (bpf_get_tree) from [<805b9604>] (vfs_get_tree+0x2c/0x118) [ 169.663256][ T4367] [<805b95d8>] (vfs_get_tree) from [<80611e14>] (vfs_cmd_create+0x54/0xb8) [ 169.663328][ T4367] r6:86a5b604 r5:86a5b600 r4:00000000 [ 169.663349][ T4367] [<80611dc0>] (vfs_cmd_create) from [<80612580>] (sys_fsconfig+0x440/0x514) [ 169.663453][ T4367] r7:00000000 r6:86a5b604 r5:00000000 r4:00000006 [ 169.663475][ T4367] [<80612140>] (sys_fsconfig) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 169.663611][ T4367] Exception stack(0xdf9ddfa8 to 0xdf9ddff0) [ 169.663794][ T4367] dfa0: 00000000 00000000 00000004 00000006 00000000 00000000 [ 169.663862][ T4367] dfc0: 00000000 00000000 00356318 000001af 003562d8 00000000 00000001 76f9f0dc [ 169.663901][ T4367] dfe0: 76f9ee88 76f9ee78 00019004 00130ac0 [ 169.663985][ T4367] r10:000001af r9:859f0c80 r8:8020029c r7:000001af r6:00356318 r5:00000000 [ 169.664013][ T4367] r4:00000000 [ 170.167595][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.327164][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 170.329147][ T23] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 170.332737][ T23] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 170.332991][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.333028][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 170.333072][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 170.333108][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.333198][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.337057][ T23] usb 1-1: config 0 descriptor?? [ 170.347979][ T4369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.363974][ T23] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 170.563784][ T10] usb 1-1: USB disconnect, device number 8 [ 170.847975][ T4391] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 171.348766][ T4398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 173.982844][ T28] audit: type=1400 audit(173.890:219): avc: denied { read } for pid=4415 comm="syz.0.165" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 174.043820][ T4416] FAULT_INJECTION: forcing a failure. [ 174.043820][ T4416] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 174.043972][ T4416] CPU: 0 UID: 0 PID: 4416 Comm: syz.0.165 Not tainted syzkaller #0 PREEMPT [ 174.044025][ T4416] Hardware name: ARM-Versatile Express [ 174.044047][ T4416] Call trace: [ 174.044097][ T4416] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 174.044200][ T4416] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 174.044223][ T4416] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 174.044280][ T4416] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 174.044345][ T4416] r7:00000000 r6:00000000 r5:8501f080 r4:83316030 [ 174.044386][ T4416] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 174.044457][ T4416] [<80a237ac>] (should_fail_ex) from [<8057ca60>] (should_fail_alloc_page+0x68/0x74) [ 174.044537][ T4416] r8:00010cc0 r7:00000000 r6:00110cc0 r5:00000000 r4:00000001 [ 174.044555][ T4416] [<8057c9f8>] (should_fail_alloc_page) from [<80549b50>] (__alloc_frozen_pages_noprof+0x130/0x1a68) [ 174.044614][ T4416] [<80549a20>] (__alloc_frozen_pages_noprof) from [<8054b5f0>] (alloc_pages_node_noprof+0x64/0xf8) [ 174.044685][ T4416] r10:86c34e40 r9:832faf38 r8:86a525c0 r7:00010cc0 r6:00000000 r5:00010cc0 [ 174.044708][ T4416] r4:00000000 [ 174.044725][ T4416] [<8054b58c>] (alloc_pages_node_noprof) from [<803ac2d0>] (trace_buffered_event_enable+0x98/0x184) [ 174.044790][ T4416] r6:8320b484 r5:830ce884 r4:00000000 [ 174.044808][ T4416] [<803ac238>] (trace_buffered_event_enable) from [<803c46ac>] (apply_event_filter+0x130/0x1a0) [ 174.044879][ T4416] r7:8321e148 r6:00000000 r5:00000000 r4:838afe00 [ 174.044897][ T4416] [<803c457c>] (apply_event_filter) from [<803bb8f8>] (event_filter_write+0x68/0xd0) [ 174.044963][ T4416] r10:81c16044 r9:8501f080 r8:803bb890 r7:86069000 r6:86b0bbc0 r5:dfb19f68 [ 174.044982][ T4416] r4:0000000a [ 174.044997][ T4416] [<803bb890>] (event_filter_write) from [<805b6c5c>] (vfs_write+0xd4/0x42c) [ 174.045066][ T4416] r7:dfb19f68 r6:20000280 r5:86069000 r4:0000000a [ 174.045097][ T4416] [<805b6b88>] (vfs_write) from [<805b7128>] (ksys_write+0x74/0xec) [ 174.045165][ T4416] r10:00000004 r9:8501f080 r8:8020029c r7:00000000 r6:00000000 r5:86069000 [ 174.045187][ T4416] r4:86069003 [ 174.045203][ T4416] [<805b70b4>] (ksys_write) from [<805b71b0>] (sys_write+0x10/0x14) [ 174.045265][ T4416] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 174.045283][ T4416] [<805b71a0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 174.045331][ T4416] Exception stack(0xdfb19fa8 to 0xdfb19ff0) [ 174.045371][ T4416] 9fa0: 00000000 00000000 00000003 20000280 0000000a 00000000 [ 174.045414][ T4416] 9fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f9f0dc [ 174.045447][ T4416] 9fe0: 76f9ee88 76f9ee78 00019004 00130ac0 [ 174.045624][ T4416] Failed to allocate event buffer [ 175.046937][ C1] net_ratelimit: 21 callbacks suppressed [ 175.628015][ T28] audit: type=1400 audit(175.530:220): avc: denied { map } for pid=4428 comm="syz.0.171" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.628648][ T28] audit: type=1400 audit(175.540:221): avc: denied { read write } for pid=4428 comm="syz.0.171" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 176.252438][ T28] audit: type=1400 audit(176.160:222): avc: denied { create } for pid=4430 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.280231][ T28] audit: type=1400 audit(176.190:223): avc: denied { bind } for pid=4430 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.458339][ T28] audit: type=1400 audit(176.370:224): avc: denied { listen } for pid=4430 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.527680][ T28] audit: type=1400 audit(176.370:225): avc: denied { accept } for pid=4430 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.928015][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.100457][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.118820][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.118857][ T10] usb 2-1: Product: syz [ 178.118884][ T10] usb 2-1: Manufacturer: syz [ 178.118910][ T10] usb 2-1: SerialNumber: syz [ 179.197457][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.359222][ T9] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 179.361611][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.361662][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 179.361741][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.363770][ T9] usb 1-1: config 0 descriptor?? [ 180.087150][ C0] net_ratelimit: 18 callbacks suppressed [ 185.526817][ C1] net_ratelimit: 20 callbacks suppressed [ 187.647912][ T3735] usb 2-1: USB disconnect, device number 9 [ 188.544849][ T28] audit: type=1400 audit(188.450:226): avc: denied { mount } for pid=4486 comm="syz.1.186" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 188.751831][ T28] audit: type=1400 audit(188.660:227): avc: denied { map } for pid=4491 comm="syz.1.188" path="/dev/comedi4" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.715800][ T23] usb 1-1: USB disconnect, device number 9 [ 189.808152][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.968107][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 189.985636][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.985783][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.985835][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.985879][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.986002][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.726960][ C1] net_ratelimit: 20 callbacks suppressed [ 191.730070][ T28] audit: type=1400 audit(191.630:228): avc: denied { map } for pid=4519 comm="syz.0.197" path="socket:[4120]" dev="sockfs" ino=4120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 191.730261][ T28] audit: type=1400 audit(191.630:229): avc: denied { read write } for pid=4519 comm="syz.0.197" path="socket:[4120]" dev="sockfs" ino=4120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.927273][ C1] net_ratelimit: 19 callbacks suppressed [ 201.127162][ C1] net_ratelimit: 18 callbacks suppressed [ 204.515155][ T3072] usb 2-1: USB disconnect, device number 10 [ 204.863736][ T4541] FAULT_INJECTION: forcing a failure. [ 204.863736][ T4541] name failslab, interval 1, probability 0, space 0, times 0 [ 204.863876][ T4541] CPU: 1 UID: 0 PID: 4541 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT [ 204.863933][ T4541] Hardware name: ARM-Versatile Express [ 204.863956][ T4541] Call trace: [ 204.863999][ T4541] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 204.864104][ T4541] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 204.864122][ T4541] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 204.864175][ T4541] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 204.864235][ T4541] r7:00000014 r6:00000000 r5:85a29900 r4:83315fdc [ 204.864253][ T4541] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 204.864316][ T4541] [<80a237ac>] (should_fail_ex) from [<8057c9d0>] (should_failslab+0x6c/0x94) [ 204.864415][ T4541] r8:85a29900 r7:00000014 r6:803289b4 r5:00000cc0 r4:83801240 [ 204.864434][ T4541] [<8057c964>] (should_failslab) from [<8055c434>] (__kmalloc_cache_noprof+0x58/0x338) [ 204.864483][ T4541] [<8055c3dc>] (__kmalloc_cache_noprof) from [<803289b4>] (__request_module+0xe8/0x2e4) [ 204.864543][ T4541] r10:8254e6cc r9:86982000 r8:832f28f0 r7:817ac138 r6:85a29900 r5:00000002 [ 204.864565][ T4541] r4:00000000 [ 204.864580][ T4541] [<803288cc>] (__request_module) from [<817ac138>] (ctrl_getfamily+0xc4/0x1bc) [ 204.864645][ T4541] r3:00000010 r2:00000010 r1:82504664 [ 204.864673][ T4541] r8:dfc8dd30 r7:dfc8dcc0 r6:dfc8dc08 r5:83946498 r4:00000000 [ 204.864689][ T4541] [<817ac074>] (ctrl_getfamily) from [<817aa078>] (genl_family_rcv_msg_doit+0xf0/0x140) [ 204.864764][ T4541] r6:86d42540 r5:867d8700 r4:83946490 [ 204.864780][ T4541] [<817a9f88>] (genl_family_rcv_msg_doit) from [<817aa8bc>] (genl_rcv_msg+0x240/0x3a8) [ 204.864851][ T4541] r10:00000002 r9:86982000 r8:86d42540 r7:dfc8dcc0 r6:00000001 r5:83946480 [ 204.864871][ T4541] r4:8254e6cc [ 204.864885][ T4541] [<817aa67c>] (genl_rcv_msg) from [<817a92c4>] (netlink_rcv_skb+0xc0/0x120) [ 204.864951][ T4541] r10:86888584 r9:86982000 r8:86d42540 r7:83946480 r6:817aa67c r5:86d42540 [ 204.864972][ T4541] r4:00000000 [ 204.864989][ T4541] [<817a9204>] (netlink_rcv_skb) from [<817a9e60>] (genl_rcv+0x28/0x38) [ 204.865048][ T4541] r7:8607a940 r6:00000020 r5:8525c064 r4:86d42540 [ 204.865063][ T4541] [<817a9e38>] (genl_rcv) from [<817a8a90>] (netlink_unicast+0x270/0x380) [ 204.865119][ T4541] r5:8525c064 r4:8525c000 [ 204.865135][ T4541] [<817a8820>] (netlink_unicast) from [<817a8d68>] (netlink_sendmsg+0x1c8/0x444) [ 204.865206][ T4541] r10:00000000 r9:00000000 r8:00000000 r7:86888400 r6:00000020 r5:86d42540 [ 204.865227][ T4541] r4:dfc8dea0 [ 204.865243][ T4541] [<817a8ba0>] (netlink_sendmsg) from [<8166a280>] (__sock_sendmsg+0x44/0x78) [ 204.865317][ T4541] r10:00000122 r9:8606b300 r8:83e16a40 r7:76f26de4 r6:83e16a40 r5:dfc8dea0 [ 204.865339][ T4541] r4:00000000 [ 204.865356][ T4541] [<8166a23c>] (__sock_sendmsg) from [<8166d26c>] (__sys_sendto+0x110/0x160) [ 204.865420][ T4541] r7:76f26de4 r6:8606b301 r5:00000000 r4:00000000 [ 204.865438][ T4541] [<8166d15c>] (__sys_sendto) from [<8166d2d8>] (sys_sendto+0x1c/0x24) [ 204.865504][ T4541] r9:85a29900 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76f26de4 [ 204.865520][ T4541] [<8166d2bc>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 204.865566][ T4541] Exception stack(0xdfc8dfa8 to 0xdfc8dff0) [ 204.865609][ T4541] dfa0: 76f26de4 0000000c 00000006 76f26e78 00000020 00000000 [ 204.865696][ T4541] dfc0: 76f26de4 0000000c 00000000 00000122 76f26e98 00000000 76f26e78 76f280dc [ 204.865742][ T4541] dfe0: 76f26d78 76f26d64 0010bce4 001128c8 [ 206.277472][ T3072] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 206.327082][ C1] net_ratelimit: 18 callbacks suppressed [ 206.451228][ T3072] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 206.465252][ T3072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.474911][ T3072] usb 1-1: config 0 descriptor?? [ 211.514419][ T3642] net_ratelimit: 38 callbacks suppressed [ 211.787831][ T28] audit: type=1326 audit(211.690:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.206" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x0 [ 214.617443][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.769397][ T10] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 214.772954][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.773029][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 214.783761][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.783798][ T10] usb 2-1: Product: syz [ 214.783824][ T10] usb 2-1: Manufacturer: syz [ 214.783849][ T10] usb 2-1: SerialNumber: syz [ 214.801802][ T10] usb 2-1: NFC: intf 84e26800 id 833655fc [ 214.812568][ T10] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 215.002635][ T714] usb 2-1: USB disconnect, device number 11 [ 215.005247][ T714] usb 2-1: NFC: intf 84e26800 [ 216.727151][ C1] net_ratelimit: 13 callbacks suppressed [ 217.731290][ T3072] usb 1-1: USB disconnect, device number 10 [ 219.017970][ T4614] FAULT_INJECTION: forcing a failure. [ 219.017970][ T4614] name failslab, interval 1, probability 0, space 0, times 0 [ 219.018114][ T4614] CPU: 1 UID: 0 PID: 4614 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT [ 219.018171][ T4614] Hardware name: ARM-Versatile Express [ 219.018196][ T4614] Call trace: [ 219.018249][ T4614] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 219.018356][ T4614] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 219.018379][ T4614] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 219.018436][ T4614] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 219.018499][ T4614] r7:00000034 r6:00000000 r5:852ba580 r4:83315fdc [ 219.018517][ T4614] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 219.018580][ T4614] [<80a237ac>] (should_fail_ex) from [<8057c9d0>] (should_failslab+0x6c/0x94) [ 219.018654][ T4614] r8:852ba580 r7:00000034 r6:8028cfc8 r5:00000dc0 r4:83801240 [ 219.018674][ T4614] [<8057c964>] (should_failslab) from [<8055c434>] (__kmalloc_cache_noprof+0x58/0x338) [ 219.018733][ T4614] [<8055c3dc>] (__kmalloc_cache_noprof) from [<8028cfc8>] (vhost_task_create+0x80/0x16c) [ 219.018811][ T4614] r10:852ba580 r9:86aed780 r8:81e31d58 r7:86aed780 r6:814b8484 r5:814b8528 [ 219.018832][ T4614] r4:e01f1dec [ 219.018848][ T4614] [<8028cf48>] (vhost_task_create) from [<814b876c>] (vhost_task_worker_create+0x4c/0xf0) [ 219.018926][ T4614] r8:81e31d58 r7:86cf0000 r6:00000000 r5:86aed780 r4:86aed780 [ 219.018944][ T4614] [<814b8720>] (vhost_task_worker_create) from [<814b825c>] (vhost_worker_create+0xbc/0x100) [ 219.019013][ T4614] r7:852ba580 r6:86cf0000 r5:00000000 r4:86aed780 [ 219.019032][ T4614] [<814b81a0>] (vhost_worker_create) from [<814ba6ec>] (vhost_dev_set_owner+0x1a0/0x1fc) [ 219.019101][ T4614] r9:00000000 r8:86cf0004 r7:8253d768 r6:00000002 r5:86cf0000 r4:86cf4568 [ 219.019122][ T4614] [<814ba54c>] (vhost_dev_set_owner) from [<814bd430>] (vhost_dev_ioctl+0x2ec/0x728) [ 219.019182][ T4614] r7:00000000 r6:00000000 r5:00000000 r4:86cf0000 [ 219.019208][ T4614] [<814bd144>] (vhost_dev_ioctl) from [<814b1ab4>] (vhost_vsock_dev_ioctl+0x178/0x724) [ 219.019282][ T4614] r10:852ba580 r9:00000000 r8:86cf0004 r7:00000000 r6:00000000 r5:86cf0000 [ 219.019303][ T4614] r4:0000af01 [ 219.019319][ T4614] [<814b193c>] (vhost_vsock_dev_ioctl) from [<805d39dc>] (sys_ioctl+0x244/0xb5c) [ 219.019395][ T4614] r10:852ba580 r9:00000004 r8:8606b880 r7:00000000 r6:0000af01 r5:8606b881 [ 219.019419][ T4614] r4:00000000 [ 219.019438][ T4614] [<805d3798>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 219.019490][ T4614] Exception stack(0xe01f1fa8 to 0xe01f1ff0) [ 219.019527][ T4614] 1fa0: 00000000 00000000 00000004 0000af01 00000000 00000000 [ 219.019560][ T4614] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f9f0dc [ 219.019586][ T4614] 1fe0: 76f9ee88 76f9ee78 00019004 00130ac0 [ 219.019620][ T4614] r10:00000036 r9:852ba580 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 219.019640][ T4614] r4:00000000 [ 220.055511][ T28] audit: type=1400 audit(219.960:231): avc: denied { sqpoll } for pid=4622 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 221.270807][ T28] audit: type=1400 audit(221.180:232): avc: denied { create } for pid=4625 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 221.938526][ C1] net_ratelimit: 89 callbacks suppressed [ 223.741743][ T28] audit: type=1400 audit(223.650:233): avc: denied { create } for pid=4632 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.752075][ T28] audit: type=1400 audit(224.660:234): avc: denied { accept } for pid=4640 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 224.764121][ T28] audit: type=1400 audit(224.670:235): avc: denied { write } for pid=4640 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.330034][ T28] audit: type=1400 audit(225.240:236): avc: denied { create } for pid=4630 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.378826][ T28] audit: type=1400 audit(225.290:237): avc: denied { ioctl } for pid=4630 comm="syz.0.218" path="socket:[4018]" dev="sockfs" ino=4018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.429591][ T28] audit: type=1400 audit(225.340:238): avc: denied { bind } for pid=4630 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.452798][ T28] audit: type=1400 audit(225.360:239): avc: denied { setopt } for pid=4630 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.495056][ T28] audit: type=1400 audit(225.390:240): avc: denied { write } for pid=4630 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.618185][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 227.131081][ C0] net_ratelimit: 14 callbacks suppressed [ 233.056851][ C1] net_ratelimit: 23 callbacks suppressed [ 238.247242][ C1] net_ratelimit: 22 callbacks suppressed [ 239.123296][ T28] audit: type=1400 audit(239.030:241): avc: denied { ioctl } for pid=4667 comm="syz.0.230" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4240 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 239.323578][ T714] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.487609][ T714] usb 2-1: Using ep0 maxpacket: 8 [ 239.492056][ T714] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 239.505853][ T714] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 239.505972][ T714] usb 2-1: config 0 has no interface number 0 [ 239.506036][ T714] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 239.506086][ T714] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 239.506136][ T714] usb 2-1: config 0 interface 200 has no altsetting 0 [ 239.532318][ T714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.532356][ T714] usb 2-1: Product: syz [ 239.532410][ T714] usb 2-1: Manufacturer: syz [ 239.532438][ T714] usb 2-1: SerialNumber: syz [ 239.540644][ T714] usb 2-1: config 0 descriptor?? [ 239.842536][ T714] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input8 [ 239.858976][ T714] usb 2-1: USB disconnect, device number 12 [ 243.446934][ C1] net_ratelimit: 35 callbacks suppressed [ 248.550509][ T4700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 248.647055][ C0] net_ratelimit: 18 callbacks suppressed [ 254.247041][ C1] net_ratelimit: 19 callbacks suppressed [ 257.245887][ T28] audit: type=1400 audit(257.150:242): avc: denied { create } for pid=4726 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 257.256462][ T28] audit: type=1400 audit(257.160:243): avc: denied { write } for pid=4726 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 259.367055][ C1] net_ratelimit: 18 callbacks suppressed [ 265.046987][ C1] net_ratelimit: 14 callbacks suppressed [ 268.880957][ T4752] FAULT_INJECTION: forcing a failure. [ 268.880957][ T4752] name failslab, interval 1, probability 0, space 0, times 0 [ 268.881139][ T4752] CPU: 0 UID: 0 PID: 4752 Comm: syz.0.250 Not tainted syzkaller #0 PREEMPT [ 268.881200][ T4752] Hardware name: ARM-Versatile Express [ 268.881227][ T4752] Call trace: [ 268.881273][ T4752] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 268.881382][ T4752] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 268.881405][ T4752] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 268.881463][ T4752] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 268.881564][ T4752] r7:859f0c80 r6:00000000 r5:859f0c80 r4:83315fdc [ 268.881592][ T4752] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 268.881662][ T4752] [<80a237ac>] (should_fail_ex) from [<8057c9d0>] (should_failslab+0x6c/0x94) [ 268.881740][ T4752] r8:00000000 r7:859f0c80 r6:83801240 r5:00000d40 r4:00000024 [ 268.881761][ T4752] [<8057c964>] (should_failslab) from [<8055b39c>] (__kmalloc_noprof+0xa8/0x3c8) [ 268.881820][ T4752] [<8055b2f4>] (__kmalloc_noprof) from [<808582e8>] (tomoyo_encode2+0x64/0xec) [ 268.881897][ T4752] r10:00000fff r9:838c3800 r8:00000000 r7:83cdd7f8 r6:84034ba8 r5:859eaffc [ 268.881922][ T4752] r4:859eafe3 [ 268.881944][ T4752] [<80858284>] (tomoyo_encode2) from [<80858394>] (tomoyo_encode+0x24/0x30) [ 268.882016][ T4752] r9:838c3800 r8:00000000 r7:83cdd7f8 r6:84034ba8 r5:00001000 r4:859eafe4 [ 268.882037][ T4752] [<80858370>] (tomoyo_encode) from [<80858420>] (tomoyo_realpath_from_path+0x80/0x16c) [ 268.882171][ T4752] r5:00001000 r4:859ea000 [ 268.882195][ T4752] [<808583a0>] (tomoyo_realpath_from_path) from [<808544a4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 268.882275][ T4752] r10:00000000 r9:00000005 r8:84034b80 r7:c2604111 r6:81cdfe8c r5:00000004 [ 268.882303][ T4752] r4:84034ba8 r3:830d5580 [ 268.882323][ T4752] [<808543d8>] (tomoyo_path_number_perm) from [<80858df8>] (tomoyo_file_ioctl+0x1c/0x20) [ 268.882398][ T4752] r10:859f0c80 r9:00000005 r8:84034b80 r7:00000000 r6:00000000 r5:c2604111 [ 268.882422][ T4752] r4:84034b80 [ 268.882440][ T4752] [<80858ddc>] (tomoyo_file_ioctl) from [<80803e18>] (security_file_ioctl+0x80/0x1d4) [ 268.882502][ T4752] [<80803d98>] (security_file_ioctl) from [<805d37e4>] (sys_ioctl+0x4c/0xb5c) [ 268.882575][ T4752] r7:00000000 r6:c2604111 r5:84034b81 r4:00000000 [ 268.882597][ T4752] [<805d3798>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 268.882651][ T4752] Exception stack(0xe03e9fa8 to 0xe03e9ff0) [ 268.882693][ T4752] 9fa0: 00000000 00000000 00000005 c2604111 00000000 00000000 [ 268.882736][ T4752] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f9f0dc [ 268.882770][ T4752] 9fe0: 76f9ee88 76f9ee78 00019004 00130ac0 [ 268.882811][ T4752] r10:00000036 r9:859f0c80 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 268.882834][ T4752] r4:00000000 [ 268.916156][ T4752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.093879][ T3642] net_ratelimit: 22 callbacks suppressed [ 275.126992][ C1] net_ratelimit: 8 callbacks suppressed [ 277.093059][ T4759] Process accounting resumed [ 280.327168][ C1] net_ratelimit: 23 callbacks suppressed [ 285.537081][ C1] net_ratelimit: 22 callbacks suppressed [ 287.713897][ T28] audit: type=1400 audit(287.620:244): avc: denied { write } for pid=4787 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.057192][ C1] net_ratelimit: 18 callbacks suppressed [ 294.758460][ T28] audit: type=1400 audit(294.670:245): avc: denied { write } for pid=4792 comm="syz.0.262" name="loop0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 294.804982][ T4793] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 294.805373][ T4793] device-mapper: ioctl: error adding target to table [ 295.412008][ T28] audit: type=1400 audit(295.320:246): avc: denied { create } for pid=4798 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.247004][ C1] net_ratelimit: 18 callbacks suppressed [ 302.268457][ T4815] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 302.307372][ T4815] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 302.327119][ C1] net_ratelimit: 11 callbacks suppressed [ 306.937641][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 307.101680][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 307.183154][ T10] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 61 [ 307.183301][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.280536][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 307.280579][ T10] usb 1-1: Product: syz [ 307.280611][ T10] usb 1-1: Manufacturer: syz [ 307.280643][ T10] usb 1-1: SerialNumber: syz [ 307.300308][ T10] usb 1-1: config 0 descriptor?? [ 307.459318][ T4832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 307.473509][ T10] usb 1-1: selecting invalid altsetting 0 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 307.810964][ T10] usb 1-1: USB disconnect, device number 11 [ 308.257003][ C1] net_ratelimit: 22 callbacks suppressed [ 309.145087][ T28] audit: type=1326 audit(309.050:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.151544][ T28] audit: type=1326 audit(309.050:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.156507][ T28] audit: type=1326 audit(309.060:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.177152][ T28] audit: type=1326 audit(309.080:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.177316][ T28] audit: type=1326 audit(309.080:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.177373][ T28] audit: type=1326 audit(309.080:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.177424][ T28] audit: type=1326 audit(309.080:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.177470][ T28] audit: type=1326 audit(309.080:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.177519][ T28] audit: type=1326 audit(309.080:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 309.177568][ T28] audit: type=1326 audit(309.080:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.274" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 311.818929][ T4876] comedi: valid board names for 8255 driver are: [ 311.819086][ T4876] 8255 [ 311.819137][ T4876] comedi: valid board names for vmk80xx driver are: [ 311.819163][ T4876] vmk80xx [ 311.819180][ T4876] comedi: valid board names for usbduxsigma driver are: [ 311.819198][ T4876] usbduxsigma [ 311.819215][ T4876] comedi: valid board names for usbduxfast driver are: [ 311.819233][ T4876] usbduxfast [ 311.819252][ T4876] comedi: valid board names for usbdux driver are: [ 311.819271][ T4876] usbdux [ 311.819287][ T4876] comedi: valid board names for ni6501 driver are: [ 311.819306][ T4876] ni6501 [ 311.819326][ T4876] comedi: valid board names for dt9812 driver are: [ 311.819345][ T4876] dt9812 [ 311.819361][ T4876] comedi: valid board names for ni_labpc_cs driver are: [ 311.819380][ T4876] ni_labpc_cs [ 311.819418][ T4876] comedi: valid board names for ni_daq_700 driver are: [ 311.845331][ T4876] ni_daq_700 [ 311.845468][ T4876] comedi: valid board names for labpc_pci driver are: [ 311.845498][ T4876] labpc_pci [ 311.845515][ T4876] comedi: valid board names for adl_pci9118 driver are: [ 311.845544][ T4876] pci9118dg [ 311.845586][ T4876] pci9118hg [ 311.845604][ T4876] pci9118hr [ 311.845619][ T4876] comedi: valid board names for 8255_pci driver are: [ 311.845637][ T4876] 8255_pci [ 311.845652][ T4876] comedi: valid board names for comedi_parport driver are: [ 311.845670][ T4876] comedi_parport [ 311.845685][ T4876] comedi: valid board names for comedi_test driver are: [ 311.845702][ T4876] comedi_test [ 311.845717][ T4876] comedi: valid board names for comedi_bond driver are: [ 311.845733][ T4876] comedi_bond [ 313.527419][ C0] net_ratelimit: 17 callbacks suppressed [ 319.287138][ C1] net_ratelimit: 15 callbacks suppressed [ 323.463423][ T28] kauditd_printk_skb: 1858 callbacks suppressed [ 323.463549][ T28] audit: type=1400 audit(323.370:2115): avc: denied { create } for pid=4895 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.475967][ T28] audit: type=1400 audit(323.380:2116): avc: denied { write } for pid=4895 comm="syz.1.283" path="socket:[5291]" dev="sockfs" ino=5291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.417125][ C1] net_ratelimit: 17 callbacks suppressed [ 329.767107][ C1] net_ratelimit: 11 callbacks suppressed [ 331.268906][ T28] audit: type=1400 audit(331.070:2117): avc: denied { create } for pid=4906 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.269103][ T28] audit: type=1400 audit(331.080:2118): avc: denied { setopt } for pid=4906 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.350962][ T4907] tps6598x 0-0020: failed to read vendor ID: -6, vid: 0x0 [ 331.352654][ T4907] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 332.402033][ T4916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.289'. [ 334.897030][ C1] net_ratelimit: 14 callbacks suppressed [ 340.487228][ C1] net_ratelimit: 23 callbacks suppressed [ 341.361510][ T28] audit: type=1400 audit(341.270:2119): avc: denied { write } for pid=4953 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 343.345237][ T4962] virtio-fs: tag not found [ 345.527272][ C0] net_ratelimit: 19 callbacks suppressed [ 345.844968][ T28] audit: type=1400 audit(345.750:2120): avc: denied { map } for pid=4967 comm="syz.0.308" path="socket:[4603]" dev="sockfs" ino=4603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 349.122648][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 350.988919][ C1] net_ratelimit: 42 callbacks suppressed [ 351.725476][ T4980] 0x000000000003-0x000000010003 : "" [ 351.725722][ T4980] mtd: partition "" doesn't start on an erase/write block boundary -- force read-only [ 351.774626][ T4980] ftl_cs: FTL header corrupt! [ 356.167142][ C1] net_ratelimit: 22 callbacks suppressed [ 357.337591][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 357.500549][ T10] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 357.522478][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 357.522611][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 357.558392][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.558430][ T10] usb 2-1: Product: syz [ 357.558460][ T10] usb 2-1: Manufacturer: syz [ 357.558489][ T10] usb 2-1: SerialNumber: syz [ 357.842857][ T10] kaweth 2-1:1.0: Firmware present in device. [ 357.858934][ T10] kaweth 2-1:1.0: Error reading configuration (-71), no net device created [ 357.859311][ T10] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 357.958277][ T10] usb 2-1: USB disconnect, device number 13 [ 359.030654][ T28] audit: type=1400 audit(358.940:2121): avc: denied { bind } for pid=5022 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 359.050517][ T28] audit: type=1400 audit(358.960:2122): avc: denied { listen } for pid=5022 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 359.065862][ T28] audit: type=1400 audit(358.970:2123): avc: denied { connect } for pid=5022 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 359.106156][ T28] audit: type=1400 audit(359.010:2124): avc: denied { read } for pid=5022 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 361.374734][ C1] net_ratelimit: 49 callbacks suppressed [ 361.677106][ T28] audit: type=1400 audit(361.580:2125): avc: denied { write } for pid=5033 comm="syz.1.324" name="nullb" dev="configfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.681230][ T28] audit: type=1400 audit(361.590:2126): avc: denied { read } for pid=5033 comm="syz.1.324" name="memory_backed" dev="configfs" ino=5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 362.103463][ T28] audit: type=1400 audit(362.010:2127): avc: denied { connect } for pid=5033 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 362.545803][ T5034] null_blk: disk my_zoned_dev created [ 366.567183][ C1] net_ratelimit: 25 callbacks suppressed [ 366.815592][ T28] audit: type=1400 audit(366.720:2128): avc: denied { unmount } for pid=3114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 367.517694][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 367.642169][ T28] audit: type=1400 audit(367.550:2129): avc: denied { bind } for pid=5078 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 367.649333][ T5079] FAULT_INJECTION: forcing a failure. [ 367.649333][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 367.650012][ T5079] CPU: 1 UID: 0 PID: 5079 Comm: syz.0.338 Not tainted syzkaller #0 PREEMPT [ 367.650059][ T5079] Hardware name: ARM-Versatile Express [ 367.650073][ T5079] Call trace: [ 367.650094][ T5079] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 367.650150][ T5079] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 367.650160][ T5079] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 367.650186][ T5079] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 367.650216][ T5079] r7:848bcb00 r6:00000000 r5:848bcb00 r4:83315fdc [ 367.650224][ T5079] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 367.650259][ T5079] [<80a237ac>] (should_fail_ex) from [<8057c9d0>] (should_failslab+0x6c/0x94) [ 367.650295][ T5079] r8:00000000 r7:848bcb00 r6:81a7ea58 r5:00000dc0 r4:8419c240 [ 367.650304][ T5079] [<8057c964>] (should_failslab) from [<8055a3c8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 367.650331][ T5079] [<8055a36c>] (kmem_cache_alloc_noprof) from [<81a7ea58>] (__rds_conn_create+0x304/0x90c) [ 367.650367][ T5079] r10:848bcb00 r9:00000dc0 r8:00000008 r7:00000000 r6:833fc608 r5:85271fbc [ 367.650377][ T5079] r4:df9ddd50 [ 367.650385][ T5079] [<81a7e754>] (__rds_conn_create) from [<81a7f0d0>] (rds_conn_create_outgoing+0x34/0x3c) [ 367.650417][ T5079] r10:848bcb00 r9:00000000 r8:00000000 r7:85dd3440 r6:85271d40 r5:df9ddf28 [ 367.650427][ T5079] r4:86bac800 [ 367.650434][ T5079] [<81a7f09c>] (rds_conn_create_outgoing) from [<81a85130>] (rds_sendmsg+0x6b4/0x1008) [ 367.650457][ T5079] [<81a84a7c>] (rds_sendmsg) from [<8166a280>] (__sock_sendmsg+0x44/0x78) [ 367.650494][ T5079] r10:00000000 r9:00000000 r8:df9dddd4 r7:00000000 r6:85dd3440 r5:df9ddf28 [ 367.650503][ T5079] r4:00000000 [ 367.650511][ T5079] [<8166a23c>] (__sock_sendmsg) from [<8166b320>] (____sys_sendmsg+0x238/0x2c4) [ 367.650542][ T5079] r7:00000000 r6:00000000 r5:85dd3440 r4:df9ddf28 [ 367.650550][ T5079] [<8166b0e8>] (____sys_sendmsg) from [<8166b720>] (___sys_sendmsg+0x9c/0xd0) [ 367.650584][ T5079] r10:00000128 r9:20000140 r8:00000000 r7:00000000 r6:85dd3440 r5:df9ddf28 [ 367.650594][ T5079] r4:00000000 [ 367.650602][ T5079] [<8166b684>] (___sys_sendmsg) from [<8166d940>] (__sys_sendmsg+0x8c/0xe0) [ 367.650634][ T5079] r9:848bcb00 r8:8606b680 r7:00000000 r6:20000140 r5:8606b681 r4:00000004 [ 367.650643][ T5079] [<8166d8b4>] (__sys_sendmsg) from [<8166d9a8>] (sys_sendmsg+0x14/0x18) [ 367.650672][ T5079] r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [ 367.650680][ T5079] [<8166d994>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 367.650701][ T5079] Exception stack(0xdf9ddfa8 to 0xdf9ddff0) [ 367.650722][ T5079] dfa0: 00000000 00000000 00000004 20000140 00000000 00000000 [ 367.650746][ T5079] dfc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000001 76f9f0dc [ 367.650760][ T5079] dfe0: 76f9ee88 76f9ee78 00019004 00130ac0 [ 367.685667][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 367.689856][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.709892][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 367.753619][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.753658][ T9] usb 2-1: Product: syz [ 367.753687][ T9] usb 2-1: Manufacturer: syz [ 367.753714][ T9] usb 2-1: SerialNumber: syz [ 367.763583][ T9] usb 2-1: config 0 descriptor?? [ 367.978019][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 368.127518][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 368.130516][ T44] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 368.134198][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 368.159897][ T44] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 368.159935][ T44] usb 1-1: Product: syz [ 368.159957][ T44] usb 1-1: Manufacturer: syz [ 368.159990][ T44] usb 1-1: SerialNumber: syz [ 368.163922][ T44] usb 1-1: config 0 descriptor?? [ 368.168274][ T5081] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 368.174585][ T44] hub 1-1:0.0: bad descriptor, ignoring hub [ 368.174667][ T44] hub 1-1:0.0: probe with driver hub failed with error -5 [ 368.899156][ T44] usb 1-1: USB disconnect, device number 12 [ 371.767373][ C0] net_ratelimit: 40 callbacks suppressed [ 373.401559][ T5116] geneve2: entered promiscuous mode [ 373.403116][ T2712] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 48031 - 0 [ 373.403284][ T38] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 48031 - 0 [ 373.403363][ T38] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 48031 - 0 [ 373.403422][ T38] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 48031 - 0 [ 377.447109][ C0] net_ratelimit: 31 callbacks suppressed [ 378.024087][ T3735] usb 2-1: USB disconnect, device number 14 [ 378.607601][ T3735] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 378.771311][ T3735] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 378.777852][ T3735] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.777900][ T3735] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.777970][ T3735] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.778018][ T3735] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.778122][ T3735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.797813][ T3735] usb 2-1: config 0 descriptor?? [ 379.473964][ T3735] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 379.474138][ T3735] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 379.474325][ T3735] hid-udraw 0003:20D6:CB17.0004: unexpected long global item [ 379.474779][ T3735] hid-udraw 0003:20D6:CB17.0004: parse failed [ 379.474961][ T3735] hid-udraw 0003:20D6:CB17.0004: probe with driver hid-udraw failed with error -22 [ 379.681018][ T3735] usb 2-1: USB disconnect, device number 15 [ 382.520448][ T3648] net_ratelimit: 27 callbacks suppressed [ 387.687322][ C0] net_ratelimit: 19 callbacks suppressed [ 392.887238][ C0] net_ratelimit: 16 callbacks suppressed [ 397.333848][ T28] audit: type=1400 audit(397.240:2130): avc: denied { write } for pid=5176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.087131][ C0] net_ratelimit: 23 callbacks suppressed [ 398.129785][ T28] audit: type=1400 audit(398.020:2131): avc: denied { write } for pid=5179 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.789138][ T5196] process 'syz.1.365' launched '/dev/fd/4' with NULL argv: empty string added [ 400.790519][ T28] audit: type=1400 audit(400.700:2132): avc: denied { execute_no_trans } for pid=5195 comm="syz.1.365" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.777373][ T5200] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 401.777448][ T5200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.367'. [ 401.778175][ T5200] vxcan0: entered promiscuous mode [ 403.257472][ T5223] futex_wake_op: syz.1.370 tries to shift op by 144; fix this program [ 403.287089][ C1] net_ratelimit: 20 callbacks suppressed [ 405.053371][ T28] audit: type=1400 audit(404.960:2133): avc: denied { lock } for pid=5226 comm="syz.0.372" path="/dev/urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.961078][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 408.487099][ C0] net_ratelimit: 14 callbacks suppressed [ 409.342839][ T5245] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 413.922607][ T28] audit: type=1400 audit(413.830:2134): avc: denied { getopt } for pid=5228 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 413.927073][ C1] net_ratelimit: 40 callbacks suppressed [ 415.599694][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 415.712634][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 419.127184][ C1] net_ratelimit: 20 callbacks suppressed [ 424.327162][ C1] net_ratelimit: 20 callbacks suppressed [ 429.527127][ C1] net_ratelimit: 16 callbacks suppressed [ 434.726985][ C1] net_ratelimit: 20 callbacks suppressed [ 440.087055][ C1] net_ratelimit: 20 callbacks suppressed [ 444.893530][ T28] audit: type=1400 audit(444.800:2135): avc: denied { unmount } for pid=3114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 445.447288][ C1] net_ratelimit: 16 callbacks suppressed [ 445.687539][ T3084] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 445.853518][ T3084] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 445.864924][ T3084] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 445.865049][ T3084] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 445.865095][ T3084] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.865206][ T3084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.905477][ T5294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 445.906373][ T5294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 445.931265][ T3084] pl2303 1-1:1.0: pl2303 converter detected [ 445.973748][ T3084] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 446.162295][ T3084] usb 1-1: USB disconnect, device number 13 [ 446.221897][ T3084] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 446.238664][ T3084] pl2303 1-1:1.0: device disconnected [ 446.777431][ T3084] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 446.927854][ T3084] usb 1-1: Using ep0 maxpacket: 16 [ 446.930990][ T3084] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 446.938730][ T3084] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.938909][ T3084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.942986][ T3084] usb 1-1: config 0 descriptor?? [ 446.992731][ T3084] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 447.737603][ T5316] bcm5974 1-1:0.0: could not read from device [ 447.741779][ T3084] usb 1-1: USB disconnect, device number 14 [ 450.097655][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 450.267487][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 450.271786][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.298691][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 450.370043][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.370080][ T10] usb 1-1: Product: syz [ 450.370114][ T10] usb 1-1: Manufacturer: syz [ 450.370140][ T10] usb 1-1: SerialNumber: syz [ 450.373663][ T10] usb 1-1: config 0 descriptor?? [ 450.647334][ C0] net_ratelimit: 20 callbacks suppressed [ 455.848543][ C1] net_ratelimit: 20 callbacks suppressed [ 458.841795][ T5357] nbd: must specify a device to reconfigure [ 460.657433][ T10] usb 1-1: USB disconnect, device number 15 [ 461.047329][ C1] net_ratelimit: 20 callbacks suppressed [ 461.791462][ T5375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.791620][ T5375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 48031 - 0 [ 462.751776][ T5375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.751860][ T5375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48031 - 0 [ 463.013813][ T5375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.013950][ T5375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48031 - 0 [ 463.247300][ T5375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.247430][ T5375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48031 - 0 [ 463.997971][ T38] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 48031 - 0 [ 463.998120][ T38] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.998292][ T38] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 48031 - 0 [ 463.998338][ T38] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.998403][ T38] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 48031 - 0 [ 463.998451][ T38] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.998521][ T38] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 48031 - 0 [ 463.998579][ T38] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.254503][ C1] net_ratelimit: 16 callbacks suppressed [ 469.669763][ T5409] FAULT_INJECTION: forcing a failure. [ 469.669763][ T5409] name failslab, interval 1, probability 0, space 0, times 0 [ 469.669931][ T5409] CPU: 0 UID: 0 PID: 5409 Comm: syz.0.412 Not tainted syzkaller #0 PREEMPT [ 469.669989][ T5409] Hardware name: ARM-Versatile Express [ 469.670020][ T5409] Call trace: [ 469.670061][ T5409] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 469.670177][ T5409] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 469.670199][ T5409] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 469.670252][ T5409] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 469.670316][ T5409] r7:848bcb00 r6:00000000 r5:848bcb00 r4:83315fdc [ 469.670336][ T5409] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 469.670399][ T5409] [<80a237ac>] (should_fail_ex) from [<8057c9d0>] (should_failslab+0x6c/0x94) [ 469.670469][ T5409] r8:00000000 r7:848bcb00 r6:81669744 r5:00000cc0 r4:838ffe40 [ 469.670487][ T5409] [<8057c964>] (should_failslab) from [<8055a7ac>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 469.670536][ T5409] [<8055a74c>] (kmem_cache_alloc_lru_noprof) from [<81669744>] (sock_alloc_inode+0x24/0x84) [ 469.670608][ T5409] r10:00000119 r9:865cd000 r8:8020029c r7:00000000 r6:81e668c0 r5:838c2800 [ 469.670642][ T5409] r4:0000000a [ 469.670659][ T5409] [<81669720>] (sock_alloc_inode) from [<805e1268>] (alloc_inode+0x24/0xd0) [ 469.670726][ T5409] r5:838c2800 r4:0000000a [ 469.670743][ T5409] [<805e1244>] (alloc_inode) from [<81668ff4>] (sock_alloc+0x20/0x78) [ 469.670803][ T5409] r7:00000000 r6:00000000 r5:00000001 r4:0000000a [ 469.670821][ T5409] [<81668fd4>] (sock_alloc) from [<816691f8>] (__sock_create+0x80/0x22c) [ 469.670877][ T5409] r5:00000001 r4:0000000a [ 469.670895][ T5409] [<81669178>] (__sock_create) from [<8166c3e4>] (__sys_socket+0x94/0x118) [ 469.670962][ T5409] r10:00000119 r9:848bcb00 r8:8020029c r7:00000119 r6:848bcb00 r5:0000000a [ 469.670984][ T5409] r4:00000001 [ 469.671001][ T5409] [<8166c350>] (__sys_socket) from [<8166c478>] (sys_socket+0x10/0x14) [ 469.671065][ T5409] r6:00356310 r5:00000000 r4:00000000 [ 469.671083][ T5409] [<8166c468>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 469.671134][ T5409] Exception stack(0xdf9edfa8 to 0xdf9edff0) [ 469.671176][ T5409] dfa0: 00000000 00000000 0000000a 00000001 00000000 00000000 [ 469.671214][ T5409] dfc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76f9f0dc [ 469.671245][ T5409] dfe0: 76f9ee88 76f9ee78 00019004 00130ac0 [ 471.538127][ C1] net_ratelimit: 19 callbacks suppressed [ 476.567263][ C0] net_ratelimit: 18 callbacks suppressed [ 481.607363][ C1] net_ratelimit: 16 callbacks suppressed [ 481.799235][ T5426] : renamed from vlan0 (while UP) [ 483.770023][ T28] audit: type=1400 audit(483.680:2136): avc: denied { wake_alarm } for pid=5427 comm="syz.1.419" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 486.647222][ C0] net_ratelimit: 16 callbacks suppressed [ 492.007039][ C1] net_ratelimit: 20 callbacks suppressed [ 497.207158][ C0] net_ratelimit: 20 callbacks suppressed [ 502.407170][ C1] net_ratelimit: 20 callbacks suppressed [ 504.367442][ T41] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 504.520947][ T41] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 504.543344][ T41] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.560291][ T41] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.613462][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.613507][ T41] usb 2-1: Product: syz [ 504.613538][ T41] usb 2-1: Manufacturer: syz [ 504.613568][ T41] usb 2-1: SerialNumber: syz [ 504.643706][ T41] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 504.668184][ T41] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 504.694700][ T41] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 506.891963][ T5444] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 506.910180][ T41] usb 2-1: USB disconnect, device number 16 [ 506.980951][ T41] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 507.022813][ T41] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 507.024075][ T41] ti_usb_3410_5052 2-1:2.0: device disconnected [ 507.607204][ C1] net_ratelimit: 16 callbacks suppressed [ 508.218858][ T28] audit: type=1326 audit(508.130:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 508.222897][ T28] audit: type=1326 audit(508.130:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 508.224652][ T28] audit: type=1326 audit(508.130:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 508.225420][ T28] audit: type=1326 audit(508.130:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=380 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 508.240090][ T28] audit: type=1326 audit(508.150:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 508.242105][ T28] audit: type=1326 audit(508.150:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 508.242215][ T28] audit: type=1326 audit(508.150:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 508.242273][ T28] audit: type=1326 audit(508.150:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.427" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 512.807239][ C1] net_ratelimit: 62 callbacks suppressed [ 518.007534][ C0] net_ratelimit: 30 callbacks suppressed [ 523.127240][ C0] net_ratelimit: 26 callbacks suppressed [ 528.807075][ C1] net_ratelimit: 30 callbacks suppressed [ 534.007146][ C0] net_ratelimit: 22 callbacks suppressed [ 537.007577][ T41] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 537.157226][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 537.159766][ T41] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 537.170238][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.170314][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.170422][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.178037][ T41] usb 1-1: config 0 descriptor?? [ 537.705156][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705262][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705334][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705403][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705472][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705541][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705641][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705726][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705797][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.705866][ T41] uclogic 0003:5543:0064.0005: unknown main item tag 0x0 [ 537.720596][ T41] uclogic 0003:5543:0064.0005: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 537.901497][ T41] usb 1-1: USB disconnect, device number 16 [ 539.207159][ C0] net_ratelimit: 20 callbacks suppressed [ 539.221327][ T28] audit: type=1326 audit(539.130:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.225406][ T28] audit: type=1326 audit(539.130:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.249716][ T28] audit: type=1326 audit(539.160:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.249908][ T28] audit: type=1326 audit(539.160:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.249962][ T28] audit: type=1326 audit(539.160:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.279937][ T28] audit: type=1326 audit(539.190:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.280119][ T28] audit: type=1326 audit(539.190:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.285788][ T28] audit: type=1326 audit(539.190:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.306466][ T28] audit: type=1326 audit(539.190:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 539.307302][ T28] audit: type=1326 audit(539.210:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.441" exe="/syz-executor" sig=0 arch=40000028 syscall=307 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 544.886974][ C1] net_ratelimit: 14 callbacks suppressed [ 550.087287][ C1] net_ratelimit: 21 callbacks suppressed [ 555.287123][ C0] net_ratelimit: 30 callbacks suppressed [ 559.570261][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 559.570391][ T28] audit: type=1400 audit(559.480:2160): avc: denied { bind } for pid=5549 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 559.599882][ T28] audit: type=1400 audit(559.510:2161): avc: denied { map } for pid=5549 comm="syz.1.447" path="socket:[6737]" dev="sockfs" ino=6737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 559.600060][ T28] audit: type=1400 audit(559.510:2162): avc: denied { read write } for pid=5549 comm="syz.1.447" path="socket:[6737]" dev="sockfs" ino=6737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 560.487236][ C0] net_ratelimit: 16 callbacks suppressed [ 560.745725][ T5556] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 560.746051][ T5556] device-mapper: ioctl: error adding target to table [ 562.746453][ T5579] FAULT_INJECTION: forcing a failure. [ 562.746453][ T5579] name failslab, interval 1, probability 0, space 0, times 0 [ 562.746545][ T5579] CPU: 0 UID: 0 PID: 5579 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT [ 562.746598][ T5579] Hardware name: ARM-Versatile Express [ 562.746667][ T5579] Call trace: [ 562.746754][ T5579] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 562.746866][ T5579] r7:60000013 r6:60000013 r5:82327f00 r4:00000000 [ 562.746891][ T5579] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 562.746951][ T5579] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 562.747021][ T5579] r7:00000024 r6:00000000 r5:859f3200 r4:83315fdc [ 562.747043][ T5579] [<8021e850>] (dump_stack) from [<80a23968>] (should_fail_ex+0x1bc/0x21c) [ 562.747114][ T5579] [<80a237ac>] (should_fail_ex) from [<8057c9d0>] (should_failslab+0x6c/0x94) [ 562.747192][ T5579] r8:859f3200 r7:00000024 r6:8169d4a0 r5:00400dc0 r4:83802000 [ 562.747216][ T5579] [<8057c964>] (should_failslab) from [<8055c434>] (__kmalloc_cache_noprof+0x58/0x338) [ 562.747281][ T5579] [<8055c3dc>] (__kmalloc_cache_noprof) from [<8169d4a0>] (alloc_netdev_mqs+0x32c/0x4c0) [ 562.747361][ T5579] r10:00000001 r9:00000000 r8:8253d768 r7:867df600 r6:00000001 r5:00000001 [ 562.747391][ T5579] r4:868fc000 [ 562.747411][ T5579] [<8169d174>] (alloc_netdev_mqs) from [<819fa99c>] (ipip6_tunnel_locate+0x138/0x254) [ 562.747493][ T5579] r10:00000001 r9:869a2104 r8:00000001 r7:00000000 r6:865cd000 r5:dfa2dd44 [ 562.747519][ T5579] r4:ffffffff [ 562.747538][ T5579] [<819fa864>] (ipip6_tunnel_locate) from [<819fac08>] (ipip6_tunnel_ctl+0x150/0x274) [ 562.747612][ T5579] r9:819fb024 r8:81e968e8 r7:20000400 r6:000089f1 r5:865f6000 r4:dfa2dd44 [ 562.747634][ T5579] [<819faab8>] (ipip6_tunnel_ctl) from [<818f2e64>] (ip_tunnel_siocdevprivate+0x68/0xb4) [ 562.747723][ T5579] r9:819fb024 r8:81e968e8 r7:20000400 r6:000089f1 r5:20000400 r4:865f6000 [ 562.747746][ T5579] [<818f2dfc>] (ip_tunnel_siocdevprivate) from [<819fb078>] (ipip6_tunnel_siocdevprivate+0x54/0x780) [ 562.747812][ T5579] r6:000089f1 r5:20000400 r4:865f6000 [ 562.747832][ T5579] [<819fb024>] (ipip6_tunnel_siocdevprivate) from [<816e24e8>] (dev_ifsioc+0x184/0x6c4) [ 562.747905][ T5579] r9:819fb024 r8:81e968e8 r7:20000400 r6:dfa2decc r5:000089f1 r4:865f6000 [ 562.747929][ T5579] [<816e2364>] (dev_ifsioc) from [<816e2dd4>] (dev_ioctl+0x3ac/0x468) [ 562.748000][ T5579] r9:20000400 r8:dfa2decb r7:00000000 r6:865cd000 r5:dfa2decc r4:000089f1 [ 562.748023][ T5579] [<816e2a28>] (dev_ioctl) from [<8166c1ac>] (sock_ioctl+0x3e4/0x4c0) [ 562.748125][ T5579] r10:859f3200 r9:00000004 r8:841a9f80 r7:865cd000 r6:20000000 r5:b5403587 [ 562.748153][ T5579] r4:000089f1 r3:20000400 [ 562.748173][ T5579] [<8166bdc8>] (sock_ioctl) from [<805d39dc>] (sys_ioctl+0x244/0xb5c) [ 562.748255][ T5579] r9:00000004 r8:841a9f80 r7:20000000 r6:000089f1 r5:841a9f81 r4:00000000 [ 562.748278][ T5579] [<805d3798>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 562.748332][ T5579] Exception stack(0xdfa2dfa8 to 0xdfa2dff0) [ 562.748399][ T5579] dfa0: 00000000 00000000 00000004 000089f1 20000000 00000000 [ 562.748440][ T5579] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f9f0dc [ 562.748472][ T5579] dfe0: 76f9ee88 76f9ee78 00019004 00130ac0 [ 562.748510][ T5579] r10:00000036 r9:859f3200 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 562.748534][ T5579] r4:00000000 [ 563.049933][ T28] audit: type=1400 audit(562.960:2163): avc: denied { bind } for pid=5585 comm="syz.0.456" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 563.050118][ T28] audit: type=1400 audit(562.960:2164): avc: denied { name_bind } for pid=5585 comm="syz.0.456" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 563.050176][ T28] audit: type=1400 audit(562.960:2165): avc: denied { node_bind } for pid=5585 comm="syz.0.456" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 563.128294][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 563.277422][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 563.282279][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 563.292577][ T10] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 563.292707][ T10] usb 2-1: config 0 has no interface number 0 [ 563.292773][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 563.292820][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 563.346150][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.346196][ T10] usb 2-1: Product: syz [ 563.346227][ T10] usb 2-1: Manufacturer: syz [ 563.346254][ T10] usb 2-1: SerialNumber: syz [ 563.366053][ T10] usb 2-1: config 0 descriptor?? [ 563.371121][ T5581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 563.371998][ T5581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 563.601108][ T5581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 563.601512][ T5581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 563.843550][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 564.312757][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 564.313413][ T10] asix 2-1:0.34: probe with driver asix failed with error -71 [ 564.373607][ T10] usb 2-1: USB disconnect, device number 17 [ 564.752073][ T28] audit: type=1400 audit(564.660:2166): avc: denied { create } for pid=5600 comm="syz.1.458" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 564.895181][ T28] audit: type=1400 audit(564.800:2167): avc: denied { unlink } for pid=3115 comm="syz-executor" name="loop0" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 565.348178][ T5606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 565.686905][ C0] net_ratelimit: 18 callbacks suppressed [ 570.887456][ C0] net_ratelimit: 20 callbacks suppressed [ 575.926935][ C1] net_ratelimit: 34 callbacks suppressed [ 578.512219][ T5608] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.461'. [ 581.115341][ T5616] gre1: entered promiscuous mode [ 581.287266][ C1] net_ratelimit: 22 callbacks suppressed [ 582.842234][ T0] CPU1: smp_ops.cpu_die() returned, trying to resuscitate [ 586.487655][ C0] net_ratelimit: 20 callbacks suppressed [ 591.686958][ C0] net_ratelimit: 20 callbacks suppressed [ 596.887405][ C0] net_ratelimit: 19 callbacks suppressed [ 601.447527][ T41] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 601.600574][ T41] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 601.609672][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.621095][ T41] usb 1-1: config 0 descriptor?? [ 601.674924][ T41] cp210x 1-1:0.0: cp210x converter detected [ 602.086897][ C0] net_ratelimit: 16 callbacks suppressed [ 602.140535][ T41] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 602.228202][ T41] usb 1-1: cp210x converter now attached to ttyUSB0 [ 602.391510][ T10] usb 1-1: USB disconnect, device number 17 [ 602.427729][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 602.428414][ T10] cp210x 1-1:0.0: device disconnected [ 603.067580][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 603.220778][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 603.243488][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 603.255285][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 603.309284][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.309326][ T10] usb 1-1: Product: syz [ 603.309358][ T10] usb 1-1: Manufacturer: syz [ 603.309389][ T10] usb 1-1: SerialNumber: syz [ 603.394930][ T10] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 603.418363][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 603.445670][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 603.607768][ T3084] usb 1-1: USB disconnect, device number 18 [ 603.684614][ T3084] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 603.741314][ T3084] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 603.742424][ T3084] ti_usb_3410_5052 1-1:2.0: device disconnected [ 606.297356][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 606.450711][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 606.499266][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.513939][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.593899][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.593921][ T10] usb 1-1: Product: syz [ 606.593935][ T10] usb 1-1: Manufacturer: syz [ 606.593948][ T10] usb 1-1: SerialNumber: syz [ 606.605752][ T10] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 606.622163][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 606.638851][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 606.833847][ T10] usb 1-1: USB disconnect, device number 19 [ 606.885464][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 606.913737][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 606.914324][ T10] ti_usb_3410_5052 1-1:2.0: device disconnected [ 607.291978][ T3650] net_ratelimit: 24 callbacks suppressed [ 609.228470][ T41] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 609.389988][ T41] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 609.397824][ T41] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.427906][ T41] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.477710][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.477750][ T41] usb 1-1: Product: syz [ 609.477779][ T41] usb 1-1: Manufacturer: syz [ 609.477808][ T41] usb 1-1: SerialNumber: syz [ 609.572219][ T41] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 609.609758][ T41] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 609.641444][ T41] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 609.801705][ T41] usb 1-1: USB disconnect, device number 20 [ 609.882746][ T41] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 609.913689][ T41] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 609.914789][ T41] ti_usb_3410_5052 1-1:2.0: device disconnected [ 610.909137][ T28] audit: type=1400 audit(610.820:2168): avc: denied { mounton } for pid=5801 comm="syz.0.497" path="/245/file0" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 612.487359][ C0] net_ratelimit: 13 callbacks suppressed [ 612.807563][ T5809] comedi: valid board names for 8255 driver are: [ 612.807665][ T5809] 8255 [ 612.807688][ T5809] comedi: valid board names for vmk80xx driver are: [ 612.807705][ T5809] vmk80xx [ 612.807722][ T5809] comedi: valid board names for usbduxsigma driver are: [ 612.807752][ T5809] usbduxsigma [ 612.807769][ T5809] comedi: valid board names for usbduxfast driver are: [ 612.807785][ T5809] usbduxfast [ 612.807800][ T5809] comedi: valid board names for usbdux driver are: [ 612.807818][ T5809] usbdux [ 612.807835][ T5809] comedi: valid board names for ni6501 driver are: [ 612.807852][ T5809] ni6501 [ 612.807867][ T5809] comedi: valid board names for dt9812 driver are: [ 612.807882][ T5809] dt9812 [ 612.807900][ T5809] comedi: valid board names for ni_labpc_cs driver are: [ 612.807917][ T5809] ni_labpc_cs [ 612.807934][ T5809] comedi: valid board names for ni_daq_700 driver are: [ 612.807951][ T5809] ni_daq_700 [ 612.807966][ T5809] comedi: valid board names for labpc_pci driver are: [ 612.807982][ T5809] labpc_pci [ 612.807997][ T5809] comedi: valid board names for adl_pci9118 driver are: [ 612.808090][ T5809] pci9118dg [ 612.808146][ T5809] pci9118hg [ 612.808167][ T5809] pci9118hr [ 612.808185][ T5809] comedi: valid board names for 8255_pci driver are: [ 612.808202][ T5809] 8255_pci [ 612.808217][ T5809] comedi: valid board names for comedi_parport driver are: [ 612.808234][ T5809] comedi_parport [ 612.808254][ T5809] comedi: valid board names for comedi_test driver are: [ 612.808273][ T5809] comedi_test [ 612.808289][ T5809] comedi: valid board names for comedi_bond driver are: [ 612.808305][ T5809] comedi_bond [ 613.375322][ T28] audit: type=1800 audit(613.280:2169): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.497" name="/" dev="fuse" ino=4 res=0 errno=0 [ 614.267670][ T28] audit: type=1400 audit(614.170:2170): avc: denied { read write } for pid=5813 comm="syz.0.501" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 614.290923][ T28] audit: type=1400 audit(614.200:2171): avc: denied { open } for pid=5813 comm="syz.0.501" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 614.319071][ T5814] binder: 5813:5814 ioctl 4018620d 0 returned -22 [ 614.319394][ T28] audit: type=1400 audit(614.230:2172): avc: denied { ioctl } for pid=5813 comm="syz.0.501" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 617.514147][ T3642] net_ratelimit: 20 callbacks suppressed [ 622.567863][ C0] net_ratelimit: 12 callbacks suppressed [ 625.331186][ T28] audit: type=1400 audit(625.240:2173): avc: denied { allowed } for pid=5823 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 625.800279][ T5826] nvme_fabrics: testsubsysq~ysPܖu!`i%O7s9{8SŻ&:-oXcGhǛGKӷ7mLdz+^߂n$EgЀx?yz0^%_i?ぅ{D2üZs$iC0cըJw=UG`+Vf+ s!lPp# wl needs to be < 223 bytes [ 626.375363][ T28] audit: type=1400 audit(626.280:2174): avc: denied { unmount } for pid=3114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 627.607066][ C0] net_ratelimit: 17 callbacks suppressed [ 629.456040][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 631.507358][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 631.514138][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 631.530049][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 631.530265][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.530305][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.530344][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.530386][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.530494][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.483561][ T3648] net_ratelimit: 13 callbacks suppressed [ 633.512173][ T10] usb 2-1: usb_control_msg returned -32 [ 633.512267][ T10] usbtmc 2-1:16.0: can't read capabilities [ 638.487251][ C0] net_ratelimit: 37 callbacks suppressed [ 639.085882][ T5856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.512'. [ 642.407963][ T41] usb 2-1: USB disconnect, device number 18 [ 643.767114][ C0] net_ratelimit: 19 callbacks suppressed [ 644.228406][ T5879] syzkaller0: entered promiscuous mode [ 644.228616][ T5879] syzkaller0: entered allmulticast mode [ 648.127512][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 648.257735][ T9] usb 2-1: device descriptor read/64, error -71 [ 648.507489][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 648.657991][ T9] usb 2-1: device descriptor read/64, error -71 [ 648.769189][ T9] usb usb2-port1: attempt power cycle [ 649.147378][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 649.175055][ T9] usb 2-1: device descriptor read/8, error -71 [ 649.417504][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 649.441377][ T9] usb 2-1: device descriptor read/8, error -71 [ 649.548616][ T9] usb usb2-port1: unable to enumerate USB device [ 649.767115][ C0] net_ratelimit: 22 callbacks suppressed [ 654.967124][ C1] net_ratelimit: 20 callbacks suppressed [ 660.167252][ C0] net_ratelimit: 20 callbacks suppressed [ 661.857597][ T41] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 661.999213][ T41] usb 1-1: device descriptor read/64, error -71 [ 662.257671][ T41] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 662.387389][ T41] usb 1-1: device descriptor read/64, error -71 [ 662.500025][ T41] usb usb1-port1: attempt power cycle [ 662.630775][ T28] audit: type=1400 audit(662.540:2175): avc: denied { read } for pid=5928 comm="syz.1.533" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 662.837509][ T41] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 662.862165][ T41] usb 1-1: device descriptor read/8, error -71 [ 662.938351][ T28] audit: type=1326 audit(662.850:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.939486][ T28] audit: type=1326 audit(662.850:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.941723][ T28] audit: type=1326 audit(662.850:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.943116][ T28] audit: type=1326 audit(662.850:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=355 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.944738][ T28] audit: type=1326 audit(662.850:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.954928][ T28] audit: type=1326 audit(662.850:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.972309][ T28] audit: type=1326 audit(662.880:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.982311][ T28] audit: type=1326 audit(662.890:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 662.984510][ T28] audit: type=1326 audit(662.880:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.535" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 663.099561][ T41] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 663.122355][ T41] usb 1-1: device descriptor read/8, error -71 [ 663.229030][ T41] usb usb1-port1: unable to enumerate USB device [ 665.369700][ C0] net_ratelimit: 42 callbacks suppressed [ 670.567248][ C0] net_ratelimit: 20 callbacks suppressed [ 675.767125][ C0] net_ratelimit: 16 callbacks suppressed [ 680.467424][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 680.617207][ T10] usb 2-1: device descriptor read/64, error -71 [ 680.867705][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 680.967117][ C0] net_ratelimit: 20 callbacks suppressed [ 681.007328][ T10] usb 2-1: device descriptor read/64, error -71 [ 681.132179][ T10] usb usb2-port1: attempt power cycle [ 681.479263][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 681.502755][ T10] usb 2-1: device descriptor read/8, error -71 [ 681.747531][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 681.770145][ T10] usb 2-1: device descriptor read/8, error -71 [ 681.878813][ T10] usb usb2-port1: unable to enumerate USB device [ 686.177107][ C1] net_ratelimit: 30 callbacks suppressed [ 686.489126][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 686.489420][ T5975] netlink: 'syz.0.545': attribute type 30 has an invalid length. [ 686.641017][ T5975] vxlan0: entered promiscuous mode [ 686.641153][ T5975] vxlan0: entered allmulticast mode [ 686.679447][ T38] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.679619][ T38] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.679685][ T38] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.679761][ T38] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.723719][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 686.723902][ T5975] netlink: 'syz.0.545': attribute type 30 has an invalid length. [ 686.806622][ T5975] vxlan1: entered promiscuous mode [ 686.822328][ T5975] vxlan1: entered allmulticast mode [ 689.620159][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 689.620225][ T28] audit: type=1800 audit(689.530:2186): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.547" name="/" dev="fuse" ino=4 res=0 errno=0 [ 691.366911][ C1] net_ratelimit: 40 callbacks suppressed [ 695.437411][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 695.589671][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 695.600400][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 695.618165][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 695.618326][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 695.626474][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.626495][ T10] usb 1-1: Product: syz [ 695.626509][ T10] usb 1-1: Manufacturer: syz [ 695.626523][ T10] usb 1-1: SerialNumber: syz [ 695.639189][ T10] usb 1-1: config 0 descriptor?? [ 696.566789][ C0] net_ratelimit: 18 callbacks suppressed [ 701.767453][ C0] net_ratelimit: 18 callbacks suppressed [ 701.970278][ T6037] fuse: Unknown parameter 'grou00000000000000000000' [ 704.407145][ T6053] netlink: 72 bytes leftover after parsing attributes in process `syz.1.564'. [ 704.428477][ T6053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.564'. [ 706.460783][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.463459][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.670043][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 707.377092][ C1] net_ratelimit: 22 callbacks suppressed [ 709.077857][ T6085] syz.1.573 uses obsolete (PF_INET,SOCK_PACKET) [ 709.255421][ T6085] TC_ACT_REPEAT abuse ? [ 710.166304][ T9] usb 1-1: USB disconnect, device number 25 [ 711.275625][ T6111] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 712.387293][ T3650] net_ratelimit: 20 callbacks suppressed [ 717.527356][ C0] net_ratelimit: 12 callbacks suppressed [ 717.740055][ T28] audit: type=1400 audit(717.650:2187): avc: denied { setopt } for pid=6123 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 719.907379][ T41] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 720.064389][ T41] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 720.100675][ T41] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 720.100796][ T41] usb 1-1: config 0 has no interface number 0 [ 720.183687][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.183727][ T41] usb 1-1: Product: syz [ 720.183756][ T41] usb 1-1: Manufacturer: syz [ 720.183783][ T41] usb 1-1: SerialNumber: syz [ 720.202905][ T41] usb 1-1: config 0 descriptor?? [ 722.592143][ T9] usb 1-1: USB disconnect, device number 26 [ 722.646958][ C0] net_ratelimit: 22 callbacks suppressed [ 723.583850][ T28] audit: type=1326 audit(723.490:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 723.609369][ T28] audit: type=1326 audit(723.520:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000028 syscall=151 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 723.609546][ T28] audit: type=1326 audit(723.520:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 723.609602][ T28] audit: type=1326 audit(723.520:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 725.950674][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 726.101661][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 726.106101][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 726.106262][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 726.131665][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 726.131815][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 726.201690][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.201732][ T9] usb 2-1: Product: syz [ 726.201766][ T9] usb 2-1: Manufacturer: syz [ 726.201797][ T9] usb 2-1: SerialNumber: syz [ 726.240871][ T9] ti_usb_3410_5052 2-1:2.0: required endpoints missing [ 726.468697][ T9] usb 2-1: USB disconnect, device number 27 [ 726.948711][ T6206] netlink: 'syz.0.608': attribute type 39 has an invalid length. [ 727.678370][ T3072] net_ratelimit: 19 callbacks suppressed [ 729.767535][ T6193] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 729.931941][ T6193] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 729.939747][ T6193] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 729.939843][ T6193] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 729.985783][ T6193] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 729.985926][ T6193] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 730.054887][ T6193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.054927][ T6193] usb 2-1: Product: syz [ 730.054959][ T6193] usb 2-1: Manufacturer: syz [ 730.054989][ T6193] usb 2-1: SerialNumber: syz [ 730.123371][ T6193] ti_usb_3410_5052 2-1:2.0: required endpoints missing [ 730.319625][ T6193] usb 2-1: USB disconnect, device number 28 [ 730.967228][ T6193] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 731.121371][ T6193] usb 2-1: Using ep0 maxpacket: 32 [ 731.125038][ T6193] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 731.197795][ T6193] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 731.269440][ T6193] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 731.269481][ T6193] usb 2-1: Product: syz [ 731.269511][ T6193] usb 2-1: Manufacturer: syz [ 731.269541][ T6193] usb 2-1: SerialNumber: syz [ 731.293131][ T6193] usb 2-1: config 0 descriptor?? [ 731.328527][ T6243] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 731.823454][ T9] usb 2-1: USB disconnect, device number 29 [ 732.357665][ T6266] netlink: 104 bytes leftover after parsing attributes in process `syz.0.616'. [ 732.907085][ T6270] net_ratelimit: 19 callbacks suppressed [ 733.598321][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 733.815723][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 733.821871][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 733.822006][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 733.850454][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 733.850601][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 733.920934][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.920977][ T9] usb 2-1: Product: syz [ 733.921009][ T9] usb 2-1: Manufacturer: syz [ 733.921040][ T9] usb 2-1: SerialNumber: syz [ 733.943588][ T9] ti_usb_3410_5052 2-1:2.0: required endpoints missing [ 734.177211][ T9] usb 2-1: USB disconnect, device number 30 [ 738.257710][ T41] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 738.411648][ T41] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 738.443928][ T41] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 738.444139][ T41] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 738.444238][ T41] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 738.470532][ T41] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 738.470679][ T41] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 738.470721][ T41] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 738.506140][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.506192][ T41] usb 1-1: Product: syz [ 738.506223][ T41] usb 1-1: Manufacturer: syz [ 738.506251][ T41] usb 1-1: SerialNumber: syz [ 738.555182][ T41] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 738.555605][ T41] ti_usb_3410_5052 1-1:2.0: missing endpoints [ 738.647536][ C0] net_ratelimit: 17 callbacks suppressed [ 738.760660][ T6138] usb 1-1: USB disconnect, device number 27 [ 740.592055][ T28] audit: type=1326 audit(740.500:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 740.603193][ T28] audit: type=1326 audit(740.510:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 740.603360][ T28] audit: type=1326 audit(740.510:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 740.603410][ T28] audit: type=1326 audit(740.510:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 740.625553][ T28] audit: type=1326 audit(740.530:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000028 syscall=362 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 740.625741][ T28] audit: type=1326 audit(740.530:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 740.625794][ T28] audit: type=1326 audit(740.530:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 741.572164][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 741.789146][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 741.847370][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.883885][ T10] usb 2-1: config 0 descriptor?? [ 742.728662][ T6193] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 742.886515][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 742.888307][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 742.948028][ T6193] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 742.996126][ T6193] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 742.996211][ T6193] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 742.996256][ T6193] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 743.042823][ T6193] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 743.042935][ T6193] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 743.042982][ T6193] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 743.050086][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 743.050417][ T10] [drm] Initialized udl on minor 3 [ 743.074999][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 743.099282][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 743.146283][ T6193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.146303][ T6193] usb 1-1: Product: syz [ 743.146317][ T6193] usb 1-1: Manufacturer: syz [ 743.146331][ T6193] usb 1-1: SerialNumber: syz [ 743.174451][ T10] usb 2-1: USB disconnect, device number 31 [ 743.184673][ T6193] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 743.184813][ T6193] ti_usb_3410_5052 1-1:2.0: missing endpoints [ 743.195861][ T41] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 743.440400][ T6193] usb 1-1: USB disconnect, device number 28 [ 744.247262][ C0] net_ratelimit: 24 callbacks suppressed [ 746.358541][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 746.592427][ T10] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 746.645869][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 746.646021][ T10] usb 2-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.646066][ T10] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 746.705786][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 746.705934][ T10] usb 2-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.705979][ T10] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 746.774042][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.774087][ T10] usb 2-1: Product: syz [ 746.774122][ T10] usb 2-1: Manufacturer: syz [ 746.774154][ T10] usb 2-1: SerialNumber: syz [ 746.833093][ T10] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 746.833412][ T10] ti_usb_3410_5052 2-1:2.0: missing endpoints [ 747.069838][ T10] usb 2-1: USB disconnect, device number 32 [ 749.687331][ C0] net_ratelimit: 17 callbacks suppressed [ 751.565364][ T6389] mmap: syz.0.639 (6389) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 752.117336][ T41] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 752.268718][ T41] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 752.271719][ T41] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 752.271786][ T41] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.271809][ T41] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 752.271828][ T41] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 752.291625][ T41] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 752.291706][ T41] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.291729][ T41] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 752.291750][ T41] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 752.310406][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.310449][ T41] usb 2-1: Product: syz [ 752.310478][ T41] usb 2-1: Manufacturer: syz [ 752.310506][ T41] usb 2-1: SerialNumber: syz [ 752.362296][ T41] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 752.394229][ T41] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 752.449143][ T41] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 752.600292][ T6396] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 752.659389][ T41] usb 2-1: USB disconnect, device number 33 [ 752.691961][ T41] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 752.721800][ T41] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 752.722420][ T41] ti_usb_3410_5052 2-1:2.0: device disconnected [ 754.131707][ T6430] lo: entered promiscuous mode [ 754.199244][ T6430] tunl0: entered promiscuous mode [ 754.202786][ T6430] gre0: entered promiscuous mode [ 754.357455][ T6430] gretap0: entered promiscuous mode [ 754.433534][ T6430] erspan0: entered promiscuous mode [ 754.484353][ T6430] ip_vti0: entered promiscuous mode [ 754.516178][ T6430] ip6_vti0: entered promiscuous mode [ 754.602112][ T6430] sit0: entered promiscuous mode [ 754.668271][ T6430] ip6tnl0: entered promiscuous mode [ 754.695103][ T6430] ip6gre0: entered promiscuous mode [ 754.740487][ T6430] syz_tun: entered promiscuous mode [ 754.775811][ T6430] ip6gretap0: entered promiscuous mode [ 754.819851][ T6430] bond0: entered promiscuous mode [ 754.820031][ T6430] bond_slave_0: entered promiscuous mode [ 754.820527][ T6430] bond_slave_1: entered promiscuous mode [ 754.871242][ T6430] dummy0: entered promiscuous mode [ 754.887388][ C0] net_ratelimit: 15 callbacks suppressed [ 754.921229][ T6430] nlmon0: entered promiscuous mode [ 754.949189][ T6430] vxcan0: entered promiscuous mode [ 754.982724][ T6430] vxcan1: entered promiscuous mode [ 755.017908][ T6430] veth0: entered promiscuous mode [ 755.050236][ T6430] veth1: entered promiscuous mode [ 755.069878][ T6430] wg0: entered promiscuous mode [ 755.089683][ T6430] wg1: entered promiscuous mode [ 755.119105][ T6430] wg2: entered promiscuous mode [ 755.121952][ T6430] veth1_to_bridge: entered promiscuous mode [ 755.124397][ T6430] bridge_slave_1: entered promiscuous mode [ 755.126080][ T6430] veth0_to_bond: entered promiscuous mode [ 755.208501][ T6430] veth1_to_bond: entered promiscuous mode [ 755.226232][ T6430] veth0_to_team: entered promiscuous mode [ 755.251754][ T6430] team_slave_0: entered promiscuous mode [ 755.264107][ T6430] veth1_to_team: entered promiscuous mode [ 755.273302][ T6430] team_slave_1: entered promiscuous mode [ 755.273796][ T6430] veth0_to_batadv: entered promiscuous mode [ 755.298472][ T6430] batadv_slave_0: entered promiscuous mode [ 755.300790][ T6430] veth1_to_batadv: entered promiscuous mode [ 755.302673][ T6430] batadv_slave_1: entered promiscuous mode [ 755.326072][ T6430] xfrm0: entered promiscuous mode [ 755.341016][ T6430] veth0_to_hsr: entered promiscuous mode [ 755.366227][ T6430] veth1_to_hsr: entered promiscuous mode [ 755.421286][ T6430] hsr0: entered promiscuous mode [ 755.438103][ T6430] veth1_virt_wifi: entered promiscuous mode [ 755.441005][ T6430] veth0_virt_wifi: entered promiscuous mode [ 755.489840][ T6430] vlan0: entered promiscuous mode [ 755.511326][ T6430] vlan1: entered promiscuous mode [ 755.532965][ T6430] macvlan0: entered promiscuous mode [ 755.549824][ T6430] macvlan1: entered promiscuous mode [ 755.573140][ T6430] ipvlan0: entered promiscuous mode [ 755.573501][ T6430] ipvlan1: entered promiscuous mode [ 755.654306][ T6430] macvtap0: entered promiscuous mode [ 755.667698][ T6430] macsec0: entered promiscuous mode [ 755.690369][ T6430] geneve0: entered promiscuous mode [ 755.717547][ T6430] geneve1: entered promiscuous mode [ 755.736423][ T6430] netdevsim netdevsim0 eth0: entered promiscuous mode [ 755.767825][ T6430] netdevsim netdevsim0 eth1: entered promiscuous mode [ 755.768244][ T6430] netdevsim netdevsim0 eth2: entered promiscuous mode [ 755.768484][ T6430] netdevsim netdevsim0 eth3: entered promiscuous mode [ 755.768623][ T6430] vlan2: entered promiscuous mode [ 755.842263][ T2712] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.842339][ T2712] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 48031 - 0 [ 755.842363][ T2712] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 755.842411][ T2712] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.842434][ T2712] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 48031 - 0 [ 755.842454][ T2712] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 755.842484][ T2712] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.842505][ T2712] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 48031 - 0 [ 755.842525][ T2712] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 755.842557][ T2712] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.842590][ T2712] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 48031 - 0 [ 755.842610][ T2712] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 756.387326][ T41] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 756.541406][ T41] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 756.548725][ T41] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 756.548885][ T41] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 756.548928][ T41] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 756.548967][ T41] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 756.580154][ T41] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 756.580587][ T41] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 756.580656][ T41] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 756.580699][ T41] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 756.633743][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.634014][ T41] usb 1-1: Product: syz [ 756.634056][ T41] usb 1-1: Manufacturer: syz [ 756.634080][ T41] usb 1-1: SerialNumber: syz [ 756.685631][ T41] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 756.698691][ T41] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 756.706283][ T41] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 756.901039][ T6434] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 756.935449][ T6193] usb 1-1: USB disconnect, device number 29 [ 757.031702][ T6193] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 757.082877][ T6193] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 757.083965][ T6193] ti_usb_3410_5052 1-1:2.0: device disconnected [ 758.428489][ T28] audit: type=1400 audit(758.340:2199): avc: denied { name_bind } for pid=6465 comm="syz.1.649" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 759.627277][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 759.789423][ T10] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 759.822349][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 759.822507][ T10] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.822555][ T10] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 759.822598][ T10] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 759.850006][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 759.850164][ T10] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.850208][ T10] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 759.850255][ T10] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 759.918031][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.918053][ T10] usb 2-1: Product: syz [ 759.918069][ T10] usb 2-1: Manufacturer: syz [ 759.918084][ T10] usb 2-1: SerialNumber: syz [ 759.927058][ C0] net_ratelimit: 90 callbacks suppressed [ 759.943169][ T10] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 759.962202][ T10] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 759.989464][ T10] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 760.188575][ T6470] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 760.211051][ T10] usb 2-1: USB disconnect, device number 34 [ 760.281528][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 760.312154][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 760.312811][ T10] ti_usb_3410_5052 2-1:2.0: device disconnected [ 762.587457][ T6138] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 762.777934][ T6138] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 762.819315][ T6138] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 762.861439][ T6138] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 762.922371][ T6138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.922413][ T6138] usb 2-1: Product: syz [ 762.922444][ T6138] usb 2-1: Manufacturer: syz [ 762.922474][ T6138] usb 2-1: SerialNumber: syz [ 762.984751][ T6138] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 763.024126][ T6138] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 763.061539][ T6138] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 763.260616][ T6511] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 763.388247][ T6138] usb 2-1: USB disconnect, device number 35 [ 763.475080][ T6138] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 763.534218][ T6138] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 763.535404][ T6138] ti_usb_3410_5052 2-1:2.0: device disconnected [ 765.377305][ C0] net_ratelimit: 4 callbacks suppressed [ 770.651543][ C0] net_ratelimit: 6 callbacks suppressed [ 775.771563][ C0] net_ratelimit: 3 callbacks suppressed [ 781.933963][ C0] sched: DL replenish lagged too much [ 782.007922][ C0] net_ratelimit: 4 callbacks suppressed [ 787.311139][ T3642] net_ratelimit: 4 callbacks suppressed [ 792.582426][ C0] net_ratelimit: 1 callbacks suppressed [ 798.012117][ T3642] net_ratelimit: 5 callbacks suppressed [ 803.389196][ T3644] net_ratelimit: 1 callbacks suppressed [ 808.972556][ C0] net_ratelimit: 4 callbacks suppressed [ 814.008388][ C0] net_ratelimit: 4 callbacks suppressed [ 814.132684][ T3735] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 814.740216][ T3735] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 815.273694][ T3735] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 816.375679][ T3735] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 816.653667][ T3735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.653689][ T3735] usb 2-1: Product: syz [ 816.653708][ T3735] usb 2-1: Manufacturer: syz [ 816.653725][ T3735] usb 2-1: SerialNumber: syz [ 817.506026][ T3735] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 817.799504][ T3735] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 817.803811][ T3735] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 819.446288][ T3735] usb 2-1: USB disconnect, device number 36 [ 819.527073][ C1] net_ratelimit: 1 callbacks suppressed [ 820.385759][ T3735] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 821.449047][ T3735] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 821.450148][ T3735] ti_usb_3410_5052 2-1:2.0: device disconnected [ 825.127236][ C1] net_ratelimit: 5 callbacks suppressed [ 830.729301][ C0] net_ratelimit: 2 callbacks suppressed [ 836.079271][ T3642] net_ratelimit: 5 callbacks suppressed [ 841.371908][ C0] net_ratelimit: 3 callbacks suppressed [ 846.734550][ C0] net_ratelimit: 4 callbacks suppressed [ 851.928316][ C0] net_ratelimit: 7 callbacks suppressed [ 857.692140][ C0] net_ratelimit: 9 callbacks suppressed [ 863.373819][ C0] net_ratelimit: 6 callbacks suppressed [ 868.413588][ C0] net_ratelimit: 3 callbacks suppressed [ 874.423550][ C0] net_ratelimit: 5 callbacks suppressed [ 880.313247][ C0] net_ratelimit: 5 callbacks suppressed [ 885.611353][ C0] net_ratelimit: 5 callbacks suppressed [ 885.668750][ T6600] netlink: 64 bytes leftover after parsing attributes in process `syz.1.670'. [ 901.454899][ C0] net_ratelimit: 7 callbacks suppressed [ 912.524716][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.673'. [ 914.487377][ C0] net_ratelimit: 1 callbacks suppressed [ 936.692828][ T28] audit: type=1400 audit(936.560:2200): avc: denied { write } for pid=6610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.958312][ C0] net_ratelimit: 16 callbacks suppressed [ 948.071038][ T3642] net_ratelimit: 3 callbacks suppressed [ 953.123701][ T3644] net_ratelimit: 4 callbacks suppressed [ 959.132052][ C0] net_ratelimit: 3 callbacks suppressed [ 964.427764][ C0] net_ratelimit: 4 callbacks suppressed [ 969.529904][ C0] net_ratelimit: 3 callbacks suppressed [ 971.247461][ T28] audit: type=1400 audit(971.140:2201): avc: denied { write } for pid=6623 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.968454][ C0] net_ratelimit: 3 callbacks suppressed [ 980.026965][ T3645] net_ratelimit: 5 callbacks suppressed [ 985.529894][ C0] net_ratelimit: 1 callbacks suppressed [ 990.573151][ C0] net_ratelimit: 2 callbacks suppressed [ 996.335471][ C0] net_ratelimit: 4 callbacks suppressed [ 1001.609447][ C0] net_ratelimit: 6 callbacks suppressed [ 1006.642821][ T3644] net_ratelimit: 3 callbacks suppressed [ 1012.255384][ C0] net_ratelimit: 5 callbacks suppressed [ 1017.926876][ C1] net_ratelimit: 2 callbacks suppressed [ 1022.989431][ T3642] net_ratelimit: 15 callbacks suppressed [ 1028.092170][ C0] net_ratelimit: 1 callbacks suppressed [ 1033.533699][ C0] net_ratelimit: 6 callbacks suppressed [ 1043.848814][ C0] net_ratelimit: 3 callbacks suppressed [ 1049.457510][ C0] net_ratelimit: 2 callbacks suppressed [ 1053.729394][ T28] audit: type=1400 audit(1053.350:2202): avc: denied { connect } for pid=6643 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1054.970475][ C0] net_ratelimit: 8 callbacks suppressed [ 1060.179190][ T3642] net_ratelimit: 2 callbacks suppressed [ 1065.442382][ T3642] net_ratelimit: 43 callbacks suppressed [ 1071.369445][ C0] net_ratelimit: 5 callbacks suppressed [ 1076.817531][ C0] net_ratelimit: 4 callbacks suppressed [ 1082.114936][ T3642] net_ratelimit: 11 callbacks suppressed [ 1088.017377][ C0] net_ratelimit: 5 callbacks suppressed [ 1093.292759][ C0] net_ratelimit: 6 callbacks suppressed [ 1098.728735][ C0] net_ratelimit: 2 callbacks suppressed [ 1104.407115][ C0] net_ratelimit: 6 callbacks suppressed [ 1110.009628][ C0] net_ratelimit: 3 callbacks suppressed [ 1116.157966][ T3642] net_ratelimit: 2 callbacks suppressed [ 1126.892583][ T3642] net_ratelimit: 4 callbacks suppressed [ 1132.894886][ C0] net_ratelimit: 3 callbacks suppressed [ 1138.328584][ C0] net_ratelimit: 3 callbacks suppressed [ 1143.612585][ C0] net_ratelimit: 1 callbacks suppressed [ 1149.529712][ C0] net_ratelimit: 4 callbacks suppressed [ 1155.213487][ C0] net_ratelimit: 6 callbacks suppressed [ 1160.648191][ C0] net_ratelimit: 2 callbacks suppressed [ 1166.254350][ C0] net_ratelimit: 4 callbacks suppressed [ 1171.369799][ T3642] net_ratelimit: 1 callbacks suppressed [ 1176.866228][ T3642] net_ratelimit: 2 callbacks suppressed [ 1182.497473][ C0] net_ratelimit: 1 callbacks suppressed [ 1188.175161][ C0] net_ratelimit: 12 callbacks suppressed [ 1203.689410][ T3642] net_ratelimit: 4 callbacks suppressed [ 1209.589538][ C0] net_ratelimit: 3 callbacks suppressed [ 1215.367221][ C1] net_ratelimit: 4 callbacks suppressed [ 1220.411531][ C0] net_ratelimit: 2 callbacks suppressed [ 1226.407177][ C1] net_ratelimit: 5 callbacks suppressed [ 1231.532278][ C0] net_ratelimit: 15 callbacks suppressed [ 1236.648086][ C0] net_ratelimit: 2 callbacks suppressed [ 1241.928817][ T3642] net_ratelimit: 3 callbacks suppressed [ 1247.454399][ C0] net_ratelimit: 27 callbacks suppressed [ 1251.129378][ C0] wireguard: wg1: Sending keepalive packet to peer 4 (127.0.0.0:20003) [ 1251.217358][ T29] INFO: task kworker/0:4:6138 blocked for more than 432 seconds. [ 1251.217545][ T29] Not tainted syzkaller #0 [ 1251.217593][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1251.217742][ T29] task:kworker/0:4 state:D stack:0 pid:6138 tgid:6138 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 1251.218113][ T29] Workqueue: events bpf_prog_free_deferred [ 1251.218259][ T29] Call trace: [ 1251.218305][ T29] [<81bb39bc>] (__schedule) from [<81bb4e54>] (schedule+0x2c/0xec) [ 1251.218387][ T29] r10:df9e1dac r9:df9e1db4 r8:00000002 r7:60000013 r6:834d800c r5:859c3e80 [ 1251.218410][ T29] r4:859c3e80 [ 1251.218430][ T29] [<81bb4e28>] (schedule) from [<81bb4f98>] (schedule_preempt_disabled+0x18/0x24) [ 1251.218484][ T29] r5:859c3e80 r4:834d8008 [ 1251.229996][ T29] [<81bb4f80>] (schedule_preempt_disabled) from [<81bb8114>] (__mutex_lock.constprop.0+0x50c/0xa48) [ 1251.230170][ T29] [<81bb7c08>] (__mutex_lock.constprop.0) from [<81bb8724>] (__mutex_lock_slowpath+0x14/0x18) [ 1251.230260][ T29] r10:8320b484 r9:00800000 r8:00000000 r7:ffffffff r6:00000000 r5:df9e1e30 [ 1251.230288][ T29] r4:870166c0 [ 1251.230310][ T29] [<81bb8710>] (__mutex_lock_slowpath) from [<81bb8764>] (mutex_lock+0x3c/0x40) [ 1251.230365][ T29] [<81bb8728>] (mutex_lock) from [<80531a28>] (_vm_unmap_aliases+0x5c/0x238) [ 1251.230429][ T29] [<805319cc>] (_vm_unmap_aliases) from [<805358f0>] (vfree+0x110/0x17c) [ 1251.230508][ T29] r10:8382b005 r9:00800000 r8:ffffffff r7:00000001 r6:00000000 r5:00000000 [ 1251.230534][ T29] r4:870166c0 [ 1251.230555][ T29] [<805357e0>] (vfree) from [<805b015c>] (execmem_free+0x34/0x54) [ 1251.230630][ T29] r8:859c3e80 r7:00000000 r6:8382b000 r5:00001000 r4:7f22a000 [ 1251.230651][ T29] [<805b0128>] (execmem_free) from [<803e217c>] (bpf_jit_free+0x64/0xe0) [ 1251.230713][ T29] r5:00001000 r4:e0383000 [ 1251.230732][ T29] [<803e2118>] (bpf_jit_free) from [<803e32e8>] (bpf_prog_free_deferred+0x148/0x160) [ 1251.230798][ T29] r5:8666ab98 r4:8666ab98 [ 1251.230822][ T29] [<803e31a0>] (bpf_prog_free_deferred) from [<80277154>] (process_one_work+0x1f8/0x5cc) [ 1251.230900][ T29] r7:dddd1180 r6:8382b000 r5:8666ab98 r4:86c32300 [ 1251.230924][ T29] [<80276f5c>] (process_one_work) from [<80277e7c>] (worker_thread+0x16c/0x318) [ 1251.230997][ T29] r10:00000000 r9:86c32330 r8:859c3e80 r7:83203d80 r6:dddd11a0 r5:dddd1180 [ 1251.231023][ T29] r4:86c32300 [ 1251.231041][ T29] [<80277d10>] (worker_thread) from [<802828c4>] (kthread+0x11c/0x154) [ 1251.231111][ T29] r10:00000000 r9:dfdc1e88 r8:86d5a300 r7:86c32300 r6:80277d10 r5:859c3e80 [ 1251.231133][ T29] r4:86af1ac0 [ 1251.231153][ T29] [<802827a8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1251.231208][ T29] Exception stack(0xdf9e1fb0 to 0xdf9e1ff8) [ 1251.231263][ T29] 1fa0: 00000000 00000000 00000000 00000000 [ 1251.231309][ T29] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1251.231351][ T29] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1251.231393][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802827a8 r4:86af1ac0 [ 1251.231750][ T29] INFO: task kworker/0:4:6138 is blocked on a mutex likely owned by task kworker/0:1:10. [ 1251.231841][ T29] task:kworker/0:1 state:R running task stack:0 pid:10 tgid:10 ppid:2 task_flags:0x4208160 flags:0x00000000 [ 1251.231972][ T29] Workqueue: events bpf_prog_free_deferred [ 1251.232031][ T29] Call trace: [ 1251.232062][ T29] [<81bb39bc>] (__schedule) from [<81bb5244>] (preempt_schedule_irq+0x40/0xa8) [ 1251.232128][ T29] r10:8320b4d8 r9:83995780 r8:80200c04 r7:df841d84 r6:ffffffff r5:83995780 [ 1251.232152][ T29] r4:00000000 [ 1251.232172][ T29] [<81bb5204>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 1251.232220][ T29] Exception stack(0xdf841d50 to 0xdf841d98) [ 1251.232263][ T29] 1d40: d5946000 ea50b000 00000000 802397d0 [ 1251.232305][ T29] 1d60: 834d73a0 834d7fe4 7f228000 ea50b000 00000000 00000001 8320b4d8 df841dc4 [ 1251.232343][ T29] 1d80: ea50b000 df841da0 802306a4 802397e8 80000013 ffffffff [ 1251.232401][ T29] r5:80000013 r4:802397e8 [ 1251.232419][ T29] [<80230644>] (flush_tlb_kernel_range) from [<805317dc>] (__purge_vmap_area_lazy+0x28c/0x47c) [ 1251.232485][ T29] [<80531550>] (__purge_vmap_area_lazy) from [<80531bb4>] (_vm_unmap_aliases+0x1e8/0x238) [ 1251.232553][ T29] r10:00000000 r9:df841de8 r8:00000000 r7:ffffffff r6:00000008 r5:df841e30 [ 1251.232577][ T29] r4:df841de8 [ 1251.232596][ T29] [<805319cc>] (_vm_unmap_aliases) from [<805358f0>] (vfree+0x110/0x17c) [ 1251.232666][ T29] r10:8382b005 r9:00800000 r8:ffffffff r7:00000001 r6:00000000 r5:00000000 [ 1251.232690][ T29] r4:86a92200 [ 1251.232709][ T29] [<805357e0>] (vfree) from [<805b015c>] (execmem_free+0x34/0x54) [ 1251.232780][ T29] r8:83995780 r7:00000000 r6:8382b000 r5:00001000 r4:7f228000 [ 1251.232800][ T29] [<805b0128>] (execmem_free) from [<803e217c>] (bpf_jit_free+0x64/0xe0) [ 1251.232859][ T29] r5:00001000 r4:e01d7000 [ 1251.232877][ T29] [<803e2118>] (bpf_jit_free) from [<803e32e8>] (bpf_prog_free_deferred+0x148/0x160) [ 1251.232936][ T29] r5:859a4398 r4:859a4398 [ 1251.232956][ T29] [<803e31a0>] (bpf_prog_free_deferred) from [<80277154>] (process_one_work+0x1f8/0x5cc) [ 1251.233025][ T29] r7:dddd1180 r6:8382b000 r5:859a4398 r4:83815c00 [ 1251.233045][ T29] [<80276f5c>] (process_one_work) from [<80277e7c>] (worker_thread+0x16c/0x318) [ 1251.233119][ T29] r10:dddd1180 r9:83815c30 r8:83995780 r7:83203d80 r6:dddd11a0 r5:dddd1180 [ 1251.233143][ T29] r4:83815c00 [ 1251.233161][ T29] [<80277d10>] (worker_thread) from [<802828c4>] (kthread+0x11c/0x154) [ 1251.233224][ T29] r10:00000000 r9:df83de88 r8:83815b00 r7:83815c00 r6:80277d10 r5:83995780 [ 1251.233258][ T29] r4:838fd9c0 [ 1251.233276][ T29] [<802827a8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1251.233321][ T29] Exception stack(0xdf841fb0 to 0xdf841ff8) [ 1251.233357][ T29] 1fa0: 00000000 00000000 00000000 00000000 [ 1251.233399][ T29] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1251.233432][ T29] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1251.233470][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802827a8 r4:838fd9c0 [ 1251.234006][ T29] NMI backtrace for cpu 0 [ 1251.234108][ T29] CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 1251.234160][ T29] Hardware name: ARM-Versatile Express [ 1251.234183][ T29] Call trace: [ 1251.234211][ T29] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1251.234291][ T29] r7:60030093 r6:60030093 r5:82327f00 r4:00000000 [ 1251.234312][ T29] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 1251.234364][ T29] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 1251.234427][ T29] r7:00000000 r6:00030013 r5:00000000 r4:00000001 [ 1251.234447][ T29] [<8021e850>] (dump_stack) from [<81b9cfe4>] (nmi_cpu_backtrace+0x150/0x170) [ 1251.234506][ T29] [<81b9ce94>] (nmi_cpu_backtrace) from [<81b9d138>] (nmi_trigger_cpumask_backtrace+0x134/0x208) [ 1251.234573][ T29] r7:8320b194 r6:83988000 r5:83217cb8 r4:ffffffff [ 1251.234594][ T29] [<81b9d004>] (nmi_trigger_cpumask_backtrace) from [<802300c8>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 1251.234670][ T29] r9:8320b330 r8:00000048 r7:0000000a r6:83203d80 r5:00007f42 r4:00000048 [ 1251.234698][ T29] [<802300b0>] (arch_trigger_cpumask_backtrace) from [<81b9ce90>] (cpumask_backtrace+0x10/0x14) [ 1251.234768][ T29] [<81b9ce80>] (cpumask_backtrace) from [<81ba4c78>] (sys_info+0x68/0xa8) [ 1251.234833][ T29] [<81ba4c10>] (sys_info) from [<803941f8>] (watchdog+0x3ac/0x850) [ 1251.234906][ T29] r5:00007f42 r4:00000001 [ 1251.234929][ T29] [<80393e4c>] (watchdog) from [<802828c4>] (kthread+0x11c/0x154) [ 1251.235001][ T29] r10:00000000 r9:df819e60 r8:83924880 r7:00000000 r6:80393e4c r5:83988000 [ 1251.235026][ T29] r4:840cef00 [ 1251.235042][ T29] [<802827a8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1251.235088][ T29] Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) [ 1251.235121][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1251.235158][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1251.235231][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1251.235294][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802827a8 r4:840cef00 [ 1251.247406][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1251.247989][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle_call+0x4c/0x1e8 [ 1251.250679][ C0] virtqueue callback for 8381ad80 (80e1f810) [ 1251.250766][ C0] virtqueue interrupt with no work for 8381acc0 [ 1251.250794][ C0] virtqueue interrupt with no work for 8381ac00 [ 1251.260616][ C0] No more buffers in queue [ 1251.260823][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 1251.260919][ C0] No more buffers in queue [ 1251.913303][ T3108] eth0: xmit 86d34cc0 52:55:0a:00:02:02 [ 1251.913474][ T3108] Added buffer head 26 to 8381acc0 [ 1251.913732][ C0] virtqueue interrupt with no work for 8381ad80 [ 1251.913777][ C0] virtqueue callback for 8381acc0 (80e21d4c) [ 1251.913822][ C0] virtqueue interrupt with no work for 8381ac00 [ 1251.924166][ C0] Sent skb 86d34cc0 [ 1251.924334][ C0] No more buffers in queue [ 1252.458400][ T3645] net_ratelimit: 3 callbacks suppressed [ 1252.458526][ T3645] wireguard: wg2: Receiving keepalive packet from peer 6 (127.0.0.0:20002) [ 1252.492520][ C0] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 1252.725275][ T3642] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 1252.738693][ T6580] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.0:20002) [ 1253.733224][ T2899] Added buffer head 9 to 84b1a000 [ 1253.733863][ C0] virtqueue callback for 84b1a000 (80c474c4) [ 1253.734094][ C0] No more buffers in queue [ 1253.764651][ T11] Added buffer head 9 to 84b1a000 [ 1253.765003][ C0] virtqueue callback for 84b1a000 (80c474c4) [ 1253.765083][ C0] No more buffers in queue [ 1253.777895][ T11] Added buffer head 9 to 84b1a000 [ 1253.778455][ C0] virtqueue callback for 84b1a000 (80c474c4) [ 1253.778534][ C0] No more buffers in queue [ 1253.778940][ C0] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 1253.795231][ T11] Added buffer head 9 to 84b1a000 [ 1253.795651][ C0] virtqueue callback for 84b1a000 (80c474c4) [ 1253.795737][ C0] No more buffers in queue [ 1253.837189][ T3642] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 1254.013033][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1254.014801][ T29] CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 1254.015132][ T29] Hardware name: ARM-Versatile Express [ 1254.015343][ T29] Call trace: [ 1254.015610][ T29] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1254.015974][ T29] r7:8321c4bc r6:00000000 r5:82327f00 r4:00000001 [ 1254.016207][ T29] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 1254.016537][ T29] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 1254.016908][ T29] r7:8321c4bc r6:00000000 r5:83988000 r4:83483d7c [ 1254.017138][ T29] [<8021e850>] (dump_stack) from [<802026b8>] (vpanic+0x114/0x320) [ 1254.017437][ T29] [<802025a4>] (vpanic) from [<802028f8>] (trace_suspend_resume+0x0/0x100) [ 1254.017762][ T29] r7:0000000a [ 1254.017911][ T29] [<802028c4>] (panic) from [<80394214>] (watchdog+0x3c8/0x850) [ 1254.018222][ T29] r3:00000001 r2:00000000 r1:00000000 r0:82328bfc [ 1254.018444][ T29] [<80393e4c>] (watchdog) from [<802828c4>] (kthread+0x11c/0x154) [ 1254.018757][ T29] r10:00000000 r9:df819e60 r8:83924880 r7:00000000 r6:80393e4c r5:83988000 [ 1254.019038][ T29] r4:840cef00 [ 1254.019189][ T29] [<802827a8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1254.019476][ T29] Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) [ 1254.019716][ T29] 5fa0: 00000000 00000000 00000000 00000000 [ 1254.020032][ T29] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1254.020333][ T29] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1254.020653][ T29] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802827a8 r4:840cef00 [ 1254.022951][ T29] Rebooting in 86400 seconds..