last executing test programs: 1m14.926130893s ago: executing program 1 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m11.945401504s ago: executing program 1 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', 0x0, &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/dlm/cluster/spaces/dlm1\x00', 0x1ff) (async) 1m10.948266771s ago: executing program 1 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 1m9.553543972s ago: executing program 1 (id=1132): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f000000c100), 0x2002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m8.976160916s ago: executing program 1 (id=1133): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x48, 0x10, 0x200, 0x70bd25, 0x25dfdbfd, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1, 0x2}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000080) 1m8.30812113s ago: executing program 1 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', 0x0, &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/dlm/cluster/spaces/dlm1\x00', 0x1ff) (async) 7.324993178s ago: executing program 0 (id=1177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.129506061s ago: executing program 0 (id=1178): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.049419549s ago: executing program 0 (id=1179): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@cswp={0x58, 0x114, 0x7, {{0xffff0000, 0x8}, 0x0, 0x0, 0x3, 0xffffffffffffd0fa, 0xce, 0x6, 0x62, 0x750d2ae2}}], 0x58}, 0x0) 2.147703095s ago: executing program 0 (id=1180): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 1.42572803s ago: executing program 0 (id=1181): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f00000000c0)=""/18, 0x12) 0s ago: executing program 0 (id=1182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006000000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) kernel console output (not intermixed with test programs): comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98371d8c code=0x7ffc0000 [ 674.015681][ T29] audit: type=1326 audit(673.620:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff992818f0 code=0x7ffc0000 [ 674.054302][ T29] audit: type=1326 audit(673.660:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98371d8c code=0x7ffc0000 [ 674.074704][ T29] audit: type=1326 audit(673.690:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff992818f0 code=0x7ffc0000 [ 675.732011][ T4184] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 679.625257][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 679.626042][ T29] audit: type=1326 audit(678.280:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff992818f0 code=0x7ffc0000 [ 679.635237][ T29] audit: type=1326 audit(679.240:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98371d8c code=0x7ffc0000 [ 679.642306][ T29] audit: type=1326 audit(679.250:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff992818f0 code=0x7ffc0000 [ 679.647512][ T29] audit: type=1326 audit(679.250:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98371d8c code=0x7ffc0000 [ 679.658672][ T29] audit: type=1326 audit(679.250:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff992818f0 code=0x7ffc0000 [ 679.672605][ T29] audit: type=1326 audit(679.250:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98371d8c code=0x7ffc0000 [ 679.673697][ T29] audit: type=1326 audit(679.250:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff992818f0 code=0x7ffc0000 [ 679.674172][ T29] audit: type=1326 audit(679.250:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98371d8c code=0x7ffc0000 [ 679.674727][ T29] audit: type=1326 audit(679.250:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff992818f0 code=0x7ffc0000 [ 679.675213][ T29] audit: type=1326 audit(679.260:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.229" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff98371d8c code=0x7ffc0000 [ 683.330658][ T4193] FAULT_INJECTION: forcing a failure. [ 683.330658][ T4193] name failslab, interval 1, probability 0, space 0, times 0 [ 683.336077][ T4193] CPU: 0 UID: 0 PID: 4193 Comm: syz.1.234 Tainted: G W L syzkaller #0 PREEMPT [ 683.336361][ T4193] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 683.336420][ T4193] Hardware name: linux,dummy-virt (DT) [ 683.336487][ T4193] Call trace: [ 683.336549][ T4193] show_stack+0x18/0x24 (C) [ 683.336722][ T4193] dump_stack_lvl+0x7c/0xb0 [ 683.336839][ T4193] dump_stack+0x1c/0x28 [ 683.336951][ T4193] should_fail_ex+0x6b4/0x6c4 [ 683.337088][ T4193] should_failslab+0xbc/0x120 [ 683.337215][ T4193] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 683.337346][ T4193] sock_alloc_inode+0x24/0x238 [ 683.337504][ T4193] alloc_inode+0x58/0x1c0 [ 683.337623][ T4193] sock_alloc+0x3c/0x240 [ 683.337743][ T4193] __sock_create+0xa0/0x5fc [ 683.337856][ T4193] __sys_socket+0x124/0x1f0 [ 683.337970][ T4193] __arm64_sys_socket+0x70/0xa4 [ 683.338081][ T4193] invoke_syscall+0x74/0x240 [ 683.338196][ T4193] el0_svc_common.constprop.0+0xac/0x230 [ 683.338311][ T4193] do_el0_svc+0x40/0x58 [ 683.338432][ T4193] el0_svc+0x58/0x2a4 [ 683.338549][ T4193] el0t_64_sync_handler+0xa0/0xe4 [ 683.338701][ T4193] el0t_64_sync+0x198/0x19c [ 683.383703][ T4193] socket: no more sockets [ 684.745990][ T1659] nvmet: connect request for invalid subsystem t! [ 684.775851][ T4197] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 695.332519][ T4210] FAULT_INJECTION: forcing a failure. [ 695.332519][ T4210] name failslab, interval 1, probability 0, space 0, times 0 [ 695.333142][ T4210] CPU: 1 UID: 0 PID: 4210 Comm: syz.1.240 Tainted: G W L syzkaller #0 PREEMPT [ 695.333292][ T4210] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 695.333341][ T4210] Hardware name: linux,dummy-virt (DT) [ 695.333420][ T4210] Call trace: [ 695.333476][ T4210] show_stack+0x18/0x24 (C) [ 695.333721][ T4210] dump_stack_lvl+0x7c/0xb0 [ 695.333881][ T4210] dump_stack+0x1c/0x28 [ 695.334055][ T4210] should_fail_ex+0x6b4/0x6c4 [ 695.334252][ T4210] should_failslab+0xbc/0x120 [ 695.334431][ T4210] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 695.334630][ T4210] sock_alloc_inode+0x24/0x238 [ 695.334818][ T4210] alloc_inode+0x58/0x1c0 [ 695.334976][ T4210] sock_alloc+0x3c/0x240 [ 695.335107][ T4210] __sock_create+0xa0/0x5fc [ 695.335293][ T4210] __sys_socket+0x124/0x1f0 [ 695.335410][ T4210] __arm64_sys_socket+0x70/0xa4 [ 695.335549][ T4210] invoke_syscall+0x74/0x240 [ 695.335712][ T4210] el0_svc_common.constprop.0+0xac/0x230 [ 695.335943][ T4210] do_el0_svc+0x40/0x58 [ 695.336063][ T4210] el0_svc+0x58/0x2a4 [ 695.336197][ T4210] el0t_64_sync_handler+0xa0/0xe4 [ 695.336390][ T4210] el0t_64_sync+0x198/0x19c [ 695.348620][ T4210] socket: no more sockets [ 695.816677][ T4215] gadgetfs: bound to dummy_udc driver [ 696.225511][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 696.246002][ T29] audit: type=1400 audit(695.840:618): avc: denied { unmount } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 697.543357][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 697.745183][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 697.782888][ T23] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 697.927487][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.928347][ T23] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.928540][ T23] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.928691][ T23] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 697.928885][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 697.929088][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.997908][ T23] usb 1-1: config 0 descriptor?? [ 698.162354][ T4229] FAULT_INJECTION: forcing a failure. [ 698.162354][ T4229] name failslab, interval 1, probability 0, space 0, times 0 [ 698.170372][ T4229] CPU: 0 UID: 0 PID: 4229 Comm: syz.1.246 Tainted: G W L syzkaller #0 PREEMPT [ 698.170587][ T4229] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 698.170639][ T4229] Hardware name: linux,dummy-virt (DT) [ 698.170702][ T4229] Call trace: [ 698.170763][ T4229] show_stack+0x18/0x24 (C) [ 698.170966][ T4229] dump_stack_lvl+0x7c/0xb0 [ 698.171118][ T4229] dump_stack+0x1c/0x28 [ 698.171265][ T4229] should_fail_ex+0x6b4/0x6c4 [ 698.171399][ T4229] should_failslab+0xbc/0x120 [ 698.171512][ T4229] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 698.171689][ T4229] sock_alloc_inode+0x24/0x238 [ 698.171820][ T4229] alloc_inode+0x58/0x1c0 [ 698.171997][ T4229] sock_alloc+0x3c/0x240 [ 698.172111][ T4229] __sock_create+0xa0/0x5fc [ 698.172208][ T4229] __sys_socket+0x124/0x1f0 [ 698.172307][ T4229] __arm64_sys_socket+0x70/0xa4 [ 698.172425][ T4229] invoke_syscall+0x74/0x240 [ 698.172573][ T4229] el0_svc_common.constprop.0+0xac/0x230 [ 698.172684][ T4229] do_el0_svc+0x40/0x58 [ 698.172820][ T4229] el0_svc+0x58/0x2a4 [ 698.172947][ T4229] el0t_64_sync_handler+0xa0/0xe4 [ 698.173080][ T4229] el0t_64_sync+0x198/0x19c [ 698.234101][ T4229] socket: no more sockets [ 698.699912][ T23] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 698.700957][ T23] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 698.702517][ T23] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 698.702774][ T23] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 698.702993][ T23] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 698.804386][ T23] hid-generic 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 708.904244][ T10] usb 1-1: USB disconnect, device number 7 [ 738.478389][ T29] audit: type=1400 audit(738.090:619): avc: denied { create } for pid=4284 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 738.508781][ T29] audit: type=1400 audit(738.120:620): avc: denied { connect } for pid=4284 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 739.032115][ T29] audit: type=1400 audit(738.640:621): avc: denied { write } for pid=4284 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 739.576018][ T29] audit: type=1400 audit(739.190:622): avc: denied { getopt } for pid=4284 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 740.233360][ T4276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.258'. [ 758.377887][ T29] audit: type=1400 audit(757.920:623): avc: denied { ioctl } for pid=4308 comm="syz.1.269" path="socket:[7269]" dev="sockfs" ino=7269 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 759.798760][ T4312] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 764.640917][ T29] audit: type=1400 audit(764.150:624): avc: denied { name_bind } for pid=4325 comm="syz.1.274" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 773.934297][ T3303] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 774.218671][ T3303] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 774.315840][ T3303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.316396][ T3303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.316725][ T3303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.396333][ T3303] usb 1-1: config 0 descriptor?? [ 775.963974][ T3303] hid-generic 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 775.975515][ T3303] hid-generic 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 776.041005][ T3303] hid-generic 0003:0D8C:0022.0004: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 776.177087][ T3303] usb 1-1: USB disconnect, device number 8 [ 777.159109][ T29] audit: type=1400 audit(776.590:625): avc: denied { mount } for pid=4350 comm="syz.1.282" name="/" dev="ramfs" ino=7308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 788.416830][ T4368] fido_id[4368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 793.400342][ T29] audit: type=1326 audit(793.010:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.407721][ T29] audit: type=1326 audit(793.020:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.413740][ T29] audit: type=1326 audit(793.020:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.418156][ T29] audit: type=1326 audit(793.030:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.429106][ T29] audit: type=1326 audit(793.040:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.429707][ T29] audit: type=1326 audit(793.040:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.429961][ T29] audit: type=1326 audit(793.040:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.435158][ T29] audit: type=1326 audit(793.050:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.439519][ T29] audit: type=1326 audit(793.050:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 793.443738][ T29] audit: type=1326 audit(793.060:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.293" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x7ffc0000 [ 801.172986][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 801.177083][ T29] audit: type=1400 audit(800.760:659): avc: denied { map } for pid=4402 comm="syz.1.297" path="socket:[6694]" dev="sockfs" ino=6694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 804.315925][ T29] audit: type=1400 audit(803.930:660): avc: denied { write } for pid=4410 comm="syz.1.299" name="nullb" dev="configfs" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 804.366459][ T29] audit: type=1400 audit(803.970:661): avc: denied { write } for pid=4410 comm="syz.1.299" name="zoned" dev="configfs" ino=6715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 804.374043][ T29] audit: type=1400 audit(803.980:662): avc: denied { open } for pid=4410 comm="syz.1.299" path="/162/config/nullb/nullb1/zoned" dev="configfs" ino=6715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 804.433229][ T4411] null_blk: nullb1: using native zone append [ 805.264556][ T4411] null_blk: disk nullb1 created [ 806.600986][ T29] audit: type=1400 audit(806.210:663): avc: denied { bind } for pid=4421 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 806.607199][ T29] audit: type=1400 audit(806.220:664): avc: denied { node_bind } for pid=4421 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 806.663086][ T29] audit: type=1400 audit(806.270:665): avc: denied { execute } for pid=4421 comm="syz.1.302" name="file1" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 806.682374][ T4422] process 'syz.1.302' launched './file1' with NULL argv: empty string added [ 806.685920][ T29] audit: type=1400 audit(806.300:666): avc: denied { execute_no_trans } for pid=4421 comm="syz.1.302" path="/163/file1" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 819.283438][ T29] audit: type=1400 audit(818.880:667): avc: denied { search } for pid=4439 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.284470][ T29] audit: type=1400 audit(818.890:668): avc: denied { search } for pid=4439 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=853 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.313386][ T29] audit: type=1400 audit(818.890:669): avc: denied { search } for pid=4439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.333628][ T29] audit: type=1400 audit(818.890:670): avc: denied { search } for pid=4439 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.093353][ T29] audit: type=1400 audit(819.690:671): avc: denied { read } for pid=4443 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.097042][ T29] audit: type=1400 audit(819.690:672): avc: denied { read open } for pid=4443 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.104007][ T29] audit: type=1400 audit(819.690:673): avc: denied { getattr } for pid=4443 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.462549][ T29] audit: type=1400 audit(820.070:674): avc: denied { write } for pid=4439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.476763][ T29] audit: type=1400 audit(820.080:675): avc: denied { add_name } for pid=4439 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.478680][ T29] audit: type=1400 audit(820.080:676): avc: denied { create } for pid=4439 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 821.202984][ T4448] bond0: (slave bond_slave_0): Releasing backup interface [ 821.925812][ T4448] bond0: (slave bond_slave_1): Releasing backup interface [ 822.706266][ T4448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 833.294710][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 833.303247][ T29] audit: type=1400 audit(832.900:681): avc: denied { write } for pid=4452 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.332793][ T29] audit: type=1400 audit(832.930:682): avc: denied { remove_name } for pid=4452 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.365935][ T29] audit: type=1400 audit(832.950:683): avc: denied { unlink } for pid=4452 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1138 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 848.238650][ T29] audit: type=1400 audit(847.840:684): avc: denied { create } for pid=4470 comm="syz.1.314" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 848.257557][ T29] audit: type=1400 audit(847.870:685): avc: denied { ioctl } for pid=4470 comm="syz.1.314" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6867 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 848.324538][ T29] audit: type=1400 audit(847.940:686): avc: denied { setopt } for pid=4470 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 849.470789][ T29] audit: type=1400 audit(849.080:687): avc: denied { map_create } for pid=4478 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 849.484166][ T29] audit: type=1400 audit(849.090:688): avc: denied { map_read map_write } for pid=4478 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 849.878523][ T29] audit: type=1400 audit(849.490:689): avc: denied { node_bind } for pid=4480 comm="syz.0.318" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 853.813363][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 854.023334][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 854.074215][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 854.084313][ T9] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=44.b2 [ 854.120618][ T9] usb 1-1: config 6 has an invalid interface number: 203 but max is 2 [ 854.123539][ T9] usb 1-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 854.127435][ T9] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 854.129903][ T9] usb 1-1: config 6 has no interface number 0 [ 854.138696][ T9] usb 1-1: config 6 interface 203 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 854.142129][ T9] usb 1-1: config 6 interface 203 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 854.144405][ T9] usb 1-1: config 6 interface 203 has no altsetting 0 [ 854.220537][ T9] usb 1-1: string descriptor 0 read error: -22 [ 854.225239][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.603730][ T9] usb 1-1: USB disconnect, device number 9 [ 854.974150][ T29] audit: type=1400 audit(854.580:690): avc: denied { mmap_zero } for pid=4496 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 855.055087][ T29] audit: type=1400 audit(854.670:691): avc: denied { read write } for pid=4496 comm="syz.1.323" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 855.226682][ T29] audit: type=1400 audit(854.840:692): avc: denied { map } for pid=4496 comm="syz.1.323" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 855.230622][ T29] audit: type=1400 audit(854.840:693): avc: denied { read write } for pid=4496 comm="syz.1.323" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 856.355935][ T29] audit: type=1400 audit(855.960:694): avc: denied { prog_load } for pid=4506 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 856.458973][ T29] audit: type=1400 audit(856.070:695): avc: denied { prog_run } for pid=4506 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 857.195363][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 857.196352][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 859.016592][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 859.294954][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 859.306152][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 859.345575][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 859.346587][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 859.346950][ T9] usb 1-1: config 0 interface 0 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 859.347107][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 859.347231][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 859.509196][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 859.510045][ T9] usb 1-1: Product: syz [ 859.513348][ T9] usb 1-1: Manufacturer: syz [ 859.514035][ T9] usb 1-1: SerialNumber: syz [ 859.689377][ T9] usb 1-1: config 0 descriptor?? [ 859.781030][ T9] ldusb 1-1:0.0: Interrupt in endpoint not found [ 859.964229][ T3303] usb 1-1: USB disconnect, device number 10 [ 860.533875][ T3303] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 860.723754][ T3303] usb 1-1: Using ep0 maxpacket: 32 [ 860.733008][ T3303] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 860.766956][ T3303] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 860.772070][ T3303] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 860.774534][ T3303] usb 1-1: config 0 interface 0 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 860.775725][ T3303] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 860.784000][ T3303] usb 1-1: config 0 interface 0 has no altsetting 0 [ 860.843619][ T3303] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 860.852305][ T3303] usb 1-1: Product: syz [ 860.854141][ T3303] usb 1-1: Manufacturer: syz [ 860.855498][ T3303] usb 1-1: SerialNumber: syz [ 860.938320][ T3303] usb 1-1: config 0 descriptor?? [ 861.043211][ T3303] ldusb 1-1:0.0: Interrupt in endpoint not found [ 861.258317][ T9] usb 1-1: USB disconnect, device number 11 [ 886.135709][ T29] audit: type=1400 audit(885.750:696): avc: denied { create } for pid=4548 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 886.147900][ T29] audit: type=1400 audit(885.760:697): avc: denied { write } for pid=4548 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 886.577505][ T4553] FAULT_INJECTION: forcing a failure. [ 886.577505][ T4553] name fail_futex, interval 1, probability 0, space 0, times 0 [ 886.586970][ T4553] CPU: 1 UID: 0 PID: 4553 Comm: syz.0.339 Tainted: G W L syzkaller #0 PREEMPT [ 886.587248][ T4553] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 886.587315][ T4553] Hardware name: linux,dummy-virt (DT) [ 886.587385][ T4553] Call trace: [ 886.587449][ T4553] show_stack+0x18/0x24 (C) [ 886.587623][ T4553] dump_stack_lvl+0x7c/0xb0 [ 886.587746][ T4553] dump_stack+0x1c/0x28 [ 886.587865][ T4553] should_fail_ex+0x6b4/0x6c4 [ 886.588009][ T4553] should_fail+0x14/0x34 [ 886.588135][ T4553] get_futex_key+0x198/0xf84 [ 886.588252][ T4553] futex_wait_setup+0x64/0x55c [ 886.588381][ T4553] __futex_wait+0x138/0x218 [ 886.588504][ T4553] futex_wait+0xe4/0x2ac [ 886.588620][ T4553] do_futex+0x1e8/0x280 [ 886.588733][ T4553] __arm64_sys_futex+0x1e8/0x310 [ 886.588847][ T4553] invoke_syscall+0x74/0x240 [ 886.588983][ T4553] el0_svc_common.constprop.0+0xac/0x230 [ 886.589102][ T4553] do_el0_svc+0x40/0x58 [ 886.589219][ T4553] el0_svc+0x58/0x2a4 [ 886.589346][ T4553] el0t_64_sync_handler+0xa0/0xe4 [ 886.589497][ T4553] el0t_64_sync+0x198/0x19c [ 901.643484][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 901.942895][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 901.947996][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 901.988772][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 901.989171][ T9] usb 1-1: config 179 has no interface number 0 [ 901.989374][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 901.989758][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 901.989950][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 901.990069][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 901.990177][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 901.990432][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.138641][ T4564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 902.773130][ T3303] usb 1-1: USB disconnect, device number 12 [ 902.780828][ T3534] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3 [ 902.782815][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 902.783231][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 917.382598][ T4590] syz.0.348 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 917.385579][ T4590] CPU: 1 UID: 0 PID: 4590 Comm: syz.0.348 Tainted: G W L syzkaller #0 PREEMPT [ 917.385685][ T4590] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 917.385715][ T4590] Hardware name: linux,dummy-virt (DT) [ 917.385752][ T4590] Call trace: [ 917.385783][ T4590] show_stack+0x18/0x24 (C) [ 917.385882][ T4590] dump_stack_lvl+0x7c/0xb0 [ 917.385949][ T4590] dump_stack+0x1c/0x28 [ 917.386008][ T4590] dump_header+0x104/0x498 [ 917.386108][ T4590] oom_kill_process+0x49c/0x6ec [ 917.386176][ T4590] out_of_memory+0x244/0x1064 [ 917.386236][ T4590] mem_cgroup_out_of_memory+0x128/0x140 [ 917.386300][ T4590] try_charge_memcg+0x640/0xd1c [ 917.386358][ T4590] __memcg_slab_post_alloc_hook+0x394/0xdcc [ 917.386439][ T4590] __kmalloc_noprof+0x5ac/0x74c [ 917.386519][ T4590] __register_sysctl_table+0xb4/0x1df8 [ 917.386582][ T4590] register_net_sysctl_sz+0xf4/0x364 [ 917.386685][ T4590] ipv4_sysctl_init_net+0x128/0x310 [ 917.386747][ T4590] ops_init+0x15c/0x434 [ 917.386810][ T4590] setup_net+0x108/0x2c4 [ 917.386868][ T4590] copy_net_ns+0x288/0x49c [ 917.386926][ T4590] create_new_namespaces+0x2d4/0x7f4 [ 917.387019][ T4590] unshare_nsproxy_namespaces+0x88/0x184 [ 917.387079][ T4590] ksys_unshare+0x2ac/0x6e0 [ 917.387139][ T4590] __arm64_sys_unshare+0x34/0x50 [ 917.387196][ T4590] invoke_syscall+0x74/0x240 [ 917.387254][ T4590] el0_svc_common.constprop.0+0xac/0x230 [ 917.387345][ T4590] do_el0_svc+0x40/0x58 [ 917.387399][ T4590] el0_svc+0x58/0x2a4 [ 917.387464][ T4590] el0t_64_sync_handler+0xa0/0xe4 [ 917.387518][ T4590] el0t_64_sync+0x198/0x19c [ 917.403344][ T4590] memory: usage 80kB, limit 96kB, failcnt 35 [ 917.405649][ T4590] memory+swap: usage 80kB, limit 9007199254740988kB, failcnt 0 [ 917.407404][ T4590] kmem: usage 80kB, limit 9007199254740988kB, failcnt 0 [ 917.409044][ T4590] Memory cgroup stats for /syz0/test: [ 917.430874][ T4590] cache 0 [ 917.433785][ T4590] rss 0 [ 917.434977][ T4590] rss_huge 0 [ 917.436172][ T4590] shmem 0 [ 917.439046][ T4590] mapped_file 0 [ 917.440610][ T4590] dirty 0 [ 917.442496][ T4590] writeback 0 [ 917.443757][ T4590] workingset_refault_anon 0 [ 917.445299][ T4590] workingset_refault_file 0 [ 917.446938][ T4590] swap 0 [ 917.448177][ T4590] swapcached 0 [ 917.452111][ T4590] pgpgin 0 [ 917.453644][ T4590] pgpgout 0 [ 917.454806][ T4590] pgfault 0 [ 917.455939][ T4590] pgmajfault 0 [ 917.457114][ T4590] inactive_anon 0 [ 917.458345][ T4590] active_anon 0 [ 917.459518][ T4590] inactive_file 0 [ 917.460724][ T4590] active_file 0 [ 917.465635][ T4590] unevictable 0 [ 917.466566][ T4590] hierarchical_memory_limit 98304 [ 917.467360][ T4590] hierarchical_memsw_limit 9223372036854771712 [ 917.468462][ T4590] total_cache 0 [ 917.469106][ T4590] total_rss 0 [ 917.469730][ T4590] total_rss_huge 0 [ 917.470349][ T4590] total_shmem 0 [ 917.470960][ T4590] total_mapped_file 0 [ 917.472098][ T4590] total_dirty 0 [ 917.472715][ T4590] total_writeback 0 [ 917.473500][ T4590] total_workingset_refault_anon 0 [ 917.475255][ T4590] total_workingset_refault_file 0 [ 917.476191][ T4590] total_swap 0 [ 917.476838][ T4590] total_swapcached 0 [ 917.477584][ T4590] total_pgpgin 0 [ 917.478235][ T4590] total_pgpgout 0 [ 917.478891][ T4590] total_pgfault 0 [ 917.479543][ T4590] total_pgmajfault 0 [ 917.480148][ T4590] total_inactive_anon 0 [ 917.480803][ T4590] total_active_anon 0 [ 917.481917][ T4590] total_inactive_file 0 [ 917.482592][ T4590] total_active_file 0 [ 917.483221][ T4590] total_unevictable 0 [ 917.483857][ T4590] anon_cost 0 [ 917.484473][ T4590] file_cost 0 [ 917.486615][ T4590] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.348,pid=4589,uid=0 [ 917.502854][ T4590] Memory cgroup out of memory: Killed process 4589 (syz.0.348) total-vm:40656kB, anon-rss:1300kB, file-rss:1040kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 918.076673][ T29] audit: type=1400 audit(917.690:698): avc: denied { create } for pid=4592 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 920.094587][ T4596] FAULT_INJECTION: forcing a failure. [ 920.094587][ T4596] name failslab, interval 1, probability 0, space 0, times 0 [ 920.095388][ T4596] CPU: 0 UID: 0 PID: 4596 Comm: syz.0.350 Tainted: G W L syzkaller #0 PREEMPT [ 920.095558][ T4596] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 920.095618][ T4596] Hardware name: linux,dummy-virt (DT) [ 920.095689][ T4596] Call trace: [ 920.095752][ T4596] show_stack+0x18/0x24 (C) [ 920.095998][ T4596] dump_stack_lvl+0x7c/0xb0 [ 920.096241][ T4596] dump_stack+0x1c/0x28 [ 920.096420][ T4596] should_fail_ex+0x6b4/0x6c4 [ 920.096571][ T4596] should_failslab+0xbc/0x120 [ 920.096850][ T4596] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 920.097217][ T4596] __d_alloc+0x38/0x98c [ 920.097424][ T4596] d_alloc_pseudo+0x14/0xb8 [ 920.097557][ T4596] alloc_file_pseudo+0xf4/0x23c [ 920.097694][ T4596] sock_alloc_file+0x40/0x1d8 [ 920.097837][ T4596] __sys_socket+0x160/0x1f0 [ 920.097984][ T4596] __arm64_sys_socket+0x70/0xa4 [ 920.098106][ T4596] invoke_syscall+0x74/0x240 [ 920.098241][ T4596] el0_svc_common.constprop.0+0xac/0x230 [ 920.098369][ T4596] do_el0_svc+0x40/0x58 [ 920.098498][ T4596] el0_svc+0x58/0x2a4 [ 920.098624][ T4596] el0t_64_sync_handler+0xa0/0xe4 [ 920.098748][ T4596] el0t_64_sync+0x198/0x19c [ 927.009734][ T29] audit: type=1400 audit(926.620:699): avc: denied { create } for pid=4609 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 927.099007][ T29] audit: type=1400 audit(926.710:700): avc: denied { ioctl } for pid=4609 comm="syz.0.355" path="socket:[7677]" dev="sockfs" ino=7677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 930.100026][ T29] audit: type=1400 audit(929.710:701): avc: denied { mount } for pid=4617 comm="syz.0.356" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 930.217893][ T29] audit: type=1400 audit(929.830:702): avc: denied { unmount } for pid=3388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 939.852734][ T29] audit: type=1400 audit(939.460:703): avc: denied { setopt } for pid=4636 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 942.838009][ T29] audit: type=1400 audit(942.450:704): avc: denied { write } for pid=4640 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 942.852810][ T29] audit: type=1400 audit(942.460:705): avc: denied { nlmsg_write } for pid=4640 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 946.668074][ T4645] FAULT_INJECTION: forcing a failure. [ 946.668074][ T4645] name failslab, interval 1, probability 0, space 0, times 0 [ 946.668579][ T4645] CPU: 1 UID: 0 PID: 4645 Comm: syz.0.366 Tainted: G W L syzkaller #0 PREEMPT [ 946.668725][ T4645] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 946.668775][ T4645] Hardware name: linux,dummy-virt (DT) [ 946.668832][ T4645] Call trace: [ 946.668893][ T4645] show_stack+0x18/0x24 (C) [ 946.669044][ T4645] dump_stack_lvl+0x7c/0xb0 [ 946.669270][ T4645] dump_stack+0x1c/0x28 [ 946.669380][ T4645] should_fail_ex+0x6b4/0x6c4 [ 946.669514][ T4645] should_failslab+0xbc/0x120 [ 946.669620][ T4645] kmem_cache_alloc_noprof+0x3d4/0x610 [ 946.669742][ T4645] __pte_alloc_one_noprof.constprop.0+0x78/0x208 [ 946.669819][ T4645] do_fault+0x55c/0xe28 [ 946.669896][ T4645] __handle_mm_fault+0x7c8/0x1b60 [ 946.669955][ T4645] handle_mm_fault+0x1e8/0x8ac [ 946.670010][ T4645] __get_user_pages+0x320/0x1400 [ 946.670068][ T4645] populate_vma_page_range+0x198/0x2a4 [ 946.670160][ T4645] __mm_populate+0x164/0x2cc [ 946.670261][ T4645] vm_mmap_pgoff+0x28c/0x348 [ 946.670408][ T4645] ksys_mmap_pgoff+0x50/0x684 [ 946.670515][ T4645] __arm64_sys_mmap+0xd0/0x148 [ 946.670631][ T4645] invoke_syscall+0x74/0x240 [ 946.670744][ T4645] el0_svc_common.constprop.0+0xac/0x230 [ 946.670876][ T4645] do_el0_svc+0x40/0x58 [ 946.670983][ T4645] el0_svc+0x58/0x2a4 [ 946.671145][ T4645] el0t_64_sync_handler+0xa0/0xe4 [ 946.671248][ T4645] el0t_64_sync+0x198/0x19c [ 947.744882][ T4647] netlink: 52 bytes leftover after parsing attributes in process `syz.0.367'. [ 952.830140][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 953.375366][ T29] audit: type=1400 audit(952.990:706): avc: denied { write } for pid=4656 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 974.103024][ T29] audit: type=1400 audit(973.520:707): avc: denied { getopt } for pid=4687 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 976.348499][ T4701] FAULT_INJECTION: forcing a failure. [ 976.348499][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 976.357813][ T4701] CPU: 0 UID: 0 PID: 4701 Comm: syz.1.386 Tainted: G W L syzkaller #0 PREEMPT [ 976.358025][ T4701] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 976.358084][ T4701] Hardware name: linux,dummy-virt (DT) [ 976.358152][ T4701] Call trace: [ 976.358230][ T4701] show_stack+0x18/0x24 (C) [ 976.358495][ T4701] dump_stack_lvl+0x7c/0xb0 [ 976.358617][ T4701] dump_stack+0x1c/0x28 [ 976.358742][ T4701] should_fail_ex+0x6b4/0x6c4 [ 976.358874][ T4701] should_fail+0x14/0x34 [ 976.359021][ T4701] should_fail_usercopy+0x1c/0x40 [ 976.359156][ T4701] _inline_copy_from_user+0x38/0x124 [ 976.359304][ T4701] move_addr_to_kernel+0x44/0x110 [ 976.359469][ T4701] __sys_connect+0xac/0x140 [ 976.359596][ T4701] __arm64_sys_connect+0x70/0xa4 [ 976.359724][ T4701] invoke_syscall+0x74/0x240 [ 976.359861][ T4701] el0_svc_common.constprop.0+0xac/0x230 [ 976.359983][ T4701] do_el0_svc+0x40/0x58 [ 976.360100][ T4701] el0_svc+0x58/0x2a4 [ 976.360255][ T4701] el0t_64_sync_handler+0xa0/0xe4 [ 976.360520][ T4701] el0t_64_sync+0x198/0x19c [ 986.247595][ T4707] FAULT_INJECTION: forcing a failure. [ 986.247595][ T4707] name failslab, interval 1, probability 0, space 0, times 0 [ 986.255437][ T4707] CPU: 0 UID: 0 PID: 4707 Comm: syz.0.388 Tainted: G W L syzkaller #0 PREEMPT [ 986.255672][ T4707] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 986.255726][ T4707] Hardware name: linux,dummy-virt (DT) [ 986.255791][ T4707] Call trace: [ 986.256597][ T4707] show_stack+0x18/0x24 (C) [ 986.256857][ T4707] dump_stack_lvl+0x7c/0xb0 [ 986.257003][ T4707] dump_stack+0x1c/0x28 [ 986.257150][ T4707] should_fail_ex+0x6b4/0x6c4 [ 986.257310][ T4707] should_failslab+0xbc/0x120 [ 986.257514][ T4707] __kmalloc_noprof+0x4dc/0x74c [ 986.257649][ T4707] ioctx_alloc+0x54c/0x1934 [ 986.257782][ T4707] __arm64_sys_io_setup+0xd4/0x29c [ 986.257918][ T4707] invoke_syscall+0x74/0x240 [ 986.258056][ T4707] el0_svc_common.constprop.0+0xac/0x230 [ 986.258188][ T4707] do_el0_svc+0x40/0x58 [ 986.258308][ T4707] el0_svc+0x58/0x2a4 [ 986.258463][ T4707] el0t_64_sync_handler+0xa0/0xe4 [ 986.258593][ T4707] el0t_64_sync+0x198/0x19c [ 1008.704867][ T4722] futex_wake_op: syz.0.392 tries to shift op by 144; fix this program [ 1009.608320][ T29] audit: type=1400 audit(1009.220:708): avc: denied { write } for pid=4723 comm="syz.1.393" name="dlm" dev="configfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1009.674895][ T29] audit: type=1400 audit(1009.280:709): avc: denied { write } for pid=4723 comm="syz.1.393" name="comms" dev="configfs" ino=8347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1009.809648][ T29] audit: type=1400 audit(1009.420:710): avc: denied { write } for pid=4723 comm="syz.1.393" name="spaces" dev="configfs" ino=8346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1010.045887][ T29] audit: type=1400 audit(1009.660:711): avc: denied { write } for pid=4723 comm="syz.1.393" name="nodes" dev="configfs" ino=7770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1011.506611][ T29] audit: type=1400 audit(1011.110:712): avc: denied { create } for pid=4726 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1012.038192][ T29] audit: type=1400 audit(1011.650:713): avc: denied { allowed } for pid=4726 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1013.048471][ T4729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'. [ 1027.516478][ T29] audit: type=1400 audit(1027.130:714): avc: denied { create } for pid=4746 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1027.678459][ T29] audit: type=1400 audit(1027.240:715): avc: denied { connect } for pid=4746 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1027.679727][ T29] audit: type=1400 audit(1027.280:716): avc: denied { bind } for pid=4746 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1027.759601][ T29] audit: type=1400 audit(1027.370:717): avc: denied { write } for pid=4746 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1035.308839][ T29] audit: type=1400 audit(1034.920:718): avc: denied { create } for pid=4765 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1036.545536][ T3303] hid-generic 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1038.247429][ T4778] ip6erspan0: entered allmulticast mode [ 1038.296040][ T4775] fido_id[4775]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1039.309576][ T29] audit: type=1400 audit(1038.860:719): avc: denied { mount } for pid=4783 comm="syz.0.414" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1039.641074][ T29] audit: type=1400 audit(1039.250:720): avc: denied { mounton } for pid=4783 comm="syz.0.414" path="/207/security" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 1039.905861][ T29] audit: type=1400 audit(1039.510:721): avc: denied { unmount } for pid=3388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1039.933932][ T29] audit: type=1400 audit(1039.540:722): avc: denied { unmount } for pid=3388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1040.463099][ T4790] FAULT_INJECTION: forcing a failure. [ 1040.463099][ T4790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.474160][ T4790] CPU: 0 UID: 0 PID: 4790 Comm: syz.0.415 Tainted: G W L syzkaller #0 PREEMPT [ 1040.474505][ T4790] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1040.474585][ T4790] Hardware name: linux,dummy-virt (DT) [ 1040.474681][ T4790] Call trace: [ 1040.474768][ T4790] show_stack+0x18/0x24 (C) [ 1040.475021][ T4790] dump_stack_lvl+0x7c/0xb0 [ 1040.475194][ T4790] dump_stack+0x1c/0x28 [ 1040.475355][ T4790] should_fail_ex+0x6b4/0x6c4 [ 1040.475518][ T4790] should_fail+0x14/0x34 [ 1040.475635][ T4790] should_fail_usercopy+0x1c/0x40 [ 1040.475752][ T4790] _inline_copy_from_user+0x38/0x124 [ 1040.475868][ T4790] __sys_bpf+0x204/0x2c70 [ 1040.475976][ T4790] __arm64_sys_bpf+0xb0/0x10c [ 1040.476084][ T4790] invoke_syscall+0x74/0x240 [ 1040.476192][ T4790] el0_svc_common.constprop.0+0xac/0x230 [ 1040.476311][ T4790] do_el0_svc+0x40/0x58 [ 1040.476416][ T4790] el0_svc+0x58/0x2a4 [ 1040.476535][ T4790] el0t_64_sync_handler+0xa0/0xe4 [ 1040.476642][ T4790] el0t_64_sync+0x198/0x19c [ 1048.440815][ T4807] FAULT_INJECTION: forcing a failure. [ 1048.440815][ T4807] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.448284][ T4807] CPU: 0 UID: 0 PID: 4807 Comm: syz.0.421 Tainted: G W L syzkaller #0 PREEMPT [ 1048.448485][ T4807] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1048.448534][ T4807] Hardware name: linux,dummy-virt (DT) [ 1048.448590][ T4807] Call trace: [ 1048.448636][ T4807] show_stack+0x18/0x24 (C) [ 1048.448796][ T4807] dump_stack_lvl+0x7c/0xb0 [ 1048.448971][ T4807] dump_stack+0x1c/0x28 [ 1048.449076][ T4807] should_fail_ex+0x6b4/0x6c4 [ 1048.449184][ T4807] should_failslab+0xbc/0x120 [ 1048.449286][ T4807] __kmalloc_noprof+0xe4/0x74c [ 1048.449385][ T4807] ___neigh_create+0xeb8/0x2800 [ 1048.449526][ T4807] __neigh_create+0x50/0x80 [ 1048.449616][ T4807] ip_finish_output2+0x17d8/0x2014 [ 1048.449714][ T4807] __ip_finish_output+0x48c/0x6d8 [ 1048.449803][ T4807] ip_finish_output+0x34/0x2e4 [ 1048.449893][ T4807] ip_mc_output+0x180/0xa14 [ 1048.449988][ T4807] ip_send_skb+0xa8/0x2a4 [ 1048.450078][ T4807] udp_send_skb+0x728/0x1228 [ 1048.450165][ T4807] udp_sendmsg+0x10e4/0x1d08 [ 1048.450250][ T4807] inet_sendmsg+0x90/0xd8 [ 1048.450341][ T4807] __sock_sendmsg+0xc8/0x1a4 [ 1048.450441][ T4807] ____sys_sendmsg+0x298/0x76c [ 1048.450528][ T4807] ___sys_sendmsg+0x124/0x1a4 [ 1048.450614][ T4807] __sys_sendmmsg+0x1c4/0x43c [ 1048.450699][ T4807] __arm64_sys_sendmmsg+0x90/0xe0 [ 1048.450785][ T4807] invoke_syscall+0x74/0x240 [ 1048.450875][ T4807] el0_svc_common.constprop.0+0xac/0x230 [ 1048.450973][ T4807] do_el0_svc+0x40/0x58 [ 1048.451105][ T4807] el0_svc+0x58/0x2a4 [ 1048.451205][ T4807] el0t_64_sync_handler+0xa0/0xe4 [ 1048.451291][ T4807] el0t_64_sync+0x198/0x19c [ 1057.055701][ T29] audit: type=1400 audit(1056.630:723): avc: denied { setopt } for pid=4811 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1067.852328][ T29] audit: type=1400 audit(1067.430:724): avc: denied { setopt } for pid=4842 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1105.816720][ T4894] ucma_write: process 596 (syz.1.447) changed security contexts after opening file descriptor, this is not allowed. [ 1106.996665][ T4903] syzkaller0: entered promiscuous mode [ 1106.997707][ T4903] syzkaller0: entered allmulticast mode [ 1110.300423][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 1110.685616][ T4915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1110.730020][ T4915] lo: entered allmulticast mode [ 1110.749367][ T4915] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1110.828914][ T4915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1110.999732][ T4915] bond1: (slave lo): Enslaving as an active interface with an up link [ 1118.760183][ T29] audit: type=1400 audit(1118.370:725): avc: denied { write } for pid=4945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.797194][ T29] audit: type=1400 audit(1120.410:726): avc: denied { write } for pid=4958 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1123.682929][ T4968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.472'. [ 1125.233490][ T29] audit: type=1400 audit(1124.790:727): avc: denied { sqpoll } for pid=4974 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1138.983716][ T29] audit: type=1400 audit(1138.590:728): avc: denied { write } for pid=4983 comm="syz.1.477" name="ports" dev="configfs" ino=2018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1147.058316][ T4999] mmap: syz.0.484 (4999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1152.118188][ T5019] FAULT_INJECTION: forcing a failure. [ 1152.118188][ T5019] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.119179][ T5019] CPU: 1 UID: 0 PID: 5019 Comm: syz.1.491 Tainted: G W L syzkaller #0 PREEMPT [ 1152.119359][ T5019] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1152.119432][ T5019] Hardware name: linux,dummy-virt (DT) [ 1152.119503][ T5019] Call trace: [ 1152.119561][ T5019] show_stack+0x18/0x24 (C) [ 1152.119742][ T5019] dump_stack_lvl+0x7c/0xb0 [ 1152.119864][ T5019] dump_stack+0x1c/0x28 [ 1152.120167][ T5019] should_fail_ex+0x6b4/0x6c4 [ 1152.121073][ T5019] should_failslab+0xbc/0x120 [ 1152.121215][ T5019] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1152.121332][ T5019] locks_get_lock_context+0x54/0x4e8 [ 1152.121481][ T5019] posix_lock_inode+0xbc/0x1c0c [ 1152.121591][ T5019] vfs_lock_file+0xc4/0x140 [ 1152.121693][ T5019] fcntl_setlk+0x378/0xbe4 [ 1152.121797][ T5019] do_fcntl+0x19c/0x122c [ 1152.121913][ T5019] __arm64_sys_fcntl+0xfc/0x19c [ 1152.122021][ T5019] invoke_syscall+0x74/0x240 [ 1152.122137][ T5019] el0_svc_common.constprop.0+0xac/0x230 [ 1152.122247][ T5019] do_el0_svc+0x40/0x58 [ 1152.122353][ T5019] el0_svc+0x58/0x2a4 [ 1152.122473][ T5019] el0t_64_sync_handler+0xa0/0xe4 [ 1152.122591][ T5019] el0t_64_sync+0x198/0x19c [ 1154.998237][ T29] audit: type=1400 audit(1154.610:729): avc: denied { mounton } for pid=5032 comm="syz.1.495" path="/250/file0" dev="tmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1189.966386][ T5071] FAULT_INJECTION: forcing a failure. [ 1189.966386][ T5071] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1189.967246][ T5071] CPU: 1 UID: 0 PID: 5071 Comm: syz.1.508 Tainted: G W L syzkaller #0 PREEMPT [ 1189.967416][ T5071] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1189.967473][ T5071] Hardware name: linux,dummy-virt (DT) [ 1189.967533][ T5071] Call trace: [ 1189.967587][ T5071] show_stack+0x18/0x24 (C) [ 1189.967765][ T5071] dump_stack_lvl+0x7c/0xb0 [ 1189.969093][ T5071] dump_stack+0x1c/0x28 [ 1189.971105][ T5071] should_fail_ex+0x6b4/0x6c4 [ 1189.971293][ T5071] should_fail+0x14/0x34 [ 1189.971416][ T5071] get_futex_key+0x198/0xf84 [ 1189.971534][ T5071] futex_wake+0xc0/0x49c [ 1189.971645][ T5071] do_futex+0x258/0x280 [ 1189.971860][ T5071] __arm64_sys_futex+0x1e8/0x310 [ 1189.971978][ T5071] invoke_syscall+0x74/0x240 [ 1189.972092][ T5071] el0_svc_common.constprop.0+0xac/0x230 [ 1189.972212][ T5071] do_el0_svc+0x40/0x58 [ 1189.972323][ T5071] el0_svc+0x58/0x2a4 [ 1189.972453][ T5071] el0t_64_sync_handler+0xa0/0xe4 [ 1189.972580][ T5071] el0t_64_sync+0x198/0x19c [ 1191.044257][ T29] audit: type=1400 audit(1190.600:730): avc: denied { write } for pid=5073 comm="syz.1.510" name="usb_gadget" dev="configfs" ino=2130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.045187][ T29] audit: type=1400 audit(1190.650:731): avc: denied { write } for pid=5073 comm="syz.1.510" name="functions" dev="configfs" ino=9320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.164842][ T29] audit: type=1400 audit(1190.770:732): avc: denied { write } for pid=5073 comm="syz.1.510" name="configs" dev="configfs" ino=9321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.206458][ T29] audit: type=1400 audit(1190.810:733): avc: denied { write } for pid=5073 comm="syz.1.510" name="c.1" dev="configfs" ino=9328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.239969][ T29] audit: type=1400 audit(1190.840:734): avc: denied { create } for pid=5073 comm="syz.1.510" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1191.288590][ T29] audit: type=1400 audit(1190.880:735): avc: denied { write } for pid=5073 comm="syz.1.510" name="c.1" dev="configfs" ino=9328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1191.497699][ T5075] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 1194.229270][ T29] audit: type=1400 audit(1193.840:736): avc: denied { write } for pid=5079 comm="syz.1.512" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1194.272616][ T29] audit: type=1400 audit(1193.880:737): avc: denied { ioctl } for pid=5079 comm="syz.1.512" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1194.274113][ T29] audit: type=1400 audit(1193.880:738): avc: denied { set_context_mgr } for pid=5079 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1194.489185][ T29] audit: type=1400 audit(1194.080:739): avc: denied { map } for pid=5079 comm="syz.1.512" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1194.516109][ T5080] binder: 5079:5080 tried to acquire reference to desc 0, got 1 instead [ 1194.524060][ T5080] binder: 5079:5080 got transaction to invalid handle, 3 [ 1194.525836][ T5080] binder: 5079:5080 cannot find target node [ 1194.527008][ T5080] binder: 5079:5080 transaction call to 0:0 failed 5/29201/-22, code 0 size 72-24 line 3252 [ 1194.578520][ T5080] binder: 5079:5080 got transaction to invalid handle, 3 [ 1194.590773][ T5080] binder: 5079:5080 cannot find target node [ 1194.595782][ T5080] binder: 5079:5080 transaction call to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3252 [ 1194.698959][ T3303] binder: undelivered TRANSACTION_ERROR: 29201 [ 1194.708459][ T3303] binder: undelivered TRANSACTION_ERROR: 29201 [ 1196.125602][ T3303] hid-generic 0003:046D:0A07.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1198.367623][ T5086] fido_id[5086]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1221.126996][ T5114] Illegal XDP return value 4294967274 on prog (id 25) dev N/A, expect packet loss! [ 1226.898345][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 1254.563263][ T5165] Injecting memory failure for pfn 0x629cd at process virtual address 0x20001000 [ 1254.708225][ T5165] Memory failure: 0x629cd: recovery action for clean LRU page: Recovered [ 1254.753268][ T5165] Injecting memory failure for pfn 0x5c54c at process virtual address 0x20002000 [ 1254.756013][ T5165] Memory failure: 0x5c54c: recovery action for clean LRU page: Recovered [ 1254.775758][ T5165] Injecting memory failure for pfn 0x60079 at process virtual address 0x20003000 [ 1254.780395][ T5165] Memory failure: 0x60079: recovery action for clean LRU page: Recovered [ 1256.247169][ T29] audit: type=1400 audit(1255.860:740): avc: denied { bind } for pid=5166 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1257.953445][ T29] audit: type=1400 audit(1257.560:741): avc: denied { setopt } for pid=5175 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1258.668716][ T29] audit: type=1400 audit(1258.280:742): avc: denied { create } for pid=5180 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1259.529117][ T5187] FAULT_INJECTION: forcing a failure. [ 1259.529117][ T5187] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.530216][ T5187] CPU: 0 UID: 0 PID: 5187 Comm: syz.1.552 Tainted: G W L syzkaller #0 PREEMPT [ 1259.530395][ T5187] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1259.530475][ T5187] Hardware name: linux,dummy-virt (DT) [ 1259.530542][ T5187] Call trace: [ 1259.530607][ T5187] show_stack+0x18/0x24 (C) [ 1259.530788][ T5187] dump_stack_lvl+0x7c/0xb0 [ 1259.530926][ T5187] dump_stack+0x1c/0x28 [ 1259.531163][ T5187] should_fail_ex+0x6b4/0x6c4 [ 1259.531328][ T5187] should_failslab+0xbc/0x120 [ 1259.531463][ T5187] __kvmalloc_node_noprof+0x61c/0x8b8 [ 1259.531656][ T5187] bucket_table_alloc.isra.0+0x44/0x39c [ 1259.531788][ T5187] __rhashtable_init_noprof+0x318/0x6c0 [ 1259.531915][ T5187] nf_flow_table_init+0x148/0x290 [ 1259.532062][ T5187] nf_tables_newflowtable+0x1408/0x2000 [ 1259.532190][ T5187] nfnetlink_rcv_batch+0x1030/0x218c [ 1259.532320][ T5187] nfnetlink_rcv+0x2a8/0x340 [ 1259.532460][ T5187] netlink_unicast+0x418/0x6e0 [ 1259.532591][ T5187] netlink_sendmsg+0x638/0xa4c [ 1259.532714][ T5187] __sock_sendmsg+0xc8/0x1a4 [ 1259.532826][ T5187] ____sys_sendmsg+0x52c/0x76c [ 1259.532943][ T5187] ___sys_sendmsg+0x124/0x1a4 [ 1259.533064][ T5187] __sys_sendmsg+0x10c/0x198 [ 1259.533187][ T5187] __arm64_sys_sendmsg+0x74/0xa4 [ 1259.533312][ T5187] invoke_syscall+0x74/0x240 [ 1259.533483][ T5187] el0_svc_common.constprop.0+0xac/0x230 [ 1259.533676][ T5187] do_el0_svc+0x40/0x58 [ 1259.533814][ T5187] el0_svc+0x58/0x2a4 [ 1259.534000][ T5187] el0t_64_sync_handler+0xa0/0xe4 [ 1259.534167][ T5187] el0t_64_sync+0x198/0x19c [ 1259.625107][ T5187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.552'. [ 1261.966062][ T5201] FAULT_INJECTION: forcing a failure. [ 1261.966062][ T5201] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.972219][ T5201] CPU: 1 UID: 0 PID: 5201 Comm: syz.0.559 Tainted: G W L syzkaller #0 PREEMPT [ 1261.972501][ T5201] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1261.972559][ T5201] Hardware name: linux,dummy-virt (DT) [ 1261.972625][ T5201] Call trace: [ 1261.972682][ T5201] show_stack+0x18/0x24 (C) [ 1261.972861][ T5201] dump_stack_lvl+0x7c/0xb0 [ 1261.972991][ T5201] dump_stack+0x1c/0x28 [ 1261.973103][ T5201] should_fail_ex+0x6b4/0x6c4 [ 1261.973230][ T5201] should_failslab+0xbc/0x120 [ 1261.973349][ T5201] __kmalloc_noprof+0x4dc/0x74c [ 1261.973505][ T5201] lsm_blob_alloc+0x60/0x80 [ 1261.973629][ T5201] security_prepare_creds+0x30/0x200 [ 1261.973746][ T5201] prepare_creds+0x358/0x6bc [ 1261.973857][ T5201] lookup_user_key+0x63c/0xc4c [ 1261.973984][ T5201] __arm64_sys_request_key+0x168/0x300 [ 1261.974090][ T5201] invoke_syscall+0x74/0x240 [ 1261.974198][ T5201] el0_svc_common.constprop.0+0xac/0x230 [ 1261.974308][ T5201] do_el0_svc+0x40/0x58 [ 1261.974418][ T5201] el0_svc+0x58/0x2a4 [ 1261.974536][ T5201] el0t_64_sync_handler+0xa0/0xe4 [ 1261.974644][ T5201] el0t_64_sync+0x198/0x19c [ 1262.520916][ T29] audit: type=1400 audit(1262.130:743): avc: denied { setopt } for pid=5202 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1287.339389][ T29] audit: type=1400 audit(1286.950:744): avc: denied { checkpoint_restore } for pid=5264 comm="syz.1.579" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1289.354024][ T29] audit: type=1400 audit(1288.960:745): avc: denied { execute } for pid=5273 comm="syz.0.584" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1289.437176][ T5275] Injecting memory failure for pfn 0x64200 at process virtual address 0x20000000 [ 1289.499996][ T5275] Memory failure: 0x64200: recovery action for huge page: Recovered [ 1312.276513][ T29] audit: type=1400 audit(1311.880:746): avc: denied { setopt } for pid=5309 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1312.309219][ T29] audit: type=1400 audit(1311.900:747): avc: denied { connect } for pid=5309 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1315.559434][ T5323] binder: 5322:5323 tried to acquire reference to desc 0, got 1 instead [ 1315.710525][ T29] audit: type=1400 audit(1315.310:748): avc: denied { call } for pid=5322 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1315.847788][ T5323] binder: 5322:5323 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1315.849483][ T5323] binder: 5323 RLIMIT_NICE not set [ 1315.909043][ T5323] binder: 5323 RLIMIT_NICE not set [ 1315.974154][ T4899] binder: release 5322:5323 transaction 11 out, still active [ 1315.975320][ T4899] binder: undelivered TRANSACTION_COMPLETE [ 1316.078218][ T4899] binder: release 5322:5323 transaction 11 in, still active [ 1316.079636][ T4899] binder: send failed reply for transaction 11, target dead [ 1331.024282][ T29] audit: type=1400 audit(1330.640:749): avc: denied { write } for pid=5353 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1335.156307][ T29] audit: type=1400 audit(1334.770:750): avc: denied { read } for pid=5364 comm="syz.1.618" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1335.168832][ T29] audit: type=1400 audit(1334.780:751): avc: denied { open } for pid=5364 comm="syz.1.618" path="/dev/fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1335.203711][ T29] audit: type=1400 audit(1334.810:752): avc: denied { ioctl } for pid=5364 comm="syz.1.618" path="/dev/fb0" dev="devtmpfs" ino=620 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1341.604209][ T5368] syz.1.619 (5368): drop_caches: 2 [ 1342.077657][ T5373] netlink: 160 bytes leftover after parsing attributes in process `syz.0.620'. [ 1345.956129][ T29] audit: type=1400 audit(1345.560:753): avc: denied { getopt } for pid=5387 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1346.284159][ T5390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.314795][ T5390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.613113][ T5390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.634256][ T5390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.466963][ T29] audit: type=1400 audit(1347.080:754): avc: denied { create } for pid=5397 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1358.958453][ T5402] syz.0.631 (5402): drop_caches: 2 [ 1364.609364][ T29] audit: type=1400 audit(1364.220:755): avc: denied { connect } for pid=5424 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1366.548750][ T29] audit: type=1400 audit(1366.160:756): avc: denied { setopt } for pid=5433 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1367.218840][ T5434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1367.428555][ T5437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1367.435719][ T5437] bond2: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 1367.467128][ T5437] bond2: (slave ip6_vti0): Error -95 calling set_mac_address [ 1368.130973][ T5442] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1368.749849][ T5442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1368.839180][ T5442] netlink: 'syz.0.649': attribute type 12 has an invalid length. [ 1375.810223][ T29] audit: type=1400 audit(1375.420:757): avc: denied { read } for pid=5455 comm="syz.0.653" name="kcore" dev="proc" ino=4026532008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 1375.818933][ T29] audit: type=1400 audit(1375.430:758): avc: denied { open } for pid=5455 comm="syz.0.653" path="/321/proc_mnt/kcore" dev="proc" ino=4026532008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 1411.264072][ T29] audit: type=1400 audit(1410.870:759): avc: denied { name_bind } for pid=5491 comm="syz.0.665" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1412.343300][ T29] audit: type=1400 audit(1411.950:760): avc: denied { write } for pid=5493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1414.099926][ T5501] Zero length message leads to an empty skb [ 1414.387808][ T29] audit: type=1400 audit(1414.000:761): avc: denied { write } for pid=5504 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1418.787420][ T5515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.671'. [ 1419.927604][ T4899] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1419.990295][ T4899] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1425.885165][ T5523] fido_id[5523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1435.716190][ T5533] FAULT_INJECTION: forcing a failure. [ 1435.716190][ T5533] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.717207][ T5533] CPU: 1 UID: 0 PID: 5533 Comm: syz.1.677 Tainted: G W L syzkaller #0 PREEMPT [ 1435.717366][ T5533] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1435.717442][ T5533] Hardware name: linux,dummy-virt (DT) [ 1435.717516][ T5533] Call trace: [ 1435.717576][ T5533] show_stack+0x18/0x24 (C) [ 1435.717769][ T5533] dump_stack_lvl+0x7c/0xb0 [ 1435.718572][ T5533] dump_stack+0x1c/0x28 [ 1435.718772][ T5533] should_fail_ex+0x6b4/0x6c4 [ 1435.719836][ T5533] should_failslab+0xbc/0x120 [ 1435.720015][ T5533] __kmalloc_node_track_caller_noprof+0x44c/0x754 [ 1435.720220][ T5533] kstrdup+0x4c/0xe0 [ 1435.720755][ T5533] kstrdup_const+0x40/0x50 [ 1435.721312][ T5533] kvasprintf_const+0x180/0x1f0 [ 1435.721593][ T5533] kobject_set_name_vargs+0x5c/0x120 [ 1435.721778][ T5533] dev_set_name+0xa8/0xe4 [ 1435.721917][ T5533] netdev_register_kobject+0x9c/0x320 [ 1435.722045][ T5533] register_netdevice+0xe04/0x1b0c [ 1435.722173][ T5533] vif_add+0x9bc/0x10b4 [ 1435.722302][ T5533] ip_mroute_setsockopt+0xa84/0xc38 [ 1435.722424][ T5533] do_ip_setsockopt+0x188/0x23c0 [ 1435.722552][ T5533] ip_setsockopt+0x34/0xa0 [ 1435.722729][ T5533] raw_setsockopt+0x18/0x210 [ 1435.722858][ T5533] sock_common_setsockopt+0x70/0xe0 [ 1435.722987][ T5533] do_sock_setsockopt+0x178/0x35c [ 1435.723102][ T5533] __sys_setsockopt+0xc8/0x160 [ 1435.723225][ T5533] __arm64_sys_setsockopt+0xa8/0x104 [ 1435.723348][ T5533] invoke_syscall+0x74/0x240 [ 1435.723473][ T5533] el0_svc_common.constprop.0+0xac/0x230 [ 1435.723594][ T5533] do_el0_svc+0x40/0x58 [ 1435.723714][ T5533] el0_svc+0x58/0x2a4 [ 1435.723844][ T5533] el0t_64_sync_handler+0xa0/0xe4 [ 1435.723965][ T5533] el0t_64_sync+0x198/0x19c [ 1444.517583][ T29] audit: type=1400 audit(1444.100:762): avc: denied { execute } for pid=5545 comm="syz.1.682" path="/dev/audio1" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1445.947213][ T29] audit: type=1400 audit(1445.530:763): avc: denied { bind } for pid=5545 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1462.824135][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 1463.107795][ T5583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1463.920553][ T5591] loop0: detected capacity change from 0 to 4096 [ 1464.162646][ T5591] loop0: [ 1468.079127][ T5599] syzkaller1: entered promiscuous mode [ 1468.095390][ T5599] syzkaller1: entered allmulticast mode [ 1469.898434][ T29] audit: type=1400 audit(1469.510:764): avc: denied { relabelfrom } for pid=5601 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1469.909992][ T29] audit: type=1400 audit(1469.510:765): avc: denied { relabelto } for pid=5601 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1471.738107][ T5606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.701'. [ 1471.742652][ T5606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.701'. [ 1471.755517][ T5606] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 1471.768417][ T5606] bond0: option mode: unable to set because the bond device has slaves [ 1493.586934][ T5646] ip6t_srh: unknown srh invflags 7863 [ 1496.922820][ T29] audit: type=1400 audit(1496.530:766): avc: denied { read } for pid=5638 comm="syz.0.714" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1497.906749][ T29] audit: type=1400 audit(1497.500:767): avc: denied { open } for pid=5638 comm="syz.0.714" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1507.160628][ T5659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.719'. [ 1514.876226][ T5668] syzkaller0: entered promiscuous mode [ 1514.882443][ T5668] syzkaller0: entered allmulticast mode [ 1520.009269][ T5681] binder: 5679:5681 tried to acquire reference to desc 0, got 1 instead [ 1520.093790][ T4930] binder: undelivered TRANSACTION_COMPLETE [ 1520.210002][ T4930] binder: undelivered transaction 16, process died. [ 1520.578695][ T29] audit: type=1400 audit(1520.180:768): avc: denied { open } for pid=5682 comm="syz.1.727" path="/dev/ptyq7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1520.619266][ T29] audit: type=1400 audit(1520.230:769): avc: denied { ioctl } for pid=5682 comm="syz.1.727" path="/dev/ptyq7" dev="devtmpfs" ino=119 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1524.840629][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 1524.847529][ T5703] netlink: 'syz.0.733': attribute type 5 has an invalid length. [ 1524.854244][ T5703] netlink: 48 bytes leftover after parsing attributes in process `syz.0.733'. [ 1525.120790][ T5703] geneve2: entered promiscuous mode [ 1525.122899][ T5703] geneve2: entered allmulticast mode [ 1547.173455][ T5745] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 1548.123080][ T5749] Injecting memory failure for pfn 0x6e3ed at process virtual address 0x201ed000 [ 1550.810174][ T5749] Memory failure: 0x6e3ed: recovery action for dirty LRU page: Recovered [ 1556.552072][ T29] audit: type=1400 audit(1556.160:770): avc: denied { create } for pid=5761 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1556.583174][ T29] audit: type=1400 audit(1556.190:771): avc: denied { write } for pid=5761 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1576.504740][ T29] audit: type=1400 audit(1576.110:772): avc: denied { mounton } for pid=5782 comm="syz.0.764" path="/proc/945/task" dev="proc" ino=10895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1578.034984][ T29] audit: type=1400 audit(1577.650:773): avc: denied { read } for pid=5780 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1583.014866][ T5807] FAULT_INJECTION: forcing a failure. [ 1583.014866][ T5807] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.019699][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.1.773 Tainted: G W L syzkaller #0 PREEMPT [ 1583.019907][ T5807] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1583.019998][ T5807] Hardware name: linux,dummy-virt (DT) [ 1583.020105][ T5807] Call trace: [ 1583.020175][ T5807] show_stack+0x18/0x24 (C) [ 1583.020372][ T5807] dump_stack_lvl+0x7c/0xb0 [ 1583.020495][ T5807] dump_stack+0x1c/0x28 [ 1583.020700][ T5807] should_fail_ex+0x6b4/0x6c4 [ 1583.020904][ T5807] should_failslab+0xbc/0x120 [ 1583.021097][ T5807] kmem_cache_alloc_noprof+0x88/0x610 [ 1583.021260][ T5807] dst_alloc+0x70/0x130 [ 1583.021413][ T5807] rt_dst_clone+0x5c/0x6b0 [ 1583.021541][ T5807] ip_mc_finish_output+0x7c/0x4a0 [ 1583.021666][ T5807] ip_mc_output+0x274/0xa14 [ 1583.021794][ T5807] ip_send_skb+0xa8/0x2a4 [ 1583.021933][ T5807] udp_send_skb+0x728/0x1228 [ 1583.022090][ T5807] udp_sendmsg+0x10e4/0x1d08 [ 1583.022196][ T5807] inet_sendmsg+0x90/0xd8 [ 1583.022310][ T5807] __sock_sendmsg+0xc8/0x1a4 [ 1583.022428][ T5807] ____sys_sendmsg+0x298/0x76c [ 1583.022540][ T5807] ___sys_sendmsg+0x124/0x1a4 [ 1583.022646][ T5807] __sys_sendmmsg+0x1c4/0x43c [ 1583.022753][ T5807] __arm64_sys_sendmmsg+0x90/0xe0 [ 1583.022872][ T5807] invoke_syscall+0x74/0x240 [ 1583.023001][ T5807] el0_svc_common.constprop.0+0xac/0x230 [ 1583.023126][ T5807] do_el0_svc+0x40/0x58 [ 1583.023257][ T5807] el0_svc+0x58/0x2a4 [ 1583.023397][ T5807] el0t_64_sync_handler+0xa0/0xe4 [ 1583.023517][ T5807] el0t_64_sync+0x198/0x19c [ 1593.325671][ T5817] syzkaller1: entered promiscuous mode [ 1593.326817][ T5817] syzkaller1: entered allmulticast mode [ 1596.479016][ T5830] binder: 5827:5830 tried to acquire reference to desc 0, got 1 instead [ 1596.495366][ T5830] binder: release 5827:5830 transaction 21 out, still active [ 1596.499309][ T5830] binder: undelivered TRANSACTION_COMPLETE [ 1596.506228][ T5830] binder: 5827:5830 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1596.512137][ T5830] binder: 5830 RLIMIT_NICE not set [ 1596.514351][ T5830] binder: 5830 RLIMIT_NICE not set [ 1596.519979][ T5830] binder: 5830 RLIMIT_NICE not set [ 1596.525716][ T5830] binder: 5830:5827 reply target not found [ 1596.530620][ T5830] binder: 5827:5830 transaction reply to 0:0 failed 22/29189/0, code 0 size 0-0 line 3184 [ 1596.534618][ T5830] binder: send failed reply for transaction 21, target dead [ 1596.601866][ T4899] binder: undelivered TRANSACTION_ERROR: 29190 [ 1605.996658][ T5840] netlink: 332 bytes leftover after parsing attributes in process `syz.1.785'. [ 1605.999133][ T5840] netlink: 'syz.1.785': attribute type 9 has an invalid length. [ 1606.006774][ T5840] netlink: 108 bytes leftover after parsing attributes in process `syz.1.785'. [ 1606.008048][ T5840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.785'. [ 1616.208323][ T5869] FAULT_INJECTION: forcing a failure. [ 1616.208323][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.209056][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz.1.795 Tainted: G W L syzkaller #0 PREEMPT [ 1616.209212][ T5869] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1616.209269][ T5869] Hardware name: linux,dummy-virt (DT) [ 1616.209336][ T5869] Call trace: [ 1616.209421][ T5869] show_stack+0x18/0x24 (C) [ 1616.209604][ T5869] dump_stack_lvl+0x7c/0xb0 [ 1616.209727][ T5869] dump_stack+0x1c/0x28 [ 1616.209840][ T5869] should_fail_ex+0x6b4/0x6c4 [ 1616.209979][ T5869] should_failslab+0xbc/0x120 [ 1616.210110][ T5869] kmem_cache_alloc_noprof+0x88/0x610 [ 1616.210236][ T5869] dst_alloc+0x70/0x130 [ 1616.210373][ T5869] ip6_dst_alloc+0x24/0xb8 [ 1616.210509][ T5869] ip6_rt_cache_alloc+0x164/0x648 [ 1616.210630][ T5869] rt6_do_redirect+0x710/0xdb8 [ 1616.210746][ T5869] ip6_redirect_no_header+0x260/0x37c [ 1616.210864][ T5869] ndisc_redirect_rcv+0x508/0x690 [ 1616.211096][ T5869] ndisc_rcv+0x278/0x73c [ 1616.211258][ T5869] icmpv6_rcv+0x109c/0x1710 [ 1616.211376][ T5869] ip6_protocol_deliver_rcu+0x18c/0x146c [ 1616.211500][ T5869] ip6_input_finish+0x164/0x3e0 [ 1616.211619][ T5869] ip6_input+0x10c/0x3fc [ 1616.211735][ T5869] ip6_mc_input+0x3ec/0xbb8 [ 1616.211851][ T5869] ipv6_rcv+0x2dc/0x498 [ 1616.211979][ T5869] __netif_receive_skb_one_core+0xf8/0x170 [ 1616.212169][ T5869] __netif_receive_skb+0x24/0x14c [ 1616.212298][ T5869] netif_receive_skb+0x134/0x794 [ 1616.212418][ T5869] tun_rx_batched.isra.0+0x34c/0x560 [ 1616.212542][ T5869] tun_get_user+0x18b8/0x2b20 [ 1616.212736][ T5869] tun_chr_write_iter+0xac/0x1f0 [ 1616.212843][ T5869] vfs_write+0x4c0/0xbac [ 1616.213044][ T5869] ksys_write+0xf0/0x1e0 [ 1616.213169][ T5869] __arm64_sys_write+0x70/0xa0 [ 1616.213286][ T5869] invoke_syscall+0x74/0x240 [ 1616.213501][ T5869] el0_svc_common.constprop.0+0xac/0x230 [ 1616.213626][ T5869] do_el0_svc+0x40/0x58 [ 1616.213740][ T5869] el0_svc+0x58/0x2a4 [ 1616.213858][ T5869] el0t_64_sync_handler+0xa0/0xe4 [ 1616.213995][ T5869] el0t_64_sync+0x198/0x19c [ 1620.773483][ T5880] netlink: 168 bytes leftover after parsing attributes in process `syz.0.798'. [ 1626.420013][ T5902] FAULT_INJECTION: forcing a failure. [ 1626.420013][ T5902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1626.426736][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.1.805 Tainted: G W L syzkaller #0 PREEMPT [ 1626.426932][ T5902] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1626.426994][ T5902] Hardware name: linux,dummy-virt (DT) [ 1626.427071][ T5902] Call trace: [ 1626.427140][ T5902] show_stack+0x18/0x24 (C) [ 1626.427355][ T5902] dump_stack_lvl+0x7c/0xb0 [ 1626.427504][ T5902] dump_stack+0x1c/0x28 [ 1626.427634][ T5902] should_fail_ex+0x6b4/0x6c4 [ 1626.427787][ T5902] should_fail_alloc_page+0x70/0xc0 [ 1626.427926][ T5902] prepare_alloc_pages+0x1cc/0x578 [ 1626.428038][ T5902] __alloc_frozen_pages_noprof+0x1a4/0x3498 [ 1626.428153][ T5902] alloc_pages_mpol+0xf8/0x41c [ 1626.428269][ T5902] alloc_frozen_pages_noprof+0xb8/0x200 [ 1626.428389][ T5902] alloc_pages_noprof+0x14/0x120 [ 1626.428500][ T5902] get_free_pages_noprof+0x14/0xe0 [ 1626.428608][ T5902] __kasan_populate_vmalloc+0x84/0x204 [ 1626.428739][ T5902] alloc_vmap_area+0x61c/0x2ebc [ 1626.428876][ T5902] __get_vm_area_node+0x1a8/0x2ec [ 1626.429012][ T5902] __vmalloc_node_range_noprof+0x198/0x1024 [ 1626.429146][ T5902] __vmalloc_node_noprof+0xe4/0x14c [ 1626.429266][ T5902] __vmalloc_noprof+0x48/0x70 [ 1626.429416][ T5902] bpf_prog_calc_tag+0x58/0x38c [ 1626.429562][ T5902] bpf_check+0x3bbc/0x7698 [ 1626.429692][ T5902] bpf_prog_load+0x1098/0x1fb0 [ 1626.429809][ T5902] __sys_bpf+0xadc/0x2c70 [ 1626.429950][ T5902] __arm64_sys_bpf+0xb0/0x10c [ 1626.430076][ T5902] invoke_syscall+0x74/0x240 [ 1626.430194][ T5902] el0_svc_common.constprop.0+0xac/0x230 [ 1626.430324][ T5902] do_el0_svc+0x40/0x58 [ 1626.430460][ T5902] el0_svc+0x58/0x2a4 [ 1626.430602][ T5902] el0t_64_sync_handler+0xa0/0xe4 [ 1626.430717][ T5902] el0t_64_sync+0x198/0x19c [ 1626.515813][ T5902] syz.1.805: vmalloc error: size 104, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 1626.528463][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.1.805 Tainted: G W L syzkaller #0 PREEMPT [ 1626.528681][ T5902] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1626.528749][ T5902] Hardware name: linux,dummy-virt (DT) [ 1626.528830][ T5902] Call trace: [ 1626.528900][ T5902] show_stack+0x18/0x24 (C) [ 1626.529107][ T5902] dump_stack_lvl+0x7c/0xb0 [ 1626.529250][ T5902] dump_stack+0x1c/0x28 [ 1626.529426][ T5902] warn_alloc+0x1d0/0x210 [ 1626.529576][ T5902] __vmalloc_node_range_noprof+0xb08/0x1024 [ 1626.529720][ T5902] __vmalloc_node_noprof+0xe4/0x14c [ 1626.529860][ T5902] __vmalloc_noprof+0x48/0x70 [ 1626.529985][ T5902] bpf_prog_calc_tag+0x58/0x38c [ 1626.530123][ T5902] bpf_check+0x3bbc/0x7698 [ 1626.530250][ T5902] bpf_prog_load+0x1098/0x1fb0 [ 1626.530390][ T5902] __sys_bpf+0xadc/0x2c70 [ 1626.530517][ T5902] __arm64_sys_bpf+0xb0/0x10c [ 1626.530646][ T5902] invoke_syscall+0x74/0x240 [ 1626.530773][ T5902] el0_svc_common.constprop.0+0xac/0x230 [ 1626.530941][ T5902] do_el0_svc+0x40/0x58 [ 1626.531100][ T5902] el0_svc+0x58/0x2a4 [ 1626.531295][ T5902] el0t_64_sync_handler+0xa0/0xe4 [ 1626.531435][ T5902] el0t_64_sync+0x198/0x19c [ 1626.583414][ T5902] Mem-Info: [ 1626.586483][ T5902] active_anon:4056 inactive_anon:6 isolated_anon:0 [ 1626.586483][ T5902] active_file:1153 inactive_file:13630 isolated_file:0 [ 1626.586483][ T5902] unevictable:768 dirty:14 writeback:0 [ 1626.586483][ T5902] slab_reclaimable:4696 slab_unreclaimable:30368 [ 1626.586483][ T5902] mapped:2775 shmem:833 pagetables:482 [ 1626.586483][ T5902] sec_pagetables:0 bounce:0 [ 1626.586483][ T5902] kernel_misc_reclaimable:0 [ 1626.586483][ T5902] free:261574 free_pcp:4982 free_cma:8128 [ 1626.606286][ T5902] Node 0 active_anon:16224kB inactive_anon:24kB active_file:4612kB inactive_file:54520kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:11100kB dirty:56kB writeback:0kB shmem:3332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6200kB pagetables:1928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1626.623077][ T5902] Node 0 DMA free:1046296kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16224kB inactive_anon:24kB active_file:4612kB inactive_file:54520kB unevictable:3072kB writepending:56kB zspages:336kB present:2097152kB managed:1524544kB mlocked:0kB bounce:0kB free_pcp:19920kB local_pcp:10000kB free_cma:32512kB [ 1626.629468][ T5902] lowmem_reserve[]: 0 0 0 0 0 [ 1626.635789][ T5902] Node 0 DMA: 598*4kB (UM) 564*8kB (UME) 104*16kB (UME) 105*32kB (UME) 94*64kB (UME) 84*128kB (UME) 25*256kB (UMEC) 9*512kB (UMEC) 9*1024kB (MC) 5*2048kB (UEC) 241*4096kB (UMC) = 1046296kB [ 1626.657576][ T5902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1626.660202][ T5902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 1626.664572][ T5902] Node 0 hugepages_total=64 hugepages_free=64 hugepages_surp=0 hugepages_size=2048kB [ 1626.666731][ T5902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 1626.668875][ T5902] 15612 total pagecache pages [ 1626.670682][ T5902] 0 pages in swap cache [ 1626.673275][ T5902] Free swap = 124912kB [ 1626.674784][ T5902] Total swap = 124996kB [ 1626.676364][ T5902] 524288 pages RAM [ 1626.677765][ T5902] 0 pages HighMem/MovableOnly [ 1626.679350][ T5902] 143152 pages reserved [ 1626.680798][ T5902] 8192 pages cma reserved [ 1626.683119][ T5902] 5 pages hwpoisoned [ 1626.948192][ T29] audit: type=1400 audit(1626.540:774): avc: denied { ioctl } for pid=5903 comm="syz.0.806" path="pid:[4026532618]" dev="nsfs" ino=4026532618 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1627.735649][ T5907] FAULT_INJECTION: forcing a failure. [ 1627.735649][ T5907] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.745981][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: syz.1.807 Tainted: G W L syzkaller #0 PREEMPT [ 1627.746267][ T5907] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1627.746326][ T5907] Hardware name: linux,dummy-virt (DT) [ 1627.746394][ T5907] Call trace: [ 1627.746454][ T5907] show_stack+0x18/0x24 (C) [ 1627.746658][ T5907] dump_stack_lvl+0x7c/0xb0 [ 1627.746813][ T5907] dump_stack+0x1c/0x28 [ 1627.746929][ T5907] should_fail_ex+0x6b4/0x6c4 [ 1627.747077][ T5907] should_failslab+0xbc/0x120 [ 1627.747226][ T5907] __kmalloc_noprof+0x4dc/0x74c [ 1627.747346][ T5907] asymmetric_key_generate_id+0x48/0x158 [ 1627.747456][ T5907] x509_akid_note_kid+0xe8/0x1e4 [ 1627.747563][ T5907] asn1_ber_decoder+0x53c/0x1dc0 [ 1627.747676][ T5907] x509_cert_parse+0x1e0/0x6a8 [ 1627.747803][ T5907] x509_key_preparse+0x58/0x76c [ 1627.747909][ T5907] asymmetric_key_preparse+0x98/0x194 [ 1627.748018][ T5907] __key_create_or_update+0x2fc/0x93c [ 1627.748142][ T5907] key_create_or_update+0x14/0x20 [ 1627.748265][ T5907] __arm64_sys_add_key+0x20c/0x398 [ 1627.748387][ T5907] invoke_syscall+0x74/0x240 [ 1627.748523][ T5907] el0_svc_common.constprop.0+0xac/0x230 [ 1627.748648][ T5907] do_el0_svc+0x40/0x58 [ 1627.748790][ T5907] el0_svc+0x58/0x2a4 [ 1627.748932][ T5907] el0t_64_sync_handler+0xa0/0xe4 [ 1627.749059][ T5907] el0t_64_sync+0x198/0x19c [ 1627.783520][ T5907] X.509: Couldn't decode AuthKeyIdentifier [ 1628.819212][ T5912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 1630.085206][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.100972][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.066612][ T5922] netlink: 256 bytes leftover after parsing attributes in process `syz.1.814'. [ 1631.227171][ T29] audit: type=1400 audit(1630.840:775): avc: denied { map } for pid=5921 comm="syz.0.815" path="socket:[11095]" dev="sockfs" ino=11095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1631.244235][ T29] audit: type=1400 audit(1630.840:776): avc: denied { read write } for pid=5921 comm="syz.0.815" path="socket:[11095]" dev="sockfs" ino=11095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1631.878177][ T5927] tc_dump_action: action bad kind [ 1632.694032][ T5930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.814670][ T5930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.937935][ T5930] dlm: no locking on control device [ 1636.054493][ T53] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1636.258681][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 1636.304011][ T53] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1636.389387][ T53] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1636.390116][ T53] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.390709][ T53] usb 1-1: config 8 has no interface number 0 [ 1636.426011][ T53] usb 1-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 1636.427379][ T53] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1636.685325][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.686040][ T53] usb 1-1: Product: syz [ 1636.686537][ T53] usb 1-1: Manufacturer: syz [ 1636.686764][ T53] usb 1-1: SerialNumber: syz [ 1636.900447][ T5937] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1637.316450][ T53] usb 1-1: USB disconnect, device number 13 [ 1641.848606][ T5941] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1642.277094][ T5941] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1642.348127][ T5941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.352672][ T5941] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1642.359789][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.392373][ T5957] binder: 5956:5957 ioctl c0306201 0 returned -14 [ 1646.433872][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.458536][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.238061][ T29] audit: type=1400 audit(1647.850:777): avc: denied { append } for pid=5960 comm="syz.1.830" name="dlm-control" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1656.789094][ T5939] usb 1-1: USB disconnect, device number 14 [ 1663.123633][ T5972] zram0: detected capacity change from 0 to 65536 [ 1664.327531][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 1664.819497][ T29] audit: type=1400 audit(1664.410:778): avc: denied { read write } for pid=5971 comm="syz.0.833" name="mtd1" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1664.820141][ T29] audit: type=1400 audit(1664.420:779): avc: denied { open } for pid=5971 comm="syz.0.833" path="/dev/mtd1" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1665.506401][ T29] audit: type=1400 audit(1665.120:780): avc: denied { ioctl } for pid=5971 comm="syz.0.833" path="/dev/mtd1" dev="devtmpfs" ino=686 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1665.669326][ T5972] ftl_cs: FTL header not found. [ 1666.713233][ T5972] block2mtd: mtd2: [/dev/zram0] erase_size = 64KiB [65536] [ 1671.546229][ T6005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.845'. [ 1676.327907][ T29] audit: type=1400 audit(1675.940:781): avc: denied { accept } for pid=6016 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1676.363620][ T6018] capability: warning: `syz.0.850' uses deprecated v2 capabilities in a way that may be insecure [ 1686.124123][ T5939] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1686.403611][ T5939] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 1686.469358][ T5939] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1686.470106][ T5939] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1686.470237][ T5939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1686.470502][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.530182][ T5939] usb 1-1: config 0 descriptor?? [ 1687.204445][ T5939] hid-generic 0003:28BD:0074.0008: collection stack underflow [ 1687.205686][ T5939] hid-generic 0003:28BD:0074.0008: item 0 4 0 12 parsing failed [ 1687.214993][ T5939] hid-generic 0003:28BD:0074.0008: probe with driver hid-generic failed with error -22 [ 1687.436630][ T5941] usb 1-1: USB disconnect, device number 15 [ 1689.204782][ T29] audit: type=1400 audit(1688.800:782): avc: denied { getopt } for pid=6060 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1690.187188][ T6068] ======================================================= [ 1690.187188][ T6068] WARNING: The mand mount option has been deprecated and [ 1690.187188][ T6068] and is ignored by this kernel. Remove the mand [ 1690.187188][ T6068] option from the mount to silence this warning. [ 1690.187188][ T6068] ======================================================= [ 1713.848426][ T6103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.882'. [ 1716.782749][ T29] audit: type=1400 audit(1716.390:783): avc: denied { write } for pid=6107 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1716.827551][ T29] audit: type=1400 audit(1716.430:784): avc: denied { read } for pid=6107 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1726.459077][ T29] audit: type=1400 audit(1726.060:785): avc: denied { read } for pid=6128 comm="syz.0.895" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1726.470041][ T29] audit: type=1400 audit(1726.080:786): avc: denied { open } for pid=6128 comm="syz.0.895" path="/dev/rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1726.587729][ T29] audit: type=1400 audit(1726.200:787): avc: denied { ioctl } for pid=6128 comm="syz.0.895" path="/dev/rtc0" dev="devtmpfs" ino=710 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1728.189139][ T6135] loop8: detected capacity change from 0 to 16384 [ 1729.078691][ T6135] I/O error, dev loop8, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1729.213637][ T6135] I/O error, dev loop8, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1729.288943][ T6135] I/O error, dev loop8, sector 1280 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.314749][ T6135] Buffer I/O error on dev loop8, logical block 160, async page read [ 1729.348557][ T6135] I/O error, dev loop8, sector 1288 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.404471][ T6135] Buffer I/O error on dev loop8, logical block 161, async page read [ 1729.406163][ T6135] I/O error, dev loop8, sector 1296 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.406485][ T6135] Buffer I/O error on dev loop8, logical block 162, async page read [ 1729.407061][ T6135] I/O error, dev loop8, sector 1304 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.407385][ T6135] Buffer I/O error on dev loop8, logical block 163, async page read [ 1729.407894][ T6135] I/O error, dev loop8, sector 1312 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.408175][ T6135] Buffer I/O error on dev loop8, logical block 164, async page read [ 1729.408731][ T6135] I/O error, dev loop8, sector 1320 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.409044][ T6135] Buffer I/O error on dev loop8, logical block 165, async page read [ 1729.409611][ T6135] I/O error, dev loop8, sector 1328 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.409862][ T6135] Buffer I/O error on dev loop8, logical block 166, async page read [ 1729.410384][ T6135] I/O error, dev loop8, sector 1336 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1729.410693][ T6135] Buffer I/O error on dev loop8, logical block 167, async page read [ 1729.489126][ T6135] Buffer I/O error on dev loop8, logical block 168, async page read [ 1729.512784][ T6135] Buffer I/O error on dev loop8, logical block 169, async page read [ 1732.252947][ T6141] input: syz0 as /devices/virtual/input/input4 [ 1737.100630][ T29] audit: type=1400 audit(1736.710:788): avc: denied { name_bind } for pid=6142 comm="syz.1.900" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1744.542591][ T29] audit: type=1400 audit(1744.150:789): avc: denied { map } for pid=6155 comm="syz.1.905" path="pipe:[2520]" dev="pipefs" ino=2520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1745.629196][ T29] audit: type=1400 audit(1745.230:790): avc: denied { create } for pid=6162 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1745.663343][ T29] audit: type=1400 audit(1745.270:791): avc: denied { connect } for pid=6162 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1745.726501][ T29] audit: type=1400 audit(1745.330:792): avc: denied { write } for pid=6162 comm="syz.1.909" path="socket:[12496]" dev="sockfs" ino=12496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1752.144524][ T4023] netdevsim netdevsim12 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.459049][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'. [ 1755.487211][ T6186] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1773.805936][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 1776.523838][ T6231] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1776.977098][ T6231] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1777.089708][ T6231] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1777.178461][ T6231] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1777.278144][ T6231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1777.372409][ T6231] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1784.875062][ T3303] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1785.480796][ T3303] usb 1-1: Using ep0 maxpacket: 8 [ 1785.565951][ T3303] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1785.619881][ T3303] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.770234][ T3303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.776656][ T3303] usb 1-1: Product: syz [ 1785.780509][ T3303] usb 1-1: Manufacturer: syz [ 1785.784589][ T3303] usb 1-1: SerialNumber: syz [ 1802.112367][ T6256] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 1803.083405][ T6256] virtio_blk virtio3: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1803.587955][ T3303] usb 1-1: USB disconnect, device number 16 [ 1813.683542][ T29] audit: type=1400 audit(1813.280:793): avc: denied { mount } for pid=6271 comm="syz.0.950" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1815.262934][ T4930] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1815.453094][ T4930] usb 1-1: Using ep0 maxpacket: 16 [ 1815.466522][ T4930] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1815.499995][ T4930] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1815.500393][ T4930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1815.543469][ T4930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.544133][ T4930] usb 1-1: Product: syz [ 1815.544624][ T4930] usb 1-1: Manufacturer: syz [ 1815.544834][ T4930] usb 1-1: SerialNumber: syz [ 1815.598780][ T4930] usb 1-1: config 0 descriptor?? [ 1823.382893][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.398047][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.994048][ T5941] usb 1-1: USB disconnect, device number 17 [ 1827.847691][ T29] audit: type=1400 audit(1827.460:794): avc: denied { mount } for pid=6323 comm="syz.0.971" name="/" dev="hugetlbfs" ino=12790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1829.198999][ T6331] ip_tables: iptables: counters copy to user failed while replacing table [ 1832.576663][ T6347] SELinux: DCCP has been removed, pid=6347 comm=syz.0.980 [ 1835.502838][ T5941] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1835.728197][ T5941] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1835.754724][ T5941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.756746][ T5941] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1835.758010][ T5941] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1835.791012][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1835.793181][ T5941] usb 1-1: Product: syz [ 1835.794128][ T5941] usb 1-1: Manufacturer: syz [ 1835.848502][ T6361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1835.880601][ T5941] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 1836.153420][ T5941] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1836.255765][ T5941] usb 1-1: USB disconnect, device number 18 [ 1836.593958][ T5941] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1836.614957][ T5941] garmin_gps 1-1:1.0: device disconnected [ 1846.503749][ T29] audit: type=1400 audit(1846.110:795): avc: denied { write } for pid=6393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1848.383626][ T29] audit: type=1400 audit(1848.000:796): avc: denied { write } for pid=6408 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1852.054520][ T6421] zram: Cannot change disksize for initialized device [ 1853.578557][ T6426] block2mtd: error: cannot open device /dev/zram0 [ 1855.815211][ T4930] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1856.133832][ T4930] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1856.183348][ T4930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.183926][ T4930] usb 1-1: Product: syz [ 1856.190676][ T4930] usb 1-1: Manufacturer: syz [ 1856.196419][ T4930] usb 1-1: SerialNumber: syz [ 1856.297870][ T4930] usb 1-1: config 0 descriptor?? [ 1864.695594][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.713540][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.698457][ T6232] usb 1-1: USB disconnect, device number 19 [ 1873.540230][ T6484] FAULT_INJECTION: forcing a failure. [ 1873.540230][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.542624][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.1.1030 Tainted: G W L syzkaller #0 PREEMPT [ 1873.542835][ T6484] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1873.542893][ T6484] Hardware name: linux,dummy-virt (DT) [ 1873.542977][ T6484] Call trace: [ 1873.543036][ T6484] show_stack+0x18/0x24 (C) [ 1873.543323][ T6484] dump_stack_lvl+0x7c/0xb0 [ 1873.543496][ T6484] dump_stack+0x1c/0x28 [ 1873.543593][ T6484] should_fail_ex+0x6b4/0x6c4 [ 1873.543707][ T6484] should_failslab+0xbc/0x120 [ 1873.543861][ T6484] __kmalloc_cache_noprof+0x3ec/0x628 [ 1873.543986][ T6484] bpf_prog_alloc_no_stats+0xfc/0x540 [ 1873.544106][ T6484] bpf_prog_alloc+0x24/0x18c [ 1873.544256][ T6484] __get_filter+0xa0/0x21c [ 1873.544444][ T6484] sk_attach_filter+0x18/0xf8 [ 1873.544524][ T6484] sk_setsockopt+0x1054/0x1fa0 [ 1873.544586][ T6484] sock_setsockopt+0x34/0x64 [ 1873.544646][ T6484] do_sock_setsockopt+0x2c8/0x35c [ 1873.544767][ T6484] __sys_setsockopt+0xc8/0x160 [ 1873.545123][ T6484] __arm64_sys_setsockopt+0xa8/0x104 [ 1873.545318][ T6484] invoke_syscall+0x74/0x240 [ 1873.545588][ T6484] el0_svc_common.constprop.0+0xac/0x230 [ 1873.545717][ T6484] do_el0_svc+0x40/0x58 [ 1873.545835][ T6484] el0_svc+0x58/0x2a4 [ 1873.545989][ T6484] el0t_64_sync_handler+0xa0/0xe4 [ 1873.546419][ T6484] el0t_64_sync+0x198/0x19c [ 1876.190032][ T6492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1033'. [ 1877.315347][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 1877.318061][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 1884.835794][ T29] audit: type=1400 audit(1884.180:797): avc: denied { create } for pid=6505 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1884.839248][ T29] audit: type=1400 audit(1884.280:798): avc: denied { sys_admin } for pid=6505 comm="syz.1.1040" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1888.925885][ T29] audit: type=1400 audit(1888.540:799): avc: denied { append } for pid=6518 comm="syz.0.1043" name="loop6" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1892.863697][ T29] audit: type=1400 audit(1892.470:800): avc: denied { block_suspend } for pid=6523 comm="syz.0.1045" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1894.700109][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 1895.208870][ T6536] FAULT_INJECTION: forcing a failure. [ 1895.208870][ T6536] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1895.209431][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.0.1050 Tainted: G W L syzkaller #0 PREEMPT [ 1895.209554][ T6536] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1895.209583][ T6536] Hardware name: linux,dummy-virt (DT) [ 1895.209617][ T6536] Call trace: [ 1895.209645][ T6536] show_stack+0x18/0x24 (C) [ 1895.209823][ T6536] dump_stack_lvl+0x7c/0xb0 [ 1895.209948][ T6536] dump_stack+0x1c/0x28 [ 1895.210053][ T6536] should_fail_ex+0x6b4/0x6c4 [ 1895.210118][ T6536] should_fail+0x14/0x34 [ 1895.210173][ T6536] get_futex_key+0x198/0xf84 [ 1895.210227][ T6536] futex_wake+0xc0/0x49c [ 1895.210279][ T6536] do_futex+0x258/0x280 [ 1895.210329][ T6536] __arm64_sys_futex+0x1e8/0x310 [ 1895.210419][ T6536] invoke_syscall+0x74/0x240 [ 1895.210530][ T6536] el0_svc_common.constprop.0+0xac/0x230 [ 1895.211359][ T6536] do_el0_svc+0x40/0x58 [ 1895.211539][ T6536] el0_svc+0x58/0x2a4 [ 1895.211804][ T6536] el0t_64_sync_handler+0xa0/0xe4 [ 1895.211971][ T6536] el0t_64_sync+0x198/0x19c [ 1896.618267][ T5941] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1896.905139][ T5941] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1897.053185][ T5941] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 1897.053914][ T5941] usb 1-1: config 2 has no interface number 0 [ 1897.054676][ T5941] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1897.054820][ T5941] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1897.054970][ T5941] usb 1-1: config 2 interface 79 has no altsetting 0 [ 1897.207076][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.207751][ T5941] usb 1-1: Product: syz [ 1897.208219][ T5941] usb 1-1: Manufacturer: syz [ 1897.208449][ T5941] usb 1-1: SerialNumber: syz [ 1897.288912][ T6541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1897.327029][ T6541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1897.672279][ T5941] esd_usb 1-1:2.79: sending version message failed [ 1897.673038][ T5941] esd_usb 1-1:2.79: probe with driver esd_usb failed with error -71 [ 1897.780659][ T5941] usb 1-1: USB disconnect, device number 20 [ 1901.217773][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1060'. [ 1903.705683][ T29] audit: type=1400 audit(1903.320:801): avc: denied { bind } for pid=6573 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1903.718821][ T29] audit: type=1400 audit(1903.320:802): avc: denied { listen } for pid=6573 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1903.763887][ T29] audit: type=1400 audit(1903.370:803): avc: denied { shutdown } for pid=6573 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1904.849323][ T6579] FAULT_INJECTION: forcing a failure. [ 1904.849323][ T6579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1904.859127][ T6579] CPU: 1 UID: 0 PID: 6579 Comm: syz.0.1065 Tainted: G W L syzkaller #0 PREEMPT [ 1904.859265][ T6579] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1904.859295][ T6579] Hardware name: linux,dummy-virt (DT) [ 1904.859328][ T6579] Call trace: [ 1904.859383][ T6579] show_stack+0x18/0x24 (C) [ 1904.859504][ T6579] dump_stack_lvl+0x7c/0xb0 [ 1904.859566][ T6579] dump_stack+0x1c/0x28 [ 1904.859620][ T6579] should_fail_ex+0x6b4/0x6c4 [ 1904.859705][ T6579] should_fail+0x14/0x34 [ 1904.859776][ T6579] get_futex_key+0x198/0xf84 [ 1904.859833][ T6579] futex_wake+0xc0/0x49c [ 1904.859903][ T6579] do_futex+0x258/0x280 [ 1904.860004][ T6579] __arm64_sys_futex+0x1e8/0x310 [ 1904.860062][ T6579] invoke_syscall+0x74/0x240 [ 1904.860121][ T6579] el0_svc_common.constprop.0+0xac/0x230 [ 1904.860179][ T6579] do_el0_svc+0x40/0x58 [ 1904.860271][ T6579] el0_svc+0x58/0x2a4 [ 1904.860342][ T6579] el0t_64_sync_handler+0xa0/0xe4 [ 1904.860432][ T6579] el0t_64_sync+0x198/0x19c [ 1911.616359][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1070'. [ 1917.682460][ T29] audit: type=1400 audit(1917.290:804): avc: denied { write } for pid=6605 comm="syz.1.1075" name="renderD128" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1923.555493][ T6628] binder: 6627:6628 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1924.904109][ T5941] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1925.197452][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 1925.214100][ T5941] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1925.314060][ T5941] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1925.314844][ T5941] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1925.315392][ T5941] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1925.315653][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.508035][ T5941] usb 1-1: config 0 descriptor?? [ 1925.644809][ T6634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1926.249596][ T5941] hid (null): invalid report_size 812540268 [ 1926.350962][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.352980][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.353261][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.353527][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.353774][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.354015][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.354265][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.354517][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.354781][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.355038][ T5941] hid-generic 0003:0419:0001.0009: unknown main item tag 0x0 [ 1926.639589][ T5941] hid-generic 0003:0419:0001.0009: invalid report_size 812540268 [ 1926.640541][ T5941] hid-generic 0003:0419:0001.0009: item 0 4 1 7 parsing failed [ 1926.677537][ T5941] hid-generic 0003:0419:0001.0009: probe with driver hid-generic failed with error -22 [ 1926.918928][ T5941] usb 1-1: USB disconnect, device number 21 [ 1930.540607][ T6652] gadgetfs: bound to dummy_udc driver [ 1930.903117][ T5941] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1930.905546][ C0] gadgetfs: connected [ 1930.907936][ T5941] gadgetfs: disconnected [ 1931.118336][ C0] gadgetfs: connected [ 1931.146537][ T5941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1931.157971][ T5941] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1931.183590][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.400691][ C0] gadgetfs: configuration #1 [ 1931.479120][ T29] audit: type=1326 audit(1931.090:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6651 comm="syz.1.1093" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f782e8 code=0x0 [ 1933.328764][ T6651] gadgetfs: suspended from state 3 [ 1933.765430][ T6651] gadgetfs: disconnected [ 1933.801015][ T6655] input: syz0 as /devices/virtual/input/input5 [ 1934.765296][ T5941] usb 1-1: USB disconnect, device number 22 [ 1958.770833][ T29] audit: type=1400 audit(1958.380:806): avc: denied { cmd } for pid=6724 comm="iou-wrk-6725" path="socket:[14191]" dev="sockfs" ino=14191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1959.918536][ T29] audit: type=1400 audit(1959.530:807): avc: denied { bind } for pid=6724 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1965.849564][ T6757] FAULT_INJECTION: forcing a failure. [ 1965.849564][ T6757] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.850478][ T6757] CPU: 1 UID: 0 PID: 6757 Comm: syz.0.1126 Tainted: G W L syzkaller #0 PREEMPT [ 1965.850759][ T6757] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1965.850820][ T6757] Hardware name: linux,dummy-virt (DT) [ 1965.850886][ T6757] Call trace: [ 1965.852039][ T6757] show_stack+0x18/0x24 (C) [ 1965.852244][ T6757] dump_stack_lvl+0x7c/0xb0 [ 1965.852359][ T6757] dump_stack+0x1c/0x28 [ 1965.852473][ T6757] should_fail_ex+0x6b4/0x6c4 [ 1965.852601][ T6757] should_failslab+0xbc/0x120 [ 1965.852720][ T6757] __kmalloc_node_noprof+0x448/0x750 [ 1965.852833][ T6757] get_callchain_buffers+0x22c/0x398 [ 1965.852964][ T6757] stack_map_alloc+0x21c/0x47c [ 1965.853078][ T6757] map_create+0x450/0x1ccc [ 1965.853191][ T6757] __sys_bpf+0x8b8/0x2c70 [ 1965.853301][ T6757] __arm64_sys_bpf+0xb0/0x10c [ 1965.853436][ T6757] invoke_syscall+0x74/0x240 [ 1965.853554][ T6757] el0_svc_common.constprop.0+0xac/0x230 [ 1965.853660][ T6757] do_el0_svc+0x40/0x58 [ 1965.853771][ T6757] el0_svc+0x58/0x2a4 [ 1965.853884][ T6757] el0t_64_sync_handler+0xa0/0xe4 [ 1965.853998][ T6757] el0t_64_sync+0x198/0x19c [ 1967.719584][ T6764] FAULT_INJECTION: forcing a failure. [ 1967.719584][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.720334][ T6764] CPU: 1 UID: 0 PID: 6764 Comm: syz.0.1129 Tainted: G W L syzkaller #0 PREEMPT [ 1967.720493][ T6764] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1967.720548][ T6764] Hardware name: linux,dummy-virt (DT) [ 1967.720608][ T6764] Call trace: [ 1967.720663][ T6764] show_stack+0x18/0x24 (C) [ 1967.720833][ T6764] dump_stack_lvl+0x7c/0xb0 [ 1967.720950][ T6764] dump_stack+0x1c/0x28 [ 1967.721113][ T6764] should_fail_ex+0x6b4/0x6c4 [ 1967.721247][ T6764] should_failslab+0xbc/0x120 [ 1967.721383][ T6764] __kmalloc_cache_noprof+0x3ec/0x628 [ 1967.721519][ T6764] io_uring_setup+0x1a0/0x173c [ 1967.721638][ T6764] __arm64_sys_io_uring_setup+0x94/0x1c0 [ 1967.721752][ T6764] invoke_syscall+0x74/0x240 [ 1967.721863][ T6764] el0_svc_common.constprop.0+0xac/0x230 [ 1967.722012][ T6764] do_el0_svc+0x40/0x58 [ 1967.722125][ T6764] el0_svc+0x58/0x2a4 [ 1967.722245][ T6764] el0t_64_sync_handler+0xa0/0xe4 [ 1967.722352][ T6764] el0t_64_sync+0x198/0x19c [ 1970.345188][ T29] audit: type=1400 audit(1969.960:808): avc: denied { create } for pid=6775 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1970.366263][ T29] audit: type=1400 audit(1969.980:809): avc: denied { write } for pid=6775 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1971.467807][ T29] audit: type=1400 audit(1971.080:810): avc: denied { execute } for pid=6781 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1971.488760][ T29] audit: type=1400 audit(1971.090:811): avc: denied { execute_no_trans } for pid=6781 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1971.995927][ T6783] binder: 6782:6783 BC_INCREFS_DONE node 23 has no pending increfs request [ 1973.599596][ T4023] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.778235][ T4023] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.765319][ T4023] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.180116][ T4023] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.902527][ T4023] netdevsim netdevsim12 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.026630][ T4023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1984.098577][ T4023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1984.174686][ T4023] bond0 (unregistering): Released all slaves [ 1984.536820][ T4023] bond1 (unregistering): (slave lo): Releasing backup interface [ 1984.628801][ T4023] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1984.738552][ T4023] bond1 (unregistering): Released all slaves [ 1985.160267][ T4023] bond2 (unregistering): Released all slaves [ 1985.529193][ T4023] bond3 (unregistering): Released all slaves [ 1986.398084][ T4023] hsr_slave_0: left promiscuous mode [ 1986.424054][ T4023] hsr_slave_1: left promiscuous mode [ 1986.679636][ T4023] veth1_macvtap: left promiscuous mode [ 1986.696552][ T4023] veth0_macvtap: left promiscuous mode [ 1986.727539][ T4023] veth1_vlan: left promiscuous mode [ 1986.736731][ T4023] veth0_vlan: left promiscuous mode [ 1987.972661][ T29] audit: type=1400 audit(1987.580:812): avc: denied { write } for pid=6809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1990.264932][ T29] audit: type=1400 audit(1989.850:813): avc: denied { write } for pid=6812 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1994.014136][ T6232] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1994.242876][ T6232] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1994.413581][ T6232] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1994.414179][ T6232] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1994.414613][ T6232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1994.414866][ T6232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1994.415087][ T6232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1994.550555][ T6232] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1994.556432][ T6232] usb 1-1: Product: syz [ 1994.557263][ T6232] usb 1-1: Manufacturer: syz [ 1994.866408][ T6232] cdc_wdm 1-1:1.0: skipping garbage [ 1994.867097][ T6232] cdc_wdm 1-1:1.0: skipping garbage [ 1995.037275][ T6232] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1995.384343][ T6232] usb 1-1: USB disconnect, device number 23 [ 1997.204837][ T29] audit: type=1400 audit(1996.810:814): avc: denied { setopt } for pid=6830 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1999.382498][ T29] audit: type=1400 audit(1998.990:815): avc: denied { mmap_zero } for pid=6835 comm="syz.0.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 2000.808660][ T3227] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2009.736018][ T6854] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2009.797276][ T6854] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 2010.452043][ T29] audit: type=1400 audit(2010.060:816): avc: denied { write } for pid=6852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2012.532257][ T29] audit: type=1400 audit(2012.140:817): avc: denied { write } for pid=6865 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2012.788286][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1158'. [ 2014.280213][ T3227] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2016.772053][ T29] audit: type=1400 audit(2016.380:818): avc: denied { accept } for pid=6886 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2019.092821][ T29] audit: type=1400 audit(2018.700:819): avc: denied { write } for pid=6890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2019.274583][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2019.344543][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2020.174122][ T6900] FAULT_INJECTION: forcing a failure. [ 2020.174122][ T6900] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.175042][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: syz.0.1167 Tainted: G W L syzkaller #0 PREEMPT [ 2020.175202][ T6900] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2020.175264][ T6900] Hardware name: linux,dummy-virt (DT) [ 2020.175335][ T6900] Call trace: [ 2020.175395][ T6900] show_stack+0x18/0x24 (C) [ 2020.175639][ T6900] dump_stack_lvl+0x7c/0xb0 [ 2020.175805][ T6900] dump_stack+0x1c/0x28 [ 2020.175959][ T6900] should_fail_ex+0x6b4/0x6c4 [ 2020.176136][ T6900] should_failslab+0xbc/0x120 [ 2020.176281][ T6900] __kmalloc_noprof+0x4dc/0x74c [ 2020.176489][ T6900] lsm_blob_alloc+0x60/0x80 [ 2020.176644][ T6900] security_sk_alloc+0x30/0x218 [ 2020.176762][ T6900] sk_prot_alloc+0x190/0x204 [ 2020.176948][ T6900] sk_alloc+0x3c/0x8c8 [ 2020.177123][ T6900] __netlink_create+0x6c/0x264 [ 2020.177338][ T6900] netlink_create+0x1f8/0x610 [ 2020.177518][ T6900] __sock_create+0x23c/0x5fc [ 2020.177700][ T6900] __sys_socket+0x124/0x1f0 [ 2020.177822][ T6900] __arm64_sys_socket+0x70/0xa4 [ 2020.177980][ T6900] invoke_syscall+0x74/0x240 [ 2020.178212][ T6900] el0_svc_common.constprop.0+0xac/0x230 [ 2020.178360][ T6900] do_el0_svc+0x40/0x58 [ 2020.178510][ T6900] el0_svc+0x58/0x2a4 [ 2020.178673][ T6900] el0t_64_sync_handler+0xa0/0xe4 [ 2020.178839][ T6900] el0t_64_sync+0x198/0x19c [ 2021.148075][ T29] audit: type=1400 audit(2020.760:820): avc: denied { read } for pid=6903 comm="syz.0.1168" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2021.166439][ T29] audit: type=1400 audit(2020.780:821): avc: denied { open } for pid=6903 comm="syz.0.1168" path="net:[4026532628]" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2021.258957][ T6904] nbd: must specify at least one socket [ 2021.472307][ T29] audit: type=1400 audit(2021.070:822): avc: denied { write } for pid=6902 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2023.566815][ T3227] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2029.733647][ T29] audit: type=1400 audit(2029.340:823): avc: denied { write } for pid=6928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2030.869302][ T6786] hsr_slave_0: entered promiscuous mode [ 2030.946697][ T6786] hsr_slave_1: entered promiscuous mode [ 2030.979759][ T6786] debugfs: 'hsr0' already exists in 'hsr' [ 2030.980800][ T6786] Cannot create hsr debugfs directory [ 2032.693525][ T6232] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2032.735300][ T29] audit: type=1400 audit(2032.340:824): avc: denied { write } for pid=6937 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2033.163483][ T6232] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2033.319716][ T6232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.576568][ T6232] usb 1-1: config 0 descriptor?? [ 2034.164625][ T6232] usb 1-1: Cannot read MAC address [ 2034.169070][ T6232] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2034.316807][ T6232] usb 1-1: USB disconnect, device number 24 [ 2035.468613][ T29] audit: type=1400 audit(2035.080:825): avc: denied { watch watch_reads } for pid=6943 comm="syz.0.1178" path="/576" dev="tmpfs" ino=3016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2035.549804][ T3227] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2039.934378][ T6232] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2040.287970][ T6232] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 2040.407124][ T6232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.407797][ T6232] usb 1-1: Product: syz [ 2040.408351][ T6232] usb 1-1: Manufacturer: syz [ 2040.408464][ T6232] usb 1-1: SerialNumber: syz [ 2040.666543][ T6232] ums_eneub6250 1-1:1.0: USB Mass Storage device detected [ 2040.910165][ T6232] scsi host0: usb-storage 1-1:1.0 [ 2042.396767][ T3303] ------------[ cut here ]------------ [ 2042.397434][ T330 ** replaying previous printk message ** [ 2042.397434][ T3303] URB 0000000067c18717 submitted while active [ 2042.398523][ T3303] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0xe60/0x1200, CPU#1: kworker/1:3/3303 [ 2042.402081][ T3303] Modules linked in: [ 2042.402729][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: kworker/1:3 Tainted: G W L syzkaller #0 PREEMPT [ 2042.404854][ T3303] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2042.407501][ T3303] Hardware name: linux,dummy-virt (DT) [ 2042.408678][ T3303] Workqueue: events_freezable usb_stor_scan_dwork [ 2042.409746][ T3303] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2042.410581][ T3303] pc : usb_submit_urb+0xe60/0x1200 [ 2042.411206][ T3303] lr : usb_submit_urb+0xe60/0x1200 [ 2042.411923][ T3303] sp : ffff8000a13778b0 [ 2042.412337][ T3303] x29: ffff8000a13778b0 x28: ffff00001450c000 x27: ffffffffffffffff [ 2042.413135][ T3303] x26: ffff000017b88fe0 x25: 1fffe00002f711eb x24: 1fffe00002f711fc [ 2042.413733][ T3303] x23: ffff000017b88f58 x22: 00000000000003e8 x21: 1ffff0001426ef2c [ 2042.414303][ T3303] x20: ffff0000189d0200 x19: ffff0000189d0200 x18: 0000000000000000 [ 2042.414895][ T3303] x17: ffff7fffe483b000 x16: 00000000f1f1f1f1 x15: 0000000000000007 [ 2042.415499][ T3303] x14: 0000000000000004 x13: 0000000000000001 x12: ffff70001426eead [ 2042.416046][ T3303] x11: 1ffff0001426eeac x10: ffff70001426eeac x9 : dfff800000000000 [ 2042.416650][ T3303] x8 : ffff8000a1377567 x7 : 0000000000000001 x6 : ffff70001426eeac [ 2042.417328][ T3303] x5 : 1ffff00010ef901e x4 : 1fffe000025aeae1 x3 : dfff800000000000 [ 2042.417946][ T3303] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000012d75700 [ 2042.418522][ T3303] Call trace: [ 2042.418763][ T3303] usb_submit_urb+0xe60/0x1200 (P) [ 2042.419139][ T3303] usb_stor_msg_common+0x1bc/0x454 [ 2042.420175][ T3303] usb_stor_Bulk_max_lun+0x354/0x530 [ 2042.420572][ T3303] usb_stor_scan_dwork+0x1a0/0x250 [ 2042.420927][ T3303] process_one_work+0x830/0x1c00 [ 2042.421467][ T3303] worker_thread+0x42c/0xc90 [ 2042.421804][ T3303] kthread+0x2ec/0x384 [ 2042.422238][ T3303] ret_from_fork+0x10/0x20 [ 2042.422601][ T3303] irq event stamp: 192676 [ 2042.422867][ T3303] hardirqs last enabled at (192675): [] __arm64_exit_to_kernel_mode+0x38/0x98 [ 2042.423397][ T3303] hardirqs last disabled at (192676): [] el1_brk64+0x20/0x54 [ 2042.423856][ T3303] softirqs last enabled at (192666): [] handle_softirqs+0xa98/0x1048 [ 2042.424362][ T3303] softirqs last disabled at (192657): [] __do_softirq+0x14/0x20 [ 2042.424847][ T3303] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2042.862074][ C1] ------------[ cut here ]------------ [ 2042.862282][ C1] DEBUG_LOCKS_WARN_ON(1) [ 2042.862495][ C1] WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0xe28/0x1a5c, CPU#1: kworker/u8:10/6255 [ 2042.863482][ C1] Modules linked in: [ 2042.863861][ C1] CPU: 1 UID: 0 PID: 6255 Comm: kworker/u8:10 Tainted: G W L syzkaller #0 PREEMPT [ 2042.864317][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2042.864565][ C1] Hardware name: linux,dummy-virt (DT) [ 2042.864851][ C1] Workqueue: async async_run_entry_fn [ 2042.865230][ C1] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2042.865671][ C1] pc : __lock_acquire+0xe28/0x1a5c [ 2042.865996][ C1] lr : __lock_acquire+0xe28/0x1a5c [ 2042.866301][ C1] sp : ffff80008dba77f0 [ 2042.866547][ C1] x29: ffff80008dba7870 x28: 0000000000000003 x27: 0000000000000000 [ 2042.867024][ C1] x26: ffff8000a13779a0 x25: ffff8000877ca000 x24: ffff800087763ed4 [ 2042.868411][ C1] x23: ffff000012d99d00 x22: ffff000012d9a8c0 x21: ffff800089e66080 [ 2042.869716][ C1] x20: ffff80008934fb60 x19: 00000000000c2000 x18: ffff0000189d0200 [ 2042.870952][ C1] x17: ffff7fffe483b000 x16: 00000000f1f1f1f1 x15: 00000000f3f3f3f3 [ 2042.872748][ C1] x14: 0000000000000000 x13: 284e4f5f4e524157 x12: ffff60000d7f3e6b [ 2042.874090][ C1] x11: 1fffe0000d7f3e6a x10: ffff60000d7f3e6a x9 : dfff800000000000 [ 2042.874678][ C1] x8 : ffff00006bf9f353 x7 : 0000000000000001 x6 : ffff60000d7f3e6a [ 2042.875128][ C1] x5 : ffff00006bf9f350 x4 : 1fffe000025b33a1 x3 : dfff800000000000 [ 2042.875578][ C1] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000012d99d00 [ 2042.876069][ C1] Call trace: [ 2042.876282][ C1] __lock_acquire+0xe28/0x1a5c (P) [ 2042.876627][ C1] lock_acquire+0x3d0/0x44c [ 2042.876925][ C1] _raw_spin_lock_irqsave+0x58/0x80 [ 2042.877194][ C1] complete+0x24/0x1e8 [ 2042.877451][ C1] usb_stor_blocking_completion+0x34/0x4c [ 2042.877728][ C1] __usb_hcd_giveback_urb+0x1f8/0x3d0 [ 2042.877995][ C1] usb_hcd_giveback_urb+0x2bc/0x36c [ 2042.878269][ C1] dummy_timer+0xba0/0x3614 [ 2042.878540][ C1] __hrtimer_run_queues+0x2a0/0xaa0 [ 2042.878794][ C1] hrtimer_run_softirq+0x168/0x2ac [ 2042.879043][ C1] handle_softirqs+0x2d8/0x1048 [ 2042.879281][ C1] __do_softirq+0x14/0x20 [ 2042.879503][ C1] ____do_softirq+0x10/0x20 [ 2042.879732][ C1] call_on_irq_stack+0x30/0x48 [ 2042.879969][ C1] do_softirq_own_stack+0x1c/0x40 [ 2042.880206][ C1] __irq_exit_rcu+0x470/0x598 [ 2042.880436][ C1] irq_exit_rcu+0x14/0x80 [ 2042.880652][ C1] el1_interrupt+0x40/0x60 [ 2042.880861][ C1] el1h_64_irq_handler+0x18/0x30 [ 2042.881095][ C1] el1h_64_irq+0x6c/0x70 [ 2042.881441][ C1] _raw_spin_unlock_irqrestore+0x40/0xb4 (P) [ 2042.881772][ C1] stack_depot_save_flags+0x3c4/0x9b8 [ 2042.882051][ C1] kasan_save_stack+0x50/0x70 [ 2042.882356][ C1] kasan_save_track+0x20/0x3c [ 2042.882608][ C1] kasan_save_alloc_info+0x40/0x5c [ 2042.882851][ C1] __kasan_kmalloc+0xb8/0xc0 [ 2042.883081][ C1] __kmalloc_cache_noprof+0x308/0x628 [ 2042.883351][ C1] blk_mq_init_allocated_queue+0xb0/0x102c [ 2042.883624][ C1] blk_mq_alloc_queue+0x178/0x224 [ 2042.883905][ C1] scsi_alloc_sdev+0x714/0xb78 [ 2042.884148][ C1] scsi_probe_and_add_lun+0x56c/0x940 [ 2042.884403][ C1] __scsi_scan_target+0x1ac/0x3c0 [ 2042.884675][ C1] scsi_scan_channel+0xdc/0x160 [ 2042.884943][ C1] scsi_scan_host_selected+0x1f8/0x2c0 [ 2042.885190][ C1] do_scsi_scan_host+0x144/0x1c0 [ 2042.885531][ C1] do_scan_async+0x38/0x36c [ 2042.885804][ C1] async_run_entry_fn+0x90/0x478 [ 2042.886713][ C1] process_one_work+0x830/0x1c00 [ 2042.887046][ C1] worker_thread+0x42c/0xc90 [ 2042.887367][ C1] kthread+0x2ec/0x384 [ 2042.887638][ C1] ret_from_fork+0x10/0x20 [ 2042.887946][ C1] irq event stamp: 350257 [ 2042.888782][ C1] hardirqs last enabled at (350256): [] _raw_spin_unlock_irqrestore+0x80/0xb4 [ 2042.889819][ C1] hardirqs last disabled at (350257): [] _raw_spin_lock_irqsave+0x7c/0x80 [ 2042.891224][ C1] softirqs last enabled at (350246): [] handle_softirqs+0xa98/0x1048 [ 2042.891857][ C1] softirqs last disabled at (350251): [] __do_softirq+0x14/0x20 [ 2042.893188][ C1] ---[ end trace 0000000000000000 ]--- [ 2042.895015][ C1] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000c4 [ 2042.895127][ C1] Mem abort info: [ 2042.895168][ C1] ESR = 0x0000000096000004 [ 2042.895737][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 2042.895861][ C1] SET = 0, FnV = 0 [ 2042.895935][ C1] EA = 0, S1PTW = 0 [ 2042.896010][ C1] FSC = 0x04: level 0 translation fault [ 2042.896094][ C1] Data abort info: [ 2042.896151][ C1] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 2042.896224][ C1] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 2042.896292][ C1] GCS = 0, Overlay = 0, DirtyBit = 0 [ 2042.896604][ C1] user pgtable: 4k pages, 48-bit VAs, pgdp=00000000592b2000 [ 2042.896729][ C1] [00000000000000c4] pgd=0000000000000000, p4d=0000000000000000 [ 2042.897662][ C1] Internal error: Oops: 0000000096000004 [#1] SMP [ 2042.900791][ C1] Modules linked in: [ 2042.901314][ C1] CPU: 1 UID: 0 PID: 6255 Comm: kworker/u8:10 Tainted: G W L syzkaller #0 PREEMPT [ 2042.901813][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2042.902234][ C1] Hardware name: linux,dummy-virt (DT) [ 2042.902518][ C1] Workqueue: async async_run_entry_fn [ 2042.902837][ C1] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2042.903179][ C1] pc : __lock_acquire+0x1f4/0x1a5c [ 2042.903430][ C1] lr : __lock_acquire+0xe28/0x1a5c [ 2042.903657][ C1] sp : ffff80008dba77f0 [ 2042.903845][ C1] x29: ffff80008dba7870 x28: 0000000000000003 x27: 0000000000000000 [ 2042.904262][ C1] x26: ffff8000a13779a0 x25: ffff8000877ca000 x24: ffff800087763ed4 [ 2042.904668][ C1] x23: ffff000012d99d00 x22: ffff000012d9a8c0 x21: ffff800089e66080 [ 2042.905063][ C1] x20: ffff80008934fb60 x19: 00000000000c2000 x18: ffff0000189d0200 [ 2042.905517][ C1] x17: ffff7fffe483b000 x16: 00000000f1f1f1f1 x15: 00000000f3f3f3f3 [ 2042.906035][ C1] x14: 0000000000000000 x13: 284e4f5f4e524157 x12: ffff60000d7f3e6b [ 2042.906553][ C1] x11: 1fffe0000d7f3e6a x10: 0000000000000078 x9 : 1eb851eb8519393a [ 2042.907084][ C1] x8 : ffff00006bf9f353 x7 : 0000000000000001 x6 : ffff60000d7f3e6a [ 2042.907607][ C1] x5 : ffff00006bf9f350 x4 : 0000000000000001 x3 : dfff800000000000 [ 2042.908132][ C1] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 00000000000c393a [ 2042.908664][ C1] Call trace: [ 2042.908885][ C1] __lock_acquire+0x1f4/0x1a5c (P) [ 2042.909232][ C1] lock_acquire+0x3d0/0x44c [ 2042.909548][ C1] _raw_spin_lock_irqsave+0x58/0x80 [ 2042.909814][ C1] complete+0x24/0x1e8 [ 2042.910044][ C1] usb_stor_blocking_completion+0x34/0x4c [ 2042.910317][ C1] __usb_hcd_giveback_urb+0x1f8/0x3d0 [ 2042.910575][ C1] usb_hcd_giveback_urb+0x2bc/0x36c [ 2042.910819][ C1] dummy_timer+0xba0/0x3614 [ 2042.911060][ C1] __hrtimer_run_queues+0x2a0/0xaa0 [ 2042.911409][ C1] hrtimer_run_softirq+0x168/0x2ac [ 2042.911660][ C1] handle_softirqs+0x2d8/0x1048 [ 2042.911931][ C1] __do_softirq+0x14/0x20 [ 2042.912164][ C1] ____do_softirq+0x10/0x20 [ 2042.912436][ C1] call_on_irq_stack+0x30/0x48 [ 2042.912725][ C1] do_softirq_own_stack+0x1c/0x40 [ 2042.913075][ C1] __irq_exit_rcu+0x470/0x598 [ 2042.913446][ C1] irq_exit_rcu+0x14/0x80 [ 2042.913829][ C1] el1_interrupt+0x40/0x60 [ 2042.914195][ C1] el1h_64_irq_handler+0x18/0x30 [ 2042.914500][ C1] el1h_64_irq+0x6c/0x70 [ 2042.914797][ C1] _raw_spin_unlock_irqrestore+0x40/0xb4 (P) [ 2042.915122][ C1] stack_depot_save_flags+0x3c4/0x9b8 [ 2042.915417][ C1] kasan_save_stack+0x50/0x70 [ 2042.915704][ C1] kasan_save_track+0x20/0x3c [ 2042.915994][ C1] kasan_save_alloc_info+0x40/0x5c [ 2042.916271][ C1] __kasan_kmalloc+0xb8/0xc0 [ 2042.916542][ C1] __kmalloc_cache_noprof+0x308/0x628 [ 2042.916804][ C1] blk_mq_init_allocated_queue+0xb0/0x102c [ 2042.917103][ C1] blk_mq_alloc_queue+0x178/0x224 [ 2042.917359][ C1] scsi_alloc_sdev+0x714/0xb78 [ 2042.917930][ C1] scsi_probe_and_add_lun+0x56c/0x940 [ 2042.918208][ C1] __scsi_scan_target+0x1ac/0x3c0 [ 2042.918462][ C1] scsi_scan_channel+0xdc/0x160 [ 2042.918724][ C1] scsi_scan_host_selected+0x1f8/0x2c0 [ 2042.919013][ C1] do_scsi_scan_host+0x144/0x1c0 [ 2042.919673][ C1] do_scan_async+0x38/0x36c [ 2042.920154][ C1] async_run_entry_fn+0x90/0x478 [ 2042.920579][ C1] process_one_work+0x830/0x1c00 [ 2042.921189][ C1] worker_thread+0x42c/0xc90 [ 2042.921715][ C1] kthread+0x2ec/0x384 [ 2042.922059][ C1] ret_from_fork+0x10/0x20 [ 2042.922969][ C1] Code: 52801900 9ba07c21 8b0102a1 f94012c0 (39431025) [ 2042.925020][ C1] ---[ end trace 0000000000000000 ]--- [ 2042.927553][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 2042.929803][ C1] SMP: stopping secondary CPUs [ 2042.931977][ C1] Kernel Offset: disabled [ 2042.933030][ C1] CPU features: 0x0,40400002,00340020,00100000,0800821b [ 2042.933745][ C1] Memory Limit: none [ 2042.935059][ C1] Rebooting in 86400 seconds..