[ 64.456365][ T42] kauditd_printk_skb: 10 callbacks suppressed
[ 64.456378][ T42] audit: type=1400 audit(1787744866.815:210): avc: denied { transition } for pid=5972 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.465736][ T42] audit: type=1400 audit(1787744866.815:211): avc: denied { noatsecure } for pid=5972 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.472412][ T42] audit: type=1400 audit(1787744866.815:212): avc: denied { rlimitinh } for pid=5972 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.478624][ T42] audit: type=1400 audit(1787744866.815:213): avc: denied { siginh } for pid=5972 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.331526][ T42] audit: type=1400 audit(1787744869.685:214): avc: denied { write } for pid=5981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.380122][ T42] audit: type=1400 audit(1787744869.735:215): avc: denied { write } for pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.393703][ T42] audit: type=1400 audit(1787744870.745:216): avc: denied { write } for pid=5991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.437589][ T42] audit: type=1400 audit(1787744870.795:217): avc: denied { write } for pid=5995 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:16722' (ED25519) to the list of known hosts.
[ 68.530419][ T42] audit: type=1400 audit(1787744870.885:218): avc: denied { search } for pid=6000 comm="syz-executor119" name="/" dev="configfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 68.540009][ T42] audit: type=1400 audit(1787744870.885:219): avc: denied { search } for pid=6000 comm="syz-executor119" name="usb_gadget" dev="configfs" ino=4603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 68.573088][ T6000] ==================================================================
[ 68.575770][ T6000] BUG: KASAN: stack-out-of-bounds in append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.578584][ T6000] Write of size 1 at addr ffffc90003277880 by task syz-executor119/6000
[ 68.582492][ T6000]
[ 68.583246][ T6000] CPU: 2 UID: 0 PID: 6000 Comm: syz-executor119 Not tainted syzkaller #0 PREEMPT(full)
[ 68.583260][ T6000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 68.583267][ T6000] Call Trace:
[ 68.583271][ T6000]
[ 68.583275][ T6000] dump_stack_lvl+0x100/0x190
[ 68.583293][ T6000] print_report+0x13d/0x4b0
[ 68.583309][ T6000] ? _raw_spin_lock_irqsave+0x52/0x60
[ 68.583326][ T6000] ? append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.583338][ T6000] kasan_report+0xdf/0x1c0
[ 68.583354][ T6000] ? append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.583366][ T6000] append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.583378][ T6000] f_midi2_create_usb_configs+0x748/0xdf0
[ 68.583393][ T6000] f_midi2_bind+0x1d12/0x2770
[ 68.583407][ T6000] ? __pfx_f_midi2_bind+0x10/0x10
[ 68.583424][ T6000] ? usb_gstrings_attach+0xd4/0x920
[ 68.583441][ T6000] ? __pfx_f_midi2_bind+0x10/0x10
[ 68.583452][ T6000] usb_add_function+0x219/0x890
[ 68.583467][ T6000] configfs_composite_bind+0xd83/0x1960
[ 68.583483][ T6000] gadget_bind_driver+0x28c/0xbf0
[ 68.583493][ T6000] ? __pfx_dummy_udc_set_speed+0x10/0x10
[ 68.583508][ T6000] ? __pfx_gadget_bind_driver+0x10/0x10
[ 68.583518][ T6000] really_probe+0x241/0xa60
[ 68.583530][ T6000] __driver_probe_device+0x210/0x460
[ 68.583540][ T6000] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 68.583557][ T6000] driver_probe_device+0x4a/0x140
[ 68.583568][ T6000] __driver_attach+0x21f/0x5b0
[ 68.583578][ T6000] ? __pfx___driver_attach+0x10/0x10
[ 68.583588][ T6000] bus_for_each_dev+0x13e/0x1d0
[ 68.583603][ T6000] ? __pfx_bus_for_each_dev+0x10/0x10
[ 68.583617][ T6000] ? bus_add_driver+0x2b5/0x5b0
[ 68.583634][ T6000] bus_add_driver+0x305/0x5b0
[ 68.583650][ T6000] driver_register+0x1e2/0x360
[ 68.583662][ T6000] usb_gadget_register_driver_owner+0x132/0x210
[ 68.583759][ T6000] gadget_dev_desc_UDC_store+0x1b0/0x2e0
[ 68.583772][ T6000] configfs_write_iter+0x302/0x4e0
[ 68.583785][ T6000] vfs_write+0x6af/0x1050
[ 68.583798][ T6000] ? __pfx_configfs_write_iter+0x10/0x10
[ 68.583810][ T6000] ? __pfx_vfs_write+0x10/0x10
[ 68.583823][ T6000] ? __pfx_do_sys_openat2+0x10/0x10
[ 68.583835][ T6000] ksys_write+0x12a/0x250
[ 68.583847][ T6000] ? __pfx_ksys_write+0x10/0x10
[ 68.583862][ T6000] do_syscall_64+0x123/0x790
[ 68.583873][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.583884][ T6000] RIP: 0033:0x7fe46da0d9f7
[ 68.583893][ T6000] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 68.583903][ T6000] RSP: 002b:00007fff00e4dd80 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 68.583913][ T6000] RAX: ffffffffffffffda RBX: 0000555572ba4400 RCX: 00007fe46da0d9f7
[ 68.583920][ T6000] RDX: 000000000000000b RSI: 0000555572ba67e3 RDI: 0000000000000004
[ 68.583926][ T6000] RBP: 0000555572ba67e3 R08: 0000000000000000 R09: 0000000000000000
[ 68.583932][ T6000] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff00e4ddf0
[ 68.583938][ T6000] R13: 0000555572ba6770 R14: 00007fe46da70cc0 R15: 0000000000000002
[ 68.583947][ T6000]
[ 68.583951][ T6000]
[ 68.697980][ T6000] The buggy address belongs to stack of task syz-executor119/6000
[ 68.701313][ T6000] and is located at offset 440 in frame:
[ 68.703780][ T6000] f_midi2_bind+0x0/0x2770
[ 68.705704][ T6000]
[ 68.706757][ T6000] This frame has 6 objects:
[ 68.708580][ T6000] [32, 36) 'sw'
[ 68.708593][ T6000] [48, 56) 'card'
[ 68.710136][ T6000] [80, 88) 'ump'
[ 68.711336][ T6000] [112, 128) 'string_fn'
[ 68.712479][ T6000] [144, 160) 'strings'
[ 68.713830][ T6000] [176, 440) 'config'
[ 68.715120][ T6000]
[ 68.717151][ T6000] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003270000 allocated at kernel_clone+0x176/0x9d0
[ 68.721039][ T6000] The buggy address belongs to the physical page:
[ 68.723013][ T6000] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ff248b6b pfn:0x50a87
[ 68.725862][ T6000] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 68.728021][ T6000] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 68.730629][ T6000] raw: 00000007ff248b6b 0000000000000000 00000001ffffffff 0000000000000000
[ 68.733226][ T6000] page dumped because: kasan: bad access detected
[ 68.735186][ T6000] page_owner tracks the page as allocated
[ 68.736930][ T6000] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5768, tgid 5768 (syz-executor), ts 51046718723
[ 68.742265][ T6000] post_alloc_hook+0xfd/0x120
[ 68.743719][ T6000] get_page_from_freelist+0x110d/0x35b0
[ 68.745408][ T6000] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 68.747232][ T6000] alloc_pages_mpol+0x201/0x550
[ 68.748748][ T6000] alloc_pages_noprof+0x1a/0x160
[ 68.750290][ T6000] __vmalloc_node_range_noprof+0xdcc/0x1460
[ 68.752118][ T6000] __vmalloc_node_noprof+0xad/0xf0
[ 68.753700][ T6000] copy_process+0x803/0x8370
[ 68.755127][ T6000] kernel_clone+0x176/0x9d0
[ 68.756521][ T6000] __do_sys_clone+0xd9/0x120
[ 68.758029][ T6000] do_syscall_64+0x123/0x790
[ 68.759501][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.761402][ T6000] page last free pid 5748 tgid 5748 ts 50853501051 stack trace:
[ 68.763744][ T6000] free_pages_prepare+0x586/0xe00
[ 68.765299][ T6000] __free_contig_range_common+0x14f/0x250
[ 68.767059][ T6000] free_pages_bulk+0x12a/0x200
[ 68.768551][ T6000] vm_area_free_pages+0xad/0x2b0
[ 68.770104][ T6000] vfree+0x108/0x730
[ 68.771346][ T6000] kcov_close+0x34/0x60
[ 68.772639][ T6000] __fput+0x3ff/0xb50
[ 68.773890][ T6000] task_work_run+0x150/0x240
[ 68.775318][ T6000] do_exit+0x951/0x2ae0
[ 68.776608][ T6000] do_group_exit+0xd5/0x2a0
[ 68.778043][ T6000] get_signal+0x1ec7/0x21e0
[ 68.779461][ T6000] arch_do_signal_or_restart+0x91/0x7e0
[ 68.781184][ T6000] exit_to_user_mode_loop+0x139/0x700
[ 68.782850][ T6000] do_syscall_64+0x661/0x790
[ 68.784282][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.786124][ T6000]
[ 68.786876][ T6000] Memory state around the buggy address:
[ 68.788610][ T6000] ffffc90003277780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 68.791048][ T6000] ffffc90003277800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 68.793481][ T6000] >ffffc90003277880: f3 f3 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00
[ 68.795938][ T6000] ^
[ 68.797377][ T6000] ffffc90003277900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 68.799874][ T6000] ffffc90003277980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 68.802356][ T6000] ==================================================================
[ 68.808717][ T6000] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 68.810962][ T6000] CPU: 2 UID: 0 PID: 6000 Comm: syz-executor119 Not tainted syzkaller #0 PREEMPT(full)
[ 68.813903][ T6000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 68.816950][ T6000] Call Trace:
[ 68.818008][ T6000]
[ 68.818943][ T6000] dump_stack_lvl+0x100/0x190
[ 68.820408][ T6000] vpanic+0x553/0x970
[ 68.821705][ T6000] ? __pfx_vpanic+0x10/0x10
[ 68.823114][ T6000] ? mark_held_locks+0x40/0x70
[ 68.824593][ T6000] ? append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.826464][ T6000] panic+0xd1/0xe0
[ 68.827640][ T6000] ? __pfx_panic+0x10/0x10
[ 68.829030][ T6000] ? append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.830902][ T6000] ? preempt_schedule_common+0x3c/0xb0
[ 68.832591][ T6000] check_panic_on_warn.cold+0x19/0x34
[ 68.834245][ T6000] end_report.part.0+0x3a/0x90
[ 68.835723][ T6000] kasan_report.cold+0xe/0x18
[ 68.837181][ T6000] ? append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.839085][ T6000] append_midi1_out_jack.isra.0+0x38c/0x470
[ 68.840899][ T6000] f_midi2_create_usb_configs+0x748/0xdf0
[ 68.842713][ T6000] f_midi2_bind+0x1d12/0x2770
[ 68.844171][ T6000] ? __pfx_f_midi2_bind+0x10/0x10
[ 68.845738][ T6000] ? usb_gstrings_attach+0xd4/0x920
[ 68.847339][ T6000] ? __pfx_f_midi2_bind+0x10/0x10
[ 68.848912][ T6000] usb_add_function+0x219/0x890
[ 68.850413][ T6000] configfs_composite_bind+0xd83/0x1960
[ 68.852135][ T6000] gadget_bind_driver+0x28c/0xbf0
[ 68.853694][ T6000] ? __pfx_dummy_udc_set_speed+0x10/0x10
[ 68.855433][ T6000] ? __pfx_gadget_bind_driver+0x10/0x10
[ 68.857118][ T6000] really_probe+0x241/0xa60
[ 68.858558][ T6000] __driver_probe_device+0x210/0x460
[ 68.860174][ T6000] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 68.861998][ T6000] driver_probe_device+0x4a/0x140
[ 68.863548][ T6000] __driver_attach+0x21f/0x5b0
[ 68.865029][ T6000] ? __pfx___driver_attach+0x10/0x10
[ 68.866662][ T6000] bus_for_each_dev+0x13e/0x1d0
[ 68.868179][ T6000] ? __pfx_bus_for_each_dev+0x10/0x10
[ 68.869832][ T6000] ? bus_add_driver+0x2b5/0x5b0
[ 68.871352][ T6000] bus_add_driver+0x305/0x5b0
[ 68.872802][ T6000] driver_register+0x1e2/0x360
[ 68.874292][ T6000] usb_gadget_register_driver_owner+0x132/0x210
[ 68.876224][ T6000] gadget_dev_desc_UDC_store+0x1b0/0x2e0
[ 68.877958][ T6000] configfs_write_iter+0x302/0x4e0
[ 68.879566][ T6000] vfs_write+0x6af/0x1050
[ 68.880906][ T6000] ? __pfx_configfs_write_iter+0x10/0x10
[ 68.882691][ T6000] ? __pfx_vfs_write+0x10/0x10
[ 68.884182][ T6000] ? __pfx_do_sys_openat2+0x10/0x10
[ 68.885781][ T6000] ksys_write+0x12a/0x250
[ 68.887162][ T6000] ? __pfx_ksys_write+0x10/0x10
[ 68.888677][ T6000] do_syscall_64+0x123/0x790
[ 68.890141][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.892030][ T6000] RIP: 0033:0x7fe46da0d9f7
[ 68.893399][ T6000] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 68.899247][ T6000] RSP: 002b:00007fff00e4dd80 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 68.901842][ T6000] RAX: ffffffffffffffda RBX: 0000555572ba4400 RCX: 00007fe46da0d9f7
[ 68.904234][ T6000] RDX: 000000000000000b RSI: 0000555572ba67e3 RDI: 0000000000000004
[ 68.906644][ T6000] RBP: 0000555572ba67e3 R08: 0000000000000000 R09: 0000000000000000
[ 68.909057][ T6000] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff00e4ddf0
[ 68.911504][ T6000] R13: 0000555572ba6770 R14: 00007fe46da70cc0 R15: 0000000000000002
[ 68.913916][ T6000]
[ 68.915563][ T6000] Kernel Offset: disabled
[ 68.916911][ T6000] Rebooting in 86400 seconds..