last executing test programs: 3m8.4574912s ago: executing program 0 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001940)='27', 0x2) mkdir(&(0x7f0000000180)='./cgroup/../file0\x00', 0x0) 3m8.179985502s ago: executing program 0 (id=846): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x100000, 0x115) symlinkat(&(0x7f0000000b80)='./file2\x00', r4, &(0x7f0000000bc0)='./dev\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 3m7.43074512s ago: executing program 0 (id=847): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x1f, 0x14, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m7.16277409s ago: executing program 0 (id=849): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2m55.350146373s ago: executing program 0 (id=852): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x800, 0x0, 0x0) r2 = syz_clone(0xb21a0000, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xc082c, 0x0) 2m54.898769205s ago: executing program 0 (id=853): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x34d041, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) memfd_create(&(0x7f0000000900)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x95S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000086, 0x0) r5 = fspick(0xffffffffffffffff, &(0x7f0000000b80)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000bc0)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7, 0xb}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 2m9.39152399s ago: executing program 32 (id=853): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x34d041, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) memfd_create(&(0x7f0000000900)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x95S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000086, 0x0) r5 = fspick(0xffffffffffffffff, &(0x7f0000000b80)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000bc0)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7, 0xb}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 5.110273206s ago: executing program 2 (id=1104): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 4.290464632s ago: executing program 2 (id=1106): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x100, 0x9, 0x2, 0x9, 0xe, 0x5, 0x79, 0x0, 0x300000, 0x0, 0x2, 0x1, 0x2, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x4, 0x89, 0xca9f, 0x0, 0x20001e76, 0xffffffff, 0xf39e, 0x6, 0x11008, 0xa6b5, 0x0, 0xfffffff8]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 3.799916458s ago: executing program 2 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000004060101000000000000000001007507050001"], 0x1c}}, 0x60000000) 3.261325071s ago: executing program 2 (id=1110): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 2.594881759s ago: executing program 2 (id=1112): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x18000) close(r0) 2.594620039s ago: executing program 1 (id=1113): syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000380)='7', 0x1) write$char_usb(r0, &(0x7f00000003c0)='L', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='+p', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 860.78409ms ago: executing program 1 (id=1114): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000580)={'md', @num=0x0}, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000780)={0x0, 0x0}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) write$md_new_array(0xffffffffffffffff, 0x0, 0x0) openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000340)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'errors\x00'}}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000040)=@range={0x1585, 0x20, 0xba}, 0x29) 500.471592ms ago: executing program 1 (id=1115): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8161, 0x80, 0x3, 0x1ba}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x76fc, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r3, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) 269.841719ms ago: executing program 1 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 91.938729ms ago: executing program 1 (id=1117): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x3c, 0x9, 0xa, 0x3}) mq_timedsend(r0, &(0x7f00000003c0)="aa1cff91d03d73b6c7604f", 0xb, 0xd, 0x0) 181.24µs ago: executing program 1 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 0s ago: executing program 2 (id=1119): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001f40)={'8255\x00', [0x3f00, 0x5, 0xd09a, 0xffffffff, 0x5, 0xfdfffffe, 0x20000004, 0x4, 0x8001, 0x7fffbffa, 0x7, 0x2, 0x404, 0x4, 0x4, 0x4, 0x4, 0x3, 0x100830, 0x8, 0x6, 0x79, 0x80, 0x9, 0x20000000, 0x8001, 0x5, 0x8f, 0x7fff, 0x2, 0x6]}) kernel console output (not intermixed with test programs): interface descriptor's value: 3 [ 327.670374][ T42] usb 2-1: config 14 interface 57 has no altsetting 0 [ 327.670389][ T42] usb 2-1: config 14 interface 228 has no altsetting 0 [ 327.725212][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.725765][ T42] usb 2-1: Product: syz [ 327.726072][ T42] usb 2-1: Manufacturer: syz [ 327.726367][ T42] usb 2-1: SerialNumber: syz [ 328.172786][ T42] legousbtower 2-1:14.57: interrupt endpoints not found [ 328.584160][ T42] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 328.662358][ T42] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 328.931785][ T42] usb 2-1: USB disconnect, device number 7 [ 328.946641][ T42] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 329.924953][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 329.925062][ T28] audit: type=1400 audit(329.800:277): avc: denied { allowed } for pid=5879 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 332.391985][ T718] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 332.545593][ T718] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 332.566910][ T718] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 332.567062][ T718] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 332.567108][ T718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 332.605623][ T718] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 332.605741][ T718] usb 1-1: Product: syz [ 332.605772][ T718] usb 1-1: Manufacturer: syz [ 332.605802][ T718] usb 1-1: SerialNumber: syz [ 332.609651][ T718] usb 1-1: config 0 descriptor?? [ 332.624027][ T718] hub 1-1:0.0: bad descriptor, ignoring hub [ 332.624152][ T718] hub 1-1:0.0: probe with driver hub failed with error -5 [ 332.643769][ T718] usb 1-1: selecting invalid altsetting 0 [ 332.652468][ T3694] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 332.802694][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 332.812590][ T3694] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.823202][ T3694] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 332.872792][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.872914][ T3694] usb 2-1: Product: syz [ 332.872949][ T3694] usb 2-1: Manufacturer: syz [ 332.872981][ T3694] usb 2-1: SerialNumber: syz [ 332.878235][ T3694] usb 2-1: config 0 descriptor?? [ 332.900342][ T5896] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 332.903768][ T3694] hub 2-1:0.0: bad descriptor, ignoring hub [ 332.903896][ T3694] hub 2-1:0.0: probe with driver hub failed with error -5 [ 332.953158][ T42] usb 1-1: USB disconnect, device number 12 [ 333.252976][ T42] usb 2-1: USB disconnect, device number 8 [ 333.422581][ T3752] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 333.587101][ T3752] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 333.603998][ T3752] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 333.604145][ T3752] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 333.604230][ T3752] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.661983][ T3752] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 333.662097][ T3752] usb 1-1: Product: syz [ 333.662126][ T3752] usb 1-1: Manufacturer: syz [ 333.662152][ T3752] usb 1-1: SerialNumber: syz [ 333.666032][ T3752] usb 1-1: config 0 descriptor?? [ 333.684627][ T3752] hub 1-1:0.0: bad descriptor, ignoring hub [ 333.684753][ T3752] hub 1-1:0.0: probe with driver hub failed with error -5 [ 333.688000][ T3752] usb 1-1: selecting invalid altsetting 0 [ 334.002726][ T42] usb 1-1: USB disconnect, device number 13 [ 334.103135][ T3694] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 334.261710][ T3694] usb 2-1: Using ep0 maxpacket: 8 [ 334.265083][ T3694] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.288708][ T3694] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 334.288858][ T3694] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.288903][ T3694] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.288944][ T3694] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.288982][ T3694] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.289055][ T3694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.405213][ T5982] device-mapper: table: 248:3: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 335.405378][ T5982] device-mapper: ioctl: error adding target to table [ 335.712638][ T5985] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 336.022317][ T5985] md: could not open device unknown-block(1,0). [ 336.654781][ T3752] hid-sensor-hub 0003:1234:5678.0002: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 342.298980][ T6035] syzkaller0: entered promiscuous mode [ 342.299044][ T6035] syzkaller0: entered allmulticast mode [ 347.742603][ T6057] FAULT_INJECTION: forcing a failure. [ 347.742603][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 347.742732][ T6057] CPU: 1 UID: 0 PID: 6057 Comm: syz.0.655 Not tainted syzkaller #0 PREEMPT [ 347.742777][ T6057] Hardware name: ARM-Versatile Express [ 347.742797][ T6057] Call trace: [ 347.742836][ T6057] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 347.742943][ T6057] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 347.742963][ T6057] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 347.743014][ T6057] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 347.743070][ T6057] r7:ffffffff r6:00000000 r5:85530c80 r4:83516664 [ 347.743086][ T6057] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 347.743138][ T6057] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 347.743201][ T6057] r8:85530c80 r7:ffffffff r6:83c01240 r5:00000820 r4:00000017 [ 347.743216][ T6057] [<80594c00>] (should_failslab) from [<80573664>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 347.743266][ T6057] [<805735b8>] (__kmalloc_node_track_caller_noprof) from [<804fd494>] (kmemdup_noprof+0x28/0x44) [ 347.743332][ T6057] r10:00000126 r9:84f3b004 r8:e44d5d1c r7:84664000 r6:85b4f258 r5:e44d5d14 [ 347.743350][ T6057] r4:00000017 [ 347.743364][ T6057] [<804fd46c>] (kmemdup_noprof) from [<808570a0>] (sidtab_sid2str_get+0x54/0xa4) [ 347.743428][ T6057] r7:84664000 r6:e44d5d1c r5:e44d5d14 r4:83cef0c0 [ 347.743443][ T6057] [<8085704c>] (sidtab_sid2str_get) from [<8085fb34>] (sidtab_entry_to_string+0x34/0x94) [ 347.743501][ T6057] r7:84664000 r6:83cef0c0 r5:e44d5d14 r4:0000005f [ 347.743515][ T6057] [<8085fb00>] (sidtab_entry_to_string) from [<8085fcac>] (security_sid_to_context_core+0x118/0x17c) [ 347.743583][ T6057] r9:00000000 r8:84664000 r7:84f3b004 r6:e44d5d1c r5:e44d5d14 r4:0000005f [ 347.743597][ T6057] [<8085fb94>] (security_sid_to_context_core) from [<80862bc8>] (security_sid_to_context+0x1c/0x24) [ 347.743662][ T6057] r9:e44d5e60 r8:00000000 r7:80841fb4 r6:85530c80 r5:86892c08 r4:e44d5d98 [ 347.743677][ T6057] [<80862bac>] (security_sid_to_context) from [<80842000>] (avc_audit_post_callback+0x4c/0x318) [ 347.743732][ T6057] [<80841fb4>] (avc_audit_post_callback) from [<8086a594>] (common_lsm_audit+0x108/0x14c) [ 347.743797][ T6057] r10:00000126 r9:e44d5e60 r8:00000000 r7:80841fb4 r6:e44d5e60 r5:86892c08 [ 347.743815][ T6057] r4:85531484 [ 347.743827][ T6057] [<8086a48c>] (common_lsm_audit) from [<808424e8>] (slow_avc_audit+0xc0/0x114) [ 347.743887][ T6057] r8:00010000 r7:0000005f r6:0000005f r5:e44d5e60 r4:00000057 [ 347.743912][ T6057] [<80842428>] (slow_avc_audit) from [<80842f34>] (avc_has_perm+0xe4/0xf4) [ 347.743975][ T6057] r8:00000057 r7:00000000 r6:0000005f r5:0000005f r4:00010000 [ 347.743995][ T6057] [<80842e50>] (avc_has_perm) from [<808496f0>] (sock_has_perm+0xd4/0x100) [ 347.744061][ T6057] r9:85530c80 r8:85530c80 r7:00010000 r6:86e9a680 r5:8276ca64 r4:87095dc0 [ 347.744081][ T6057] [<8084961c>] (sock_has_perm) from [<80849d94>] (selinux_socket_setsockopt+0x24/0x40) [ 347.744148][ T6057] r8:00000018 r7:860bf440 r6:0000048b r5:00000000 r4:860bf440 [ 347.744164][ T6057] [<80849d70>] (selinux_socket_setsockopt) from [<8083bed8>] (security_socket_setsockopt+0x58/0x1d4) [ 347.744226][ T6057] r7:860bf440 r6:0000048b r5:00000000 r4:860bf440 [ 347.744243][ T6057] [<8083be80>] (security_socket_setsockopt) from [<816c5500>] (do_sock_setsockopt+0x34/0xc8) [ 347.744312][ T6057] r7:860bf440 r6:0000048b r5:00000000 r4:00000000 [ 347.744329][ T6057] [<816c54cc>] (do_sock_setsockopt) from [<816c92a0>] (__sys_setsockopt+0x7c/0xc4) [ 347.744389][ T6057] r8:00000000 r7:87098e80 r6:87098e81 r5:0000048b r4:00000000 [ 347.744406][ T6057] [<816c9224>] (__sys_setsockopt) from [<816c9304>] (sys_setsockopt+0x1c/0x24) [ 347.744468][ T6057] r8:8020029c r7:00000126 r6:00356318 r5:00000000 r4:00000018 [ 347.744484][ T6057] [<816c92e8>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 347.744530][ T6057] Exception stack(0xe44d5fa8 to 0xe44d5ff0) [ 347.744566][ T6057] 5fa0: 00000018 00000000 00000003 00000000 0000048b 20001f40 [ 347.744600][ T6057] 5fc0: 00000018 00000000 00356318 00000126 003562d8 00000000 00000001 76fe00dc [ 347.744624][ T6057] 5fe0: 76fdfe88 76fdfe78 0001903c 00130cf0 [ 347.745790][ T28] audit: type=1400 audit(347.620:278): avc: denied { setopt } for pid=6056 comm="syz.0.655" ssid=95 tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 348.309089][ T3752] usb 2-1: USB disconnect, device number 9 [ 349.482205][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 349.612189][ T9] usb 2-1: device descriptor read/64, error -71 [ 349.851608][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 349.982149][ T9] usb 2-1: device descriptor read/64, error -71 [ 349.991787][ T718] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 350.094210][ T9] usb usb2-port1: attempt power cycle [ 350.141633][ T718] usb 1-1: Using ep0 maxpacket: 32 [ 350.169977][ T718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.170106][ T718] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 350.196142][ T718] usb 1-1: config 14 has an invalid interface number: 57 but max is 0 [ 350.196261][ T718] usb 1-1: config 14 has no interface number 0 [ 350.196326][ T718] usb 1-1: config 14 interface 57 has no altsetting 0 [ 350.237977][ T718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.238089][ T718] usb 1-1: Product: syz [ 350.238116][ T718] usb 1-1: Manufacturer: syz [ 350.238141][ T718] usb 1-1: SerialNumber: syz [ 350.441892][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 350.465496][ T9] usb 2-1: device descriptor read/8, error -71 [ 350.491382][ T718] legousbtower 1-1:14.57: interrupt endpoints not found [ 350.502799][ T718] usb 1-1: USB disconnect, device number 14 [ 350.615100][ T6102] FAULT_INJECTION: forcing a failure. [ 350.615100][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 350.615187][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.0.666 Not tainted syzkaller #0 PREEMPT [ 350.615213][ T6102] Hardware name: ARM-Versatile Express [ 350.615223][ T6102] Call trace: [ 350.615242][ T6102] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 350.615295][ T6102] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 350.615303][ T6102] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 350.615328][ T6102] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 350.615357][ T6102] r7:84d79900 r6:00000000 r5:84d79900 r4:83516664 [ 350.615364][ T6102] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 350.615390][ T6102] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 350.615425][ T6102] r8:00000000 r7:84d79900 r6:83c01180 r5:00000d40 r4:00000084 [ 350.615433][ T6102] [<80594c00>] (should_failslab) from [<80573298>] (__kmalloc_noprof+0xa8/0x3c8) [ 350.615457][ T6102] [<805731f0>] (__kmalloc_noprof) from [<80891d58>] (ima_alloc_init_template+0x84/0x19c) [ 350.615490][ T6102] r10:86fa9dd8 r9:0000000a r8:83542668 r7:e44edcac r6:e44edcb0 r5:87097200 [ 350.615499][ T6102] r4:85998d00 [ 350.615505][ T6102] [<80891cd4>] (ima_alloc_init_template) from [<808924ac>] (ima_store_measurement+0x98/0x180) [ 350.615535][ T6102] r9:0000000a r8:00000000 r7:00000400 r6:86a50fed r5:87097200 r4:85998d00 [ 350.615542][ T6102] [<80892414>] (ima_store_measurement) from [<808904a8>] (process_measurement+0x8ec/0xb68) [ 350.615572][ T6102] r10:86fa9dd8 r9:00000000 r8:00000004 r7:00000001 r6:85998d00 r5:87097200 [ 350.615581][ T6102] r4:ffffffc3 [ 350.615587][ T6102] [<8088fbbc>] (process_measurement) from [<808909dc>] (ima_file_mmap+0xf4/0xfc) [ 350.615618][ T6102] r10:85e603c0 r9:20000000 r8:027ffff7 r7:84d79900 r6:87097200 r5:00000000 [ 350.615626][ T6102] r4:00000000 [ 350.615632][ T6102] [<808908e8>] (ima_file_mmap) from [<80833d90>] (security_mmap_file+0x138/0x460) [ 350.615663][ T6102] r8:00600000 r7:808908e8 r6:027ffff7 r5:04012011 r4:87097200 [ 350.615670][ T6102] [<80833c58>] (security_mmap_file) from [<804fede4>] (vm_mmap_pgoff+0x50/0x20c) [ 350.615710][ T6102] r7:e44edf18 r6:87097200 r5:027ffff7 r4:04012011 [ 350.615719][ T6102] [<804fed94>] (vm_mmap_pgoff) from [<805360dc>] (ksys_mmap_pgoff+0xa4/0xec) [ 350.615754][ T6102] r10:000000c0 r9:84d79900 r8:87097200 r7:20000000 r6:00600000 r5:027ffff7 [ 350.615762][ T6102] r4:04012011 [ 350.615769][ T6102] [<80536038>] (ksys_mmap_pgoff) from [<80536140>] (sys_mmap_pgoff+0x1c/0x24) [ 350.615799][ T6102] r8:8020029c r7:000000c0 r6:0035631c r5:00000000 r4:00000003 [ 350.615806][ T6102] [<80536124>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 350.615828][ T6102] Exception stack(0xe44edfa8 to 0xe44edff0) [ 350.615844][ T6102] dfa0: 00000003 00000000 20000000 00600000 027ffff7 04012011 [ 350.615860][ T6102] dfc0: 00000003 00000000 0035631c 000000c0 003562d8 00000000 00000001 76fe00dc [ 350.615871][ T6102] dfe0: 76fdfe88 76fdfe78 0001903c 00130cf0 [ 350.616189][ T28] audit: type=1804 audit(350.490:279): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz.0.666" name="/newroot/352/file1" dev="tmpfs" ino=1847 res=0 errno=-12 [ 350.701765][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 350.731773][ T9] usb 2-1: device descriptor read/8, error -71 [ 350.843057][ T9] usb usb2-port1: unable to enumerate USB device [ 351.283819][ T6111] netlink: 204 bytes leftover after parsing attributes in process `syz.0.670'. [ 351.373014][ T6113] FAULT_INJECTION: forcing a failure. [ 351.373014][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 351.373178][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.0.671 Not tainted syzkaller #0 PREEMPT [ 351.373227][ T6113] Hardware name: ARM-Versatile Express [ 351.373250][ T6113] Call trace: [ 351.373290][ T6113] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 351.373391][ T6113] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 351.373410][ T6113] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 351.373472][ T6113] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 351.373564][ T6113] r7:84d79900 r6:00000000 r5:84d79900 r4:83516664 [ 351.373582][ T6113] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 351.373642][ T6113] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 351.373708][ T6113] r8:00000000 r7:84d79900 r6:805d21dc r5:00000cc0 r4:83cf0d80 [ 351.373724][ T6113] [<80594c00>] (should_failslab) from [<805722c4>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 351.373772][ T6113] [<80572268>] (kmem_cache_alloc_noprof) from [<805d21dc>] (alloc_empty_file+0x54/0x13c) [ 351.373837][ T6113] r10:8442c800 r9:84d79900 r8:83404d40 r7:85422f80 r6:00000002 r5:835199ec [ 351.373857][ T6113] r4:82761918 [ 351.373870][ T6113] [<805d2188>] (alloc_empty_file) from [<805d2370>] (alloc_file_pseudo+0xac/0x154) [ 351.373962][ T6113] r8:82075ec0 r7:00000002 r6:84460310 r5:860c00c0 r4:835fc784 [ 351.373978][ T6113] [<805d22c4>] (alloc_file_pseudo) from [<816c4c60>] (sock_alloc_file+0x48/0xc4) [ 351.374046][ T6113] r10:84d79900 r9:00000000 r8:860bb940 r7:860c0040 r6:860c00c0 r5:860c0040 [ 351.374063][ T6113] r4:00000000 [ 351.374076][ T6113] [<816c4c18>] (sock_alloc_file) from [<816c8408>] (__sys_socketpair+0x118/0x298) [ 351.374127][ T6113] r6:00000000 r5:00000001 r4:00000000 [ 351.374143][ T6113] [<816c82f0>] (__sys_socketpair) from [<816c8598>] (sys_socketpair+0x10/0x14) [ 351.374204][ T6113] r10:00000120 r9:84d79900 r8:8020029c r7:00000120 r6:00356314 r5:00000000 [ 351.374223][ T6113] r4:00000000 [ 351.374236][ T6113] [<816c8588>] (sys_socketpair) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 351.374279][ T6113] Exception stack(0xdfa71fa8 to 0xdfa71ff0) [ 351.374312][ T6113] 1fa0: 00000000 00000000 00000001 00000001 00000000 00000000 [ 351.374346][ T6113] 1fc0: 00000000 00000000 00356314 00000120 003562d8 00000000 00000001 76fe00dc [ 351.374372][ T6113] 1fe0: 76fdfe88 76fdfe78 0001903c 00130cf0 [ 351.961708][ T42] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 352.125919][ T42] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.138165][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.138283][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.138371][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.138472][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.145827][ T42] usb 1-1: config 0 descriptor?? [ 352.603262][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603443][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603513][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603580][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603646][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603712][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603776][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603840][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603913][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.603999][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 352.617061][ T42] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 352.835537][ T42] usb 1-1: USB disconnect, device number 15 [ 353.292234][ T42] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 353.463734][ T42] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.467456][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 353.467567][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.467601][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.467679][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.480031][ T42] usb 1-1: config 0 descriptor?? [ 353.940665][ T42] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 354.155225][ T42] usb 1-1: USB disconnect, device number 16 [ 358.021973][ T718] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 358.174724][ T718] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.201726][ T718] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.201847][ T718] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 358.201889][ T718] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 358.201924][ T718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.224149][ T718] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 358.224261][ T718] usb 1-1: Product: syz [ 358.224300][ T718] usb 1-1: Manufacturer: syz [ 358.224326][ T718] usb 1-1: SerialNumber: syz [ 358.233602][ T718] usb 1-1: config 0 descriptor?? [ 358.249489][ T718] usb 1-1: selecting invalid altsetting 0 [ 358.447916][ T42] usb 1-1: USB disconnect, device number 17 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 359.859920][ T28] audit: type=1400 audit(359.730:280): avc: denied { bind } for pid=6221 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 360.175877][ T28] audit: type=1400 audit(360.050:281): avc: denied { setattr } for pid=6225 comm="syz.0.690" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 360.437109][ T28] audit: type=1400 audit(360.310:282): avc: denied { mount } for pid=6227 comm="syz.1.689" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 360.618131][ T28] audit: type=1400 audit(360.480:283): avc: denied { unmount } for pid=3116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 362.123352][ T28] audit: type=1400 audit(362.000:284): avc: denied { setopt } for pid=6233 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.011947][ T42] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 364.161925][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 364.225921][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 364.226065][ T42] usb 2-1: New USB device found, idVendor=1ee9, idProduct=2b6e, bcdDevice=34.a2 [ 364.628102][ T42] usb 2-1: config 14 has an invalid interface number: 195 but max is 0 [ 364.628232][ T42] usb 2-1: config 14 has no interface number 0 [ 364.629003][ T42] usb 2-1: config 14 interface 195 altsetting 216 endpoint 0x8B has an invalid bInterval 183, changing to 7 [ 364.630303][ T42] usb 2-1: config 14 interface 195 altsetting 216 endpoint 0x8B has invalid maxpacket 34019, setting to 1024 [ 364.630403][ T42] usb 2-1: config 14 interface 195 altsetting 216 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.630447][ T42] usb 2-1: config 14 interface 195 has no altsetting 0 [ 364.831543][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.831670][ T42] usb 2-1: Product: syz [ 364.831703][ T42] usb 2-1: Manufacturer: syz [ 364.831741][ T42] usb 2-1: SerialNumber: syz [ 366.128876][ T1516] usb 2-1: USB disconnect, device number 14 [ 366.950308][ T28] audit: type=1400 audit(366.820:285): avc: denied { nlmsg_write } for pid=6288 comm="syz.0.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.712491][ T6299] FAULT_INJECTION: forcing a failure. [ 368.712491][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 368.712651][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.1.705 Not tainted syzkaller #0 PREEMPT [ 368.712701][ T6299] Hardware name: ARM-Versatile Express [ 368.712725][ T6299] Call trace: [ 368.712765][ T6299] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 368.712867][ T6299] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 368.712886][ T6299] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 368.712941][ T6299] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 368.712999][ T6299] r7:ffffffff r6:00000000 r5:84d77080 r4:83516664 [ 368.713015][ T6299] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 368.713073][ T6299] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 368.713142][ T6299] r8:84d77080 r7:ffffffff r6:83c01240 r5:00000820 r4:00000009 [ 368.713159][ T6299] [<80594c00>] (should_failslab) from [<80573664>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 368.713212][ T6299] [<805735b8>] (__kmalloc_node_track_caller_noprof) from [<804fd5c0>] (kstrdup+0x3c/0x60) [ 368.713284][ T6299] r10:8209f0a8 r9:00000001 r8:867caa80 r7:859f7e00 r6:808655f8 r5:00000008 [ 368.713303][ T6299] r4:00000820 [ 368.713319][ T6299] [<804fd584>] (kstrdup) from [<808655f8>] (security_netlbl_sid_to_secattr+0x78/0xdc) [ 368.713384][ T6299] r7:83cef0c8 r6:0000005f r5:84f3b000 r4:867ae340 [ 368.713407][ T6299] [<80865580>] (security_netlbl_sid_to_secattr) from [<808683ac>] (selinux_netlbl_sock_genattr+0x60/0x140) [ 368.713468][ T6299] r7:0000000a r6:8709d280 r5:8709d280 r4:867ae340 [ 368.713484][ T6299] [<8086834c>] (selinux_netlbl_sock_genattr) from [<80868e0c>] (selinux_netlbl_socket_post_create+0x40/0x80) [ 368.713559][ T6299] r7:0000000a r6:8709d280 r5:00000000 r4:00000002 [ 368.713576][ T6299] [<80868dcc>] (selinux_netlbl_socket_post_create) from [<80849514>] (selinux_socket_post_create+0x140/0x248) [ 368.713648][ T6299] r9:00000001 r8:00000010 r7:0000000a r6:8276ca64 r5:860fecc0 r4:86ee6d44 [ 368.713665][ T6299] [<808493d4>] (selinux_socket_post_create) from [<8083ad08>] (security_socket_post_create+0x70/0x238) [ 368.713732][ T6299] r9:808493d4 r8:00000000 r7:00000000 r6:00000001 r5:0000000a r4:860fecc0 [ 368.713750][ T6299] [<8083ac98>] (security_socket_post_create) from [<816c5318>] (__sock_create+0x1c0/0x22c) [ 368.713819][ T6299] r9:86d22000 r8:860fecc0 r7:00000000 r6:00000000 r5:00000001 r4:0000000a [ 368.713837][ T6299] [<816c5158>] (__sock_create) from [<816c8258>] (__sys_socket+0x94/0x118) [ 368.713900][ T6299] r10:00000119 r9:84d77080 r8:8020029c r7:00000119 r6:84d77080 r5:0000000a [ 368.713921][ T6299] r4:00000001 [ 368.713936][ T6299] [<816c81c4>] (__sys_socket) from [<816c82ec>] (sys_socket+0x10/0x14) [ 368.713991][ T6299] r6:00356310 r5:00000000 r4:00000000 [ 368.714006][ T6299] [<816c82dc>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 368.714053][ T6299] Exception stack(0xdfa39fa8 to 0xdfa39ff0) [ 368.714092][ T6299] 9fa0: 00000000 00000000 0000000a 00000001 00000000 00000000 [ 368.714128][ T6299] 9fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76fc40dc [ 368.714154][ T6299] 9fe0: 76fc3e88 76fc3e78 0001903c 00130cf0 [ 369.813276][ T6311] FAULT_INJECTION: forcing a failure. [ 369.813276][ T6311] name fail_futex, interval 1, probability 0, space 0, times 1 [ 369.813368][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT [ 369.813396][ T6311] Hardware name: ARM-Versatile Express [ 369.813407][ T6311] Call trace: [ 369.813428][ T6311] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 369.813482][ T6311] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 369.813491][ T6311] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 369.813517][ T6311] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 369.813594][ T6311] r7:df9f5e38 r6:00000000 r5:8554b200 r4:834f6880 [ 369.813603][ T6311] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 369.813632][ T6311] [<80a49c18>] (should_fail_ex) from [<80a49e48>] (should_fail+0x14/0x18) [ 369.813661][ T6311] r8:00000000 r7:df9f5e38 r6:00000004 r5:003562e0 r4:00000000 [ 369.813668][ T6311] [<80a49e34>] (should_fail) from [<8035ab4c>] (get_futex_key+0xa4/0x4a8) [ 369.813695][ T6311] [<8035aaa8>] (get_futex_key) from [<803606ec>] (futex_wait_setup+0x88/0x29c) [ 369.813730][ T6311] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:8554b200 [ 369.813739][ T6311] r4:7efffffc [ 369.813745][ T6311] [<80360664>] (futex_wait_setup) from [<80360984>] (__futex_wait+0x84/0x110) [ 369.813780][ T6311] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 369.813795][ T6311] r4:8554b200 [ 369.813802][ T6311] [<80360900>] (__futex_wait) from [<80360a90>] (futex_wait+0x80/0x10c) [ 369.813838][ T6311] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 369.813845][ T6311] [<80360a10>] (futex_wait) from [<8035c1b8>] (do_futex+0x1b4/0x1d0) [ 369.813879][ T6311] r10:000000f0 r9:00000000 r8:8554b200 r7:00000000 r6:003562e0 r5:00000080 [ 369.813888][ T6311] r4:00000000 [ 369.813895][ T6311] [<8035c004>] (do_futex) from [<8035ca6c>] (sys_futex_time32+0x11c/0x1bc) [ 369.813923][ T6311] r4:00000000 [ 369.813929][ T6311] [<8035c950>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 369.813953][ T6311] Exception stack(0xdf9f5fa8 to 0xdf9f5ff0) [ 369.813972][ T6311] 5fa0: 00132078 ffffffff 003562e0 00000080 00000000 00000000 [ 369.813989][ T6311] 5fc0: 00132078 ffffffff 76fe07d4 000000f0 00340000 00000000 00000001 76fe00dc [ 369.814001][ T6311] 5fe0: 76fdff38 76fdff28 00021e2c 00130cf0 [ 369.814019][ T6311] r9:8554b200 r8:8020029c r7:000000f0 r6:76fe07d4 r5:ffffffff r4:00132078 [ 370.833593][ T6327] FAULT_INJECTION: forcing a failure. [ 370.833593][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 370.833723][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.0.714 Not tainted syzkaller #0 PREEMPT [ 370.833768][ T6327] Hardware name: ARM-Versatile Express [ 370.833790][ T6327] Call trace: [ 370.833826][ T6327] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 370.833933][ T6327] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 370.833951][ T6327] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 370.834007][ T6327] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 370.834071][ T6327] r7:ffffffff r6:00000000 r5:84d66400 r4:83516664 [ 370.834086][ T6327] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 370.834140][ T6327] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 370.834207][ T6327] r8:84d66400 r7:ffffffff r6:83c01240 r5:00000cc0 r4:0000000f [ 370.834222][ T6327] [<80594c00>] (should_failslab) from [<80573664>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 370.834272][ T6327] [<805735b8>] (__kmalloc_node_track_caller_noprof) from [<804fd494>] (kmemdup_noprof+0x28/0x44) [ 370.834340][ T6327] r10:836f4750 r9:0000000e r8:dfa99e50 r7:00000000 r6:dfa99e50 r5:8353e750 [ 370.834360][ T6327] r4:0000000f [ 370.834377][ T6327] [<804fd46c>] (kmemdup_noprof) from [<80814590>] (key_alloc+0x18c/0x55c) [ 370.834450][ T6327] r7:00000000 r6:8353e6d0 r5:8353e750 r4:85c1b300 [ 370.834466][ T6327] [<80814404>] (key_alloc) from [<808155dc>] (keyring_alloc+0x4c/0x98) [ 370.834532][ T6327] r10:85c1a960 r9:85c1a900 r8:873aca00 r7:85c1af00 r6:00000000 r5:00000000 [ 370.834551][ T6327] r4:00000000 [ 370.834564][ T6327] [<80815590>] (keyring_alloc) from [<8081b45c>] (call_sbin_request_key+0x114/0x42c) [ 370.834622][ T6327] r5:85436280 r4:00000000 [ 370.834637][ T6327] [<8081b348>] (call_sbin_request_key) from [<8081bdcc>] (request_key_and_link+0x658/0x73c) [ 370.834696][ T6327] r9:00000000 r8:00000000 r7:8741d700 r6:85c1a900 r5:8354c190 r4:85c1af00 [ 370.834713][ T6327] [<8081b774>] (request_key_and_link) from [<808177b0>] (sys_request_key+0x11c/0x1ac) [ 370.834775][ T6327] r10:00000136 r9:8354c190 r8:8020029c r7:8741c600 r6:00000000 r5:8741d700 [ 370.834794][ T6327] r4:00000012 [ 370.834808][ T6327] [<80817694>] (sys_request_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 370.834853][ T6327] Exception stack(0xdfa99fa8 to 0xdfa99ff0) [ 370.834898][ T6327] 9fa0: 00000000 00000000 20000200 20000240 20000280 00000000 [ 370.834933][ T6327] 9fc0: 00000000 00000000 00356314 00000136 003562d8 00000000 00000001 76fe00dc [ 370.834958][ T6327] 9fe0: 76fdfe88 76fdfe78 0001903c 00130cf0 [ 370.834991][ T6327] r9:84d66400 r8:8020029c r7:00000136 r6:00356314 r5:00000000 r4:00000000 [ 371.601811][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 371.751596][ T9] usb 2-1: device descriptor read/64, error -71 [ 371.862001][ T6337] nvme nvme0: failed to connect socket: -111 [ 372.002045][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 372.131928][ T9] usb 2-1: device descriptor read/64, error -71 [ 372.242580][ T9] usb usb2-port1: attempt power cycle [ 372.591629][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 372.622183][ T9] usb 2-1: device descriptor read/8, error -71 [ 372.902848][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 372.935462][ T9] usb 2-1: device descriptor read/8, error -71 [ 373.044455][ T9] usb usb2-port1: unable to enumerate USB device [ 373.501638][ T28] audit: type=1400 audit(373.370:286): avc: denied { write } for pid=6348 comm="syz.0.721" name="nullb" dev="configfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.523008][ T28] audit: type=1400 audit(373.400:287): avc: denied { read write } for pid=6348 comm="syz.0.721" name="memory_backed" dev="configfs" ino=8749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 373.523239][ T28] audit: type=1400 audit(373.400:288): avc: denied { open } for pid=6348 comm="syz.0.721" path="/388/config/nullb/my_zoned_dev/memory_backed" dev="configfs" ino=8749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 385.151651][ T3694] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 385.315767][ T3694] usb 1-1: not running at top speed; connect to a high speed hub [ 385.315864][ T3694] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 385.319284][ T3694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.319468][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.535512][ T3694] usb 1-1: USB disconnect, device number 18 [ 385.579328][ T6267] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 385.775086][ T6267] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 385.820346][ T6267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.820443][ T6267] usb 2-1: Product: syz [ 385.820471][ T6267] usb 2-1: Manufacturer: syz [ 385.820492][ T6267] usb 2-1: SerialNumber: syz [ 386.292394][ T6267] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 386.401791][ T6431] device-mapper: ioctl: Unable to change uuid of mapped device syza1 to syza1 because uuid is already set to CRP-syza1 [ 386.940006][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 387.447977][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 387.458305][ T6446] syz_tun: entered promiscuous mode [ 388.081736][ T3694] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 388.235886][ T3694] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 388.241991][ T3694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.242168][ T3694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.242211][ T3694] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 388.242301][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.316202][ T6267] usb 2-1: USB disconnect, device number 19 [ 400.319123][ T6267] usblp0: removed [ 400.936914][ T28] audit: type=1400 audit(400.810:289): avc: denied { setopt } for pid=6473 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.965723][ T6474] netlink: 168 bytes leftover after parsing attributes in process `syz.1.757'. [ 401.132400][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 402.817612][ T1516] usb 1-1: USB disconnect, device number 19 [ 403.271664][ T1516] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 403.421939][ T1516] usb 1-1: Using ep0 maxpacket: 8 [ 403.423801][ T1516] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 403.427156][ T1516] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.438478][ T1516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.438543][ T1516] usb 1-1: Product: syz [ 403.438557][ T1516] usb 1-1: Manufacturer: syz [ 403.438570][ T1516] usb 1-1: SerialNumber: syz [ 403.696794][ T1516] usb 1-1: failed to read device descriptor: -71 [ 403.697083][ T1516] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 403.698811][ T1516] usb 1-1: invalid MIDI EP [ 403.698881][ T1516] usb 1-1: snd-bcd2000: error during probing [ 403.699709][ T1516] snd-bcd2000 1-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 403.733833][ T1516] usb 1-1: invalid MIDI EP [ 403.733902][ T1516] usb 1-1: snd-bcd2000: error during probing [ 403.734222][ T1516] snd-bcd2000 1-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 403.736297][ T1516] usb 1-1: invalid MIDI EP [ 403.736323][ T1516] usb 1-1: snd-bcd2000: error during probing [ 403.736604][ T1516] snd-bcd2000 1-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 403.751561][ T1516] usb 1-1: USB disconnect, device number 20 [ 406.608313][ T28] audit: type=1400 audit(406.480:290): avc: denied { write } for pid=6511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.159412][ T28] audit: type=1400 audit(407.030:291): avc: denied { write } for pid=6515 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.302767][ T28] audit: type=1400 audit(417.170:292): avc: denied { connect } for pid=6518 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.791616][ T6267] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 417.987781][ T6267] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 418.003653][ T6267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.013839][ T6267] usb 2-1: config 0 descriptor?? [ 418.258170][ T6267] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 418.504351][ T6267] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 418.504450][ T6267] [drm] Initialized udl on minor 3 [ 418.579437][ T6529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.822700][ T6519] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 418.913828][ T6267] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.914647][ T6267] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 418.934931][ T6267] usb 2-1: USB disconnect, device number 20 [ 418.944987][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 419.092863][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 419.251756][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 419.256316][ T9] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 419.275725][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.315452][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.315560][ T9] usb 1-1: Product: syz [ 419.315589][ T9] usb 1-1: Manufacturer: syz [ 419.315613][ T9] usb 1-1: SerialNumber: syz [ 419.582813][ T9] usb 1-1: failed to read device descriptor: -71 [ 419.583005][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 419.584212][ T9] usb 1-1: invalid MIDI EP [ 419.584253][ T9] usb 1-1: snd-bcd2000: error during probing [ 419.584779][ T9] snd-bcd2000 1-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 419.614900][ T9] usb 1-1: invalid MIDI EP [ 419.615012][ T9] usb 1-1: snd-bcd2000: error during probing [ 419.615566][ T9] snd-bcd2000 1-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 419.630607][ T9] usb 1-1: invalid MIDI EP [ 419.630702][ T9] usb 1-1: snd-bcd2000: error during probing [ 419.645199][ T9] snd-bcd2000 1-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 419.654654][ T9] usb 1-1: USB disconnect, device number 21 [ 449.614964][ T28] audit: type=1400 audit(449.490:293): avc: denied { create } for pid=6615 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 449.652028][ T28] audit: type=1400 audit(449.510:294): avc: denied { sys_admin } for pid=6615 comm="syz.0.787" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 452.033726][ T718] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 452.187356][ T718] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 452.195592][ T718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.195716][ T718] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.195758][ T718] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.195831][ T718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.302104][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 466.762469][ T1516] usb 1-1: USB disconnect, device number 22 [ 468.262507][ T6710] FAULT_INJECTION: forcing a failure. [ 468.262507][ T6710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.262664][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.0.800 Not tainted syzkaller #0 PREEMPT [ 468.262714][ T6710] Hardware name: ARM-Versatile Express [ 468.262736][ T6710] Call trace: [ 468.262771][ T6710] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 468.262869][ T6710] r7:60000113 r6:60000113 r5:82541264 r4:00000000 [ 468.262886][ T6710] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 468.262943][ T6710] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 468.262998][ T6710] r7:00000000 r6:00000000 r5:83fbf080 r4:835166b8 [ 468.263012][ T6710] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 468.263061][ T6710] [<80a49c18>] (should_fail_ex) from [<80594cfc>] (should_fail_alloc_page+0x68/0x74) [ 468.263119][ T6710] r8:00140cca r7:00000000 r6:00140cca r5:00000000 r4:00000001 [ 468.263135][ T6710] [<80594c94>] (should_fail_alloc_page) from [<80561698>] (__alloc_frozen_pages_noprof+0x130/0x1a68) [ 468.263187][ T6710] [<80561568>] (__alloc_frozen_pages_noprof) from [<80563078>] (__folio_alloc_noprof+0x20/0x7c) [ 468.263246][ T6710] r10:00000000 r9:85576d00 r8:201b0000 r7:201b0000 r6:86b50a80 r5:00000000 [ 468.263263][ T6710] r4:dfc49db8 [ 468.263277][ T6710] [<80563058>] (__folio_alloc_noprof) from [<8052aa3c>] (do_anonymous_page+0xf0/0x728) [ 468.263327][ T6710] r4:dfc49db8 [ 468.263340][ T6710] [<8052a94c>] (do_anonymous_page) from [<8052d918>] (handle_mm_fault+0x5d0/0x6cc) [ 468.263400][ T6710] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:201b0000 r5:83fbf080 [ 468.263421][ T6710] r4:00000015 [ 468.263434][ T6710] [<8052d348>] (handle_mm_fault) from [<8051ce8c>] (__get_user_pages+0x2bc/0x718) [ 468.263499][ T6710] r10:83fbf080 r9:00000012 r8:86b50a80 r7:00000000 r6:00000015 r5:201b0000 [ 468.263515][ T6710] r4:00210001 [ 468.263528][ T6710] [<8051cbd0>] (__get_user_pages) from [<8051ff90>] (populate_vma_page_range+0xd8/0x210) [ 468.263592][ T6710] r10:2019e000 r9:85576d00 r8:dfc49ee8 r7:20d9e000 r6:2019e000 r5:86b50a80 [ 468.263608][ T6710] r4:00000c00 [ 468.263621][ T6710] [<8051feb8>] (populate_vma_page_range) from [<805206a0>] (__mm_populate+0xb4/0x1b8) [ 468.263686][ T6710] r10:2019e000 r9:85576e10 r8:00000000 r7:85576d00 r6:20d9e000 r5:86b50a80 [ 468.263704][ T6710] r4:20d9e000 [ 468.263718][ T6710] [<805205ec>] (__mm_populate) from [<8053273c>] (do_mlock+0x104/0x2b4) [ 468.263781][ T6710] r10:85576d00 r9:dfc49f90 r8:85576e10 r7:00000000 r6:85576d00 r5:00c00000 [ 468.263797][ T6710] r4:2019e000 [ 468.263811][ T6710] [<80532638>] (do_mlock) from [<80534c14>] (sys_mlock+0x30/0x54) [ 468.263870][ T6710] r10:00000096 r9:83fbf080 r8:8020029c r7:00000096 r6:0035630c r5:00000000 [ 468.263888][ T6710] r4:00000000 [ 468.263913][ T6710] [<80534be4>] (sys_mlock) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 468.263960][ T6710] Exception stack(0xdfc49fa8 to 0xdfc49ff0) [ 468.263997][ T6710] 9fa0: 00000000 00000000 2019e000 00c00000 00000000 00000000 [ 468.264029][ T6710] 9fc0: 00000000 00000000 0035630c 00000096 003562d8 00000000 00000001 76fe00dc [ 468.264050][ T6710] 9fe0: 76fdfe88 76fdfe78 0001903c 00130cf0 [ 470.472927][ T6714] fuse: Bad value for 'user_id' [ 470.473031][ T6714] fuse: Bad value for 'user_id' [ 472.532722][ T6725] fuse: Bad value for 'user_id' [ 472.532829][ T6725] fuse: Bad value for 'user_id' [ 474.469641][ T28] audit: type=1400 audit(474.340:295): avc: denied { bind } for pid=6733 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.833097][ T6740] fuse: Bad value for 'fd' [ 487.055995][ T28] audit: type=1400 audit(486.930:296): avc: denied { mounton } for pid=6741 comm="syz.1.813" path="/proc/813/task" dev="proc" ino=9120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 489.969203][ T6748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.086323][ T6748] bond1 (unregistering): Released all slaves [ 490.320788][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 490.955874][ T28] audit: type=1400 audit(490.830:297): avc: denied { mount } for pid=6821 comm="syz.1.818" name="/" dev="ramfs" ino=9639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 491.287057][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 491.294459][ T6825] syz_tun (unregistering): left allmulticast mode [ 494.818662][ T28] audit: type=1400 audit(494.690:298): avc: denied { setopt } for pid=6850 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 495.057552][ T28] audit: type=1400 audit(494.930:299): avc: denied { bind } for pid=6850 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 511.423653][ T6867] macvlan0: entered promiscuous mode [ 511.424775][ T6867] netlink: 'syz.1.836': attribute type 2 has an invalid length. [ 511.743895][ T28] audit: type=1400 audit(511.620:300): avc: denied { create } for pid=6868 comm="syz.1.837" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 511.763064][ T28] audit: type=1400 audit(511.640:301): avc: denied { read } for pid=6868 comm="syz.1.837" name="md0" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 511.763720][ T28] audit: type=1400 audit(511.640:302): avc: denied { open } for pid=6868 comm="syz.1.837" path="/374/md0" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 511.791636][ T6869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 511.791830][ T6869] block device autoloading is deprecated and will be removed. [ 511.803447][ T28] audit: type=1400 audit(511.680:303): avc: denied { ioctl } for pid=6868 comm="syz.1.837" path="/374/md0" dev="tmpfs" ino=1972 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 511.884948][ T28] audit: type=1400 audit(511.760:304): avc: denied { unlink } for pid=3116 comm="syz-executor" name="md0" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 533.891665][ T3752] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 534.052331][ T3752] usb 1-1: Using ep0 maxpacket: 32 [ 534.062589][ T3752] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 534.074590][ T3752] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 534.074716][ T3752] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 534.074857][ T3752] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.074899][ T3752] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 534.095140][ T3752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.095253][ T3752] usb 1-1: Product: syz [ 534.095283][ T3752] usb 1-1: Manufacturer: syz [ 534.095310][ T3752] usb 1-1: SerialNumber: syz [ 534.108694][ T3752] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 534.108917][ T3752] imon 1-1:155.0: unable to initialize intf0, err -19 [ 534.108981][ T3752] imon:imon_probe: failed to initialize context! [ 534.109032][ T3752] imon 1-1:155.0: unable to register, err -19 [ 544.326118][ T42] usb 1-1: USB disconnect, device number 23 [ 544.737568][ T28] audit: type=1400 audit(544.610:305): avc: denied { remount } for pid=6937 comm="syz.0.852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 556.336609][ T6945] comedi: valid board names for 8255 driver are: [ 556.336707][ T6945] 8255 [ 556.336726][ T6945] comedi: valid board names for vmk80xx driver are: [ 556.336744][ T6945] vmk80xx [ 556.336758][ T6945] comedi: valid board names for usbduxsigma driver are: [ 556.336771][ T6945] usbduxsigma [ 556.336784][ T6945] comedi: valid board names for usbduxfast driver are: [ 556.336798][ T6945] usbduxfast [ 556.336811][ T6945] comedi: valid board names for usbdux driver are: [ 556.336825][ T6945] usbdux [ 556.336838][ T6945] comedi: valid board names for ni6501 driver are: [ 556.336853][ T6945] ni6501 [ 556.336867][ T6945] comedi: valid board names for dt9812 driver are: [ 556.336882][ T6945] dt9812 [ 556.336902][ T6945] comedi: valid board names for ni_labpc_cs driver are: [ 556.336917][ T6945] ni_labpc_cs [ 556.336930][ T6945] comedi: valid board names for ni_daq_700 driver are: [ 556.336944][ T6945] ni_daq_700 [ 556.336957][ T6945] comedi: valid board names for labpc_pci driver are: [ 556.336973][ T6945] labpc_pci [ 556.336986][ T6945] comedi: valid board names for adl_pci9118 driver are: [ 556.337001][ T6945] pci9118dg [ 556.337014][ T6945] pci9118hg [ 556.337027][ T6945] pci9118hr [ 556.337040][ T6945] comedi: valid board names for 8255_pci driver are: [ 556.337054][ T6945] 8255_pci [ 556.337067][ T6945] comedi: valid board names for comedi_parport driver are: [ 556.337081][ T6945] comedi_parport [ 556.337095][ T6945] comedi: valid board names for comedi_test driver are: [ 556.337110][ T6945] comedi_test [ 556.337123][ T6945] comedi: valid board names for comedi_bond driver are: [ 556.337139][ T6945] comedi_bond [ 557.241744][ T42] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 557.404636][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 557.411433][ T42] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 557.417483][ T42] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 557.417603][ T42] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 557.417642][ T42] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 557.417675][ T42] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.417705][ T42] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 557.435568][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.435664][ T42] usb 2-1: Product: syz [ 557.435688][ T42] usb 2-1: Manufacturer: syz [ 557.435708][ T42] usb 2-1: SerialNumber: syz [ 557.471355][ T42] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 557.471537][ T42] imon 2-1:155.0: unable to initialize intf0, err -90 [ 557.471570][ T42] imon:imon_probe: failed to initialize context! [ 557.471590][ T42] imon 2-1:155.0: unable to register, err -19 [ 567.682336][ T1516] usb 2-1: USB disconnect, device number 21 [ 568.011703][ T6966] ALSA: seq fatal error: cannot create timer (-19) [ 571.071722][ T1516] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 571.227716][ T1516] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 571.256800][ T1516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.263876][ T1516] usb 2-1: config 0 descriptor?? [ 571.515595][ T1516] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 571.741639][ T1516] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 571.741777][ T1516] [drm] Initialized udl on minor 3 [ 576.767042][ T1516] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 576.767448][ T1516] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 576.772654][ T718] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 576.775146][ T718] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 576.775436][ T718] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 582.205269][ T42] usb 2-1: USB disconnect, device number 22 [ 582.375859][ T7003] syzkaller0: entered promiscuous mode [ 582.375934][ T7003] syzkaller0: entered allmulticast mode [ 583.855033][ T1516] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 584.035338][ T1516] usb 2-1: Using ep0 maxpacket: 16 [ 584.040392][ T1516] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 584.056872][ T1516] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.056997][ T1516] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.057040][ T1516] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 584.057080][ T1516] usb 2-1: config 0 interface 0 has no altsetting 0 [ 584.057141][ T1516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.074058][ T1516] usb 2-1: config 0 descriptor?? [ 584.788818][ T1516] hid (null): nested delimiters [ 584.789375][ T1516] hid (null): report_id 24797 is invalid [ 584.805195][ T1516] hid (null): bogus close delimiter [ 584.852165][ T42] usb 2-1: USB disconnect, device number 23 [ 585.703538][ T7033] FAULT_INJECTION: forcing a failure. [ 585.703538][ T7033] name failslab, interval 1, probability 0, space 0, times 0 [ 585.703613][ T7033] CPU: 0 UID: 0 PID: 7033 Comm: syz.1.868 Not tainted syzkaller #0 PREEMPT [ 585.703638][ T7033] Hardware name: ARM-Versatile Express [ 585.703649][ T7033] Call trace: [ 585.703667][ T7033] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 585.703720][ T7033] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 585.703728][ T7033] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 585.703753][ T7033] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 585.703782][ T7033] r7:84d81900 r6:00000000 r5:84d81900 r4:83516664 [ 585.703788][ T7033] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 585.703814][ T7033] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 585.703847][ T7033] r8:00000000 r7:84d81900 r6:83c01300 r5:00000dc0 r4:00000068 [ 585.703855][ T7033] [<80594c00>] (should_failslab) from [<80573298>] (__kmalloc_noprof+0xa8/0x3c8) [ 585.703889][ T7033] [<805731f0>] (__kmalloc_noprof) from [<803de4e8>] (alloc_trace_uprobe+0x3c/0x110) [ 585.703923][ T7033] r10:8276176c r9:86b8d2c0 r8:00000000 r7:825475a0 r6:85b31340 r5:00000000 [ 585.703931][ T7033] r4:00000000 [ 585.703937][ T7033] [<803de4ac>] (alloc_trace_uprobe) from [<803df804>] (__trace_uprobe_create+0x260/0xb20) [ 585.703966][ T7033] r8:00000000 r7:873a41c4 r6:00000000 r5:86ee4440 r4:00000000 [ 585.703973][ T7033] [<803df5a4>] (__trace_uprobe_create) from [<803dd7b0>] (trace_probe_create+0x88/0x9c) [ 585.704003][ T7033] r10:00000000 r9:0000000f r8:00000000 r7:0000000f r6:803df5a4 r5:00000002 [ 585.704011][ T7033] r4:873a41c4 [ 585.704018][ T7033] [<803dd728>] (trace_probe_create) from [<803ddf54>] (trace_uprobe_create+0x18/0x1c) [ 585.704045][ T7033] r6:0000000f r5:85ecc000 r4:834fe81c [ 585.704051][ T7033] [<803ddf3c>] (trace_uprobe_create) from [<803da448>] (dyn_event_create+0x30/0x58) [ 585.704073][ T7033] [<803da418>] (dyn_event_create) from [<803de498>] (create_or_delete_trace_uprobe+0x24/0x38) [ 585.704098][ T7033] r5:00001000 r4:85ecc000 [ 585.704104][ T7033] [<803de474>] (create_or_delete_trace_uprobe) from [<803b6bc8>] (trace_parse_run_command+0xfc/0x27c) [ 585.704130][ T7033] [<803b6acc>] (trace_parse_run_command) from [<803de2a0>] (probes_write+0x20/0x28) [ 585.704160][ T7033] r10:81e180bc r9:84d81900 r8:803de280 r7:dfd45f68 r6:20001600 r5:87098b80 [ 585.704169][ T7033] r4:0000000f [ 585.704175][ T7033] [<803de280>] (probes_write) from [<805d01b4>] (vfs_write+0xd4/0x42c) [ 585.704201][ T7033] [<805d00e0>] (vfs_write) from [<805d0680>] (ksys_write+0x74/0xec) [ 585.704232][ T7033] r10:00000004 r9:84d81900 r8:8020029c r7:00000000 r6:00000000 r5:87098b80 [ 585.704240][ T7033] r4:87098b83 [ 585.704247][ T7033] [<805d060c>] (ksys_write) from [<805d0708>] (sys_write+0x10/0x14) [ 585.704275][ T7033] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 585.704281][ T7033] [<805d06f8>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 585.704303][ T7033] Exception stack(0xdfd45fa8 to 0xdfd45ff0) [ 585.704320][ T7033] 5fa0: 00000000 00000000 00000005 20001600 0000000f 00000000 [ 585.704336][ T7033] 5fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76fc40dc [ 585.704368][ T7033] 5fe0: 76fc3e88 76fc3e78 0001903c 00130cf0 [ 595.003073][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.007755][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.427891][ T28] audit: type=1400 audit(596.300:306): avc: denied { mount } for pid=7230 comm="syz.1.883" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 596.864324][ T7049] hsr_slave_0: entered promiscuous mode [ 596.865436][ T7049] hsr_slave_1: entered promiscuous mode [ 596.866052][ T7049] debugfs: 'hsr0' already exists in 'hsr' [ 596.866108][ T7049] Cannot create hsr debugfs directory [ 597.327029][ T28] audit: type=1400 audit(597.200:307): avc: denied { unmount } for pid=3116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 597.383831][ T7049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 597.425041][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.428427][ T7049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 597.446370][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.458919][ T7049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 597.466344][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.483909][ T7049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 597.493427][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.233317][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.119632][ T28] audit: type=1400 audit(600.990:308): avc: denied { write } for pid=7362 comm="syz.1.886" name="md0" dev="tmpfs" ino=2169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 601.202200][ T7365] md: array md1 already initialised! [ 601.336514][ T7365] md: could not open device unknown-block(1,2). [ 601.336715][ T7365] md: error, md_import_device() returned -16 [ 601.780242][ T7365] md: personality for level -11 is not loaded! [ 602.262460][ T7365] md: personality for level -11 is not loaded! [ 602.483447][ T7365] md: md1 stopped. [ 605.349857][ T7049] veth0_vlan: entered promiscuous mode [ 605.450668][ T7049] veth1_vlan: entered promiscuous mode [ 605.653485][ T7049] veth0_macvtap: entered promiscuous mode [ 605.688514][ T7049] veth1_macvtap: entered promiscuous mode [ 605.898831][ T6782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.899975][ T6782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.900075][ T6782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.900141][ T6782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.327469][ T28] audit: type=1400 audit(606.200:309): avc: denied { unmount } for pid=7049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 606.828619][ T7399] syzkaller0: entered promiscuous mode [ 606.828735][ T7399] syzkaller0: entered allmulticast mode [ 606.957572][ T7405] capability: warning: `syz.2.891' uses 32-bit capabilities (legacy support in use) [ 607.572919][ T7409] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 609.474312][ T7430] device-mapper: table: 248:5: ram5 too small for target: start=0, len=8216, dev_size=8192 [ 609.474463][ T7430] device-mapper: core: Cannot calculate initial queue limits [ 609.474483][ T7430] device-mapper: ioctl: unable to set up device queue for new table. [ 612.418004][ T28] audit: type=1400 audit(612.290:310): avc: denied { watch } for pid=7464 comm="syz.2.911" path="/15/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 614.628490][ T7476] fuse: Bad value for 'group_id' [ 614.628659][ T7476] fuse: Bad value for 'group_id' [ 617.133126][ T7498] fuse: Bad value for 'group_id' [ 617.133188][ T7498] fuse: Bad value for 'group_id' [ 617.245882][ T7495] device-mapper: raid: Choosing default region size of 4MiB [ 617.247407][ T7495] device-mapper: table: 248:7: raid: RAID device lookup failure (-ENOENT) [ 617.247586][ T7495] device-mapper: ioctl: error adding target to table [ 618.412484][ T42] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 618.572028][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 618.582466][ T42] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 618.732888][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.733006][ T42] usb 2-1: Product: syz [ 618.733037][ T42] usb 2-1: Manufacturer: syz [ 618.733063][ T42] usb 2-1: SerialNumber: syz [ 618.743466][ T42] usb 2-1: config 0 descriptor?? [ 618.755985][ T42] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 618.973565][ T42] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 624.151991][ T7538] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 624.152042][ T7538] block device autoloading is deprecated and will be removed. [ 624.710607][ T7538] md/raid:md2: device ram5 operational as raid disk 1 [ 624.710765][ T7538] md/raid:md2: device ram4 operational as raid disk 0 [ 624.853585][ T7538] md/raid:md2: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 624.860073][ T7538] md2: detected capacity change from 0 to 8192 [ 625.523025][ T7538] md2: detected capacity change from 8192 to 0 [ 625.523104][ T7538] md: md2 stopped. [ 625.561627][ C1] net_ratelimit: 24 callbacks suppressed [ 626.272619][ T7548] FAULT_INJECTION: forcing a failure. [ 626.272619][ T7548] name fail_futex, interval 1, probability 0, space 0, times 0 [ 626.272797][ T7548] CPU: 1 UID: 0 PID: 7548 Comm: syz.2.932 Not tainted syzkaller #0 PREEMPT [ 626.272850][ T7548] Hardware name: ARM-Versatile Express [ 626.272872][ T7548] Call trace: [ 626.272933][ T7548] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 626.273040][ T7548] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 626.273059][ T7548] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 626.273112][ T7548] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 626.273170][ T7548] r7:ea9b1e38 r6:00000000 r5:8551cb00 r4:834f6880 [ 626.273188][ T7548] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 626.273243][ T7548] [<80a49c18>] (should_fail_ex) from [<80a49e48>] (should_fail+0x14/0x18) [ 626.273391][ T7548] r8:00000000 r7:ea9b1e38 r6:00000004 r5:003562e0 r4:00000000 [ 626.273409][ T7548] [<80a49e34>] (should_fail) from [<8035ab4c>] (get_futex_key+0xa4/0x4a8) [ 626.273461][ T7548] [<8035aaa8>] (get_futex_key) from [<803606ec>] (futex_wait_setup+0x88/0x29c) [ 626.273526][ T7548] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:8551cb00 [ 626.273569][ T7548] r4:7efffffc [ 626.273584][ T7548] [<80360664>] (futex_wait_setup) from [<80360984>] (__futex_wait+0x84/0x110) [ 626.273652][ T7548] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 626.273669][ T7548] r4:8551cb00 [ 626.273680][ T7548] [<80360900>] (__futex_wait) from [<80360a90>] (futex_wait+0x80/0x10c) [ 626.273739][ T7548] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 626.273754][ T7548] [<80360a10>] (futex_wait) from [<8035c1b8>] (do_futex+0x1b4/0x1d0) [ 626.273824][ T7548] r10:000000f0 r9:00000000 r8:8551cb00 r7:00000000 r6:003562e0 r5:00000080 [ 626.273841][ T7548] r4:00000000 [ 626.273852][ T7548] [<8035c004>] (do_futex) from [<8035ca6c>] (sys_futex_time32+0x11c/0x1bc) [ 626.273905][ T7548] r4:00000000 [ 626.273920][ T7548] [<8035c950>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 626.273964][ T7548] Exception stack(0xea9b1fa8 to 0xea9b1ff0) [ 626.273997][ T7548] 1fa0: 00132078 ffffffff 003562e0 00000080 00000000 00000000 [ 626.274037][ T7548] 1fc0: 00132078 ffffffff 76fa27d4 000000f0 00340000 00000000 00000001 76fa20dc [ 626.274063][ T7548] 1fe0: 76fa1f38 76fa1f28 00021e2c 00130cf0 [ 626.274094][ T7548] r9:8551cb00 r8:8020029c r7:000000f0 r6:76fa27d4 r5:ffffffff r4:00132078 [ 626.983531][ T7550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 626.983592][ T7550] block device autoloading is deprecated and will be removed. [ 627.787690][ T7550] md/raid:md2: device ram5 operational as raid disk 1 [ 627.787735][ T7550] md/raid:md2: device ram4 operational as raid disk 0 [ 628.205954][ T7550] md/raid:md2: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 628.208458][ T7550] md2: detected capacity change from 0 to 8192 [ 629.955138][ T28] audit: type=1400 audit(629.830:311): avc: denied { ioctl } for pid=7560 comm="syz.2.935" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10703 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 630.741423][ T7565] FAULT_INJECTION: forcing a failure. [ 630.741423][ T7565] name fail_futex, interval 1, probability 0, space 0, times 0 [ 630.741521][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.2.937 Not tainted syzkaller #0 PREEMPT [ 630.741583][ T7565] Hardware name: ARM-Versatile Express [ 630.741595][ T7565] Call trace: [ 630.741614][ T7565] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 630.741670][ T7565] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 630.741678][ T7565] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 630.741704][ T7565] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 630.741733][ T7565] r7:eaa69e38 r6:00000000 r5:84d60c80 r4:834f6880 [ 630.741740][ T7565] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 630.741767][ T7565] [<80a49c18>] (should_fail_ex) from [<80a49e48>] (should_fail+0x14/0x18) [ 630.741794][ T7565] r8:00000000 r7:eaa69e38 r6:00000004 r5:003562e0 r4:00000000 [ 630.741810][ T7565] [<80a49e34>] (should_fail) from [<8035ab4c>] (get_futex_key+0xa4/0x4a8) [ 630.741867][ T7565] [<8035aaa8>] (get_futex_key) from [<803606ec>] (futex_wait_setup+0x88/0x29c) [ 630.741908][ T7565] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:84d60c80 [ 630.741917][ T7565] r4:7efffffc [ 630.741923][ T7565] [<80360664>] (futex_wait_setup) from [<80360984>] (__futex_wait+0x84/0x110) [ 630.741956][ T7565] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 630.741964][ T7565] r4:84d60c80 [ 630.741970][ T7565] [<80360900>] (__futex_wait) from [<80360a90>] (futex_wait+0x80/0x10c) [ 630.742003][ T7565] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 630.742011][ T7565] [<80360a10>] (futex_wait) from [<8035c1b8>] (do_futex+0x1b4/0x1d0) [ 630.742043][ T7565] r10:000000f0 r9:00000000 r8:84d60c80 r7:00000000 r6:003562e0 r5:00000080 [ 630.742051][ T7565] r4:00000000 [ 630.742057][ T7565] [<8035c004>] (do_futex) from [<8035ca6c>] (sys_futex_time32+0x11c/0x1bc) [ 630.742082][ T7565] r4:00000000 [ 630.742088][ T7565] [<8035c950>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 630.742111][ T7565] Exception stack(0xeaa69fa8 to 0xeaa69ff0) [ 630.742129][ T7565] 9fa0: 00132078 ffffffff 003562e0 00000080 00000000 00000000 [ 630.742145][ T7565] 9fc0: 00132078 ffffffff 76fa27d4 000000f0 00340000 00000000 00000001 76fa20dc [ 630.742156][ T7565] 9fe0: 76fa1f38 76fa1f28 00021e2c 00130cf0 [ 630.742172][ T7565] r9:84d60c80 r8:8020029c r7:000000f0 r6:76fa27d4 r5:ffffffff r4:00132078 [ 630.761658][ C1] net_ratelimit: 29 callbacks suppressed [ 631.202566][ T7567] comedi: valid board names for 8255 driver are: [ 631.202630][ T7567] 8255 [ 631.202655][ T7567] comedi: valid board names for vmk80xx driver are: [ 631.202673][ T7567] vmk80xx [ 631.202688][ T7567] comedi: valid board names for usbduxsigma driver are: [ 631.202705][ T7567] usbduxsigma [ 631.202718][ T7567] comedi: valid board names for usbduxfast driver are: [ 631.202733][ T7567] usbduxfast [ 631.202747][ T7567] comedi: valid board names for usbdux driver are: [ 631.202761][ T7567] usbdux [ 631.202775][ T7567] comedi: valid board names for ni6501 driver are: [ 631.202790][ T7567] ni6501 [ 631.202803][ T7567] comedi: valid board names for dt9812 driver are: [ 631.202819][ T7567] dt9812 [ 631.202832][ T7567] comedi: valid board names for ni_labpc_cs driver are: [ 631.202847][ T7567] ni_labpc_cs [ 631.202862][ T7567] comedi: valid board names for ni_daq_700 driver are: [ 631.202876][ T7567] ni_daq_700 [ 631.202891][ T7567] comedi: valid board names for labpc_pci driver are: [ 631.202920][ T7567] labpc_pci [ 631.202936][ T7567] comedi: valid board names for adl_pci9118 driver are: [ 631.202951][ T7567] pci9118dg [ 631.202964][ T7567] pci9118hg [ 631.202976][ T7567] pci9118hr [ 631.202989][ T7567] comedi: valid board names for 8255_pci driver are: [ 631.203003][ T7567] 8255_pci [ 631.203015][ T7567] comedi: valid board names for comedi_parport driver are: [ 631.203029][ T7567] comedi_parport [ 631.203044][ T7567] comedi: valid board names for comedi_test driver are: [ 631.203057][ T7567] comedi_test [ 631.203071][ T7567] comedi: valid board names for comedi_bond driver are: [ 631.203085][ T7567] comedi_bond [ 631.226748][ T7567] FAULT_INJECTION: forcing a failure. [ 631.226748][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 631.226931][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.2.938 Not tainted syzkaller #0 PREEMPT [ 631.226988][ T7567] Hardware name: ARM-Versatile Express [ 631.227011][ T7567] Call trace: [ 631.227049][ T7567] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 631.227156][ T7567] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 631.227176][ T7567] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 631.227233][ T7567] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 631.227295][ T7567] r7:8459f080 r6:00000000 r5:8459f080 r4:83516664 [ 631.227310][ T7567] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 631.227368][ T7567] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 631.227438][ T7567] r8:00000000 r7:8459f080 r6:83c01240 r5:00000cc0 r4:00000018 [ 631.227455][ T7567] [<80594c00>] (should_failslab) from [<80573298>] (__kmalloc_noprof+0xa8/0x3c8) [ 631.227506][ T7567] [<805731f0>] (__kmalloc_noprof) from [<816cd0bc>] (sock_kmalloc+0x58/0x84) [ 631.227576][ T7567] r10:872fc000 r9:00000014 r8:00000000 r7:85f2ee80 r6:ea9d9e08 r5:00000018 [ 631.227596][ T7567] r4:85f2ef94 [ 631.227611][ T7567] [<816cd064>] (sock_kmalloc) from [<819ce6f8>] (ipv6_sock_ac_join+0xb0/0x4a0) [ 631.227673][ T7567] r5:00000000 r4:872fc000 [ 631.227692][ T7567] [<819ce648>] (ipv6_sock_ac_join) from [<819fb4b4>] (do_ipv6_setsockopt+0xe5c/0xe94) [ 631.227760][ T7567] r10:872fc000 r9:00000014 r8:819fb54c r7:00000000 r6:0000001b r5:85f2ee80 [ 631.227779][ T7567] r4:85f2f680 [ 631.227794][ T7567] [<819fa65c>] (do_ipv6_setsockopt) from [<819fb54c>] (ipv6_setsockopt+0x60/0xbc) [ 631.227856][ T7567] r10:00000126 r9:8459f080 r8:00000014 r7:860ff940 r6:00000014 r5:85f2ee80 [ 631.227876][ T7567] r4:0000001b [ 631.227894][ T7567] [<819fb4f0>] (ipv6_setsockopt) from [<818e0a68>] (tcp_setsockopt+0x3c/0x58) [ 631.227968][ T7567] r6:0000001b r5:00000029 r4:819fb4ec [ 631.227985][ T7567] [<818e0a30>] (tcp_setsockopt) from [<816ca358>] (sock_common_setsockopt+0x38/0x40) [ 631.228036][ T7567] r4:818e0a2c [ 631.228050][ T7567] [<816ca324>] (sock_common_setsockopt) from [<816c553c>] (do_sock_setsockopt+0x70/0xc8) [ 631.228097][ T7567] r4:816ca320 [ 631.228112][ T7567] [<816c54cc>] (do_sock_setsockopt) from [<816c92a0>] (__sys_setsockopt+0x7c/0xc4) [ 631.228169][ T7567] r8:00000000 r7:8708ff00 r6:8708ff01 r5:0000001b r4:00000029 [ 631.228184][ T7567] [<816c9224>] (__sys_setsockopt) from [<816c9304>] (sys_setsockopt+0x1c/0x24) [ 631.228306][ T7567] r8:8020029c r7:00000126 r6:00356318 r5:00000000 r4:00000014 [ 631.228327][ T7567] [<816c92e8>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 631.228377][ T7567] Exception stack(0xea9d9fa8 to 0xea9d9ff0) [ 631.228421][ T7567] 9fa0: 00000014 00000000 00000005 00000029 0000001b 20000080 [ 631.228458][ T7567] 9fc0: 00000014 00000000 00356318 00000126 003562d8 00000000 00000001 76fa20dc [ 631.228484][ T7567] 9fe0: 76fa1e88 76fa1e78 0001903c 00130cf0 [ 632.559209][ T23] usb 2-1: USB disconnect, device number 24 [ 633.772321][ T7593] fuse: Unknown parameter 'grou00000000000000000000' [ 634.657212][ T7602] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 635.023128][ T7602] md: couldn't update array info. -22 [ 635.082141][ T7602] md: could not open device unknown-block(1,4). [ 635.082238][ T7602] md: md_import_device returned -16 [ 635.132036][ T7602] md: could not open device unknown-block(1,5). [ 635.132114][ T7602] md: md_import_device returned -16 [ 635.961586][ C1] net_ratelimit: 25 callbacks suppressed [ 636.993754][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 637.145718][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 637.149473][ T45] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 637.188649][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.188692][ T45] usb 2-1: Product: syz [ 637.188723][ T45] usb 2-1: Manufacturer: syz [ 637.188751][ T45] usb 2-1: SerialNumber: syz [ 637.200438][ T45] usb 2-1: config 0 descriptor?? [ 637.210345][ T45] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 637.419134][ T45] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 638.522215][ T7643] md: couldn't update array info. -22 [ 638.602159][ T7643] md: could not open device unknown-block(1,4). [ 638.602322][ T7643] md: md_import_device returned -16 [ 638.656217][ T7643] md: could not open device unknown-block(1,5). [ 638.656335][ T7643] md: md_import_device returned -16 [ 639.186283][ T7645] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 639.906522][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.907395][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.161715][ C1] net_ratelimit: 51 callbacks suppressed [ 646.361567][ C1] net_ratelimit: 33 callbacks suppressed [ 646.848626][ T7663] syzkaller0: entered promiscuous mode [ 646.848673][ T7663] syzkaller0: entered allmulticast mode [ 647.582324][ T7669] md: couldn't update array info. -22 [ 647.626005][ T7669] md: could not open device unknown-block(1,4). [ 647.626133][ T7669] md: md_import_device returned -16 [ 647.691986][ T7669] md: could not open device unknown-block(1,5). [ 647.692105][ T7669] md: md_import_device returned -16 [ 649.535878][ T28] audit: type=1400 audit(649.410:312): avc: denied { bind } for pid=7676 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 649.548916][ T28] audit: type=1400 audit(649.420:313): avc: denied { listen } for pid=7676 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 649.552179][ T28] audit: type=1400 audit(649.420:314): avc: denied { connect } for pid=7676 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 649.582488][ T28] audit: type=1400 audit(649.450:315): avc: denied { read } for pid=7676 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 651.639045][ T23] usb 2-1: USB disconnect, device number 25 [ 651.801308][ C1] net_ratelimit: 24 callbacks suppressed [ 652.713782][ T7686] md: couldn't update array info. -22 [ 652.782112][ T7686] md: could not open device unknown-block(1,4). [ 652.782292][ T7686] md: md_import_device returned -16 [ 652.953022][ T7686] md: could not open device unknown-block(1,5). [ 652.953184][ T7686] md: md_import_device returned -16 [ 655.378447][ T7695] fuse: Bad value for 'fd' [ 655.903583][ T7696] bond1: entered allmulticast mode [ 655.905190][ T7696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.259158][ T7696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 656.292755][ T7696] macvlan2: entered allmulticast mode [ 656.292786][ T7696] bond0: entered allmulticast mode [ 656.292820][ T7696] bond_slave_0: entered allmulticast mode [ 656.292912][ T7696] bond_slave_1: entered allmulticast mode [ 656.292986][ T7696] bond_slave_0: entered promiscuous mode [ 656.293014][ T7696] bond_slave_1: entered promiscuous mode [ 656.293966][ T7696] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 656.496940][ T7696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.982'. [ 656.731886][ T1516] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 656.881921][ T1516] usb 2-1: Using ep0 maxpacket: 16 [ 656.894961][ T1516] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 656.959696][ T1516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.959717][ T1516] usb 2-1: Product: syz [ 656.959748][ T1516] usb 2-1: Manufacturer: syz [ 656.959766][ T1516] usb 2-1: SerialNumber: syz [ 657.001263][ C1] net_ratelimit: 28 callbacks suppressed [ 657.928024][ T7745] md: couldn't update array info. -22 [ 657.982540][ T7745] md: could not open device unknown-block(1,4). [ 657.982664][ T7745] md: md_import_device returned -16 [ 658.118244][ T7745] md: could not open device unknown-block(1,5). [ 658.118437][ T7745] md: md_import_device returned -16 [ 659.524212][ T28] audit: type=1400 audit(659.400:316): avc: denied { sqpoll } for pid=7748 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 660.112737][ T7755] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 660.393883][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.394390][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.061655][ T7768] device-mapper: ioctl: Invalid target message parameters. [ 662.201424][ C1] net_ratelimit: 31 callbacks suppressed [ 662.371299][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.372221][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.024483][ T7776] comedi: valid board names for 8255 driver are: [ 663.024587][ T7776] 8255 [ 663.024604][ T7776] comedi: valid board names for vmk80xx driver are: [ 663.024622][ T7776] vmk80xx [ 663.024634][ T7776] comedi: valid board names for usbduxsigma driver are: [ 663.024650][ T7776] usbduxsigma [ 663.024664][ T7776] comedi: valid board names for usbduxfast driver are: [ 663.024677][ T7776] usbduxfast [ 663.024690][ T7776] comedi: valid board names for usbdux driver are: [ 663.024705][ T7776] usbdux [ 663.024717][ T7776] comedi: valid board names for ni6501 driver are: [ 663.024731][ T7776] ni6501 [ 663.024743][ T7776] comedi: valid board names for dt9812 driver are: [ 663.024758][ T7776] dt9812 [ 663.024771][ T7776] comedi: valid board names for ni_labpc_cs driver are: [ 663.024786][ T7776] ni_labpc_cs [ 663.024808][ T7776] comedi: valid board names for ni_daq_700 driver are: [ 663.024822][ T7776] ni_daq_700 [ 663.024837][ T7776] comedi: valid board names for labpc_pci driver are: [ 663.024853][ T7776] labpc_pci [ 663.024866][ T7776] comedi: valid board names for adl_pci9118 driver are: [ 663.024881][ T7776] pci9118dg [ 663.024893][ T7776] pci9118hg [ 663.024905][ T7776] pci9118hr [ 663.024918][ T7776] comedi: valid board names for 8255_pci driver are: [ 663.024932][ T7776] 8255_pci [ 663.024944][ T7776] comedi: valid board names for comedi_parport driver are: [ 663.024958][ T7776] comedi_parport [ 663.024971][ T7776] comedi: valid board names for comedi_test driver are: [ 663.024988][ T7776] comedi_test [ 663.025000][ T7776] comedi: valid board names for comedi_bond driver are: [ 663.025014][ T7776] comedi_bond [ 665.644079][ T7782] device-mapper: table: 248:8: crypt: Error decoding and setting key (-EINVAL) [ 665.644110][ T7782] device-mapper: ioctl: error adding target to table [ 667.221756][ T7791] comedi: valid board names for 8255 driver are: [ 667.221855][ T7791] 8255 [ 667.221873][ T7791] comedi: valid board names for vmk80xx driver are: [ 667.221889][ T7791] vmk80xx [ 667.221902][ T7791] comedi: valid board names for usbduxsigma driver are: [ 667.221916][ T7791] usbduxsigma [ 667.221929][ T7791] comedi: valid board names for usbduxfast driver are: [ 667.221944][ T7791] usbduxfast [ 667.221958][ T7791] comedi: valid board names for usbdux driver are: [ 667.221971][ T7791] usbdux [ 667.221983][ T7791] comedi: valid board names for ni6501 driver are: [ 667.221998][ T7791] ni6501 [ 667.222013][ T7791] comedi: valid board names for dt9812 driver are: [ 667.222027][ T7791] dt9812 [ 667.222041][ T7791] comedi: valid board names for ni_labpc_cs driver are: [ 667.222058][ T7791] ni_labpc_cs [ 667.222073][ T7791] comedi: valid board names for ni_daq_700 driver are: [ 667.222088][ T7791] ni_daq_700 [ 667.222103][ T7791] comedi: valid board names for labpc_pci driver are: [ 667.222117][ T7791] labpc_pci [ 667.222130][ T7791] comedi: valid board names for adl_pci9118 driver are: [ 667.222144][ T7791] pci9118dg [ 667.222157][ T7791] pci9118hg [ 667.222170][ T7791] pci9118hr [ 667.222182][ T7791] comedi: valid board names for 8255_pci driver are: [ 667.222197][ T7791] 8255_pci [ 667.222211][ T7791] comedi: valid board names for comedi_parport driver are: [ 667.222225][ T7791] comedi_parport [ 667.222236][ T7791] comedi: valid board names for comedi_test driver are: [ 667.222355][ T7791] comedi_test [ 667.223096][ T7791] comedi: valid board names for comedi_bond driver are: [ 667.223898][ T7791] comedi_bond [ 667.401593][ C1] net_ratelimit: 18 callbacks suppressed [ 667.813517][ T7793] fuse: Unknown parameter 'use00000000000000000000' [ 668.605625][ T6782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.605769][ T6782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.043414][ T6782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.043487][ T6782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.138305][ T6782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.138382][ T6782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.269880][ T6782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.269943][ T6782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.047334][ T6782] pimreg3: left allmulticast mode [ 671.607212][ T45] usb 2-1: USB disconnect, device number 26 [ 671.659188][ T6782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.672262][ T6782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.678469][ T6782] bond0 (unregistering): Released all slaves [ 672.135738][ T6782] hsr_slave_0: left promiscuous mode [ 672.205826][ T6782] hsr_slave_1: left promiscuous mode [ 672.275104][ T6782] veth1_macvtap: left promiscuous mode [ 672.275470][ T6782] veth0_macvtap: left promiscuous mode [ 672.275845][ T6782] veth1_vlan: left promiscuous mode [ 672.276093][ T6782] veth0_vlan: left promiscuous mode [ 672.603041][ C1] net_ratelimit: 47 callbacks suppressed [ 673.074362][ T7829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 673.074413][ T7829] block device autoloading is deprecated and will be removed. [ 673.463527][ T28] audit: type=1400 audit(673.340:317): avc: denied { write } for pid=7827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.920438][ T7829] md: could not open device unknown-block(1,2). [ 673.920625][ T7829] md: md_import_device returned -16 [ 674.609558][ T28] audit: type=1400 audit(674.480:318): avc: denied { write } for pid=7835 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.615636][ T28] audit: type=1400 audit(674.490:319): avc: denied { create } for pid=7841 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 676.806325][ T2971] 8021q: adding VLAN 0 to HW filter on device eth1 [ 677.313099][ T7854] bond0: (slave bond_slave_0): Releasing backup interface [ 677.328429][ T7854] bond_slave_0: left allmulticast mode [ 677.328561][ T7854] bond_slave_0: left promiscuous mode [ 677.397041][ T7854] bond0: (slave bond_slave_1): Releasing backup interface [ 677.459223][ T7854] bond_slave_1: left allmulticast mode [ 677.459312][ T7854] bond_slave_1: left promiscuous mode [ 677.598780][ T4099] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 677.637761][ T4100] bond1: (slave macvlan2): link status definitely down, disabling slave [ 677.721578][ C0] net_ratelimit: 44 callbacks suppressed [ 678.031928][ T7862] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 678.031957][ T7862] block device autoloading is deprecated and will be removed. [ 678.215742][ T7862] md: could not open device unknown-block(1,2). [ 678.215913][ T7862] md: md_import_device returned -16 [ 678.255466][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 679.826129][ T28] audit: type=1400 audit(679.700:320): avc: denied { write } for pid=7877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.022032][ T7879] md: couldn't update array info. -22 [ 680.091343][ T28] audit: type=1400 audit(679.960:321): avc: denied { write } for pid=7882 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.359900][ T2971] 8021q: adding VLAN 0 to HW filter on device eth2 [ 680.381982][ T7879] md: could not open device unknown-block(1,4). [ 680.382148][ T7879] md: md_import_device returned -16 [ 680.666624][ T7885] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 680.666668][ T7885] block device autoloading is deprecated and will be removed. [ 681.592162][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 682.488627][ T28] audit: type=1400 audit(682.360:322): avc: denied { write } for pid=7890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.241514][ C1] net_ratelimit: 20 callbacks suppressed [ 683.568046][ T28] audit: type=1400 audit(683.440:323): avc: denied { write } for pid=7901 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.757412][ T7904] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 683.932162][ T2971] 8021q: adding VLAN 0 to HW filter on device eth3 [ 685.158222][ T28] audit: type=1400 audit(685.030:324): avc: denied { write } for pid=7911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.057405][ T28] audit: type=1400 audit(685.930:325): avc: denied { write } for pid=7923 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.893605][ T2971] 8021q: adding VLAN 0 to HW filter on device eth4 [ 687.658972][ T7937] FAULT_INJECTION: forcing a failure. [ 687.658972][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 687.659123][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.1.1033 Not tainted syzkaller #0 PREEMPT [ 687.659166][ T7937] Hardware name: ARM-Versatile Express [ 687.659186][ T7937] Call trace: [ 687.659217][ T7937] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 687.659304][ T7937] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 687.659320][ T7937] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 687.659369][ T7937] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 687.659419][ T7937] r7:84d5a580 r6:00000000 r5:84d5a580 r4:83516664 [ 687.659431][ T7937] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 687.659476][ T7937] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 687.659531][ T7937] r8:00000000 r7:84d5a580 r6:805e0c30 r5:00000cc0 r4:83cf0b40 [ 687.659543][ T7937] [<80594c00>] (should_failslab) from [<805722c4>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 687.659584][ T7937] [<80572268>] (kmem_cache_alloc_noprof) from [<805e0c30>] (do_getname+0x2c/0x14c) [ 687.659643][ T7937] r10:00000142 r9:84d5a580 r8:00000001 r7:00000000 r6:20000040 r5:82761928 [ 687.659659][ T7937] r4:00000000 [ 687.659670][ T7937] [<805e0c04>] (do_getname) from [<805e6e18>] (getname_flags+0x14/0x18) [ 687.659723][ T7937] r10:00000142 r9:84d5a580 r8:8020029c r7:20000040 r6:ffffff9c r5:dfc59f58 [ 687.659741][ T7937] r4:00000000 r3:00000001 [ 687.659752][ T7937] [<805e6e04>] (getname_flags) from [<805cc6ec>] (do_sys_openat2+0x64/0xf0) [ 687.659791][ T7937] [<805cc688>] (do_sys_openat2) from [<805ccc2c>] (sys_openat+0x88/0xd8) [ 687.659840][ T7937] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 687.659852][ T7937] [<805ccba4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 687.659891][ T7937] Exception stack(0xdfc59fa8 to 0xdfc59ff0) [ 687.659923][ T7937] 9fa0: 00000000 00000000 ffffff9c 20000040 00000000 00000000 [ 687.659951][ T7937] 9fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76fc40dc [ 687.659973][ T7937] 9fe0: 76fc3e88 76fc3e78 0001903c 00130cf0 [ 687.659992][ T7937] r5:00000000 r4:00000000 [ 688.441292][ C1] net_ratelimit: 22 callbacks suppressed [ 688.645621][ T28] audit: type=1400 audit(688.520:326): avc: denied { watch watch_reads } for pid=7938 comm="syz.1.1034" path="/452/file0" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 689.348277][ T7948] md: array md1 already has disks! [ 689.412059][ T7948] md: could not open device unknown-block(1,2). [ 689.412173][ T7948] md: md_import_device returned -16 [ 690.099045][ T7955] comedi: valid board names for 8255 driver are: [ 690.099147][ T7955] 8255 [ 690.099165][ T7955] comedi: valid board names for vmk80xx driver are: [ 690.099182][ T7955] vmk80xx [ 690.099195][ T7955] comedi: valid board names for usbduxsigma driver are: [ 690.099207][ T7955] usbduxsigma [ 690.099220][ T7955] comedi: valid board names for usbduxfast driver are: [ 690.099234][ T7955] usbduxfast [ 690.099262][ T7955] comedi: valid board names for usbdux driver are: [ 690.099278][ T7955] usbdux [ 690.099290][ T7955] comedi: valid board names for ni6501 driver are: [ 690.099305][ T7955] ni6501 [ 690.099319][ T7955] comedi: valid board names for dt9812 driver are: [ 690.099334][ T7955] dt9812 [ 690.099348][ T7955] comedi: valid board names for ni_labpc_cs driver are: [ 690.099363][ T7955] ni_labpc_cs [ 690.099379][ T7955] comedi: valid board names for ni_daq_700 driver are: [ 690.099395][ T7955] ni_daq_700 [ 690.099409][ T7955] comedi: valid board names for labpc_pci driver are: [ 690.099428][ T7955] labpc_pci [ 690.099442][ T7955] comedi: valid board names for adl_pci9118 driver are: [ 690.099459][ T7955] pci9118dg [ 690.099473][ T7955] pci9118hg [ 690.099486][ T7955] pci9118hr [ 690.099501][ T7955] comedi: valid board names for 8255_pci driver are: [ 690.099518][ T7955] 8255_pci [ 690.099531][ T7955] comedi: valid board names for comedi_parport driver are: [ 690.099571][ T7955] comedi_parport [ 690.099931][ T7955] comedi: valid board names for comedi_test driver are: [ 690.099978][ T7955] comedi_test [ 690.099992][ T7955] comedi: valid board names for comedi_bond driver are: [ 690.100008][ T7955] comedi_bond [ 690.144843][ T7955] FAULT_INJECTION: forcing a failure. [ 690.144843][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 690.145017][ T7955] CPU: 0 UID: 0 PID: 7955 Comm: syz.1.1038 Not tainted syzkaller #0 PREEMPT [ 690.145073][ T7955] Hardware name: ARM-Versatile Express [ 690.145097][ T7955] Call trace: [ 690.145138][ T7955] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 690.145289][ T7955] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 690.145309][ T7955] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 690.145364][ T7955] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 690.145428][ T7955] r7:84d66400 r6:00000000 r5:84d66400 r4:83516664 [ 690.145445][ T7955] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 690.145503][ T7955] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 690.145601][ T7955] r8:00000000 r7:84d66400 r6:83c01240 r5:00000cc0 r4:00000018 [ 690.145619][ T7955] [<80594c00>] (should_failslab) from [<80573298>] (__kmalloc_noprof+0xa8/0x3c8) [ 690.145674][ T7955] [<805731f0>] (__kmalloc_noprof) from [<816cd0bc>] (sock_kmalloc+0x58/0x84) [ 690.145743][ T7955] r10:86d22000 r9:00000014 r8:00000000 r7:85f2dd80 r6:dfd51e08 r5:00000018 [ 690.145766][ T7955] r4:85f2de94 [ 690.145782][ T7955] [<816cd064>] (sock_kmalloc) from [<819ce6f8>] (ipv6_sock_ac_join+0xb0/0x4a0) [ 690.145842][ T7955] r5:00000000 r4:86d22000 [ 690.145859][ T7955] [<819ce648>] (ipv6_sock_ac_join) from [<819fb4b4>] (do_ipv6_setsockopt+0xe5c/0xe94) [ 690.145925][ T7955] r10:86d22000 r9:00000014 r8:819fb54c r7:00000000 r6:0000001b r5:85f2dd80 [ 690.145946][ T7955] r4:85f2e580 [ 690.145961][ T7955] [<819fa65c>] (do_ipv6_setsockopt) from [<819fb54c>] (ipv6_setsockopt+0x60/0xbc) [ 690.146026][ T7955] r10:00000126 r9:84d66400 r8:00000014 r7:860bd1c0 r6:00000014 r5:85f2dd80 [ 690.146046][ T7955] r4:0000001b [ 690.146064][ T7955] [<819fb4f0>] (ipv6_setsockopt) from [<818e0a68>] (tcp_setsockopt+0x3c/0x58) [ 690.146125][ T7955] r6:0000001b r5:00000029 r4:819fb4ec [ 690.146142][ T7955] [<818e0a30>] (tcp_setsockopt) from [<816ca358>] (sock_common_setsockopt+0x38/0x40) [ 690.146202][ T7955] r4:818e0a2c [ 690.146217][ T7955] [<816ca324>] (sock_common_setsockopt) from [<816c553c>] (do_sock_setsockopt+0x70/0xc8) [ 690.146282][ T7955] r4:816ca320 [ 690.146300][ T7955] [<816c54cc>] (do_sock_setsockopt) from [<816c92a0>] (__sys_setsockopt+0x7c/0xc4) [ 690.146364][ T7955] r8:00000000 r7:8708f700 r6:8708f701 r5:0000001b r4:00000029 [ 690.146387][ T7955] [<816c9224>] (__sys_setsockopt) from [<816c9304>] (sys_setsockopt+0x1c/0x24) [ 690.146454][ T7955] r8:8020029c r7:00000126 r6:00356318 r5:00000000 r4:00000014 [ 690.146473][ T7955] [<816c92e8>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 690.146523][ T7955] Exception stack(0xdfd51fa8 to 0xdfd51ff0) [ 690.146561][ T7955] 1fa0: 00000014 00000000 00000005 00000029 0000001b 20000080 [ 690.146596][ T7955] 1fc0: 00000014 00000000 00356318 00000126 003562d8 00000000 00000001 76fc40dc [ 690.146624][ T7955] 1fe0: 76fc3e88 76fc3e78 0001903c 00130cf0 [ 690.552894][ T7963] fuse: Unknown parameter '0x0000000000000003' [ 691.543855][ T7977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 691.972176][ T7981] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1051'. [ 693.629031][ T8001] FAULT_INJECTION: forcing a failure. [ 693.629031][ T8001] name failslab, interval 1, probability 0, space 0, times 0 [ 693.629123][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.1.1061 Not tainted syzkaller #0 PREEMPT [ 693.629151][ T8001] Hardware name: ARM-Versatile Express [ 693.629162][ T8001] Call trace: [ 693.629182][ T8001] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 693.629238][ T8001] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 693.629257][ T8001] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 693.629287][ T8001] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 693.629317][ T8001] r7:8553a580 r6:00000000 r5:8553a580 r4:83516664 [ 693.629325][ T8001] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 693.629352][ T8001] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 693.629387][ T8001] r8:00000000 r7:8553a580 r6:805e0c30 r5:00000cc0 r4:83cf0b40 [ 693.629395][ T8001] [<80594c00>] (should_failslab) from [<805722c4>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 693.629420][ T8001] [<80572268>] (kmem_cache_alloc_noprof) from [<805e0c30>] (do_getname+0x2c/0x14c) [ 693.629456][ T8001] r10:00000142 r9:8553a580 r8:00000001 r7:00000000 r6:20000040 r5:82761928 [ 693.629465][ T8001] r4:00000000 [ 693.629472][ T8001] [<805e0c04>] (do_getname) from [<805e6e18>] (getname_flags+0x14/0x18) [ 693.629504][ T8001] r10:00000142 r9:8553a580 r8:8020029c r7:20000040 r6:ffffff9c r5:e0429f58 [ 693.629514][ T8001] r4:00000000 r3:00000001 [ 693.629521][ T8001] [<805e6e04>] (getname_flags) from [<805cc6ec>] (do_sys_openat2+0x64/0xf0) [ 693.629600][ T8001] [<805cc688>] (do_sys_openat2) from [<805ccc2c>] (sys_openat+0x88/0xd8) [ 693.629641][ T8001] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 693.629648][ T8001] [<805ccba4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 693.629672][ T8001] Exception stack(0xe0429fa8 to 0xe0429ff0) [ 693.629691][ T8001] 9fa0: 00000000 00000000 ffffff9c 20000040 00000000 00000000 [ 693.629707][ T8001] 9fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76fc40dc [ 693.629721][ T8001] 9fe0: 76fc3e88 76fc3e78 0001903c 00130cf0 [ 693.629732][ T8001] r5:00000000 r4:00000000 [ 693.643340][ C1] net_ratelimit: 22 callbacks suppressed [ 694.014537][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 694.476084][ T28] audit: type=1400 audit(694.350:327): avc: denied { write } for pid=8011 comm="syz.1.1064" name="core" dev="configfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.479634][ T28] audit: type=1400 audit(694.350:328): avc: denied { write } for pid=8011 comm="syz.1.1064" name="rd_mcp_0" dev="configfs" ino=12106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.521802][ T28] audit: type=1400 audit(694.390:329): avc: denied { write } for pid=8011 comm="syz.1.1064" name="rd_mcp_0" dev="configfs" ino=12106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.521977][ T28] audit: type=1400 audit(694.390:330): avc: denied { remove_name } for pid=8011 comm="syz.1.1064" name="dev0" dev="configfs" ino=12107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.522042][ T28] audit: type=1400 audit(694.390:331): avc: denied { rmdir } for pid=8011 comm="syz.1.1064" name="dev0" dev="configfs" ino=12107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 695.067017][ T8016] FAULT_INJECTION: forcing a failure. [ 695.067017][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 695.067197][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.1.1066 Not tainted syzkaller #0 PREEMPT [ 695.067267][ T8016] Hardware name: ARM-Versatile Express [ 695.067292][ T8016] Call trace: [ 695.067334][ T8016] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 695.067441][ T8016] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 695.067462][ T8016] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 695.067516][ T8016] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 695.067576][ T8016] r7:8554b200 r6:00000000 r5:8554b200 r4:83516664 [ 695.067593][ T8016] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 695.067651][ T8016] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 695.067719][ T8016] r8:00000000 r7:8554b200 r6:805e0c30 r5:00000cc0 r4:83cf0b40 [ 695.067738][ T8016] [<80594c00>] (should_failslab) from [<805722c4>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 695.067794][ T8016] [<80572268>] (kmem_cache_alloc_noprof) from [<805e0c30>] (do_getname+0x2c/0x14c) [ 695.067873][ T8016] r10:00000142 r9:8554b200 r8:00000001 r7:00000000 r6:20000040 r5:82761928 [ 695.067895][ T8016] r4:00000000 [ 695.067910][ T8016] [<805e0c04>] (do_getname) from [<805e6e18>] (getname_flags+0x14/0x18) [ 695.067977][ T8016] r10:00000142 r9:8554b200 r8:8020029c r7:20000040 r6:ffffff9c r5:e855df58 [ 695.068000][ T8016] r4:00000000 r3:00000001 [ 695.068015][ T8016] [<805e6e04>] (getname_flags) from [<805cc6ec>] (do_sys_openat2+0x64/0xf0) [ 695.068068][ T8016] [<805cc688>] (do_sys_openat2) from [<805ccc2c>] (sys_openat+0x88/0xd8) [ 695.068129][ T8016] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 695.068147][ T8016] [<805ccba4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 695.068196][ T8016] Exception stack(0xe855dfa8 to 0xe855dff0) [ 695.068246][ T8016] dfa0: 00000000 00000000 ffffff9c 20000040 00000000 00000000 [ 695.068286][ T8016] dfc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76fc40dc [ 695.068315][ T8016] dfe0: 76fc3e88 76fc3e78 0001903c 00130cf0 [ 695.068340][ T8016] r5:00000000 r4:00000000 [ 698.258805][ T8032] FAULT_INJECTION: forcing a failure. [ 698.258805][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 698.258975][ T8032] CPU: 0 UID: 0 PID: 8032 Comm: syz.2.1072 Not tainted syzkaller #0 PREEMPT [ 698.259028][ T8032] Hardware name: ARM-Versatile Express [ 698.259054][ T8032] Call trace: [ 698.259096][ T8032] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 698.259205][ T8032] r7:60000013 r6:60000013 r5:82541264 r4:00000000 [ 698.259226][ T8032] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 698.259283][ T8032] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 698.259347][ T8032] r7:845d6400 r6:00000000 r5:845d6400 r4:83516664 [ 698.259367][ T8032] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 698.259429][ T8032] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 698.259501][ T8032] r8:00000000 r7:845d6400 r6:805e0c30 r5:00000cc0 r4:83cf0b40 [ 698.259517][ T8032] [<80594c00>] (should_failslab) from [<805722c4>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 698.259565][ T8032] [<80572268>] (kmem_cache_alloc_noprof) from [<805e0c30>] (do_getname+0x2c/0x14c) [ 698.259641][ T8032] r10:00000142 r9:845d6400 r8:00000001 r7:00000000 r6:20000040 r5:82761928 [ 698.259664][ T8032] r4:00000000 [ 698.259678][ T8032] [<805e0c04>] (do_getname) from [<805e6e18>] (getname_flags+0x14/0x18) [ 698.259747][ T8032] r10:00000142 r9:845d6400 r8:8020029c r7:20000040 r6:ffffff9c r5:ea795f58 [ 698.259770][ T8032] r4:00000000 r3:00000001 [ 698.259785][ T8032] [<805e6e04>] (getname_flags) from [<805cc6ec>] (do_sys_openat2+0x64/0xf0) [ 698.259838][ T8032] [<805cc688>] (do_sys_openat2) from [<805ccc2c>] (sys_openat+0x88/0xd8) [ 698.259909][ T8032] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 698.259926][ T8032] [<805ccba4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 698.259975][ T8032] Exception stack(0xea795fa8 to 0xea795ff0) [ 698.260016][ T8032] 5fa0: 00000000 00000000 ffffff9c 20000040 00000000 00000000 [ 698.260053][ T8032] 5fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76fa20dc [ 698.260080][ T8032] 5fe0: 76fa1e88 76fa1e78 0001903c 00130cf0 [ 698.260106][ T8032] r5:00000000 r4:00000000 [ 699.001687][ C0] net_ratelimit: 21 callbacks suppressed [ 699.922332][ T28] audit: type=1400 audit(699.800:332): avc: denied { write } for pid=8034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.199609][ T28] audit: type=1400 audit(701.070:333): avc: denied { write } for pid=8043 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.375252][ T28] audit: type=1400 audit(701.250:334): avc: denied { create } for pid=8044 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 701.415088][ T28] audit: type=1400 audit(701.290:335): avc: denied { ioctl } for pid=8044 comm="syz.1.1077" path="socket:[12176]" dev="sockfs" ino=12176 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 702.921383][ T28] audit: type=1400 audit(702.790:336): avc: denied { write } for pid=8052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.792472][ T28] audit: type=1400 audit(703.660:337): avc: denied { write } for pid=8063 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.281645][ C1] net_ratelimit: 19 callbacks suppressed [ 705.829469][ T28] audit: type=1400 audit(705.700:338): avc: denied { write } for pid=8077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.062200][ T8094] md: couldn't update array info. -22 [ 707.110003][ T8094] md: could not open device unknown-block(1,4). [ 707.110224][ T8094] md: md_import_device returned -16 [ 707.398856][ T28] audit: type=1400 audit(707.270:339): avc: denied { write } for pid=8091 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.279084][ T28] audit: type=1400 audit(709.150:340): avc: denied { write } for pid=8102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.481482][ C1] net_ratelimit: 22 callbacks suppressed [ 709.937088][ T8108] comedi: valid board names for 8255 driver are: [ 709.937188][ T8108] 8255 [ 709.937206][ T8108] comedi: valid board names for vmk80xx driver are: [ 709.937224][ T8108] vmk80xx [ 709.937237][ T8108] comedi: valid board names for usbduxsigma driver are: [ 709.937253][ T8108] usbduxsigma [ 709.937265][ T8108] comedi: valid board names for usbduxfast driver are: [ 709.937280][ T8108] usbduxfast [ 709.937292][ T8108] comedi: valid board names for usbdux driver are: [ 709.937306][ T8108] usbdux [ 709.937327][ T8108] comedi: valid board names for ni6501 driver are: [ 709.937342][ T8108] ni6501 [ 709.937353][ T8108] comedi: valid board names for dt9812 driver are: [ 709.937367][ T8108] dt9812 [ 709.937379][ T8108] comedi: valid board names for ni_labpc_cs driver are: [ 709.937392][ T8108] ni_labpc_cs [ 709.937403][ T8108] comedi: valid board names for ni_daq_700 driver are: [ 709.937416][ T8108] ni_daq_700 [ 709.937429][ T8108] comedi: valid board names for labpc_pci driver are: [ 709.937444][ T8108] labpc_pci [ 709.937457][ T8108] comedi: valid board names for adl_pci9118 driver are: [ 709.937471][ T8108] pci9118dg [ 709.937483][ T8108] pci9118hg [ 709.937494][ T8108] pci9118hr [ 709.937505][ T8108] comedi: valid board names for 8255_pci driver are: [ 709.937518][ T8108] 8255_pci [ 709.937560][ T8108] comedi: valid board names for comedi_parport driver are: [ 709.937582][ T8108] comedi_parport [ 709.937595][ T8108] comedi: valid board names for comedi_test driver are: [ 709.937610][ T8108] comedi_test [ 709.937624][ T8108] comedi: valid board names for comedi_bond driver are: [ 709.937638][ T8108] comedi_bond [ 710.233356][ T28] audit: type=1400 audit(710.110:341): avc: denied { write } for pid=8109 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.744779][ T8112] lo: entered promiscuous mode [ 710.755348][ T8112] tunl0: entered promiscuous mode [ 710.758278][ T8112] gre0: entered promiscuous mode [ 710.832339][ T8112] gretap0: entered promiscuous mode [ 710.892589][ T8112] erspan0: entered promiscuous mode [ 710.914131][ T8112] ip_vti0: entered promiscuous mode [ 710.930882][ T8112] ip6_vti0: entered promiscuous mode [ 710.944437][ T8112] sit0: entered promiscuous mode [ 710.949046][ T8112] ip6tnl0: entered promiscuous mode [ 711.183940][ T8112] ip6gre0: entered promiscuous mode [ 711.223997][ T8112] syz_tun: entered promiscuous mode [ 711.278267][ T8112] ip6gretap0: entered promiscuous mode [ 711.289251][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1097'. [ 711.306460][ T8112] vcan0: entered promiscuous mode [ 711.477232][ T8112] bond0: entered promiscuous mode [ 711.499701][ T8112] nlmon0: entered promiscuous mode [ 711.513085][ T8112] vxcan0: entered promiscuous mode [ 711.523127][ T8112] vxcan1: entered promiscuous mode [ 711.526571][ T8112] veth0: entered promiscuous mode [ 711.536611][ T8112] veth1: entered promiscuous mode [ 711.575882][ T8112] wg0: entered promiscuous mode [ 711.742018][ T8112] wg1: entered promiscuous mode [ 711.752242][ T8112] wg2: entered promiscuous mode [ 711.754684][ T8112] veth0_to_bridge: entered promiscuous mode [ 711.756737][ T8112] bridge_slave_0: entered promiscuous mode [ 711.764808][ T8112] veth1_to_bridge: entered promiscuous mode [ 711.768130][ T8112] bridge_slave_1: entered promiscuous mode [ 711.770704][ T8112] veth0_to_bond: entered promiscuous mode [ 711.783474][ T8112] bond_slave_0: entered promiscuous mode [ 711.788359][ T8112] veth1_to_bond: entered promiscuous mode [ 711.797988][ T8112] bond_slave_1: entered promiscuous mode [ 711.800067][ T8112] veth0_to_team: entered promiscuous mode [ 711.812287][ T8112] team_slave_0: entered promiscuous mode [ 711.843065][ T8112] veth1_to_team: entered promiscuous mode [ 711.844949][ T8112] team_slave_1: entered promiscuous mode [ 711.845318][ T8112] veth0_to_batadv: entered promiscuous mode [ 711.847751][ T8112] batadv_slave_0: entered promiscuous mode [ 711.849436][ T8112] veth1_to_batadv: entered promiscuous mode [ 711.873725][ T8112] batadv_slave_1: entered promiscuous mode [ 712.050172][ T8112] xfrm0: entered promiscuous mode [ 712.116686][ T8112] veth0_to_hsr: entered promiscuous mode [ 712.208229][ T8112] veth1_to_hsr: entered promiscuous mode [ 712.220475][ T8112] hsr0: entered promiscuous mode [ 712.248002][ T8112] veth1_virt_wifi: entered promiscuous mode [ 712.284888][ T8112] veth0_virt_wifi: entered promiscuous mode [ 712.425011][ T8112] vlan0: entered promiscuous mode [ 712.435850][ T8112] vlan1: entered promiscuous mode [ 712.576629][ T8112] macvlan0: entered promiscuous mode [ 712.592435][ T8112] macvlan1: entered promiscuous mode [ 712.605578][ T8112] ipvlan0: entered promiscuous mode [ 712.607158][ T8112] ipvlan1: entered promiscuous mode [ 712.700803][ T8112] macvtap0: entered promiscuous mode [ 712.734422][ T8112] macsec0: entered promiscuous mode [ 712.766380][ T8112] geneve0: entered promiscuous mode [ 712.795707][ T8112] geneve1: entered promiscuous mode [ 712.836958][ T8112] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 712.856376][ T8112] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 712.893029][ T8112] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 712.966984][ T8112] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 712.972017][ T8112] ip6tnl1: entered promiscuous mode [ 712.983686][ T8112] bond1: entered promiscuous mode [ 712.983784][ T8112] macvlan2: entered promiscuous mode [ 712.985110][ T8112] bond1: left allmulticast mode [ 712.985171][ T8112] macvlan2: left allmulticast mode [ 712.985434][ T8112] bond0: left allmulticast mode [ 713.096694][ T4100] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.096868][ T4100] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.096978][ T4100] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.097054][ T4100] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.018246][ T8125] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 714.681668][ C1] net_ratelimit: 101 callbacks suppressed [ 714.762368][ T8136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 714.821938][ T8136] md: couldn't update array info. -22 [ 714.872347][ T8136] md: could not open device unknown-block(1,4). [ 714.872525][ T8136] md: md_import_device returned -16 [ 714.912748][ T8136] md: could not open device unknown-block(1,5). [ 714.912920][ T8136] md: md_import_device returned -16 [ 715.167420][ T8136] md2: detected capacity change from 8192 to 0 [ 715.167438][ T8136] md: md2 stopped. [ 715.605503][ T8138] FAULT_INJECTION: forcing a failure. [ 715.605503][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 715.605713][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT [ 715.605769][ T8138] Hardware name: ARM-Versatile Express [ 715.605793][ T8138] Call trace: [ 715.605834][ T8138] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 715.605944][ T8138] r7:600f0113 r6:600f0113 r5:82541264 r4:00000000 [ 715.605966][ T8138] [<80201ae4>] (show_stack) from [<8021f2e0>] (dump_stack_lvl+0x5c/0x70) [ 715.606019][ T8138] [<8021f284>] (dump_stack_lvl) from [<8021f30c>] (dump_stack+0x18/0x1c) [ 715.606077][ T8138] r7:00000110 r6:00000000 r5:845dbe80 r4:83516664 [ 715.606092][ T8138] [<8021f2f4>] (dump_stack) from [<80a49dd4>] (should_fail_ex+0x1bc/0x21c) [ 715.606147][ T8138] [<80a49c18>] (should_fail_ex) from [<80594c6c>] (should_failslab+0x6c/0x94) [ 715.606209][ T8138] r8:00000000 r7:00000110 r6:8092a78c r5:00000cc0 r4:83c01480 [ 715.606225][ T8138] [<80594c00>] (should_failslab) from [<805748cc>] (__kmalloc_cache_node_noprof+0x5c/0x34c) [ 715.606276][ T8138] [<80574870>] (__kmalloc_cache_node_noprof) from [<8092a78c>] (kyber_init_hctx+0x30/0x1ec) [ 715.606340][ T8138] r10:00000000 r9:00000000 r8:86bc6200 r7:8354fd78 r6:84f0ec00 r5:00000000 [ 715.606362][ T8138] r4:84f0ec00 [ 715.606386][ T8138] [<8092a75c>] (kyber_init_hctx) from [<8090a3a4>] (blk_mq_init_sched+0xd0/0x188) [ 715.606452][ T8138] r8:86bc6200 r7:8354fd78 r6:84f0ec00 r5:00000000 r4:84e18720 [ 715.606468][ T8138] [<8090a2d4>] (blk_mq_init_sched) from [<808ea8b4>] (elevator_switch+0xc8/0x1cc) [ 715.606532][ T8138] r10:84e188f0 r9:00400140 r8:84f0fa1c r7:ea9d5d38 r6:00000000 r5:8354fd78 [ 715.606552][ T8138] r4:84e18720 r3:845dbe80 [ 715.606566][ T8138] [<808ea7ec>] (elevator_switch) from [<808eace4>] (elevator_change+0x120/0x17c) [ 715.606628][ T8138] r9:00400140 r8:84f0fa1c r7:845dbe80 r6:00000000 r5:ea9d5d38 r4:84e18720 [ 715.606643][ T8138] [<808eabc4>] (elevator_change) from [<808eb79c>] (elv_iosched_store+0x194/0x1ec) [ 715.606704][ T8138] r10:87733f10 r9:84f0e800 r8:8354fd78 r7:84f0fa9c r6:84e18720 r5:00000005 [ 715.606722][ T8138] r4:8354fd78 [ 715.606736][ T8138] [<808eb608>] (elv_iosched_store) from [<808f27c0>] (queue_attr_store+0xd4/0xf4) [ 715.606792][ T8138] r8:84f0e8f4 r7:88a84640 r6:88a84640 r5:00000005 r4:81ef7de8 [ 715.606816][ T8138] [<808f26ec>] (queue_attr_store) from [<806b0c60>] (sysfs_kf_write+0x70/0x7c) [ 715.606876][ T8138] r9:00000000 r8:84f0e8f4 r7:88a84640 r6:81ef7944 r5:808f26ec r4:00000005 [ 715.606892][ T8138] [<806b0bf0>] (sysfs_kf_write) from [<806aec40>] (kernfs_fop_write_iter+0x134/0x214) [ 715.606946][ T8138] r9:00000000 r8:00000000 r7:ea9d5f08 r6:87733f00 r5:00000005 r4:88a84640 [ 715.606961][ T8138] [<806aeb0c>] (kernfs_fop_write_iter) from [<805d035c>] (vfs_write+0x27c/0x42c) [ 715.607020][ T8138] r10:81e30c8c r9:845dbe80 r8:806aeb0c r7:ea9d5f68 r6:200001c0 r5:85b2f880 [ 715.607037][ T8138] r4:00000005 [ 715.607050][ T8138] [<805d00e0>] (vfs_write) from [<805d0680>] (ksys_write+0x74/0xec) [ 715.607109][ T8138] r10:00000004 r9:845dbe80 r8:8020029c r7:00000000 r6:00000000 r5:85b2f880 [ 715.607125][ T8138] r4:85b2f883 [ 715.607139][ T8138] [<805d060c>] (ksys_write) from [<805d0708>] (sys_write+0x10/0x14) [ 715.607197][ T8138] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 715.607215][ T8138] [<805d06f8>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 715.607266][ T8138] Exception stack(0xea9d5fa8 to 0xea9d5ff0) [ 715.607307][ T8138] 5fa0: 00000000 00000000 00000004 200001c0 00000005 00000000 [ 715.607343][ T8138] 5fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76fc40dc [ 715.607378][ T8138] 5fe0: 76fc3e88 76fc3e78 0001903c 00130cf0 [ 715.608060][ T8138] elv: switch to "kyber" failed, falling back to "none" [ 715.745657][ T8142] comedi: valid board names for 8255 driver are: [ 715.745768][ T8142] 8255 [ 715.745796][ T8142] comedi: valid board names for vmk80xx driver are: [ 715.745818][ T8142] vmk80xx [ 715.745832][ T8142] comedi: valid board names for usbduxsigma driver are: [ 715.745846][ T8142] usbduxsigma [ 715.745858][ T8142] comedi: valid board names for usbduxfast driver are: [ 715.745872][ T8142] usbduxfast [ 715.745885][ T8142] comedi: valid board names for usbdux driver are: [ 715.745899][ T8142] usbdux [ 715.745912][ T8142] comedi: valid board names for ni6501 driver are: [ 715.745926][ T8142] ni6501 [ 715.745940][ T8142] comedi: valid board names for dt9812 driver are: [ 715.745954][ T8142] dt9812 [ 715.745967][ T8142] comedi: valid board names for ni_labpc_cs driver are: [ 715.745980][ T8142] ni_labpc_cs [ 715.745993][ T8142] comedi: valid board names for ni_daq_700 driver are: [ 715.746007][ T8142] ni_daq_700 [ 715.746020][ T8142] comedi: valid board names for labpc_pci driver are: [ 715.746034][ T8142] labpc_pci [ 715.746047][ T8142] comedi: valid board names for adl_pci9118 driver are: [ 715.746061][ T8142] pci9118dg [ 715.746073][ T8142] pci9118hg [ 715.746086][ T8142] pci9118hr [ 715.746099][ T8142] comedi: valid board names for 8255_pci driver are: [ 715.746113][ T8142] 8255_pci [ 715.746125][ T8142] comedi: valid board names for comedi_parport driver are: [ 715.746140][ T8142] comedi_parport [ 715.746153][ T8142] comedi: valid board names for comedi_test driver are: [ 715.746167][ T8142] comedi_test [ 715.746179][ T8142] comedi: valid board names for comedi_bond driver are: [ 715.746192][ T8142] comedi_bond [ 716.749626][ T8151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 717.052398][ T8151] md: md2 stopped. [ 717.881976][ T7852] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 718.034628][ T7852] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 718.034887][ T7852] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 718.045386][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.045575][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.045633][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.059888][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.060034][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.060085][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.085766][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.085923][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.085971][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.097632][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.097772][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.097821][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.114946][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.115092][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.115142][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.131844][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.132014][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.132069][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.137297][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.137432][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.137479][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.154031][ T7852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.154188][ T7852] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.154244][ T7852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 718.218827][ T7852] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 718.218856][ T7852] usb 2-1: Product: syz [ 718.218880][ T7852] usb 2-1: Manufacturer: syz [ 718.218901][ T7852] usb 2-1: SerialNumber: syz [ 718.238613][ T7852] usb 2-1: config 0 descriptor?? [ 718.308564][ T7852] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 718.699746][ T45] usb 2-1: USB disconnect, device number 27 [ 718.708147][ T45] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 719.036895][ T8180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 719.123449][ T8180] md: could not open device unknown-block(1,3). [ 719.998120][ T8191] 8<--- cut here --- [ 719.998251][ T8191] Unable to handle kernel paging request at virtual address fee03f03 when write [ 719.998371][ T8191] [fee03f03] *pgd=80000080007003, *pmd=00000000 [ 719.999362][ T8191] Internal error: Oops: a06 [#1] SMP ARM [ 720.003052][ T8191] Modules linked in: [ 720.003527][ T8191] CPU: 0 UID: 0 PID: 8191 Comm: syz.2.1119 Not tainted syzkaller #0 PREEMPT [ 720.003843][ T8191] Hardware name: ARM-Versatile Express [ 720.004066][ T8191] PC is at subdev_8255_io+0x60/0x6c [ 720.004418][ T8191] LR is at subdev_8255_io+0x4c/0x6c [ 720.004651][ T8191] pc : [<8153e01c>] lr : [<8153e008>] psr: 60000013 [ 720.005098][ T8191] sp : dfcddcb8 ip : dfcddcb8 fp : dfcddcd4 [ 720.005329][ T8191] r10: 00003f00 r9 : 00000004 r8 : dfcddda4 [ 720.005756][ T8191] r7 : 00000000 r6 : 0000009b r5 : 83f3b3c0 r4 : 00003f03 [ 720.006139][ T8191] r3 : 0000009b r2 : fee03f03 r1 : 00000001 r0 : 83f3b3c0 [ 720.006519][ T8191] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 720.006845][ T8191] Control: 30c5387d Table: 874a8900 DAC: fffffffd [ 720.007171][ T8191] Register r0 information: slab kmalloc-192 start 83f3b3c0 pointer offset 0 size 192 [ 720.008304][ T8191] Register r1 information: non-paged memory [ 720.008839][ T8191] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 720.009449][ T8191] Register r3 information: non-paged memory [ 720.009725][ T8191] Register r4 information: non-paged memory [ 720.010010][ T8191] Register r5 information: slab kmalloc-192 start 83f3b3c0 pointer offset 0 size 192 [ 720.010462][ T8191] Register r6 information: non-paged memory [ 720.010729][ T8191] Register r7 information: NULL pointer [ 720.011093][ T8191] Register r8 information: 2-page vmalloc region starting at 0xdfcdc000 allocated at kernel_clone+0xc4/0x440 [ 720.011571][ T8191] Register r9 information: non-paged memory [ 720.011858][ T8191] Register r10 information: non-paged memory [ 720.012137][ T8191] Register r11 information: 2-page vmalloc region starting at 0xdfcdc000 allocated at kernel_clone+0xc4/0x440 [ 720.012597][ T8191] Register r12 information: 2-page vmalloc region starting at 0xdfcdc000 allocated at kernel_clone+0xc4/0x440 [ 720.013094][ T8191] Process syz.2.1119 (pid: 8191, stack limit = 0xdfcdc000) [ 720.013445][ T8191] Stack: (0xdfcddcb8 to 0xdfcde000) [ 720.013713][ T8191] dca0: 8153dfbc 00003f00 [ 720.014086][ T8191] dcc0: 83f3b3c0 00000000 dfcddcf4 dfcddcd8 8153dcf8 8153dfc8 00003f00 805731fc [ 720.014443][ T8191] dce0: 86cba000 86cba000 dfcddd14 dfcddcf8 8153e0b0 8153dcac 83f3b3c0 00000000 [ 720.014738][ T8191] dd00: 86cba000 00000000 dfcddd54 dfcddd18 8153e260 8153e034 ffffffff 00000004 [ 720.014960][ T8191] dd20: 8341e340 00000000 00000000 835de4e8 83f3b3c0 00000000 dfcddd90 83f3b3c0 [ 720.015166][ T8191] dd40: 00000000 83737b38 dfcddd8c dfcddd58 8152cbe4 8153e1f8 40946400 00000000 [ 720.015383][ T8191] dd60: dfcddd7c 20001f40 83f3b3c0 b5403587 40946400 00000001 00000003 845d6400 [ 720.015661][ T8191] dd80: dfcdde4c dfcddd90 81528400 8152cae8 35353238 00000000 00000000 00000000 [ 720.016036][ T8191] dda0: 00000000 00003f00 00000005 0000d09a ffffffff 00000005 fdfffffe 20000004 [ 720.016359][ T8191] ddc0: 00000004 00008001 7fffbffa 00000007 00000002 00000404 00000004 00000004 [ 720.016747][ T8191] dde0: 00000004 00000004 00000003 00100830 00000008 00000006 00000079 00000080 [ 720.017090][ T8191] de00: 00000009 20000000 00008001 00000005 0000008f 00007fff 00000002 00000006 [ 720.017580][ T8191] de20: 00000000 d19aab95 00000000 87279580 83f3b3c0 20001f40 40946400 00000001 [ 720.018033][ T8191] de40: dfcddf14 dfcdde50 81529710 81528340 8276ca64 84f25dd8 00000064 84f9436c [ 720.018378][ T8191] de60: dfcddee4 dfcdde70 8084c33c 8084269c 00000064 83f3b3f0 00000000 dfcdde90 [ 720.018702][ T8191] de80: 00000000 8737a110 8402cb28 40946400 0000000b 00000000 dfcdde84 00000000 [ 720.019062][ T8191] dea0: 00000000 00000000 00000000 00000000 00000000 d19aab95 00000000 87279580 [ 720.019403][ T8191] dec0: 40946400 20001f40 20001f40 87279580 00000003 845d6400 dfcddef4 dfcddee8 [ 720.019723][ T8191] dee0: 8084c46c d19aab95 dfcddf14 00000000 87279581 40946400 20001f40 87279580 [ 720.020070][ T8191] df00: 00000003 845d6400 dfcddfa4 dfcddf18 805ed110 815293c8 ecac8b10 845d6400 [ 720.020452][ T8191] df20: dfcddf3c dfcddf30 81c06388 81c06254 dfcddf54 dfcddf40 8025bb1c 80291370 [ 720.020734][ T8191] df40: dfcddfb0 40000000 dfcddf84 dfcddf58 80221bfc 8025bad4 00000000 8341a10c [ 720.021115][ T8191] df60: dfcddfb0 0013ee90 ecac8b10 80221b50 00000000 d19aab95 dfcddfac 00000000 [ 720.021431][ T8191] df80: 00000000 00356310 00000036 8020029c 845d6400 00000036 00000000 dfcddfa8 [ 720.021794][ T8191] dfa0: 80200060 805eced8 00000000 00000000 00000003 40946400 20001f40 00000000 [ 720.022105][ T8191] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fa20dc [ 720.022416][ T8191] dfe0: 76fa1e88 76fa1e78 0001903c 00130cf0 60000010 00000003 00000000 00000000 [ 720.022751][ T8191] Call trace: [ 720.022940][ T8191] [<8153dfbc>] (subdev_8255_io) from [<8153dcf8>] (subdev_8255_do_config+0x58/0x60) [ 720.023319][ T8191] r7:00000000 r6:83f3b3c0 r5:00003f00 r4:8153dfbc [ 720.023556][ T8191] [<8153dca0>] (subdev_8255_do_config) from [<8153e0b0>] (subdev_8255_io_init+0x88/0x98) [ 720.023928][ T8191] r4:86cba000 [ 720.024080][ T8191] [<8153e028>] (subdev_8255_io_init) from [<8153e260>] (dev_8255_attach+0x74/0x138) [ 720.024440][ T8191] r7:00000000 r6:86cba000 r5:00000000 r4:83f3b3c0 [ 720.024638][ T8191] [<8153e1ec>] (dev_8255_attach) from [<8152cbe4>] (comedi_device_attach+0x108/0x244) [ 720.024946][ T8191] r10:83737b38 r9:00000000 r8:83f3b3c0 r7:dfcddd90 r6:00000000 r5:83f3b3c0 [ 720.025253][ T8191] r4:835de4e8 [ 720.025392][ T8191] [<8152cadc>] (comedi_device_attach) from [<81528400>] (do_devconfig_ioctl+0xcc/0x218) [ 720.025765][ T8191] r10:845d6400 r9:00000003 r8:00000001 r7:40946400 r6:b5403587 r5:83f3b3c0 [ 720.026026][ T8191] r4:20001f40 [ 720.026174][ T8191] [<81528334>] (do_devconfig_ioctl) from [<81529710>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 720.026504][ T8191] r8:00000001 r7:40946400 r6:20001f40 r5:83f3b3c0 r4:87279580 [ 720.026789][ T8191] [<815293bc>] (comedi_unlocked_ioctl) from [<805ed110>] (sys_ioctl+0x244/0xb5c) [ 720.027185][ T8191] r10:845d6400 r9:00000003 r8:87279580 r7:20001f40 r6:40946400 r5:87279581 [ 720.027502][ T8191] r4:00000000 [ 720.027624][ T8191] [<805ececc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 720.027876][ T8191] Exception stack(0xdfcddfa8 to 0xdfcddff0) [ 720.028076][ T8191] dfa0: 00000000 00000000 00000003 40946400 20001f40 00000000 [ 720.028345][ T8191] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fa20dc [ 720.028590][ T8191] dfe0: 76fa1e88 76fa1e78 0001903c 00130cf0 [ 720.028770][ T8191] r10:00000036 r9:845d6400 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 720.028992][ T8191] r4:00000000 [ 720.029357][ T8191] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 720.030735][ C0] virtqueue callback for 83fa1180 (80e48940) [ 720.031001][ C0] virtqueue interrupt with no work for 83fa10c0 [ 720.031200][ C0] virtqueue interrupt with no work for 83fa1000 [ 720.031790][ C0] No more buffers in queue [ 720.032099][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 720.032414][ C0] No more buffers in queue [ 720.033100][ C0] eth0: xmit 87154d80 52:55:0a:00:02:02 [ 720.033476][ C0] Added buffer head 32 to 83fa10c0 [ 720.033944][ C0] virtqueue interrupt with no work for 83fa1180 [ 720.034192][ C0] virtqueue callback for 83fa10c0 (80e4acb4) [ 720.034413][ C0] virtqueue interrupt with no work for 83fa1000 [ 720.035454][ T8191] ---[ end trace 0000000000000000 ]--- [ 720.041764][ C0] Sent skb 87154d80 [ 720.041930][ C0] No more buffers in queue [ 720.058263][ T8188] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1110 [ 720.058752][ T718] nfc: nfc_urelease_event_work: portid 1110 [ 720.077892][ T28] audit: type=1400 audit(719.950:342): avc: denied { read } for pid=2923 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 720.087636][ T28] audit: type=1400 audit(719.950:343): avc: denied { search } for pid=2923 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.087805][ T28] audit: type=1400 audit(719.960:344): avc: denied { write search } for pid=2923 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.087855][ T28] audit: type=1400 audit(719.960:345): avc: denied { add_name } for pid=2923 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.087913][ T28] audit: type=1400 audit(719.960:346): avc: denied { create } for pid=2923 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 720.087958][ T28] audit: type=1400 audit(719.960:347): avc: denied { append open } for pid=2923 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 720.088000][ T28] audit: type=1400 audit(719.960:348): avc: denied { getattr } for pid=2923 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc [ 720.105872][ T3109] eth0: xmit 86692280 52:55:0a:00:02:02 [ 720.106064][ T3109] Added buffer head 32 to 83fa10c0 [ 720.106526][ C0] virtqueue callback for 83fa1180 (80e48940) [ 720.106610][ C0] virtqueue callback for 83fa10c0 (80e4acb4) [ 720.106643][ C0] virtqueue interrupt with no work for 83fa1000 [ 720.106740][ C0] Sent skb 86692280 [ 720.106811][ C0] No more buffers in queue [ 720.106931][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 720.106993][ C0] No more buffers in queue [ 720.107306][ C0] No more buffers in queue fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 720.126162][ T3109] eth0: xmit 855c5780 52:55:0a:00:02:02 [ 720.126352][ T3109] Added buffer head 32 to 83fa10c0 [ 720.126828][ C0] virtqueue callback for 83fa1180 (80e48940) [ 720.126917][ C0] virtqueue callback for 83fa10c0 (80e4acb4) [ 720.126954][ C0] virtqueue interrupt with no work for 83fa1000 [ 720.127049][ C0] Sent skb 855c5780 [ 720.127113][ C0] No more buffers in queue [ 720.127207][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 720.127272][ C0] No more buffers in queue [ 720.127615][ C0] No more buffers in queue [ 720.175975][ T3109] eth0: xmit 86692280 52:55:0a:00:02:02 [ 720.176153][ T3109] Added buffer head 32 to 83fa10c0 [ 720.176560][ C0] virtqueue callback for 83fa1180 (80e48940) [ 720.176613][ C0] virtqueue callback for 83fa10c0 (80e4acb4) [ 720.176647][ C0] virtqueue interrupt with no work for 83fa1000 [ 720.176745][ C0] Sent skb 86692280 [ 720.176808][ C0] No more buffers in queue [ 720.176895][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 720.176990][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 720.177031][ C0] No more buffers in queue [ 720.177499][ C0] eth0: xmit 87081480 52:55:0a:00:02:02 [ 720.177597][ C0] Added buffer head 32 to 83fa10c0 [ 720.177719][ C0] No more buffers in queue [ 720.177772][ C0] Sent skb 87081480 [ 720.177810][ C0] No more buffers in queue [ 720.193794][ T8192] async_waiting @ 8192 [ 720.193942][ T8192] async_continuing @ 8192 after 7 usec [ 720.203101][ T8191] Kernel panic - not syncing: Fatal exception [ 720.207268][ T8191] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:08:18 Registers: info registers vcpu 0 CPU#0 R00=84e6c840 R01=00000035 R02=eb57f000 R03=eb57f018 R04=85eaf00b R05=84e6c840 R06=80b5cc5c R07=85eaf04e R08=00000000 R09=00000000 R10=00006d8b R11=dfcdd90c R12=00000002 R13=dfcdd900 R14=8355dba4 R15=80b5cc6c PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=86dde1f4 R01=81e05b2c R02=00000420 R03=61c88647 R04=8370e754 R05=20000113 R06=8340b7b8 R07=8370e754 R08=0000be90 R09=81e05b2c R10=837028c0 R11=df805d5c R12=df805d48 R13=df805d60 R14=809b4a00 R15=81c133f4 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000