last executing test programs: 7m5.805056059s ago: executing program 0 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x2, @void}, 0x10) 6m53.307338825s ago: executing program 0 (id=156): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_settime(0x17, &(0x7f0000000000)={0x77359400}) 6m36.713275555s ago: executing program 0 (id=158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) syz_open_dev$dri(0x0, 0xd21, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, 0x0, 0x91, 0x20008800, 0x0, 0xffcb) 6m17.573514215s ago: executing program 0 (id=160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5m55.213409622s ago: executing program 0 (id=162): r0 = syz_clone(0x22029400, &(0x7f0000000780)="aba8f03e1a", 0x5, &(0x7f0000000880), 0x0, 0x0) ptrace(0x10, r0) 5m34.547568985s ago: executing program 0 (id=164): io_setup(0xff, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="09914844", 0x4, 0x40}]) 4m51.408439991s ago: executing program 32 (id=164): io_setup(0xff, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="09914844", 0x4, 0x40}]) 1m0.380933474s ago: executing program 1 (id=180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, 0xffffffffffffffff, 0xfffff000) read(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99) munlockall() mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 40.344526576s ago: executing program 1 (id=181): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=ANY=[@ANYBLOB="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"], 0x360}}], 0x2, 0x903d662653e759a1) 28.969697643s ago: executing program 1 (id=182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8558}}, 0x0, 0x0, 0x6, 0x0, "39bcf5aba7f959ddcdc8da1b2b41a983ef92a3a5d4ef67a6e5aaa42e5f36f75694a26955afb25c6451572175a16395b9de4ea9879d10962a16a1b56803e7ebf5564c5054c4a398fd30f351751fa9f118"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1ff, @loopback, 0x23}, 0x1c) 18.565260925s ago: executing program 1 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) read$FUSE(r3, &(0x7f000000a3c0)={0x2020}, 0x2020) 8.785724235s ago: executing program 1 (id=184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 1 (id=185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r4, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000c04) kernel console output (not intermixed with test programs): [ 56.295975][ T29] audit: type=1400 audit(56.180:56): avc: denied { read write } for pid=3089 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.299504][ T29] audit: type=1400 audit(56.190:57): avc: denied { open } for pid=3089 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:27378' (ED25519) to the list of known hosts. [ 73.650559][ T29] audit: type=1400 audit(73.540:58): avc: denied { name_bind } for pid=3092 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.036811][ T29] audit: type=1400 audit(75.920:59): avc: denied { execute } for pid=3093 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.057197][ T29] audit: type=1400 audit(75.950:60): avc: denied { execute_no_trans } for pid=3093 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.268306][ T29] audit: type=1400 audit(81.160:61): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 81.273596][ T29] audit: type=1400 audit(81.160:62): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.289993][ T3093] cgroup: Unknown subsys name 'net' [ 81.298748][ T29] audit: type=1400 audit(81.190:63): avc: denied { unmount } for pid=3093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.455264][ T3093] cgroup: Unknown subsys name 'cpuset' [ 81.462436][ T3093] cgroup: Unknown subsys name 'hugetlb' [ 81.467099][ T3093] cgroup: Unknown subsys name 'rlimit' [ 81.703149][ T29] audit: type=1400 audit(81.590:64): avc: denied { setattr } for pid=3093 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.713408][ T29] audit: type=1400 audit(81.600:65): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 81.717060][ T29] audit: type=1400 audit(81.610:66): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 81.923391][ T3095] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 81.927312][ T29] audit: type=1400 audit(81.820:67): avc: denied { relabelto } for pid=3095 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 81.931709][ T29] audit: type=1400 audit(81.820:68): avc: denied { write } for pid=3095 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 81.963319][ T29] audit: type=1400 audit(81.850:69): avc: denied { read } for pid=3093 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 81.964130][ T29] audit: type=1400 audit(81.850:70): avc: denied { open } for pid=3093 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.112740][ T3093] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.767198][ T29] audit: type=1400 audit(92.660:71): avc: denied { execmem } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.844216][ T29] audit: type=1400 audit(92.730:72): avc: denied { read } for pid=3098 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.855541][ T29] audit: type=1400 audit(92.750:73): avc: denied { open } for pid=3098 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.864295][ T29] audit: type=1400 audit(92.750:74): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.887205][ T29] audit: type=1400 audit(92.780:75): avc: denied { module_request } for pid=3099 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.888925][ T29] audit: type=1400 audit(92.780:76): avc: denied { module_request } for pid=3098 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.948607][ T29] audit: type=1400 audit(92.840:77): avc: denied { sys_module } for pid=3098 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 93.841338][ T29] audit: type=1400 audit(93.730:78): avc: denied { ioctl } for pid=3099 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.118765][ T3098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.130348][ T3098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.231622][ T3099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.248536][ T3099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.136711][ T3098] hsr_slave_0: entered promiscuous mode [ 96.143097][ T3098] hsr_slave_1: entered promiscuous mode [ 96.396296][ T3099] hsr_slave_0: entered promiscuous mode [ 96.399638][ T3099] hsr_slave_1: entered promiscuous mode [ 96.401962][ T3099] debugfs: 'hsr0' already exists in 'hsr' [ 96.402562][ T3099] Cannot create hsr debugfs directory [ 96.672838][ T29] audit: type=1400 audit(96.560:79): avc: denied { create } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.682393][ T29] audit: type=1400 audit(96.570:80): avc: denied { write } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.702679][ T3098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.735613][ T3098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.758560][ T3098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.769495][ T3098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.969203][ T3099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.979592][ T3099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.989740][ T3099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.000117][ T3099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.781966][ T3098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.928499][ T3099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.548056][ T3098] veth0_vlan: entered promiscuous mode [ 101.587873][ T3098] veth1_vlan: entered promiscuous mode [ 101.679905][ T3099] veth0_vlan: entered promiscuous mode [ 101.721425][ T3099] veth1_vlan: entered promiscuous mode [ 101.748257][ T3098] veth0_macvtap: entered promiscuous mode [ 101.780915][ T3098] veth1_macvtap: entered promiscuous mode [ 101.878946][ T3099] veth0_macvtap: entered promiscuous mode [ 101.930132][ T32] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.936531][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.936761][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.936848][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.959975][ T3099] veth1_macvtap: entered promiscuous mode [ 102.132214][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 102.135767][ T29] audit: type=1400 audit(102.020:82): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.145398][ T29] audit: type=1400 audit(102.030:83): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.WAi4A2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.158236][ T29] audit: type=1400 audit(102.050:84): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.171491][ T29] audit: type=1400 audit(102.060:85): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.WAi4A2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.181494][ T29] audit: type=1400 audit(102.070:86): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzkaller.WAi4A2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 102.199751][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.208847][ T29] audit: type=1400 audit(102.100:87): avc: denied { unmount } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.210497][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.210977][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.211369][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.220095][ T29] audit: type=1400 audit(102.110:88): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 102.225782][ T29] audit: type=1400 audit(102.120:89): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="gadgetfs" ino=2624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 102.236638][ T29] audit: type=1400 audit(102.130:90): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.242859][ T29] audit: type=1400 audit(102.130:91): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.368135][ T3098] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.372520][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 108.389559][ T29] audit: type=1400 audit(108.260:105): avc: denied { write } for pid=3725 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.439714][ T29] audit: type=1400 audit(108.330:106): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.685166][ T3705] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.845413][ T3705] usb 1-1: Using ep0 maxpacket: 16 [ 108.880374][ T3732] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 108.897109][ T3705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.906718][ T3705] usb 1-1: config 7 has an invalid interface number: 161 but max is 0 [ 108.909176][ T3705] usb 1-1: config 7 has no interface number 0 [ 108.910476][ T3705] usb 1-1: config 7 interface 161 has no altsetting 0 [ 108.937611][ T3705] usb 1-1: New USB device found, idVendor=15a9, idProduct=0002, bcdDevice= d.a3 [ 108.939130][ T3705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.940788][ T3705] usb 1-1: Product: syz [ 108.941633][ T3705] usb 1-1: Manufacturer: syz [ 108.942349][ T3705] usb 1-1: SerialNumber: syz [ 109.203613][ T29] audit: type=1400 audit(109.090:107): avc: denied { create } for pid=3734 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.232106][ T29] audit: type=1400 audit(109.120:108): avc: denied { ioctl } for pid=3734 comm="syz.1.8" path="socket:[2678]" dev="sockfs" ino=2678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.256212][ T3705] usb 1-1: USB disconnect, device number 2 [ 109.785604][ T3748] comedi: valid board names for 8255 driver are: [ 109.786104][ T3748] 8255 [ 109.789551][ T3748] comedi: valid board names for vmk80xx driver are: [ 109.790054][ T3748] vmk80xx [ 109.790104][ T3748] comedi: valid board names for usbduxsigma driver are: [ 109.790130][ T3748] usbduxsigma [ 109.790150][ T3748] comedi: valid board names for usbduxfast driver are: [ 109.790173][ T3748] usbduxfast [ 109.790188][ T3748] comedi: valid board names for usbdux driver are: [ 109.790209][ T3748] usbdux [ 109.790227][ T3748] comedi: valid board names for ni6501 driver are: [ 109.790249][ T3748] ni6501 [ 109.790266][ T3748] comedi: valid board names for dt9812 driver are: [ 109.790287][ T3748] dt9812 [ 109.790304][ T3748] comedi: valid board names for ni_labpc_cs driver are: [ 109.790326][ T3748] ni_labpc_cs [ 109.790359][ T3748] comedi: valid board names for ni_daq_700 driver are: [ 109.790381][ T3748] ni_daq_700 [ 109.790402][ T3748] comedi: valid board names for labpc_pci driver are: [ 109.790426][ T3748] labpc_pci [ 109.790443][ T3748] comedi: valid board names for adl_pci9118 driver are: [ 109.790486][ T3748] pci9118dg [ 109.790534][ T3748] pci9118hg [ 109.790557][ T3748] pci9118hr [ 109.790575][ T3748] comedi: valid board names for 8255_pci driver are: [ 109.790598][ T3748] 8255_pci [ 109.790642][ T3748] comedi: valid board names for comedi_parport driver are: [ 109.790671][ T3748] comedi_parport [ 109.790690][ T3748] comedi: valid board names for comedi_test driver are: [ 109.790712][ T3748] comedi_test [ 109.790732][ T3748] comedi: valid board names for comedi_bond driver are: [ 109.790753][ T3748] comedi_bond [ 110.637933][ T29] audit: type=1400 audit(110.530:109): avc: denied { getopt } for pid=3753 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.234909][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.438130][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 111.546277][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.576477][ T45] usb 2-1: config 7 has an invalid interface number: 161 but max is 0 [ 111.577055][ T45] usb 2-1: config 7 has no interface number 0 [ 111.577335][ T45] usb 2-1: config 7 interface 161 has no altsetting 0 [ 111.646395][ T45] usb 2-1: New USB device found, idVendor=15a9, idProduct=0002, bcdDevice= d.a3 [ 111.648724][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.649059][ T45] usb 2-1: Product: syz [ 111.649118][ T45] usb 2-1: Manufacturer: syz [ 111.649154][ T45] usb 2-1: SerialNumber: syz [ 111.955983][ T45] usb 2-1: USB disconnect, device number 2 [ 112.452036][ T29] audit: type=1400 audit(112.330:110): avc: denied { create } for pid=3775 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.553564][ T29] audit: type=1400 audit(112.440:111): avc: denied { bind } for pid=3775 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.035269][ T29] audit: type=1400 audit(112.930:112): avc: denied { setopt } for pid=3775 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.040519][ T29] audit: type=1400 audit(112.930:113): avc: denied { accept } for pid=3775 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.404891][ T3705] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.596521][ T3705] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.596743][ T3705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.597220][ T3705] usb 2-1: Product: syz [ 113.599673][ T3705] usb 2-1: Manufacturer: syz [ 113.599771][ T3705] usb 2-1: SerialNumber: syz [ 114.053236][ T3705] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 114.058355][ T3705] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 114.075494][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.225175][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 114.288817][ T45] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 114.289668][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.289815][ T45] usb 1-1: config 0 has no interface number 0 [ 114.292072][ T45] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.386185][ T45] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 114.386566][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.388502][ T45] usb 1-1: Product: syz [ 114.390211][ T45] usb 1-1: Manufacturer: syz [ 114.391519][ T45] usb 1-1: SerialNumber: syz [ 114.398474][ T45] usb 1-1: config 0 descriptor?? [ 114.428587][ T45] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 116.395594][ T3705] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 116.396253][ T3705] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 116.396707][ T3705] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.405095][ T3705] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.413749][ T3705] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 116.430942][ T3705] usb 2-1: USB disconnect, device number 3 [ 116.667521][ T3804] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.667540][ T29] audit: type=1400 audit(116.560:114): avc: denied { create } for pid=3803 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.676711][ T29] audit: type=1400 audit(116.560:115): avc: denied { setopt } for pid=3803 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.830271][ T29] audit: type=1400 audit(116.720:116): avc: denied { name_bind } for pid=3806 comm="syz.1.19" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 116.838710][ T29] audit: type=1400 audit(116.730:117): avc: denied { node_bind } for pid=3806 comm="syz.1.19" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 117.224597][ T3705] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.384904][ T3705] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.385463][ T3705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.386126][ T3705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.387044][ T3705] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.387463][ T3705] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.387774][ T3705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.398694][ T3705] usb 2-1: config 0 descriptor?? [ 117.868031][ T3705] usbhid 2-1:0.0: can't add hid device: -71 [ 117.869030][ T3705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 117.878823][ T3705] usb 2-1: USB disconnect, device number 4 [ 118.667001][ T29] audit: type=1400 audit(118.560:118): avc: denied { wake_alarm } for pid=3826 comm="syz.1.23" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.202280][ T29] audit: type=1400 audit(119.090:119): avc: denied { allowed } for pid=3826 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.224801][ T29] audit: type=1400 audit(119.110:120): avc: denied { create } for pid=3826 comm="syz.1.23" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.231376][ T29] audit: type=1400 audit(119.120:121): avc: denied { map } for pid=3826 comm="syz.1.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.235646][ T29] audit: type=1400 audit(119.130:122): avc: denied { read write } for pid=3826 comm="syz.1.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.657240][ T45] usb 1-1: USB disconnect, device number 3 [ 124.820598][ T29] audit: type=1400 audit(124.710:123): avc: denied { map_create } for pid=3836 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.834875][ T29] audit: type=1400 audit(124.710:124): avc: denied { bpf } for pid=3836 comm="syz.0.24" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.835372][ T29] audit: type=1400 audit(124.720:125): avc: denied { map_read map_write } for pid=3836 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.841785][ T29] audit: type=1400 audit(124.730:126): avc: denied { prog_load } for pid=3836 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 124.863683][ T29] audit: type=1400 audit(124.750:127): avc: denied { perfmon } for pid=3836 comm="syz.0.24" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.926500][ T29] audit: type=1400 audit(124.820:128): avc: denied { prog_run } for pid=3836 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 125.784388][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.960010][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.960262][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.961983][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.962027][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.962130][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.962198][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.965052][ T9] usb 1-1: config 0 descriptor?? [ 126.443600][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 126.444187][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 126.491439][ T9] usb 1-1: USB disconnect, device number 4 [ 126.740674][ T3854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 126.769639][ T3854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3854 comm=syz.0.26 [ 127.964952][ T3795] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.128709][ T3795] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.129692][ T3795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 128.145158][ T3795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.147850][ T3795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.149968][ T3795] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.150305][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.163194][ T3795] usb 1-1: config 0 descriptor?? [ 128.167287][ T3858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.661105][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.661956][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.665772][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.666262][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.666778][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.666921][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.667086][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.667194][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.667296][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.667406][ T3795] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 128.702538][ T3795] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 128.933127][ T23] usb 1-1: USB disconnect, device number 5 [ 129.140287][ T29] audit: type=1400 audit(129.030:129): avc: denied { create } for pid=3881 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.563347][ T3882] Zero length message leads to an empty skb [ 134.684310][ T45] hid_parser_main: 5 callbacks suppressed [ 134.685188][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.685814][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.686411][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.687062][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.687738][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.688793][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.690593][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.694889][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.695736][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.696440][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.706760][ T45] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 135.947857][ T29] audit: type=1400 audit(135.840:130): avc: denied { setopt } for pid=3899 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.335055][ T3704] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 136.490421][ T3704] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 136.492236][ T3704] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 136.494752][ T3704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.407443][ T29] audit: type=1400 audit(142.300:131): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.645476][ T29] audit: type=1400 audit(142.540:132): avc: denied { ioctl } for pid=3912 comm="syz.1.36" path="socket:[951]" dev="sockfs" ino=951 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.862888][ T29] audit: type=1400 audit(142.750:133): avc: denied { create } for pid=3912 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.257348][ T3918] batadv_slave_1: entered promiscuous mode [ 146.750292][ T9] usb 1-1: USB disconnect, device number 6 [ 146.923264][ T3928] netlink: 'syz.0.37': attribute type 4 has an invalid length. [ 148.091057][ T29] audit: type=1400 audit(147.980:134): avc: denied { write } for pid=3938 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.238559][ T29] audit: type=1400 audit(148.130:135): avc: denied { ioctl } for pid=3943 comm="syz.0.42" path="socket:[982]" dev="sockfs" ino=982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.243124][ T3944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 148.371833][ T29] audit: type=1400 audit(148.260:136): avc: denied { append } for pid=3945 comm="syz.0.43" name="comedi3" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.177972][ T3952] tmpfs: Unknown parameter 'nr_ino' [ 153.644518][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.815940][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 153.817509][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.829518][ T10] usb 2-1: config 0 descriptor?? [ 164.080978][ T9] usb 2-1: USB disconnect, device number 5 [ 164.235719][ T29] audit: type=1400 audit(164.120:137): avc: denied { name_bind } for pid=3973 comm="syz.1.48" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 165.001013][ T3979] tmpfs: Unknown parameter 'nr_ino' [ 165.345348][ T3704] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.503121][ T3704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.505825][ T3704] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 165.506191][ T3704] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.506382][ T3704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.516661][ T3704] usb 2-1: config 0 descriptor?? [ 165.526379][ T3704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 167.075942][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.244713][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.245258][ T10] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 167.245374][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.256683][ T10] usb 1-1: config 0 descriptor?? [ 167.692905][ T10] holtek 0003:1241:5015.0003: item fetching failed at offset 3/5 [ 167.693813][ T10] holtek 0003:1241:5015.0003: parse failed [ 167.697227][ T10] holtek 0003:1241:5015.0003: probe with driver holtek failed with error -22 [ 167.894513][ T10] usb 1-1: USB disconnect, device number 7 [ 168.001676][ T4012] tmpfs: Unknown parameter 'nr_ino' [ 169.065075][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.234124][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.262308][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.262789][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.263232][ T10] usb 1-1: Product: syz [ 169.263324][ T10] usb 1-1: Manufacturer: syz [ 169.263371][ T10] usb 1-1: SerialNumber: syz [ 170.345009][ T10] cdc_ncm 1-1:1.0: bind() failure [ 170.350337][ T10] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 170.352572][ T10] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 170.362151][ T10] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 170.373587][ T10] usb 1-1: USB disconnect, device number 8 [ 170.509344][ T4041] tmpfs: Bad value for 'nr_inodes' [ 170.648395][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 170.768356][ T29] audit: type=1400 audit(170.660:138): avc: denied { bind } for pid=4044 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.770018][ T29] audit: type=1400 audit(170.660:139): avc: denied { node_bind } for pid=4044 comm="syz.0.62" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 170.789968][ T29] audit: type=1400 audit(170.680:140): avc: denied { read } for pid=4044 comm="syz.0.62" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.698172][ T4056] tmpfs: Bad value for 'nr_inodes' [ 174.005549][ T3704] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.154635][ T3704] usb 1-1: Using ep0 maxpacket: 16 [ 174.187816][ T3704] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.200394][ T3704] usb 1-1: config 6 has an invalid interface number: 239 but max is 0 [ 174.200738][ T3704] usb 1-1: config 6 has no interface number 0 [ 174.201099][ T3704] usb 1-1: config 6 interface 239 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 174.201260][ T3704] usb 1-1: config 6 interface 239 altsetting 9 has an endpoint descriptor with address 0x52, changing to 0x2 [ 174.201348][ T3704] usb 1-1: config 6 interface 239 altsetting 9 endpoint 0x2 has an invalid bInterval 172, changing to 7 [ 174.201422][ T3704] usb 1-1: config 6 interface 239 altsetting 9 endpoint 0x2 has invalid maxpacket 10215, setting to 1024 [ 174.201490][ T3704] usb 1-1: config 6 interface 239 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.201554][ T3704] usb 1-1: config 6 interface 239 has no altsetting 0 [ 174.244573][ T3704] usb 1-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=57.b8 [ 174.244962][ T3704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.245301][ T3704] usb 1-1: Product: syz [ 174.245368][ T3704] usb 1-1: Manufacturer: syz [ 174.245400][ T3704] usb 1-1: SerialNumber: syz [ 174.256707][ T4058] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 174.477690][ T3704] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 174.486339][ T3704] usb 1-1: USB disconnect, device number 9 [ 177.700118][ T4081] tmpfs: Bad value for 'nr_inodes' [ 178.275488][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.457750][ T23] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 178.459450][ T23] usb 1-1: config 0 has no interface number 0 [ 178.478100][ T23] usb 1-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice=6e.68 [ 178.479795][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.482145][ T23] usb 1-1: Product: syz [ 178.482951][ T23] usb 1-1: Manufacturer: syz [ 178.484393][ T23] usb 1-1: SerialNumber: syz [ 178.495867][ T23] usb 1-1: config 0 descriptor?? [ 180.092171][ T2878] usb 2-1: USB disconnect, device number 6 [ 180.810910][ T12] bond0: (slave bond_slave_0): interface is now down [ 180.812465][ T12] bond0: (slave bond_slave_1): interface is now down [ 180.825548][ T12] bond0: (slave bond_slave_0): interface is now down [ 180.826997][ T12] bond0: (slave bond_slave_1): interface is now down [ 180.829595][ T12] bond0: now running without any active interface! [ 180.852158][ T4098] netlink: 'syz.1.72': attribute type 10 has an invalid length. [ 180.906372][ T4098] syz_tun: entered promiscuous mode [ 181.704798][ T29] audit: type=1400 audit(181.590:141): avc: denied { map } for pid=4099 comm="syz.1.73" path="/dev/audio" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.804607][ T29] audit: type=1400 audit(182.690:142): avc: denied { create } for pid=4102 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.864626][ T29] audit: type=1400 audit(182.750:143): avc: denied { write } for pid=4102 comm="syz.1.74" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.100461][ T3845] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.267767][ T3845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.268377][ T3845] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 184.270295][ T3845] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.270378][ T3845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.279154][ T3845] usb 2-1: config 0 descriptor?? [ 184.290711][ T3845] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 188.742076][ T3704] usb 1-1: USB disconnect, device number 10 [ 188.880681][ T29] audit: type=1400 audit(188.770:144): avc: denied { read } for pid=4122 comm="syz.0.77" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.884049][ T29] audit: type=1400 audit(188.770:145): avc: denied { open } for pid=4122 comm="syz.0.77" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.899508][ T29] audit: type=1400 audit(188.790:146): avc: denied { ioctl } for pid=4122 comm="syz.0.77" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.903428][ T29] audit: type=1400 audit(188.790:147): avc: denied { set_context_mgr } for pid=4122 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 188.948113][ T29] audit: type=1400 audit(188.840:148): avc: denied { map } for pid=4122 comm="syz.0.77" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 189.475147][ T29] audit: type=1400 audit(189.370:149): avc: denied { call } for pid=4122 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 190.194275][ T29] audit: type=1400 audit(190.080:150): avc: denied { mount } for pid=4130 comm="syz.0.80" name="/" dev="ramfs" ino=3017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 198.822154][ T3845] usb 2-1: USB disconnect, device number 7 [ 200.095613][ T3704] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.254424][ T3704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.254753][ T3704] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 200.255150][ T3704] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.255322][ T3704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.261473][ T3704] usb 2-1: config 0 descriptor?? [ 200.288786][ T3704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 201.616859][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 201.764936][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 201.778582][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 201.793506][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 201.794546][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.794632][ T9] usb 1-1: Product: syz [ 201.794728][ T9] usb 1-1: Manufacturer: syz [ 201.794771][ T9] usb 1-1: SerialNumber: syz [ 201.800945][ T9] usb 1-1: config 0 descriptor?? [ 202.253248][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 202.912486][ T9] usb 1-1: USB disconnect, device number 11 [ 203.374957][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 203.544510][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 203.562923][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 203.563250][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 203.563394][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.563560][ T9] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.564066][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.564143][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.564187][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 203.564222][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 203.607705][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 203.607984][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 203.610565][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.614195][ T9] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.614630][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.614690][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.614724][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 203.614762][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 203.662060][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 203.662596][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 203.662934][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.663063][ T9] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.663182][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.663246][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.663302][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 203.663366][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 203.739618][ T9] usb 1-1: string descriptor 0 read error: -22 [ 203.740125][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.740259][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.760408][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.975306][ T9] usb 1-1: USB disconnect, device number 12 [ 204.301105][ T29] audit: type=1400 audit(204.190:151): avc: denied { mounton } for pid=4220 comm="syz.0.91" path="/59/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.071575][ T4234] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 205.189673][ T4236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.95'. [ 205.812432][ T4239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.415159][ T3704] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 208.625708][ T3704] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.628422][ T3704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 208.634792][ T3704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 208.639168][ T3704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.641411][ T3704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.645736][ T3704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.659712][ T3704] usb 1-1: config 0 descriptor?? [ 209.206262][ T3704] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 209.208374][ T3704] hid_parser_main: 73 callbacks suppressed [ 209.208474][ T3704] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 209.208599][ T3704] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 209.208707][ T3704] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 209.208811][ T3704] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 209.208915][ T3704] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 209.266156][ T3704] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 209.472311][ T3704] usb 1-1: USB disconnect, device number 13 [ 209.614971][ T29] audit: type=1400 audit(209.500:152): avc: denied { create } for pid=4267 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.861310][ T29] audit: type=1400 audit(209.750:153): avc: denied { create } for pid=4270 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 209.874453][ T29] audit: type=1400 audit(209.760:154): avc: denied { write } for pid=4270 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 210.416134][ T29] audit: type=1400 audit(210.290:155): avc: denied { bind } for pid=4297 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.695375][ T3704] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 210.844535][ T3704] usb 1-1: Using ep0 maxpacket: 16 [ 210.853535][ T3704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.856730][ T3704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.858298][ T3704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 210.859992][ T3704] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 210.864758][ T3704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.876280][ T3704] usb 1-1: config 0 descriptor?? [ 211.308455][ T3704] hid-generic 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.309572][ T3704] hid-generic 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.310147][ T3704] hid-generic 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.310245][ T3704] hid-generic 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.310316][ T3704] hid-generic 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.322008][ T3704] hid-generic 0003:0955:7214.0005: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 211.521822][ T3704] usb 1-1: USB disconnect, device number 14 [ 214.832143][ T9] usb 2-1: USB disconnect, device number 8 [ 214.998167][ T4330] netlink: 'syz.1.104': attribute type 4 has an invalid length. [ 215.019937][ T4330] netlink: 'syz.1.104': attribute type 4 has an invalid length. [ 228.194902][ T3704] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.354986][ T3704] usb 1-1: Using ep0 maxpacket: 32 [ 228.367216][ T3704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.367658][ T3704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.367975][ T3704] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.368031][ T3704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.386629][ T3704] usb 1-1: config 0 descriptor?? [ 228.410574][ T3704] hub 1-1:0.0: USB hub found [ 228.652471][ T3704] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 229.113005][ T3704] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 229.125890][ T3704] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 229.511667][ T3845] usb 1-1: USB disconnect, device number 15 [ 230.245047][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 230.450643][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.457822][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 230.465565][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.465692][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.476850][ T10] usb 1-1: config 0 descriptor?? [ 230.650566][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 232.476273][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 232.644914][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 232.658908][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 232.659647][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.662092][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.662605][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.664750][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.664930][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.664984][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.900956][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 232.901314][ T10] usbtmc 2-1:16.0: can't read capabilities [ 233.119229][ T23] usb 2-1: USB disconnect, device number 9 [ 233.694712][ T3845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 233.862728][ T3845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.863781][ T3845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.866140][ T3845] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 233.866601][ T3845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.872677][ T3845] usb 2-1: config 0 descriptor?? [ 234.398370][ T3845] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 234.407759][ T3845] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 234.415197][ T3845] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 234.631350][ C0] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71 [ 234.645661][ T23] usb 2-1: USB disconnect, device number 10 [ 244.065962][ T3845] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 244.258669][ T3845] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 244.259401][ T3845] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.287910][ T3845] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.288247][ T3845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.288669][ T3845] usb 2-1: Product: syz [ 244.288730][ T3845] usb 2-1: Manufacturer: syz [ 244.288765][ T3845] usb 2-1: SerialNumber: syz [ 244.299219][ T3845] usb 2-1: config 0 descriptor?? [ 244.641222][ T3845] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 244.649182][ T3845] usb 2-1: USB disconnect, device number 11 [ 244.988873][ T3845] usb 1-1: USB disconnect, device number 16 [ 245.805143][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 245.965191][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 246.000444][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 246.928160][ T10] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 247.031853][ T10] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 247.108992][ T10] usb 1-1: Product: syz [ 247.125302][ T10] usb 1-1: Manufacturer: syz [ 247.139575][ T10] usb 1-1: SerialNumber: syz [ 247.569936][ T10] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 247.618728][ T10] visor 1-1:1.0: probe with driver visor failed with error -110 [ 259.416322][ T23] usb 1-1: USB disconnect, device number 17 [ 265.544286][ C1] sched: DL replenish lagged too much [ 268.718199][ T3704] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 269.542198][ T4502] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 270.081733][ T4502] usb 2-1: Using ep0 maxpacket: 8 [ 270.592435][ T3704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.606659][ T3704] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 270.621287][ T3704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.635601][ T3704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.072425][ T3704] usb 1-1: config 0 descriptor?? [ 271.272130][ T3704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 271.548323][ T4502] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 271.944946][ T4502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.105853][ T4502] usb 2-1: Product: syz [ 272.118163][ T4502] usb 2-1: Manufacturer: syz [ 272.131187][ T4502] usb 2-1: SerialNumber: syz [ 272.659045][ T4502] usb 2-1: config 0 descriptor?? [ 280.500609][ T23] usb 1-1: USB disconnect, device number 18 [ 280.559715][ T4087] usb 2-1: USB disconnect, device number 12 [ 290.838155][ T4538] process 'syz.1.124' launched '/dev/fd/3/./file2' with NULL argv: empty string added [ 290.923206][ T29] audit: type=1400 audit(290.730:156): avc: denied { execute } for pid=4537 comm="syz.1.124" name="file2" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.370327][ T29] audit: type=1400 audit(291.240:157): avc: denied { execute_no_trans } for pid=4537 comm="syz.1.124" path="/44/file2" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.165248][ T3704] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 311.881387][ T3704] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 311.894858][ T3704] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.018576][ T3704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.092542][ T3704] usb 2-1: config 0 descriptor?? [ 312.509854][ T3704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 320.987185][ T10] usb 2-1: USB disconnect, device number 13 [ 327.658793][ T4574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 366.889958][ T42] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 368.399917][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.601216][ T42] usb 2-1: not running at top speed; connect to a high speed hub [ 368.736099][ T42] usb 2-1: config 4 has an invalid interface number: 208 but max is 0 [ 368.736228][ T42] usb 2-1: config 4 has no interface number 0 [ 368.736299][ T42] usb 2-1: config 4 interface 208 has no altsetting 0 [ 369.270576][ T42] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=1e.f1 [ 369.282676][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.296919][ T42] usb 2-1: Product: syz [ 369.310360][ T42] usb 2-1: Manufacturer: syz [ 369.322914][ T42] usb 2-1: SerialNumber: syz [ 370.105863][ T42] usb 2-1: USB disconnect, device number 14 [ 393.135710][ T4502] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 393.891690][ T4502] usb 1-1: Using ep0 maxpacket: 8 [ 394.758145][ T4502] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.773216][ T4502] usb 1-1: config 0 has no interface number 0 [ 395.558489][ T4502] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 395.571091][ T4502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.659258][ T4502] usb 1-1: Product: syz [ 395.720986][ T4502] usb 1-1: Manufacturer: syz [ 395.729757][ T4502] usb 1-1: SerialNumber: syz [ 395.836093][ T4502] usb 1-1: config 0 descriptor?? [ 395.892963][ T4502] usb 1-1: selecting invalid altsetting 2 [ 395.907288][ T4502] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 396.280810][ T4502] usb 1-1: USB disconnect, device number 19 [ 414.299112][ T29] audit: type=1326 audit(414.170:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 414.640506][ T29] audit: type=1326 audit(414.470:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 415.325148][ T29] audit: type=1326 audit(415.120:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000028 syscall=261 compat=0 ip=0x132360 code=0x7ffc0000 [ 415.347186][ T29] audit: type=1326 audit(415.130:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 415.712138][ T29] audit: type=1326 audit(415.140:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132360 code=0x7ffc0000 [ 443.790220][ T29] audit: type=1400 audit(443.400:163): avc: denied { audit_write } for pid=4662 comm="syz.0.146" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 443.803134][ T29] audit: type=1107 audit(443.420:164): pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 461.423106][ T29] audit: type=1400 audit(461.310:165): avc: denied { block_suspend } for pid=4670 comm="syz.1.149" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.328451][ T29] audit: type=1400 audit(520.210:166): avc: denied { setopt } for pid=4693 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 533.125197][ T712] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 534.215331][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.230649][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.282636][ T712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 534.298047][ T712] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.315579][ T712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.936327][ T712] usb 2-1: config 0 descriptor?? [ 536.733450][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.750159][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.766524][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.812184][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.826008][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.840755][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.859434][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.902981][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.916339][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.929306][ T712] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 536.999398][ T712] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 538.157517][ T4703] usb 2-1: string descriptor 0 read error: -2 [ 538.540848][ T712] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 538.798283][ T712] usb 2-1: device descriptor read/64, error -32 [ 539.529539][ T712] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 540.026321][ T712] usb 2-1: device descriptor read/64, error -32 [ 540.527623][ T712] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 540.795823][ T712] usb 2-1: device not accepting address 15, error -71 [ 542.139366][ T4661] usb 2-1: USB disconnect, device number 15 [ 550.728936][ T29] audit: type=1400 audit(549.980:167): avc: denied { setopt } for pid=4732 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 557.317789][ T29] audit: type=1400 audit(557.130:168): avc: denied { write } for pid=4732 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 682.156488][ T712] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 682.807523][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.884825][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.980544][ T712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.000967][ T712] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.294748][ T712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.326876][ T712] usb 2-1: config 0 descriptor?? [ 686.402735][ T712] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 691.586383][ T4739] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 692.792034][ T3704] usb 2-1: USB disconnect, device number 16 [ 840.699833][ T29] audit: type=1400 audit(840.430:169): avc: denied { bind } for pid=4923 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 843.018765][ T4925] syz_tun: entered allmulticast mode [ 843.100086][ T4923] syz_tun: left allmulticast mode [ 861.909133][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.302955][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.918791][ T30] INFO: task kworker/0:6:3845 blocked for more than 429 seconds. [ 921.370054][ T30] Not tainted syzkaller #0 [ 921.542768][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.602203][ T30] task:kworker/0:6 state:D stack:0 pid:3845 tgid:3845 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 921.826786][ T30] Workqueue: events bpf_prog_free_deferred SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 921.868622][ T30] Call trace: [ 922.468590][ T30] [<81ab23ac>] (__schedule) from [<81ab3658>] (schedule+0x2c/0x130) [ 922.477839][ T30] r10:dfbbdd84 r9:829174e8 r8:60000013 r7:829174e8 r6:dfbbdd8c r5:852b8c00 [ 922.539771][ T30] r4:852b8c00 [ 922.547455][ T30] [<81ab362c>] (schedule) from [<81ab37e0>] (schedule_preempt_disabled+0x18/0x24) [ 922.559742][ T30] r5:852b8c00 r4:829174e4 [ 922.565759][ T30] [<81ab37c8>] (schedule_preempt_disabled) from [<81ab6e64>] (__mutex_lock.constprop.0+0x658/0xf8c) [ 922.571637][ T30] [<81ab680c>] (__mutex_lock.constprop.0) from [<81ab786c>] (__mutex_lock_slowpath+0x14/0x18) [ 922.577515][ T30] r10:8280c9e4 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfbbde08 [ 922.589830][ T30] r4:00000000 [ 922.599261][ T30] [<81ab7858>] (__mutex_lock_slowpath) from [<81ab78ac>] (mutex_lock+0x3c/0x40) [ 922.606587][ T30] [<81ab7870>] (mutex_lock) from [<804f4400>] (_vm_unmap_aliases+0x68/0x240) [ 922.616093][ T30] [<804f4398>] (_vm_unmap_aliases) from [<804f81e8>] (vfree+0x16c/0x210) [ 922.637383][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:861b7280 [ 922.648939][ T30] r4:00000000 [ 922.655579][ T30] [<804f807c>] (vfree) from [<80564020>] (execmem_free+0x30/0x50) [ 923.175272][ T30] r9:83018405 r8:852b8c00 r7:00000000 r6:83018400 r5:00001000 r4:7f029000 [ 923.189173][ T30] [<80563ff0>] (execmem_free) from [<803cb2cc>] (bpf_jit_free_exec+0x10/0x14) [ 923.202278][ T30] r5:00001000 r4:eb01b000 [ 923.215973][ T30] [<803cb2bc>] (bpf_jit_free_exec) from [<803cb6ac>] (bpf_jit_free+0x68/0xe4) [ 923.229368][ T30] [<803cb644>] (bpf_jit_free) from [<803cc7d4>] (bpf_prog_free_deferred+0x140/0x158) [ 923.242155][ T30] r5:85c0e394 r4:85c8f600 [ 923.255209][ T30] [<803cc694>] (bpf_prog_free_deferred) from [<80275db8>] (process_one_work+0x1b4/0x4f4) [ 923.268522][ T30] r7:dddcfb40 r6:83018400 r5:85c0e394 r4:85c8f600 [ 923.281875][ T30] [<80275c04>] (process_one_work) from [<802764f8>] (worker_thread+0x1fc/0x3d8) [ 923.294494][ T30] r10:61c88647 r9:852b8c00 r8:85c8f62c r7:82804d80 r6:dddcfb40 r5:dddcfb60 [ 923.310506][ T30] r4:85c8f600 [ 923.362478][ T30] [<802762fc>] (worker_thread) from [<8027f6fc>] (kthread+0x12c/0x280) [ 923.377038][ T30] r10:00000000 r9:85c8f600 r8:802762fc r7:dfd4de60 r6:85c8f680 r5:852b8c00 [ 923.406084][ T30] r4:00000001 [ 923.419079][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 923.432494][ T30] Exception stack(0xdfbbdfb0 to 0xdfbbdff8) [ 923.445826][ T30] dfa0: 00000000 00000000 00000000 00000000 [ 923.459943][ T30] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 923.476435][ T30] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 923.491908][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 923.748219][ T30] r4:84ed9980 [ 923.749034][ T30] INFO: task kworker/0:6:3845 is blocked on a mutex likely owned by task kworker/1:1:45. [ 923.749164][ T30] task:kworker/1:1 state:R running task stack:0 pid:45 tgid:45 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 923.749363][ T30] Workqueue: events bpf_prog_free_deferred [ 923.749477][ T30] Call trace: [ 923.749513][ T30] [<81ab23ac>] (__schedule) from [<81ab3a8c>] (preempt_schedule_irq+0x40/0xa8) [ 923.749626][ T30] r10:8280ca38 r9:83315400 r8:80200c04 r7:df919d54 r6:ffffffff r5:83315400 [ 923.749654][ T30] r4:00000000 [ 923.749674][ T30] [<81ab3a4c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 923.749746][ T30] Exception stack(0xdf919d20 to 0xdf919d68) [ 923.749791][ T30] 9d20: a85c9000 ebdd3000 00000001 80239018 7f00d000 00000001 82ace204 82acd5e0 [ 923.749831][ T30] 9d40: 7f00d000 ebdd3000 8280ca38 df919d9c df919da0 df919d70 8022fe10 80239030 [ 923.749857][ T30] 9d60: 80000013 ffffffff [ 923.749885][ T30] r5:80000013 r4:80239030 [ 923.749903][ T30] [<8022fdac>] (flush_tlb_kernel_range) from [<804f41c4>] (__purge_vmap_area_lazy+0x284/0x458) [ 923.749983][ T30] r4:82ace224 [ 923.750004][ T30] [<804f3f40>] (__purge_vmap_area_lazy) from [<804f457c>] (_vm_unmap_aliases+0x1e4/0x240) [ 923.750084][ T30] r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:df919dc0 r5:df919e08 [ 923.750112][ T30] r4:df919dc0 [ 923.750131][ T30] [<804f4398>] (_vm_unmap_aliases) from [<804f81e8>] (vfree+0x16c/0x210) [ 923.750213][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:862dee00 [ 923.750237][ T30] r4:00000000 [ 923.750256][ T30] [<804f807c>] (vfree) from [<80564020>] (execmem_free+0x30/0x50) [ 923.750345][ T30] r9:83018605 r8:83315400 r7:00000000 r6:83018600 r5:00001000 r4:7f00d000 [ 923.750366][ T30] [<80563ff0>] (execmem_free) from [<803cb2cc>] (bpf_jit_free_exec+0x10/0x14) [ 923.750460][ T30] r5:00001000 r4:eaf25000 [ 923.750482][ T30] [<803cb2bc>] (bpf_jit_free_exec) from [<803cb6ac>] (bpf_jit_free+0x68/0xe4) [ 923.750548][ T30] [<803cb644>] (bpf_jit_free) from [<803cc7d4>] (bpf_prog_free_deferred+0x140/0x158) [ 923.750615][ T30] r5:8513df94 r4:832ce200 [ 923.750635][ T30] [<803cc694>] (bpf_prog_free_deferred) from [<80275db8>] (process_one_work+0x1b4/0x4f4) [ 923.750715][ T30] r7:ddde3b40 r6:83018600 r5:8513df94 r4:832ce200 [ 923.750735][ T30] [<80275c04>] (process_one_work) from [<802764f8>] (worker_thread+0x1fc/0x3d8) [ 923.750815][ T30] r10:61c88647 r9:83315400 r8:832ce22c r7:82804d80 r6:ddde3b40 r5:ddde3b60 [ 923.750838][ T30] r4:832ce200 [ 923.750852][ T30] [<802762fc>] (worker_thread) from [<8027f6fc>] (kthread+0x12c/0x280) [ 923.750930][ T30] r10:00000000 r9:832ce200 r8:802762fc r7:df879e60 r6:832ce280 r5:83315400 [ 923.750952][ T30] r4:00000001 [ 923.750969][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 923.751049][ T30] Exception stack(0xdf919fb0 to 0xdf919ff8) [ 923.751084][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 923.751121][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 923.751154][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 923.751196][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 923.751217][ T30] r4:832d0940 [ 923.789051][ T30] NMI backtrace for cpu 1 [ 923.789550][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 923.789709][ T30] Hardware name: ARM-Versatile Express [ 923.789792][ T30] Call trace: [ 923.789850][ T30] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 923.789967][ T30] r7:00000000 r6:00000113 r5:60000193 r4:822958fc [ 923.789987][ T30] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 923.790042][ T30] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 923.790095][ T30] r5:00000001 r4:00000001 [ 923.790112][ T30] [<8021ee40>] (dump_stack) from [<81a9be90>] (nmi_cpu_backtrace+0x160/0x17c) [ 923.790177][ T30] [<81a9bd30>] (nmi_cpu_backtrace) from [<81a9bfdc>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 923.790249][ T30] r7:00000001 r6:8280c710 r5:8281af5c r4:ffffffff [ 923.790265][ T30] [<81a9beac>] (nmi_trigger_cpumask_backtrace) from [<8022f818>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 923.790348][ T30] r9:00007f30 r8:8280c890 r7:0000f3a1 r6:00007f30 r5:82ac27e4 r4:00000048 [ 923.790365][ T30] [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa3aec>] (sys_info+0x68/0xa8) [ 923.790437][ T30] [<81aa3a84>] (sys_info) from [<803837fc>] (watchdog+0x464/0x8a0) [ 923.790503][ T30] r5:82ac27e4 r4:8333ce0c [ 923.790521][ T30] [<80383398>] (watchdog) from [<8027f6fc>] (kthread+0x12c/0x280) [ 923.790593][ T30] r10:00000000 r9:00000000 r8:80383398 r7:832a3b80 r6:832a3b80 r5:832e1800 [ 923.790613][ T30] r4:00000001 [ 923.790630][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 923.790683][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 923.790724][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 923.790764][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 923.790798][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 923.790840][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 923.790863][ T30] r4:833a1a80 [ 923.791149][ T30] Sending NMI from CPU 1 to CPUs 0: [ 923.791701][ C0] NMI backtrace for cpu 0 [ 923.791914][ C0] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT [ 923.791974][ C0] Hardware name: ARM-Versatile Express [ 923.792006][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 923.792127][ C0] PC is at synproxy_send_client_synack+0x7c/0x1e8 [ 923.792185][ C0] LR is at __build_skb_around+0x70/0x11c [ 923.792231][ C0] pc : [<81729e30>] lr : [<815a4b3c>] psr: 60010013 [ 923.792266][ C0] sp : df801b50 ip : 86132820 fp : df801b9c [ 923.792315][ C0] r10: 00000100 r9 : 86132000 r8 : 86132114 [ 923.792354][ C0] r7 : df801bb0 r6 : 860f49c0 r5 : 00000000 r4 : 860f49c0 [ 923.792392][ C0] r3 : 83383000 r2 : 00000000 r1 : 00000000 r0 : 860f40c0 [ 923.792519][ C0] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 923.792590][ C0] Control: 30c5387d Table: 862de480 DAC: fffffffd [ 923.792644][ C0] Call trace: frame pointer underflow [ 923.792709][ C0] [<81729db4>] (synproxy_send_client_synack) from [<817651f0>] (nft_synproxy_do_eval+0x25c/0x2b4) [ 923.792791][ C0] r10:81e66128 r9:86132114 r8:84d90fc0 r7:85c7bbd8 r6:df801c7c r5:854b0000 [ 923.792810][ C0] r4:860f49c0 [ 923.792823][ C0] [<81764f94>] (nft_synproxy_do_eval) from [<81765274>] (nft_synproxy_eval+0x14/0x18) [ 923.792886][ C0] r9:df801d14 r8:81e662b0 r7:81e66014 r6:81e65fd0 r5:85c7bbe0 r4:85c7bbd0 [ 923.792900][ C0] [<81765260>] (nft_synproxy_eval) from [<8172cf1c>] (nft_do_chain+0x12c/0x570) [ 923.792945][ C0] [<8172cdf0>] (nft_do_chain) from [<81747000>] (nft_do_chain_inet+0xac/0x120) [ 923.793009][ C0] r10:dddd1008 r9:8574cda0 r8:df801d6c r7:860f49c0 r6:8574cd80 r5:00000004 [ 923.793025][ C0] r4:85c714c0 [ 923.793037][ C0] [<81746f54>] (nft_do_chain_inet) from [<816f3774>] (nf_hook_slow+0x40/0x104) [ 923.793084][ C0] r4:00000001 [ 923.793099][ C0] [<816f3734>] (nf_hook_slow) from [<817895cc>] (ip_local_deliver+0xf0/0x110) [ 923.793161][ C0] r9:00000040 r8:00000003 r7:00000000 r6:854b0000 r5:8458e000 r4:860f49c0 [ 923.793175][ C0] [<817894dc>] (ip_local_deliver) from [<81788664>] (ip_rcv_finish+0x98/0xb0) [ 923.793238][ C0] r6:8458e000 r5:854b0000 r4:860f49c0 [ 923.793255][ C0] [<817885cc>] (ip_rcv_finish) from [<817896c0>] (ip_rcv+0xd4/0xe0) [ 923.793442][ C0] r7:00000000 r6:854b0000 r5:860f49c0 r4:00000001 [ 923.793477][ C0] [<817895ec>] (ip_rcv) from [<815d0390>] (__netif_receive_skb_one_core+0x5c/0x80) [ 923.793560][ C0] r6:00000000 r5:817895ec r4:8458e000 [ 923.793583][ C0] [<815d0334>] (__netif_receive_skb_one_core) from [<815d03fc>] (__netif_receive_skb+0x18/0x5c) [ 923.793711][ C0] r5:dddd1120 r4:860f49c0 [ 923.793732][ C0] [<815d03e4>] (__netif_receive_skb) from [<815d0704>] (process_backlog+0xa0/0x17c) [ 923.793797][ C0] r5:dddd1120 r4:860f49c0 [ 923.793812][ C0] [<815d0664>] (process_backlog) from [<815d0f64>] (__napi_poll+0x34/0x244) [ 923.793878][ C0] r10:df801ed8 r9:00000000 r8:0000012c r7:df801ed3 r6:00000040 r5:dddd1120 [ 923.793901][ C0] r4:00000001 [ 923.793917][ C0] [<815d0f30>] (__napi_poll) from [<815d14c8>] (net_rx_action+0x354/0x3e8) [ 923.793984][ C0] r9:00000000 r8:0000012c r7:dddd1124 r6:dddd1120 r5:0000012c r4:ffffffff [ 923.794002][ C0] [<815d1174>] (net_rx_action) from [<8025b65c>] (handle_softirqs+0x140/0x458) [ 923.794087][ C0] r10:83383000 r9:82804d80 r8:00000102 r7:00000003 r6:00000208 r5:00000004 [ 923.794223][ C0] r4:8280408c [ 923.794328][ C0] [<8025b51c>] (handle_softirqs) from [<802012f0>] (__do_softirq+0x14/0x18) [ 923.794494][ C0] r10:85140100 r9:84e50680 r8:85140208 r7:00000040 r6:81d98268 r5:00000002 [ 923.794519][ C0] r4:60010013 [ 923.794536][ C0] [<802012dc>] (__do_softirq) from [<8022786c>] (____do_softirq+0x10/0x14) [ 923.794584][ C0] [<8022785c>] (____do_softirq) from [<81a7eb68>] (call_with_stack+0x1c/0x20) [ 923.794632][ C0] [<81a7eb4c>] (call_with_stack) from [<802278a8>] (do_softirq_own_stack+0x38/0x3c) [ 923.794679][ C0] [<80227870>] (do_softirq_own_stack) from [<8025bc64>] (do_softirq+0x5c/0x64) [ 923.794721][ C0] [<8025bc08>] (do_softirq) from [<8025bd38>] (__local_bh_enable_ip+0xcc/0xd0) [ 923.794770][ C0] r5:00000002 r4:83383000 [ 923.794781][ C0] [<8025bc6c>] (__local_bh_enable_ip) from [<81abceb4>] (_raw_spin_unlock_bh+0x34/0x38) [ 923.794834][ C0] r5:84e50740 r4:860f4540 [ 923.794846][ C0] [<81abce80>] (_raw_spin_unlock_bh) from [<80e829b4>] (nsim_dev_trap_report_work+0x2e4/0x410) [ 923.794890][ C0] [<80e826d0>] (nsim_dev_trap_report_work) from [<80275db8>] (process_one_work+0x1b4/0x4f4) [ 923.794952][ C0] r10:8300e870 r9:83019805 r8:83383000 r7:8300e600 r6:83019800 r5:84e50680 [ 923.794968][ C0] r4:832ce380 [ 923.794980][ C0] [<80275c04>] (process_one_work) from [<802764f8>] (worker_thread+0x1fc/0x3d8) [ 923.795073][ C0] r10:61c88647 r9:83383000 r8:832ce3ac r7:82804d80 r6:8300e600 r5:8300e620 [ 923.795091][ C0] r4:832ce380 [ 923.795107][ C0] [<802762fc>] (worker_thread) from [<8027f6fc>] (kthread+0x12c/0x280) [ 923.795168][ C0] r10:00000000 r9:832ce380 r8:802762fc r7:df8e1e60 r6:833eb980 r5:83383000 [ 923.795184][ C0] r4:00000001 [ 923.795196][ C0] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 923.795234][ C0] Exception stack(0xdf935fb0 to 0xdf935ff8) [ 923.795267][ C0] 5fa0: 00000000 00000000 00000000 00000000 [ 923.795298][ C0] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 923.795324][ C0] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 923.795358][ C0] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 923.795374][ C0] r4:832d0940 [ 944.050203][ T30] INFO: task kworker/0:6:3845 blocked for more than 453 seconds. [ 944.061909][ T30] Not tainted syzkaller #0 [ 944.084394][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.097904][ T30] task:kworker/0:6 state:D stack:0 pid:3845 tgid:3845 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 944.249600][ T30] Workqueue: events bpf_prog_free_deferred [ 944.269408][ T30] Call trace: [ 944.908236][ T30] [<81ab23ac>] (__schedule) from [<81ab3658>] (schedule+0x2c/0x130) [ 944.923277][ T30] r10:dfbbdd84 r9:829174e8 r8:60000013 r7:829174e8 r6:dfbbdd8c r5:852b8c00 [ 944.942272][ T30] r4:852b8c00 [ 944.960306][ T30] [<81ab362c>] (schedule) from [<81ab37e0>] (schedule_preempt_disabled+0x18/0x24) [ 944.975604][ T30] r5:852b8c00 r4:829174e4 [ 945.102293][ T30] [<81ab37c8>] (schedule_preempt_disabled) from [<81ab6e64>] (__mutex_lock.constprop.0+0x658/0xf8c) [ 945.118662][ T30] [<81ab680c>] (__mutex_lock.constprop.0) from [<81ab786c>] (__mutex_lock_slowpath+0x14/0x18) [ 945.139892][ T30] r10:8280c9e4 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfbbde08 [ 946.098327][ T30] r4:00000000 [ 946.106352][ T30] [<81ab7858>] (__mutex_lock_slowpath) from [<81ab78ac>] (mutex_lock+0x3c/0x40) [ 946.129057][ T30] [<81ab7870>] (mutex_lock) from [<804f4400>] (_vm_unmap_aliases+0x68/0x240) [ 946.137665][ T30] [<804f4398>] (_vm_unmap_aliases) from [<804f81e8>] (vfree+0x16c/0x210) [ 946.145578][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:861b7280 [ 946.157204][ T30] r4:00000000 [ 946.170402][ T30] [<804f807c>] (vfree) from [<80564020>] (execmem_free+0x30/0x50) [ 946.180973][ T30] r9:83018405 r8:852b8c00 r7:00000000 r6:83018400 r5:00001000 r4:7f029000 [ 946.220153][ T30] [<80563ff0>] (execmem_free) from [<803cb2cc>] (bpf_jit_free_exec+0x10/0x14) [ 946.228242][ T30] r5:00001000 r4:eb01b000 [ 946.236285][ T30] [<803cb2bc>] (bpf_jit_free_exec) from [<803cb6ac>] (bpf_jit_free+0x68/0xe4) [ 946.285743][ T30] [<803cb644>] (bpf_jit_free) from [<803cc7d4>] (bpf_prog_free_deferred+0x140/0x158) [ 946.806726][ T30] r5:85c0e394 r4:85c8f600 [ 946.817975][ T30] [<803cc694>] (bpf_prog_free_deferred) from [<80275db8>] (process_one_work+0x1b4/0x4f4) [ 946.832066][ T30] r7:dddcfb40 r6:83018400 r5:85c0e394 r4:85c8f600 [ 946.832166][ T30] [<80275c04>] (process_one_work) from [<802764f8>] (worker_thread+0x1fc/0x3d8) [ 946.832290][ T30] r10:61c88647 r9:852b8c00 r8:85c8f62c r7:82804d80 r6:dddcfb40 r5:dddcfb60 [ 946.832312][ T30] r4:85c8f600 [ 946.832327][ T30] [<802762fc>] (worker_thread) from [<8027f6fc>] (kthread+0x12c/0x280) [ 946.832399][ T30] r10:00000000 r9:85c8f600 r8:802762fc r7:dfd4de60 r6:85c8f680 r5:852b8c00 [ 946.832419][ T30] r4:00000001 [ 946.832434][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 946.832487][ T30] Exception stack(0xdfbbdfb0 to 0xdfbbdff8) [ 946.832539][ T30] dfa0: 00000000 00000000 00000000 00000000 [ 946.832584][ T30] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 946.832624][ T30] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 946.832665][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 946.832685][ T30] r4:84ed9980 [ 946.832791][ T30] INFO: task kworker/0:6:3845 is blocked on a mutex likely owned by task kworker/1:1:45. [ 946.832839][ T30] task:kworker/1:1 state:R running task stack:0 pid:45 tgid:45 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 946.832949][ T30] Workqueue: events bpf_prog_free_deferred [ 946.833009][ T30] Call trace: [ 946.833039][ T30] [<81ab23ac>] (__schedule) from [<81ab3a8c>] (preempt_schedule_irq+0x40/0xa8) [ 946.833127][ T30] r10:8280ca38 r9:83315400 r8:80200c04 r7:df919d54 r6:ffffffff r5:83315400 [ 946.833148][ T30] r4:00000000 [ 946.833163][ T30] [<81ab3a4c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 946.833217][ T30] Exception stack(0xdf919d20 to 0xdf919d68) [ 946.833256][ T30] 9d20: ae8d3000 ebdd3000 00000001 80239018 7f00d000 00000001 82ace204 82acd5e0 [ 946.833293][ T30] 9d40: 7f00d000 ebdd3000 8280ca38 df919d9c df919da0 df919d70 8022fe10 80239030 [ 946.833316][ T30] 9d60: 80000013 ffffffff [ 946.833342][ T30] r5:80000013 r4:80239030 [ 946.833358][ T30] [<8022fdac>] (flush_tlb_kernel_range) from [<804f41c4>] (__purge_vmap_area_lazy+0x284/0x458) [ 946.833425][ T30] r4:82ace224 [ 946.833440][ T30] [<804f3f40>] (__purge_vmap_area_lazy) from [<804f457c>] (_vm_unmap_aliases+0x1e4/0x240) [ 946.833509][ T30] r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:df919dc0 r5:df919e08 [ 946.833530][ T30] r4:df919dc0 [ 946.833545][ T30] [<804f4398>] (_vm_unmap_aliases) from [<804f81e8>] (vfree+0x16c/0x210) [ 946.846248][ T30] r10:83016170 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:862dee00 [ 946.846327][ T30] r4:00000000 [ 946.846362][ T30] [<804f807c>] (vfree) from [<80564020>] (execmem_free+0x30/0x50) [ 946.846494][ T30] r9:83018605 r8:83315400 r7:00000000 r6:83018600 r5:00001000 r4:7f00d000 [ 946.846514][ T30] [<80563ff0>] (execmem_free) from [<803cb2cc>] (bpf_jit_free_exec+0x10/0x14) [ 946.846588][ T30] r5:00001000 r4:eaf25000 [ 946.846610][ T30] [<803cb2bc>] (bpf_jit_free_exec) from [<803cb6ac>] (bpf_jit_free+0x68/0xe4) [ 946.846672][ T30] [<803cb644>] (bpf_jit_free) from [<803cc7d4>] (bpf_prog_free_deferred+0x140/0x158) [ 946.846738][ T30] r5:8513df94 r4:832ce200 [ 946.846756][ T30] [<803cc694>] (bpf_prog_free_deferred) from [<80275db8>] (process_one_work+0x1b4/0x4f4) [ 946.846834][ T30] r7:ddde3b40 r6:83018600 r5:8513df94 r4:832ce200 [ 946.846853][ T30] [<80275c04>] (process_one_work) from [<802764f8>] (worker_thread+0x1fc/0x3d8) [ 946.846935][ T30] r10:61c88647 r9:83315400 r8:832ce22c r7:82804d80 r6:ddde3b40 r5:ddde3b60 [ 946.846959][ T30] r4:832ce200 [ 946.846976][ T30] [<802762fc>] (worker_thread) from [<8027f6fc>] (kthread+0x12c/0x280) [ 946.847082][ T30] r10:00000000 r9:832ce200 r8:802762fc r7:df879e60 r6:832ce280 r5:83315400 [ 946.847106][ T30] r4:00000001 [ 946.847123][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 946.847177][ T30] Exception stack(0xdf919fb0 to 0xdf919ff8) [ 946.847220][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 946.847260][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 946.847299][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 946.847355][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 946.847378][ T30] r4:832d0940 [ 946.847935][ T30] NMI backtrace for cpu 1 [ 946.848004][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 946.848067][ T30] Hardware name: ARM-Versatile Express [ 946.848094][ T30] Call trace: [ 946.848141][ T30] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 946.848226][ T30] r7:00000000 r6:00000113 r5:60000193 r4:822958fc [ 946.848245][ T30] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 946.848305][ T30] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 946.848380][ T30] r5:00000001 r4:00000001 [ 946.848397][ T30] [<8021ee40>] (dump_stack) from [<81a9be90>] (nmi_cpu_backtrace+0x160/0x17c) [ 946.848462][ T30] [<81a9bd30>] (nmi_cpu_backtrace) from [<81a9bfdc>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 946.848534][ T30] r7:00000001 r6:8280c710 r5:8281af5c r4:ffffffff [ 946.848551][ T30] [<81a9beac>] (nmi_trigger_cpumask_backtrace) from [<8022f818>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 946.848637][ T30] r9:00007f39 r8:8280c890 r7:0000fca3 r6:00007f39 r5:82ac27e4 r4:00000048 [ 946.848659][ T30] [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa3aec>] (sys_info+0x68/0xa8) [ 946.848720][ T30] [<81aa3a84>] (sys_info) from [<803837fc>] (watchdog+0x464/0x8a0) [ 946.848777][ T30] r5:82ac27e4 r4:8333cb0c [ 946.848793][ T30] [<80383398>] (watchdog) from [<8027f6fc>] (kthread+0x12c/0x280) [ 946.848860][ T30] r10:00000000 r9:00000000 r8:80383398 r7:832a3b80 r6:832a3b80 r5:832e1800 [ 946.848882][ T30] r4:00000001 [ 946.848899][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 946.848950][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 946.848986][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 946.849024][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 946.849057][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 946.849098][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 946.849117][ T30] r4:833a1a80 [ 946.849161][ T30] Sending NMI from CPU 1 to CPUs 0: [ 946.849385][ C0] NMI backtrace for cpu 0 [ 946.849530][ C0] CPU: 0 UID: 0 PID: 2819 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT [ 946.849594][ C0] Hardware name: ARM-Versatile Express [ 946.849628][ C0] PC is at nf_nat_ipv4_local_fn+0x58/0x130 [ 946.849723][ C0] LR is at nf_nat_ipv4_local_fn+0x58/0x130 [ 946.849758][ C0] pc : [<81725200>] lr : [<81725200>] psr: 600f0113 [ 946.849786][ C0] sp : df801a58 ip : df801a58 fp : df801a6c [ 946.849828][ C0] r10: 85c4e7d4 r9 : 8574cba8 r8 : df801a9c [ 946.849850][ C0] r7 : 863e5300 r6 : 8574cb80 r5 : df801a9c r4 : 863e5300 [ 946.849878][ C0] r3 : 00000001 r2 : 00000010 r1 : 00000388 r0 : 00000001 [ 946.849907][ C0] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 946.849961][ C0] Control: 30c5387d Table: 850bd2c0 DAC: fffffffd [ 946.849987][ C0] Call trace: frame pointer underflow [ 946.850054][ C0] [<817251a8>] (nf_nat_ipv4_local_fn) from [<816f3774>] (nf_hook_slow+0x40/0x104) [ 946.850125][ C0] r5:00000005 r4:00000001 [ 946.850147][ C0] [<816f3734>] (nf_hook_slow) from [<8178f98c>] (__ip_local_out+0x13c/0x1b0) [ 946.850230][ C0] r9:85c4e100 r8:86276d01 r7:8458e000 r6:00000000 r5:854b0000 r4:863e5300 [ 946.850249][ C0] [<8178f850>] (__ip_local_out) from [<8178fa1c>] (ip_local_out+0x1c/0x44) [ 946.850310][ C0] r7:86276d00 r6:00000000 r5:854b0000 r4:863e5300 [ 946.850330][ C0] [<8178fa00>] (ip_local_out) from [<81729b60>] (synproxy_send_tcp+0x124/0x190) [ 946.850392][ C0] r7:86276d00 r6:854b0000 r5:85d1c300 r4:863e5300 [ 946.850416][ C0] [<81729a3c>] (synproxy_send_tcp) from [<81729f44>] (synproxy_send_client_synack+0x190/0x1e8) [ 946.850492][ C0] r9:85c4e100 r8:85c4e114 r7:df801b80 r6:863e5840 r5:00000014 r4:863e5300 [ 946.850511][ C0] [<81729db4>] (synproxy_send_client_synack) from [<817651f0>] (nft_synproxy_do_eval+0x25c/0x2b4) [ 946.850588][ C0] r10:81e66128 r9:85c4e114 r8:84d90fc0 r7:85c7bbd8 r6:df801c4c r5:854b0000 [ 946.850606][ C0] r4:863e5840 [ 946.850622][ C0] [<81764f94>] (nft_synproxy_do_eval) from [<81765274>] (nft_synproxy_eval+0x14/0x18) [ 946.850707][ C0] r9:df801ce4 r8:81e662b0 r7:81e66014 r6:81e65fd0 r5:85c7bbe0 r4:85c7bbd0 [ 946.850728][ C0] [<81765260>] (nft_synproxy_eval) from [<8172cf1c>] (nft_do_chain+0x12c/0x570) [ 946.850782][ C0] [<8172cdf0>] (nft_do_chain) from [<81747000>] (nft_do_chain_inet+0xac/0x120) [ 946.850858][ C0] r10:dddd1008 r9:8574cda0 r8:df801d3c r7:863e5840 r6:8574cd80 r5:00000004 [ 946.850880][ C0] r4:85c714c0 [ 946.850897][ C0] [<81746f54>] (nft_do_chain_inet) from [<816f3774>] (nf_hook_slow+0x40/0x104) [ 946.850960][ C0] r4:00000001 [ 946.850977][ C0] [<816f3734>] (nf_hook_slow) from [<817895cc>] (ip_local_deliver+0xf0/0x110) [ 946.851075][ C0] r9:00000040 r8:00000021 r7:00000000 r6:854b0000 r5:8458e000 r4:863e5840 [ 946.851096][ C0] [<817894dc>] (ip_local_deliver) from [<81788664>] (ip_rcv_finish+0x98/0xb0) [ 946.851161][ C0] r6:8458e000 r5:854b0000 r4:863e5840 [ 946.851179][ C0] [<817885cc>] (ip_rcv_finish) from [<817896c0>] (ip_rcv+0xd4/0xe0) [ 946.851242][ C0] r7:00000000 r6:854b0000 r5:863e5840 r4:00000001 [ 946.851262][ C0] [<817895ec>] (ip_rcv) from [<815d0390>] (__netif_receive_skb_one_core+0x5c/0x80) [ 946.851334][ C0] r6:00000000 r5:817895ec r4:8458e000 [ 946.851353][ C0] [<815d0334>] (__netif_receive_skb_one_core) from [<815d03fc>] (__netif_receive_skb+0x18/0x5c) [ 946.851420][ C0] r5:dddd1120 r4:863e5840 [ 946.851438][ C0] [<815d03e4>] (__netif_receive_skb) from [<815d0704>] (process_backlog+0xa0/0x17c) [ 946.851499][ C0] r5:dddd1120 r4:863e5840 [ 946.851515][ C0] [<815d0664>] (process_backlog) from [<815d0f64>] (__napi_poll+0x34/0x244) [ 946.851587][ C0] r10:df801ea8 r9:00000000 r8:0000012c r7:df801ea3 r6:00000040 r5:dddd1120 [ 946.851610][ C0] r4:00000001 [ 946.851627][ C0] [<815d0f30>] (__napi_poll) from [<815d14c8>] (net_rx_action+0x354/0x3e8) [ 946.851711][ C0] r9:00000000 r8:0000012c r7:dddd1124 r6:dddd1120 r5:0000012c r4:ffffffff [ 946.851732][ C0] [<815d1174>] (net_rx_action) from [<8025b65c>] (handle_softirqs+0x140/0x458) [ 946.851814][ C0] r10:845a0c00 r9:82804d80 r8:00000101 r7:00000003 r6:00000088 r5:00000004 [ 946.851838][ C0] r4:8280408c [ 946.851855][ C0] [<8025b51c>] (handle_softirqs) from [<8025bad0>] (__irq_exit_rcu+0x110/0x1d0) [ 946.851927][ C0] r10:82959c04 r9:845a0c00 r8:00000000 r7:eb049e60 r6:824441e0 r5:8247f34c [ 946.851951][ C0] r4:845a0c00 [ 946.851967][ C0] [<8025b9c0>] (__irq_exit_rcu) from [<8025be48>] (irq_exit+0x10/0x18) [ 946.852027][ C0] r5:8247f34c r4:826c3a9c [ 946.852043][ C0] [<8025be38>] (irq_exit) from [<81aaebd4>] (generic_handle_arch_irq+0x7c/0x80) [ 946.852104][ C0] [<81aaeb58>] (generic_handle_arch_irq) from [<81a7eb68>] (call_with_stack+0x1c/0x20) [ 946.852177][ C0] r9:845a0c00 r8:00000000 r7:eb049e94 r6:ffffffff r5:600f0013 r4:81abd000 [ 946.852195][ C0] [<81a7eb4c>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc) [ 946.852249][ C0] Exception stack(0xeb049e60 to 0xeb049ea8) [ 946.852302][ C0] 9e60: 84468040 600f0013 00000000 000009c6 00000001 00000000 82959b68 00000117 [ 946.852342][ C0] 9e80: 00000000 00000000 82959c04 eb049ebc eb049ec0 eb049eb0 80aa3bdc 81abd000 [ 946.852368][ C0] 9ea0: 600f0013 ffffffff [ 946.852389][ C0] [<81abcfd8>] (_raw_spin_unlock_irqrestore) from [<80aa3bdc>] (pl011_console_device_unlock+0x20/0x24) [ 946.852483][ C0] [<80aa3bbc>] (pl011_console_device_unlock) from [<802e5768>] (nbcon_emit_one+0x88/0x100) [ 946.852546][ C0] [<802e56e0>] (nbcon_emit_one) from [<802e59e8>] (nbcon_kthread_func+0x208/0x2e4) [ 946.852613][ C0] r6:82abf0fc r5:82959b68 r4:845a0c00 [ 946.852631][ C0] [<802e57e0>] (nbcon_kthread_func) from [<8027f6fc>] (kthread+0x12c/0x280) [ 946.852717][ C0] r10:00000000 r9:82959b68 r8:802e57e0 r7:84b72d00 r6:84b72d00 r5:845a0c00 [ 946.852740][ C0] r4:00000001 [ 946.852757][ C0] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 946.852806][ C0] Exception stack(0xeb049fb0 to 0xeb049ff8) [ 946.852839][ C0] 9fa0: 00000000 00000000 00000000 00000000 [ 946.852876][ C0] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 946.852907][ C0] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 946.852944][ C0] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 946.852965][ C0] r4:84f7d280