last executing test programs: 41m56.589938812s ago: executing program 1 (id=3447): r0 = openat$ptmx(0xffffff9c, &(0x7f0000004bc0), 0x20882, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000004c00)={0x1, 0x401, 0x101, 0x6c7, 0x9, "19d6cdfef66c8436f034b5db0b59bc0081be7d"}) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r2) 41m56.338188603s ago: executing program 1 (id=3449): r0 = socket(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000804) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x24048010) close_range(r0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r1) landlock_restrict_self(0xffffffffffffffff, 0xc) 41m56.071152786s ago: executing program 1 (id=3451): r0 = socket(0x29, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000804) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x24048010) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40840) r3 = dup2(r1, r1) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048854) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], 0x33fe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x10001) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)) landlock_restrict_self(0xffffffffffffffff, 0xc) 41m54.150666891s ago: executing program 1 (id=3457): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x40804}, 0x24084844) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x40000) landlock_restrict_self(0xffffffffffffffff, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000107017f00000000000000000000000a8e452f44ca2a28401cc99af749afdda31809303056ad75b4d814540a12010f79538523a3449f35ecf97e0a7d5277632146b9348bacbc2d2591e5b6cd2e089ed1a6298bc22b1f92799209a50773b5ca4fb277bfee"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1081000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24080}, 0x0) 41m51.839178691s ago: executing program 1 (id=3462): r0 = openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) futimesat(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) close$binfmt(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001600), 0x6b0b82, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x5450, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x28082, 0x0) r4 = dup(r1) ioctl$int_out(r4, 0x2, &(0x7f00000001c0)) r5 = openat$null(0xffffff9c, &(0x7f0000000200), 0x40001, 0x0) read$mtd(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="c79a155c4eac2ddc1c9106a0b13a8b98016753d9e4e6b3fe18a0091c01026a7817d152a49e72d3d8641a11e638b67ae42fa5f24a596a9e2b0e3b6c39bb9d931845ba9a516e12cb46b9c5ce07815a429c905a1f8c0bae7cd11cfcc97c97f6b0c4f69a81297c7c3cb1b216e36c754766c9e7ffffbfe0709740164bbd25b903ced9388a943e74184901e260") ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x400, 0x0) openat$cgroup_devices(r7, &(0x7f0000000040)='devices.allow\x00', 0x63, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x6, r0, 0x18, {0x800, 0xfffffffffffffff8}, 0x80}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x28240, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendto$l2tp6(r8, 0x0, 0x0, 0x4080, 0x0, 0x0) write$dsp(r0, 0x0, 0xfffffffffffffe99) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x3997c0, 0x100) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)=ANY=[@ANYRES32=r4], 0x420}, 0x1, 0x0, 0x0, 0x20000011}, 0xc845) 41m51.272197806s ago: executing program 1 (id=3463): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$inet_nvme(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x100010, r0, 0x0) 41m5.46271296s ago: executing program 32 (id=3463): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$inet_nvme(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x100010, r0, 0x0) 20.132080777s ago: executing program 2 (id=7162): syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x406}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x40002, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19.718911961s ago: executing program 2 (id=7163): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)={0x0, 0xb, 0x8, "ebab5503030100e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.429616404s ago: executing program 2 (id=7164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "fe4f5689b3d746b5", "46204c6f3b95b0f787445b9ef55830c4", "40c10400", "1534faae140d2349"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000180)='d', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pselect6(0x40, &(0x7f0000000000)={0x9, 0x2, 0x10000, 0x0, 0x3, 0x100, 0x8000000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0) 18.461226153s ago: executing program 0 (id=7167): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1}}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca1d88d024cbeade5e464169cff4", 0x43}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603", 0x2}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16.920305698s ago: executing program 0 (id=7168): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe, 0xf, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x9a, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 13.946788046s ago: executing program 0 (id=7169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}, 0x1, 0x0, 0x0, 0x2004c850}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.52174311s ago: executing program 0 (id=7170): socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x0, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fd, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, 0x0) 11.691848478s ago: executing program 0 (id=7171): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) 8.920980104s ago: executing program 0 (id=7172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x402a1, 0x21, &(0x7f00000001c0)={0x0, 0x1, 0x4e, 0x8}, 0x8, 0x6, 0x6, 0x0, 0x1, 0x101, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x0, 0x5}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {0xfffffffe}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffe}, {0x0, 0x10000000}, {0xd5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}, {0x7, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 3.298360009s ago: executing program 2 (id=7164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "fe4f5689b3d746b5", "46204c6f3b95b0f787445b9ef55830c4", "40c10400", "1534faae140d2349"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000180)='d', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pselect6(0x40, &(0x7f0000000000)={0x9, 0x2, 0x10000, 0x0, 0x3, 0x100, 0x8000000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0) 385.600826ms ago: executing program 2 (id=7173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000091e4efae"], 0x1c}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) 0s ago: executing program 2 (id=7174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38) kernel console output (not intermixed with test programs): (drm_mode_createblob_ioctl) from [<80b652e4>] (drm_ioctl_kernel+0xb8/0x120) [ 3941.722780][T29149] r10:8616b900 r9:845c1880 r8:8616b900 r7:833bc000 r6:df9d1e64 r5:80b75ce4 [ 3941.722810][T29149] r4:00000000 [ 3941.722840][T29149] [<80b6522c>] (drm_ioctl_kernel) from [<80b655ac>] (drm_ioctl+0x260/0x580) [ 3941.722903][T29149] r8:81d4129c r7:833bc000 r6:c01064bd r5:00000010 r4:845c2068 [ 3941.722921][T29149] [<80b6534c>] (drm_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 3941.722984][T29149] r10:845c1880 r9:00000003 r8:86587080 r7:20000240 r6:c01064bd r5:86587081 [ 3941.723004][T29149] r4:00000000 [ 3941.723020][T29149] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3941.723068][T29149] Exception stack(0xdf9d1fa8 to 0xdf9d1ff0) [ 3941.723107][T29149] 1fa0: 00000000 00000000 00000003 c01064bd 20000240 00000000 [ 3941.723141][T29149] 1fc0: 00000000 00000000 0012f454 00000036 003562d8 00000000 00000001 76f5c0dc [ 3941.723185][T29149] 1fe0: 76f5be88 76f5be78 00018fa0 00130a50 [ 3941.723234][T29149] r10:00000036 r9:845c1880 r8:8020029c r7:00000036 r6:0012f454 r5:00000000 [ 3941.723256][T29149] r4:00000000 [ 3941.723288][T29149] Mem-Info: [ 3941.723315][T29149] active_anon:2738 inactive_anon:0 isolated_anon:0 [ 3941.723315][T29149] active_file:0 inactive_file:43424 isolated_file:0 [ 3941.723315][T29149] unevictable:774 dirty:14 writeback:0 [ 3941.723315][T29149] slab_reclaimable:1364 slab_unreclaimable:7526 [ 3941.723315][T29149] mapped:3716 shmem:778 pagetables:488 [ 3941.723315][T29149] sec_pagetables:0 bounce:0 [ 3941.723315][T29149] kernel_misc_reclaimable:0 [ 3941.723315][T29149] free:400441 free_pcp:1296 free_cma:4032 [ 3941.723387][T29149] Node 0 active_anon:10952kB inactive_anon:0kB active_file:0kB inactive_file:173696kB unevictable:3096kB isolated(anon):0kB isolated(file):0kB mapped:14864kB dirty:56kB writeback:0kB shmem:3112kB kernel_stack:1504kB pagetables:1952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 3941.723457][T29149] Normal free:1359848kB boost:0kB min:4768kB low:6188kB high:7608kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:6536kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1424816kB mlocked:0kB bounce:0kB free_pcp:5184kB local_pcp:2468kB free_cma:0kB [ 3941.723525][T29149] lowmem_reserve[]: 0 4224 4224 [ 3941.723662][T29149] Normal: 50*4kB (UME) 26*8kB (U) 1*16kB (U) 8*32kB (UE) 7*64kB (UM) 1*128kB (U) 1*256kB (U) 3*512kB (UME) 7*1024kB (UME) 3*2048kB (UME) 328*4096kB (UM) = 1359848kB [ 3941.724146][T29149] 44202 total pagecache pages [ 3941.724168][T29149] 0 pages in swap cache [ 3941.724208][T29149] Free swap = 124996kB [ 3941.725163][T29149] Total swap = 124996kB [ 3941.725221][T29149] 524288 pages RAM [ 3941.725244][T29149] 135168 pages HighMem/MovableOnly [ 3941.725265][T29149] 32916 pages reserved [ 3941.725281][T29149] 4096 pages cma reserved [ 3942.218107][T29159] syz.0.6528 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3942.218400][T29159] CPU: 0 UID: 0 PID: 29159 Comm: syz.0.6528 Tainted: G L syzkaller #0 PREEMPT [ 3942.218456][T29159] Tainted: [L]=SOFTLOCKUP [ 3942.218472][T29159] Hardware name: ARM-Versatile Express [ 3942.218499][T29159] Call trace: [ 3942.218545][T29159] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3942.218669][T29159] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3942.218692][T29159] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3942.218798][T29159] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3942.218840][T29159] r7:81c1e934 r6:8234b67c r5:df9b1c50 r4:df9b1c50 [ 3942.218849][T29159] [<8021ec7c>] (dump_stack) from [<80205cdc>] (dump_header+0x4c/0x1b0) [ 3942.218899][T29159] [<80205c90>] (dump_header) from [<804a91cc>] (oom_kill_process+0x1b4/0x234) [ 3942.219079][T29159] r7:81c1e934 r6:8234b67c r5:df9b1c50 r4:845c1880 [ 3942.219231][T29159] [<804a9018>] (oom_kill_process) from [<804a99d8>] (out_of_memory+0x114/0x384) [ 3942.219295][T29159] r7:86c3e540 r6:82cd43c4 r5:840be200 r4:df9b1c50 [ 3942.219330][T29159] [<804a98c4>] (out_of_memory) from [<80571d88>] (mem_cgroup_out_of_memory+0xa0/0xb8) [ 3942.219364][T29159] r6:00000cc0 r5:86c3e540 r4:00000000 [ 3942.219375][T29159] [<80571ce8>] (mem_cgroup_out_of_memory) from [<80578dd4>] (try_charge_memcg+0x41c/0x578) [ 3942.219450][T29159] r6:86c3e540 r5:00000001 r4:00000001 [ 3942.219482][T29159] [<805789b8>] (try_charge_memcg) from [<80578f70>] (obj_cgroup_charge_pages+0x40/0x1c8) [ 3942.219537][T29159] r10:00000000 r9:00000000 r8:df9b1d84 r7:00000cc0 r6:85f39400 r5:00000001 [ 3942.219559][T29159] r4:86c3e540 [ 3942.219659][T29159] [<80578f30>] (obj_cgroup_charge_pages) from [<80579bcc>] (__memcg_slab_post_alloc_hook+0x1e4/0x5dc) [ 3942.219764][T29159] r7:00000080 r6:830bdd80 r5:85f39400 r4:dded52bc [ 3942.219798][T29159] [<805799e8>] (__memcg_slab_post_alloc_hook) from [<80546bc0>] (kmem_cache_alloc_noprof+0x3bc/0x3e0) [ 3942.219866][T29159] r10:82a0b444 r9:86587080 r8:828d8430 r7:840be200 r6:805a3210 r5:00000cc0 [ 3942.219938][T29159] r4:830bdd80 [ 3942.219960][T29159] [<80546804>] (kmem_cache_alloc_noprof) from [<805a3210>] (alloc_empty_file+0x54/0x13c) [ 3942.220049][T29159] r10:00000142 r9:840be200 r8:82a04d00 r7:84cf9a00 r6:00020002 r5:82b1dfdc [ 3942.220203][T29159] r4:825438e8 [ 3942.220291][T29159] [<805a31bc>] (alloc_empty_file) from [<805b97e0>] (path_openat+0x38/0xa3c) [ 3942.220349][T29159] r8:840be200 r7:df9b1f20 r6:df9b1f20 r5:840be200 r4:df9b1e58 [ 3942.220399][T29159] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 3942.220536][T29159] r10:00000142 r9:840be200 r8:00000001 r7:ffffff9c r6:df9b1f20 r5:840be200 [ 3942.220584][T29159] r4:833c63c0 [ 3942.220653][T29159] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 3942.220726][T29159] r8:8020029c r7:0018f2f4 r6:ffffff9c r5:833c63c0 r4:00000004 [ 3942.220767][T29159] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 3942.220838][T29159] r7:00000142 r6:6593423a r5:0018f2f4 r4:ffffff9c [ 3942.220873][T29159] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3942.220970][T29159] Exception stack(0xdf9b1fa8 to 0xdf9b1ff0) [ 3942.221010][T29159] 1fa0: 00000000 00000000 ffffff9c 0018f2f4 00020002 00000000 [ 3942.221150][T29159] 1fc0: 00000000 00000000 6593423a 00000142 003562d8 00000000 00000001 76f5c0dc [ 3942.221214][T29159] 1fe0: 76f5be48 76f5be34 0010bc74 00112858 [ 3942.221379][T29159] r5:00000000 r4:00000000 [ 3942.261599][T29159] memory: usage 0kB, limit 0kB, failcnt 271 [ 3942.261984][T29159] memory+swap: usage 0kB, limit 8589934588kB, failcnt 0 [ 3942.262267][T29159] kmem: usage 0kB, limit 8589934588kB, failcnt 0 [ 3942.262316][T29159] Memory cgroup stats for /syz0/test: [ 3942.262584][T29159] cache 0 [ 3942.262612][T29159] rss 0 [ 3942.262628][T29159] shmem 0 [ 3942.262642][T29159] mapped_file 0 [ 3942.262654][T29159] dirty 0 [ 3942.262667][T29159] writeback 0 [ 3942.262727][T29159] workingset_refault_anon 0 [ 3942.262997][T29159] workingset_refault_file 0 [ 3942.263033][T29159] swap 0 [ 3942.263046][T29159] swapcached 0 [ 3942.263060][T29159] pgpgin 0 [ 3942.263071][T29159] pgpgout 0 [ 3942.263082][T29159] pgfault 9 [ 3942.263097][T29159] pgmajfault 0 [ 3942.263110][T29159] inactive_anon 0 [ 3942.263125][T29159] active_anon 0 [ 3942.263140][T29159] inactive_file 0 [ 3942.263154][T29159] active_file 0 [ 3942.263180][T29159] unevictable 0 [ 3942.263196][T29159] hierarchical_memory_limit 0 [ 3942.263239][T29159] hierarchical_memsw_limit 8796093018112 [ 3942.263265][T29159] total_cache 0 [ 3942.263278][T29159] total_rss 0 [ 3942.263291][T29159] total_shmem 0 [ 3942.263303][T29159] total_mapped_file 0 [ 3942.263316][T29159] total_dirty 0 [ 3942.263328][T29159] total_writeback 0 [ 3942.263339][T29159] total_workingset_refault_anon 0 [ 3942.263351][T29159] total_workingset_refault_file 0 [ 3942.263365][T29159] total_swap 0 [ 3942.263377][T29159] total_swapcached 0 [ 3942.263414][T29159] total_pgpgin 0 [ 3942.263432][T29159] total_pgpgout 0 [ 3942.263444][T29159] total_pgfault 9 [ 3942.263475][T29159] total_pgmajfault 0 [ 3942.263505][T29159] total_inactive_anon 0 [ 3942.263523][T29159] total_active_anon 0 [ 3942.263548][T29159] total_inactive_file 0 [ 3942.263568][T29159] total_active_file 0 [ 3942.263582][T29159] total_unevictable 0 [ 3942.263596][T29159] anon_cost 0 [ 3942.263608][T29159] file_cost 0 [ 3942.263628][T29159] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.6528,pid=29158,uid=0 [ 3942.264020][T29159] Memory cgroup out of memory: Killed process 29158 (syz.0.6528) total-vm:35900kB, anon-rss:116kB, file-rss:1352kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:1000 [ 3944.512073][T29185] FAULT_INJECTION: forcing a failure. [ 3944.512073][T29185] name failslab, interval 1, probability 0, space 0, times 0 [ 3944.513613][T29185] CPU: 1 UID: 0 PID: 29185 Comm: syz.2.6534 Tainted: G L syzkaller #0 PREEMPT [ 3944.513724][T29185] Tainted: [L]=SOFTLOCKUP [ 3944.513747][T29185] Hardware name: ARM-Versatile Express [ 3944.513775][T29185] Call trace: [ 3944.513820][T29185] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3944.513931][T29185] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3944.513951][T29185] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3944.514007][T29185] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3944.514072][T29185] r7:845b0c40 r6:00000000 r5:845b0c40 r4:82b1ac48 [ 3944.514091][T29185] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3944.514152][T29185] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3944.514227][T29185] r8:00000000 r7:845b0c40 r6:81b495c4 r5:00000cc0 r4:83002840 [ 3944.514250][T29185] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 3944.514319][T29185] [<80546804>] (kmem_cache_alloc_noprof) from [<81b495c4>] (mas_alloc_nodes+0xd4/0x10c) [ 3944.514396][T29185] r10:76fc8000 r9:76fc8fff r8:dfa71f3c r7:76fc8000 r6:00000cc0 r5:00000001 [ 3944.514420][T29185] r4:dfa71f3c [ 3944.514436][T29185] [<81b494f0>] (mas_alloc_nodes) from [<81b4caf8>] (mas_preallocate+0x17c/0x25c) [ 3944.514503][T29185] r7:76fc8000 r6:00000cc0 r5:86ad5080 r4:dfa71f3c [ 3944.514522][T29185] [<81b4c97c>] (mas_preallocate) from [<80526e7c>] (__split_vma+0x144/0x434) [ 3944.514585][T29185] r6:82e4a79c r5:86ad5080 r4:86e11880 [ 3944.514603][T29185] [<80526d38>] (__split_vma) from [<8052724c>] (vms_gather_munmap_vmas+0xe0/0x4fc) [ 3944.514667][T29185] r10:dfa71e3c r9:7f000000 r8:dfa71e48 r7:82e4a79c r6:82e4a7a0 r5:dfa71e78 [ 3944.514690][T29185] r4:86e11880 [ 3944.514707][T29185] [<8052716c>] (vms_gather_munmap_vmas) from [<80529f14>] (do_vmi_align_munmap+0xfc/0x278) [ 3944.514774][T29185] r10:dfa71e3c r9:7f000000 r8:00002000 r7:00000000 r6:76f00000 r5:76fc8000 [ 3944.514798][T29185] r4:dfa71f3c [ 3944.514815][T29185] [<80529e18>] (do_vmi_align_munmap) from [<8052a110>] (do_vmi_munmap+0x80/0xfc) [ 3944.514882][T29185] r10:0000005b r9:000c8000 r8:76f00000 r7:00000001 r6:dfa71f3c r5:86105400 [ 3944.514904][T29185] r4:76fc8000 [ 3944.514921][T29185] [<8052a090>] (do_vmi_munmap) from [<8052bf98>] (__vm_munmap+0xc8/0x194) [ 3944.514983][T29185] r8:8610554c r7:86105400 r6:dfa71f30 r5:76f00000 r4:00000000 [ 3944.515003][T29185] [<8052bed0>] (__vm_munmap) from [<8050e244>] (sys_munmap+0x14/0x18) [ 3944.515069][T29185] r9:845b0c40 r8:8020029c r7:0000005b r6:00100000 r5:00021000 r4:76e00000 [ 3944.515088][T29185] [<8050e230>] (sys_munmap) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3944.515137][T29185] Exception stack(0xdfa71fa8 to 0xdfa71ff0) [ 3944.515176][T29185] 1fa0: 76e00000 00021000 76f00000 000c8000 00000000 fff00000 [ 3944.515215][T29185] 1fc0: 76e00000 00021000 00100000 0000005b 00320000 00001000 76f00000 001ce344 [ 3944.515245][T29185] 1fe0: 00000000 76fe6cbc 001140b8 0013075c [ 3945.219005][T29191] FAULT_INJECTION: forcing a failure. [ 3945.219005][T29191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3945.219531][T29191] CPU: 0 UID: 0 PID: 29191 Comm: syz.0.6537 Tainted: G L syzkaller #0 PREEMPT [ 3945.219619][T29191] Tainted: [L]=SOFTLOCKUP [ 3945.219651][T29191] Hardware name: ARM-Versatile Express [ 3945.219674][T29191] Call trace: [ 3945.220677][T29191] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3945.220800][T29191] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3945.221139][T29191] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3945.221679][T29191] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3945.222430][T29191] r7:00000000 r6:00000000 r5:845a55c0 r4:82b54788 [ 3945.222451][T29191] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3945.222620][T29191] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3945.222778][T29191] r8:76f5bf08 r7:00000000 r6:00000000 r5:df9d9f68 r4:00000002 [ 3945.222827][T29191] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3945.222901][T29191] [<809fdf1c>] (should_fail_usercopy) from [<805e2370>] (simple_read_from_buffer+0x80/0x140) [ 3945.222991][T29191] [<805e22f0>] (simple_read_from_buffer) from [<806683c0>] (proc_fail_nth_read+0xb8/0x108) [ 3945.223075][T29191] r10:80668308 r9:00000001 r8:00000002 r7:df9d9f68 r6:0000000f r5:76f5bf08 [ 3945.223101][T29191] r4:845a55c0 r3:df9d9e9f [ 3945.223120][T29191] [<80668308>] (proc_fail_nth_read) from [<805a0968>] (vfs_read+0xc0/0x328) [ 3945.223235][T29191] r8:845a55c0 r7:df9d9f68 r6:76f5bf08 r5:86b39680 r4:0000000f [ 3945.223356][T29191] [<805a08a8>] (vfs_read) from [<805a15b4>] (ksys_read+0x74/0xec) [ 3945.223571][T29191] r10:00000003 r9:845a55c0 r8:8020029c r7:00000000 r6:00000000 r5:86b39680 [ 3945.223637][T29191] r4:86b39683 [ 3945.223692][T29191] [<805a1540>] (ksys_read) from [<805a163c>] (sys_read+0x10/0x14) [ 3945.223831][T29191] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3945.223854][T29191] [<805a162c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3945.223926][T29191] Exception stack(0xdf9d9fa8 to 0xdf9d9ff0) [ 3945.224002][T29191] 9fa0: 00000000 00000000 00000006 76f5bf08 0000000f 00000000 [ 3945.224057][T29191] 9fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f5c0dc [ 3945.224124][T29191] 9fe0: 76f5be58 76f5be44 0010bc74 00112858 [ 3945.691896][T29202] FAULT_INJECTION: forcing a failure. [ 3945.691896][T29202] name failslab, interval 1, probability 0, space 0, times 0 [ 3945.692273][T29202] CPU: 0 UID: 0 PID: 29202 Comm: syz.0.6539 Tainted: G L syzkaller #0 PREEMPT [ 3945.692359][T29202] Tainted: [L]=SOFTLOCKUP [ 3945.692376][T29202] Hardware name: ARM-Versatile Express [ 3945.692396][T29202] Call trace: [ 3945.692433][T29202] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3945.692521][T29202] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3945.692537][T29202] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3945.692582][T29202] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3945.692637][T29202] r7:8655a4c0 r6:00000000 r5:8655a4c0 r4:82b1ac48 [ 3945.692651][T29202] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3945.692700][T29202] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3945.692760][T29202] r8:00000000 r7:8655a4c0 r6:830016c0 r5:00000c40 r4:00001000 [ 3945.692786][T29202] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 3945.692960][T29202] [<8054778c>] (__kmalloc_noprof) from [<808385b4>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3945.693123][T29202] r10:00000000 r9:830c3800 r8:00000000 r7:8340eaa0 r6:8669f128 r5:00001000 [ 3945.693227][T29202] r4:00000000 [ 3945.693245][T29202] [<80838578>] (tomoyo_realpath_from_path) from [<8083467c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3945.693309][T29202] r10:00000000 r9:00000003 r8:8669f100 r7:00005452 r6:81cddcac r5:00000004 [ 3945.693393][T29202] r4:8669f128 r3:828d2500 [ 3945.693465][T29202] [<808345b0>] (tomoyo_path_number_perm) from [<80838fd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 3945.693639][T29202] r10:8655a4c0 r9:00000003 r8:8669f100 r7:20000680 r6:20000680 r5:00005452 [ 3945.693690][T29202] r4:8669f100 [ 3945.693745][T29202] [<80838fb4>] (tomoyo_file_ioctl) from [<807e3bac>] (security_file_ioctl+0x80/0x1d4) [ 3945.693807][T29202] [<807e3b2c>] (security_file_ioctl) from [<805bdd80>] (sys_ioctl+0x4c/0xb5c) [ 3945.693912][T29202] r7:20000680 r6:00005452 r5:8669f101 r4:00000000 [ 3945.693983][T29202] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3945.694094][T29202] Exception stack(0xdf9d9fa8 to 0xdf9d9ff0) [ 3945.694209][T29202] 9fa0: 00000000 00000000 00000003 00005452 20000680 00000000 [ 3945.694346][T29202] 9fc0: 00000000 00000000 0012f454 00000036 003562d8 00000000 00000001 76f5c0dc [ 3945.694464][T29202] 9fe0: 76f5be88 76f5be78 00018fa0 00130a50 [ 3945.694551][T29202] r10:00000036 r9:8655a4c0 r8:8020029c r7:00000036 r6:0012f454 r5:00000000 [ 3945.694571][T29202] r4:00000000 [ 3945.694855][T29202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3951.631583][T29258] FAULT_INJECTION: forcing a failure. [ 3951.631583][T29258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3951.635296][T29258] CPU: 1 UID: 0 PID: 29258 Comm: syz.2.6555 Tainted: G L syzkaller #0 PREEMPT [ 3951.635390][T29258] Tainted: [L]=SOFTLOCKUP [ 3951.635401][T29258] Hardware name: ARM-Versatile Express [ 3951.635413][T29258] Call trace: [ 3951.635436][T29258] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3951.635495][T29258] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3951.635505][T29258] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3951.635531][T29258] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3951.635560][T29258] r7:00000000 r6:00000000 r5:845c3d40 r4:82b54788 [ 3951.635569][T29258] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3951.635596][T29258] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3951.635625][T29258] r8:dfffdeb8 r7:00000000 r6:76fe7f08 r5:00000001 r4:00000001 [ 3951.635634][T29258] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3951.635668][T29258] [<809fdf1c>] (should_fail_usercopy) from [<8093b848>] (kstrtouint_from_user+0x54/0x13c) [ 3951.635698][T29258] [<8093b7f4>] (kstrtouint_from_user) from [<8066987c>] (proc_fail_nth_write+0x40/0xf0) [ 3951.635733][T29258] r8:8066983c r7:dfffdf68 r6:76fe7f08 r5:864ac980 r4:00000001 [ 3951.635775][T29258] [<8066983c>] (proc_fail_nth_write) from [<805a11e8>] (vfs_write+0xd4/0x42c) [ 3951.635853][T29258] r5:864ac980 r4:00000001 [ 3951.635862][T29258] [<805a1114>] (vfs_write) from [<805a16b4>] (ksys_write+0x74/0xec) [ 3951.635897][T29258] r10:00000004 r9:845c3d40 r8:8020029c r7:00000000 r6:00000002 r5:864ac980 [ 3951.635907][T29258] r4:864ac980 [ 3951.635915][T29258] [<805a1640>] (ksys_write) from [<805a173c>] (sys_write+0x10/0x14) [ 3951.635945][T29258] r7:00000004 r6:00000000 r5:00000000 r4:00000000 [ 3951.635954][T29258] [<805a172c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3951.635978][T29258] Exception stack(0xdfffdfa8 to 0xdfffdff0) [ 3951.635999][T29258] dfa0: 00000000 00000000 00000004 76fe7f08 00000001 00000000 [ 3951.636016][T29258] dfc0: 00000000 00000000 00000000 00000004 003562d8 00000000 00000001 76fe80dc [ 3951.636029][T29258] dfe0: 76fe7e58 76fe7e44 0010bc74 00112858 [ 3954.349589][T29273] FAULT_INJECTION: forcing a failure. [ 3954.349589][T29273] name failslab, interval 1, probability 0, space 0, times 0 [ 3954.350013][T29273] CPU: 0 UID: 0 PID: 29273 Comm: syz.0.6559 Tainted: G L syzkaller #0 PREEMPT [ 3954.350119][T29273] Tainted: [L]=SOFTLOCKUP [ 3954.350143][T29273] Hardware name: ARM-Versatile Express [ 3954.350173][T29273] Call trace: [ 3954.350219][T29273] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3954.350471][T29273] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 3954.350572][T29273] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3954.350676][T29273] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3954.350838][T29273] r7:840be200 r6:00000000 r5:840be200 r4:82b1ac48 [ 3954.350907][T29273] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3954.351060][T29273] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3954.351173][T29273] r8:00000000 r7:840be200 r6:81644954 r5:00000820 r4:830e5c00 [ 3954.351198][T29273] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 3954.351300][T29273] [<80546804>] (kmem_cache_alloc_noprof) from [<81644954>] (skb_clone+0x60/0x1c8) [ 3954.351449][T29273] r10:87448000 r9:00000000 r8:85ed4000 r7:86365dc0 r6:00000001 r5:86a8f240 [ 3954.351530][T29273] r4:00000820 [ 3954.351601][T29273] [<816448f4>] (skb_clone) from [<81a11620>] (can_send+0x1bc/0x378) [ 3954.351727][T29273] r7:86365dc0 r6:00000001 r5:00000000 r4:86a8f240 [ 3954.351825][T29273] [<81a11464>] (can_send) from [<81a23b54>] (isotp_sendmsg+0x464/0xa8c) [ 3954.351932][T29273] r9:00000000 r8:85ed4000 r7:00000002 r6:8744c4c8 r5:00000014 r4:8744a000 [ 3954.352004][T29273] [<81a236f0>] (isotp_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78) [ 3954.352143][T29273] r10:00000080 r9:00000000 r8:dff9ddd4 r7:00000000 r6:8558ccc0 r5:dff9df28 [ 3954.352221][T29273] r4:00000000 [ 3954.352246][T29273] [<8162f780>] (__sock_sendmsg) from [<81630864>] (____sys_sendmsg+0x238/0x2c4) [ 3954.352334][T29273] r7:00000000 r6:00000000 r5:8558ccc0 r4:dff9df28 [ 3954.352394][T29273] [<8163062c>] (____sys_sendmsg) from [<81630c64>] (___sys_sendmsg+0x9c/0xd0) [ 3954.352533][T29273] r10:00000128 r9:20000d80 r8:00000080 r7:00000000 r6:8558ccc0 r5:dff9df28 [ 3954.352612][T29273] r4:00000000 [ 3954.352679][T29273] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 3954.352904][T29273] r9:840be200 r8:86e5b900 r7:00000080 r6:20000d80 r5:86e5b901 r4:00000003 [ 3954.353002][T29273] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 3954.353161][T29273] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 3954.353209][T29273] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3954.353318][T29273] Exception stack(0xdff9dfa8 to 0xdff9dff0) [ 3954.353427][T29273] dfa0: 00000000 00000000 00000003 20000d80 00000080 00000000 [ 3954.353559][T29273] dfc0: 00000000 00000000 0012f454 00000128 00356378 00000000 003d0f00 76f3b0dc [ 3954.353644][T29273] dfe0: 76f3ae88 76f3ae78 00018fa0 00130a50 [ 3954.368370][T29273] can-isotp: isotp_sendmsg: can_send_ret -ENOMEM [ 3972.621828][T29414] FAULT_INJECTION: forcing a failure. [ 3972.621828][T29414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3972.622322][T29414] CPU: 0 UID: 0 PID: 29414 Comm: syz.0.6609 Tainted: G L syzkaller #0 PREEMPT [ 3972.622443][T29414] Tainted: [L]=SOFTLOCKUP [ 3972.622472][T29414] Hardware name: ARM-Versatile Express [ 3972.622501][T29414] Call trace: [ 3972.622553][T29414] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3972.622720][T29414] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3972.622809][T29414] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3972.622934][T29414] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3972.623058][T29414] r7:00000000 r6:00000000 r5:86c0ee40 r4:82b54788 [ 3972.623299][T29414] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3972.623387][T29414] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3972.623484][T29414] r8:76f5bf08 r7:00000000 r6:00000000 r5:ea885f68 r4:00000002 [ 3972.623570][T29414] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3972.623629][T29414] [<809fdf1c>] (should_fail_usercopy) from [<805e2370>] (simple_read_from_buffer+0x80/0x140) [ 3972.623898][T29414] [<805e22f0>] (simple_read_from_buffer) from [<806683c0>] (proc_fail_nth_read+0xb8/0x108) [ 3972.623996][T29414] r10:80668308 r9:00000001 r8:00000002 r7:ea885f68 r6:0000000f r5:76f5bf08 [ 3972.624048][T29414] r4:86c0ee40 r3:ea885e9f [ 3972.624099][T29414] [<80668308>] (proc_fail_nth_read) from [<805a0968>] (vfs_read+0xc0/0x328) [ 3972.624314][T29414] r8:86c0ee40 r7:ea885f68 r6:76f5bf08 r5:85dedd00 r4:0000000f [ 3972.624346][T29414] [<805a08a8>] (vfs_read) from [<805a15b4>] (ksys_read+0x74/0xec) [ 3972.624462][T29414] r10:00000003 r9:86c0ee40 r8:8020029c r7:00000000 r6:00000000 r5:85dedd00 [ 3972.624526][T29414] r4:85dedd03 [ 3972.624600][T29414] [<805a1540>] (ksys_read) from [<805a163c>] (sys_read+0x10/0x14) [ 3972.624697][T29414] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3972.624846][T29414] [<805a162c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3972.625029][T29414] Exception stack(0xea885fa8 to 0xea885ff0) [ 3972.625170][T29414] 5fa0: 00000000 00000000 00000004 76f5bf08 0000000f 00000000 [ 3972.625341][T29414] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f5c0dc [ 3972.625418][T29414] 5fe0: 76f5be58 76f5be44 0010bc74 00112858 [ 3973.398402][T29420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=29420 comm=syz.0.6611 [ 3977.408198][T29463] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 3977.427442][ T28] audit: type=1400 audit(4489.317:1464): avc: denied { relabelto } for pid=29461 comm="syz.2.6626" name="vcs1" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 3977.427961][ T28] audit: type=1400 audit(4489.317:1465): avc: denied { associate } for pid=29461 comm="syz.2.6626" name="vcs1" dev="devtmpfs" ino=16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_helper_exec_t:s0" [ 3977.447299][ T28] audit: type=1400 audit(4489.347:1466): avc: denied { write } for pid=29461 comm="syz.2.6626" path="/dev/vcs1" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 3985.167535][T29498] FAULT_INJECTION: forcing a failure. [ 3985.167535][T29498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3985.167900][T29498] CPU: 0 UID: 0 PID: 29498 Comm: syz.2.6635 Tainted: G L syzkaller #0 PREEMPT [ 3985.168003][T29498] Tainted: [L]=SOFTLOCKUP [ 3985.168024][T29498] Hardware name: ARM-Versatile Express [ 3985.168048][T29498] Call trace: [ 3985.168090][T29498] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3985.168208][T29498] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 3985.168229][T29498] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3985.168283][T29498] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3985.168391][T29498] r7:20000400 r6:00000000 r5:845b0c40 r4:82b54788 [ 3985.168417][T29498] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3985.168491][T29498] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3985.168587][T29498] r8:00010000 r7:20000400 r6:eab41e30 r5:00000000 r4:eab41f28 [ 3985.168607][T29498] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3985.168694][T29498] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 3985.168772][T29498] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 3985.168914][T29498] r8:00010000 r7:00000000 r6:8558f940 r5:eab41f28 r4:eab41e74 [ 3985.168977][T29498] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 3985.169043][T29498] r9:845b0c40 r8:83fcdd80 r7:00010000 r6:20000400 r5:83fcdd81 r4:00000003 [ 3985.169070][T29498] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 3985.169131][T29498] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 3985.169168][T29498] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3985.169308][T29498] Exception stack(0xeab41fa8 to 0xeab41ff0) [ 3985.169362][T29498] 1fa0: 00000000 00000000 00000003 20000400 00010000 00000000 [ 3985.169415][T29498] 1fc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fe80dc [ 3985.169490][T29498] 1fe0: 76fe7e88 76fe7e78 00018fa0 00130a50 [ 3994.952017][ T28] audit: type=1400 audit(4506.857:1467): avc: denied { read } for pid=29538 comm="syz.0.6647" name="vcs1" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 3994.960220][ T28] audit: type=1400 audit(4506.867:1468): avc: denied { open } for pid=29538 comm="syz.0.6647" path="/dev/vcs1" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 3995.048974][ T28] audit: type=1400 audit(4506.957:1469): avc: denied { ioctl } for pid=29538 comm="syz.0.6647" path="/dev/vcs1" dev="devtmpfs" ino=16 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 3996.208891][T29547] FAULT_INJECTION: forcing a failure. [ 3996.208891][T29547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3996.209749][T29547] CPU: 0 UID: 0 PID: 29547 Comm: syz.0.6648 Tainted: G L syzkaller #0 PREEMPT [ 3996.209804][T29547] Tainted: [L]=SOFTLOCKUP [ 3996.209814][T29547] Hardware name: ARM-Versatile Express [ 3996.209827][T29547] Call trace: [ 3996.209870][T29547] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3996.209928][T29547] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3996.209937][T29547] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3996.209964][T29547] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3996.209994][T29547] r7:20000400 r6:00000000 r5:849eee40 r4:82b54788 [ 3996.210002][T29547] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3996.210031][T29547] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3996.210061][T29547] r8:04004010 r7:20000400 r6:eadfde30 r5:00000000 r4:eadfdf28 [ 3996.210070][T29547] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3996.210094][T29547] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 3996.210123][T29547] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 3996.210153][T29547] r8:04004010 r7:00000000 r6:8558ea40 r5:eadfdf28 r4:eadfde74 [ 3996.210161][T29547] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 3996.210196][T29547] r9:849eee40 r8:8669bd80 r7:04004010 r6:20000400 r5:8669bd81 r4:00000003 [ 3996.210206][T29547] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 3996.210237][T29547] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 3996.210245][T29547] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3996.210270][T29547] Exception stack(0xeadfdfa8 to 0xeadfdff0) [ 3996.210291][T29547] dfa0: 00000000 00000000 00000003 20000400 04004010 00000000 [ 3996.210309][T29547] dfc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76f5c0dc [ 3996.210323][T29547] dfe0: 76f5be88 76f5be78 00018fa0 00130a50 [ 4003.808997][T29581] FAULT_INJECTION: forcing a failure. [ 4003.808997][T29581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4003.813217][T29581] CPU: 0 UID: 0 PID: 29581 Comm: syz.2.6661 Tainted: G L syzkaller #0 PREEMPT [ 4003.813378][T29581] Tainted: [L]=SOFTLOCKUP [ 4003.813399][T29581] Hardware name: ARM-Versatile Express [ 4003.813426][T29581] Call trace: [ 4003.813474][T29581] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4003.813592][T29581] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4003.813616][T29581] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4003.813684][T29581] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4003.813749][T29581] r7:0000000c r6:00000000 r5:845b9880 r4:82b54788 [ 4003.813771][T29581] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4003.813830][T29581] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 4003.813894][T29581] r8:b5403587 r7:0000000c r6:20000040 r5:eafd5e74 r4:0000000c [ 4003.813912][T29581] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 4003.813964][T29581] [<809fdf1c>] (should_fail_usercopy) from [<81630924>] (move_addr_to_kernel+0x34/0xf8) [ 4003.814022][T29581] [<816308f0>] (move_addr_to_kernel) from [<81630b80>] (copy_msghdr_from_user+0x198/0x1e0) [ 4003.814083][T29581] r7:20000580 r6:eafd5e30 r5:00000000 r4:eafd5f28 [ 4003.814100][T29581] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 4003.814156][T29581] r8:20008880 r7:00000000 r6:8558ea40 r5:eafd5f28 r4:eafd5e74 [ 4003.814175][T29581] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 4003.814232][T29581] r9:845b9880 r8:8669b600 r7:20008880 r6:20000580 r5:8669b601 r4:00000003 [ 4003.814255][T29581] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 4003.814322][T29581] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 4003.814339][T29581] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4003.814389][T29581] Exception stack(0xeafd5fa8 to 0xeafd5ff0) [ 4003.814428][T29581] 5fa0: 00000000 00000000 00000003 20000580 20008880 00000000 [ 4003.814466][T29581] 5fc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fe80dc [ 4003.814494][T29581] 5fe0: 76fe7e88 76fe7e78 00018fa0 00130a50 [ 4007.938166][T29604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29604 comm=syz.0.6667 [ 4009.792732][T29613] FAULT_INJECTION: forcing a failure. [ 4009.792732][T29613] name failslab, interval 1, probability 0, space 0, times 0 [ 4009.793289][T29613] CPU: 1 UID: 0 PID: 29613 Comm: syz.2.6670 Tainted: G L syzkaller #0 PREEMPT [ 4009.793374][T29613] Tainted: [L]=SOFTLOCKUP [ 4009.793395][T29613] Hardware name: ARM-Versatile Express [ 4009.793420][T29613] Call trace: [ 4009.793462][T29613] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4009.793564][T29613] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4009.793590][T29613] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4009.793642][T29613] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4009.793702][T29613] r7:845b3100 r6:00000000 r5:845b3100 r4:82b1ac48 [ 4009.793719][T29613] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4009.793780][T29613] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 4009.793851][T29613] r8:00000000 r7:845b3100 r6:81644954 r5:00000820 r4:830e5c00 [ 4009.793871][T29613] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 4009.793951][T29613] [<80546804>] (kmem_cache_alloc_noprof) from [<81644954>] (skb_clone+0x60/0x1c8) [ 4009.794069][T29613] r10:86310584 r9:8741c980 r8:85fbfc00 r7:86d7a6c0 r6:8603c700 r5:86d7a6c0 [ 4009.794123][T29613] r4:00000820 [ 4009.794161][T29613] [<816448f4>] (skb_clone) from [<8176a0b4>] (__netlink_deliver_tap+0x1e4/0x27c) [ 4009.794236][T29613] r7:86d7a6c0 r6:8603c700 r5:85fbfc64 r4:8603c000 [ 4009.794276][T29613] [<81769ed0>] (__netlink_deliver_tap) from [<8176c0e4>] (netlink_unicast+0x35c/0x380) [ 4009.794346][T29613] r10:86310584 r9:86654000 r8:86d7a6c0 r7:8741c980 r6:00000014 r5:85fbfc64 [ 4009.794396][T29613] r4:85fbfc00 [ 4009.794434][T29613] [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444) [ 4009.794510][T29613] r10:00000000 r9:00000000 r8:00000000 r7:86310400 r6:00000014 r5:86d7a6c0 [ 4009.794532][T29613] r4:eaf69f28 [ 4009.794550][T29613] [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78) [ 4009.794620][T29613] r10:00000004 r9:00000000 r8:eaf69dd4 r7:00000000 r6:8558f6c0 r5:eaf69f28 [ 4009.794646][T29613] r4:00000000 [ 4009.794666][T29613] [<8162f780>] (__sock_sendmsg) from [<81630864>] (____sys_sendmsg+0x238/0x2c4) [ 4009.794729][T29613] r7:00000000 r6:00000000 r5:8558f6c0 r4:eaf69f28 [ 4009.794749][T29613] [<8163062c>] (____sys_sendmsg) from [<81630c64>] (___sys_sendmsg+0x9c/0xd0) [ 4009.794817][T29613] r10:00000128 r9:20000140 r8:00000004 r7:00000000 r6:8558f6c0 r5:eaf69f28 [ 4009.794839][T29613] r4:00000000 [ 4009.794857][T29613] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 4009.794922][T29613] r9:845b3100 r8:864d4d80 r7:00000004 r6:20000140 r5:864d4d81 r4:00000003 [ 4009.794943][T29613] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 4009.795008][T29613] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 4009.795026][T29613] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4009.795078][T29613] Exception stack(0xeaf69fa8 to 0xeaf69ff0) [ 4009.795142][T29613] 9fa0: 00000000 00000000 00000003 20000140 00000004 00000000 [ 4009.795193][T29613] 9fc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fe80dc [ 4009.795244][T29613] 9fe0: 76fe7e88 76fe7e78 00018fa0 00130a50 [ 4013.397831][T29651] fuse: Unknown parameter 'grup_id' [ 4014.643799][ T28] audit: type=1400 audit(4526.547:1470): avc: denied { remount } for pid=29668 comm="syz.0.6684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 4018.438681][T29708] FAULT_INJECTION: forcing a failure. [ 4018.438681][T29708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4018.467925][T29708] CPU: 0 UID: 0 PID: 29708 Comm: syz.2.6698 Tainted: G L syzkaller #0 PREEMPT [ 4018.468026][T29708] Tainted: [L]=SOFTLOCKUP [ 4018.468037][T29708] Hardware name: ARM-Versatile Express [ 4018.468050][T29708] Call trace: [ 4018.468073][T29708] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4018.468132][T29708] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4018.468141][T29708] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4018.468191][T29708] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4018.468231][T29708] r7:20000100 r6:00000000 r5:845c1880 r4:82b54788 [ 4018.468240][T29708] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4018.468269][T29708] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 4018.468299][T29708] r8:04000020 r7:20000100 r6:ebd3de30 r5:00000000 r4:ebd3df28 [ 4018.468307][T29708] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 4018.468330][T29708] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 4018.468358][T29708] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 4018.468389][T29708] r8:04000020 r7:00000000 r6:8505c540 r5:ebd3df28 r4:ebd3de74 [ 4018.468397][T29708] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 4018.468429][T29708] r9:845c1880 r8:86e5c080 r7:04000020 r6:20000100 r5:86e5c081 r4:00000003 [ 4018.468438][T29708] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 4018.468469][T29708] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 4018.468478][T29708] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4018.468502][T29708] Exception stack(0xebd3dfa8 to 0xebd3dff0) [ 4018.468523][T29708] dfa0: 00000000 00000000 00000003 20000100 04000020 00000000 [ 4018.468540][T29708] dfc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fe80dc [ 4018.468555][T29708] dfe0: 76fe7e88 76fe7e78 00018fa0 00130a50 [ 4024.938191][T29758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=29758 comm=syz.2.6713 [ 4027.318783][T29774] FAULT_INJECTION: forcing a failure. [ 4027.318783][T29774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4027.319324][T29774] CPU: 0 UID: 0 PID: 29774 Comm: syz.2.6716 Tainted: G L syzkaller #0 PREEMPT [ 4027.319428][T29774] Tainted: [L]=SOFTLOCKUP [ 4027.319451][T29774] Hardware name: ARM-Versatile Express [ 4027.319477][T29774] Call trace: [ 4027.319520][T29774] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4027.319672][T29774] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4027.319702][T29774] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4027.319852][T29774] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4027.319990][T29774] r7:20000200 r6:00000000 r5:845b0c40 r4:82b54788 [ 4027.320033][T29774] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4027.320179][T29774] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 4027.320295][T29774] r8:00008800 r7:20000200 r6:ebfede30 r5:00000000 r4:ebfedf28 [ 4027.320334][T29774] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 4027.320395][T29774] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 4027.320456][T29774] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 4027.320523][T29774] r8:00008800 r7:00000000 r6:8558c7c0 r5:ebfedf28 r4:ebfede74 [ 4027.320566][T29774] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 4027.320640][T29774] r9:845b0c40 r8:85dedb80 r7:00008800 r6:20000200 r5:85dedb81 r4:00000003 [ 4027.320680][T29774] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 4027.320801][T29774] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 4027.320866][T29774] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4027.321016][T29774] Exception stack(0xebfedfa8 to 0xebfedff0) [ 4027.321086][T29774] dfa0: 00000000 00000000 00000003 20000200 00008800 00000000 [ 4027.321130][T29774] dfc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fe80dc [ 4027.321247][T29774] dfe0: 76fe7e88 76fe7e78 00018fa0 00130a50 [ 4027.595851][T29768] FAULT_INJECTION: forcing a failure. [ 4027.595851][T29768] name failslab, interval 1, probability 0, space 0, times 0 [ 4027.596450][T29768] CPU: 0 UID: 0 PID: 29768 Comm: syz.0.6714 Tainted: G L syzkaller #0 PREEMPT [ 4027.596585][T29768] Tainted: [L]=SOFTLOCKUP [ 4027.596614][T29768] Hardware name: ARM-Versatile Express [ 4027.596663][T29768] Call trace: [ 4027.596746][T29768] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4027.596869][T29768] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4027.597080][T29768] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4027.597426][T29768] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4027.597537][T29768] r7:83324980 r6:00000000 r5:83324980 r4:82b1ac48 [ 4027.597686][T29768] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4027.597875][T29768] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 4027.598078][T29768] r8:00000000 r7:83324980 r6:805b1b34 r5:00000cc0 r4:830bdb40 [ 4027.598128][T29768] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 4027.598239][T29768] [<80546804>] (kmem_cache_alloc_noprof) from [<805b1b34>] (do_getname+0x2c/0x14c) [ 4027.598336][T29768] r10:00000015 r9:83324980 r8:00000001 r7:00000000 r6:20000280 r5:825438f8 [ 4027.598386][T29768] r4:00000000 [ 4027.598435][T29768] [<805b1b08>] (do_getname) from [<805b83b4>] (user_path_at+0x30/0x6c) [ 4027.598579][T29768] r10:00000015 r9:83324980 r8:00000000 r7:ec011f6c r6:ffffff9c r5:00000001 [ 4027.598657][T29768] r4:00000000 r3:ec011f6c [ 4027.598772][T29768] [<805b8384>] (user_path_at) from [<805d8d64>] (sys_mount+0x1bc/0x260) [ 4027.598938][T29768] r7:00000000 r6:00000000 r5:00000000 r4:00000000 [ 4027.598984][T29768] [<805d8ba8>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4027.599058][T29768] Exception stack(0xec011fa8 to 0xec011ff0) [ 4027.599147][T29768] 1fa0: 00000000 00000000 00000000 20000280 00000000 020080a0 [ 4027.599201][T29768] 1fc0: 00000000 00000000 0012f454 00000015 00356378 00000000 00000001 76f3b0dc [ 4027.599230][T29768] 1fe0: 76f3ae88 76f3ae78 00018fa0 00130a50 [ 4027.599273][T29768] r10:00000015 r9:83324980 r8:8020029c r7:00000015 r6:0012f454 r5:00000000 [ 4027.599295][T29768] r4:00000000 [ 4029.281299][T29785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=29785 comm=syz.2.6719 [ 4034.847366][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6732'. [ 4034.848269][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6732'. [ 4040.638668][ T28] audit: type=1400 audit(4552.547:1471): avc: denied { mounton } for pid=29828 comm="syz.0.6736" path="/proc/725/task" dev="proc" ino=79298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 4040.917073][ T8853] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 4041.077246][ T8853] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 4041.117917][ T8853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4041.118258][ T8853] usb 1-1: config 0 has no interfaces? [ 4041.118647][ T8853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4041.125187][ T8853] usb 1-1: config 0 descriptor?? [ 4041.430708][T26111] usb 1-1: USB disconnect, device number 55 [ 4047.554482][ T28] audit: type=1400 audit(4559.457:1472): avc: denied { bind } for pid=29854 comm="syz.0.6741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 4047.650455][ T28] audit: type=1400 audit(4559.547:1473): avc: denied { shutdown } for pid=29854 comm="syz.0.6741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 4050.281393][T29870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4050.282315][T29870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4050.502068][T29874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4050.504336][T29874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4051.810065][ T28] audit: type=1400 audit(4563.717:1474): avc: denied { mount } for pid=29891 comm="syz.2.6754" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 4051.831089][ T28] audit: type=1400 audit(4563.737:1475): avc: denied { search } for pid=29891 comm="syz.2.6754" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4051.832946][ T28] audit: type=1400 audit(4563.737:1476): avc: denied { search } for pid=29891 comm="syz.2.6754" name="usb_gadget" dev="configfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4051.837355][ T28] audit: type=1400 audit(4563.737:1477): avc: denied { write search } for pid=29891 comm="syz.2.6754" name="usb_gadget" dev="configfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4051.840082][ T28] audit: type=1400 audit(4563.737:1478): avc: denied { add_name } for pid=29891 comm="syz.2.6754" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4051.842604][ T28] audit: type=1400 audit(4563.737:1479): avc: denied { create } for pid=29891 comm="syz.2.6754" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 4051.869213][ T28] audit: type=1400 audit(4563.777:1480): avc: denied { search } for pid=29891 comm="syz.2.6754" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4051.878709][ T28] audit: type=1400 audit(4563.787:1481): avc: denied { search } for pid=29891 comm="syz.2.6754" name="usb_gadget" dev="configfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4053.858072][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4053.860058][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4054.840857][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 4054.841276][ T28] audit: type=1400 audit(4566.747:1501): avc: denied { write } for pid=29914 comm="syz.2.6762" name="subsystems" dev="configfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4054.909865][ T28] audit: type=1400 audit(4566.817:1502): avc: denied { write } for pid=29912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4055.271844][ T28] audit: type=1400 audit(4567.177:1503): avc: denied { write } for pid=29921 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4056.964075][T29938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4056.970751][T29938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4066.138500][ T28] audit: type=1326 audit(4578.037:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4066.158822][ T28] audit: type=1326 audit(4578.067:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4066.161368][ T28] audit: type=1326 audit(4578.067:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4066.163273][ T28] audit: type=1326 audit(4578.067:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4066.165005][ T28] audit: type=1326 audit(4578.067:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x112858 code=0x7ffc0000 [ 4066.168856][ T28] audit: type=1326 audit(4578.067:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x13055c code=0x7ffc0000 [ 4066.172066][ T28] audit: type=1326 audit(4578.067:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x13055c code=0x7ffc0000 [ 4066.212871][ T28] audit: type=1326 audit(4578.107:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x13055c code=0x7ffc0000 [ 4066.213285][ T28] audit: type=1326 audit(4578.117:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x13055c code=0x7ffc0000 [ 4066.280419][ T28] audit: type=1326 audit(4578.187:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29952 comm="syz.0.6774" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x13055c code=0x7ffc0000 [ 4066.417946][T18187] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 4066.587321][T18187] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 4066.704559][T18187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4066.704856][T18187] usb 1-1: Product: syz [ 4066.705127][T18187] usb 1-1: Manufacturer: syz [ 4066.705313][T18187] usb 1-1: SerialNumber: syz [ 4066.820090][T18187] usb 1-1: USB2VGA dongle found at address 56 [ 4066.825407][T18187] usb 1-1: Allocated 8 output buffers [ 4067.122591][T29953] validate_nla: 2 callbacks suppressed [ 4067.128274][T29953] netlink: 'syz.0.6774': attribute type 30 has an invalid length. [ 4067.666828][T18187] usb 1-1: Failed to early initialize device [ 4067.688011][T18187] usb 1-1: USB disconnect, device number 56 [ 4068.727492][T29841] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 4068.936901][T29841] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 4069.019051][T29841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 4069.019395][T29841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 4069.019725][T29841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 4069.019961][T29841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 4069.038542][T30014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4069.040305][T30014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4069.108070][T29841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4069.108370][T29841] usb 1-1: Product: syz [ 4069.108581][T29841] usb 1-1: Manufacturer: syz [ 4069.108730][T29841] usb 1-1: SerialNumber: syz [ 4069.112395][T29841] usb 1-1: config 0 descriptor?? [ 4069.418504][T29841] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 4069.651629][T29841] usb 1-1: USB disconnect, device number 57 [ 4076.263397][T30073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4076.264253][T30073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4086.822248][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 4086.825119][ T28] audit: type=1400 audit(4598.727:1580): avc: denied { write } for pid=30093 comm="syz.0.6796" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4086.838472][ T28] audit: type=1400 audit(4598.747:1581): avc: denied { write } for pid=30093 comm="syz.0.6796" name="nullb" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4086.844525][ T28] audit: type=1400 audit(4598.747:1582): avc: denied { read } for pid=30093 comm="syz.0.6796" name="zoned" dev="configfs" ino=78661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 4086.849960][ T28] audit: type=1800 audit(4598.757:1583): pid=30094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6796" name="zoned" dev="configfs" ino=78661 res=0 errno=0 [ 4086.889493][ T28] audit: type=1800 audit(4598.797:1584): pid=30094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6796" name="zone_nr_conv" dev="configfs" ino=78662 res=0 errno=0 [ 4086.893623][ T28] audit: type=1800 audit(4598.797:1585): pid=30094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6796" name="power" dev="configfs" ino=78663 res=0 errno=0 [ 4086.908564][T30094] null_blk: nullb1: using native zone append [ 4086.962106][T30094] null_blk: disk nullb1 created [ 4086.973575][ T28] audit: type=1400 audit(4598.877:1586): avc: denied { write } for pid=30093 comm="syz.0.6796" name="nullb" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4087.460709][T30107] syz_tun: entered allmulticast mode [ 4087.492130][T30106] syz_tun: left allmulticast mode [ 4087.627559][T29841] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 4087.794977][T29841] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 4087.809535][T29841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4087.810747][T29841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4087.810963][ T28] audit: type=1400 audit(4599.717:1587): avc: denied { attach_queue } for pid=30112 comm="syz.2.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 4087.815090][T29841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4087.832134][T29841] usb 1-1: config 0 descriptor?? [ 4088.118531][T29841] usbhid 1-1:0.0: can't add hid device: -71 [ 4088.120770][T29841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 4088.130455][T29841] usb 1-1: USB disconnect, device number 58 [ 4088.159159][T30123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4088.160923][T30123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4088.607390][T18187] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 4088.760418][T18187] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 4088.783275][T18187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 4088.783648][T18187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 4088.785642][T18187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4088.798829][T18187] usb 1-1: config 0 descriptor?? [ 4089.258185][T18187] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 4089.260177][T18187] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 4089.282304][T18187] input: failed to attach handler kbd to device input27, error: -5 [ 4089.300921][T18187] usb 1-1: USB disconnect, device number 59 [ 4089.788565][T30158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6807'. [ 4103.173980][T30176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6811'. [ 4103.175975][T30176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6811'. [ 4103.847234][T30168] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4117.301266][ T28] audit: type=1400 audit(4629.207:1588): avc: denied { mount } for pid=30198 comm="syz.2.6819" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 4117.330005][ T28] audit: type=1326 audit(4629.237:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30200 comm="syz.0.6820" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 4127.368254][ T28] audit: type=1400 audit(4638.271:1590): avc: denied { unmount } for pid=26091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 4127.517947][T30211] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 4128.645959][T30217] bridge_slave_1: entered promiscuous mode [ 4134.587419][T30234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4134.588007][T30234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4134.608886][T30234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4134.609496][T30234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4134.868612][T30234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4134.894197][T30234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4135.658585][T30244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4135.659489][T30244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4148.426117][ T28] audit: type=1326 audit(4659.311:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.0.6840" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 4151.863727][T30266] mmap: syz.0.6841 (30266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 4153.837766][T30205] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 4153.987791][T30205] usb 1-1: Using ep0 maxpacket: 16 [ 4153.994255][T30205] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 4154.018154][T30205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4154.019326][T30205] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 4154.048089][T30205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4154.048405][T30205] usb 1-1: Product: syz [ 4154.048708][T30205] usb 1-1: Manufacturer: syz [ 4154.048878][T30205] usb 1-1: SerialNumber: syz [ 4154.056092][T30205] usb 1-1: config 0 descriptor?? [ 4154.483708][T29841] usb 1-1: USB disconnect, device number 60 [ 4168.632105][T30317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4168.634321][T30317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4168.935357][T30323] syzkaller0: entered promiscuous mode [ 4168.938137][T30323] syzkaller0: entered allmulticast mode [ 4169.445453][T30330] FAULT_INJECTION: forcing a failure. [ 4169.445453][T30330] name failslab, interval 1, probability 0, space 0, times 0 [ 4169.445966][T30330] CPU: 0 UID: 0 PID: 30330 Comm: syz.0.6858 Tainted: G L syzkaller #0 PREEMPT [ 4169.446069][T30330] Tainted: [L]=SOFTLOCKUP [ 4169.446088][T30330] Hardware name: ARM-Versatile Express [ 4169.446112][T30330] Call trace: [ 4169.446155][T30330] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4169.446456][T30330] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4169.446516][T30330] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4169.446597][T30330] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4169.446695][T30330] r7:00000064 r6:00000000 r5:840da4c0 r4:82b1ac48 [ 4169.446829][T30330] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4169.446917][T30330] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 4169.447041][T30330] r8:840da4c0 r7:00000064 r6:815743e0 r5:00000dc0 r4:83001300 [ 4169.447067][T30330] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 4169.447150][T30330] [<80548874>] (__kmalloc_cache_noprof) from [<815743e0>] (snd_seq_port_connect+0x3c/0x13c) [ 4169.447236][T30330] r10:85ff4400 r9:847cdd00 r8:8467a700 r7:dfc05c64 r6:847cdd00 r5:8467a800 [ 4169.447269][T30330] r4:847cdd00 [ 4169.447288][T30330] [<815743a4>] (snd_seq_port_connect) from [<8156d8dc>] (snd_seq_ioctl_subscribe_port+0xbc/0x1cc) [ 4169.447381][T30330] r10:85ff4400 r9:847cdd00 r8:00000000 r7:dfc05c64 r6:8467a700 r5:8467a800 [ 4169.447481][T30330] r4:847cdd00 [ 4169.447503][T30330] [<8156d820>] (snd_seq_ioctl_subscribe_port) from [<8156b6f4>] (call_seq_client_ctl+0x48/0x9c) [ 4169.447577][T30330] r10:81e39498 r9:00000001 r8:00000003 r7:846b1d40 r6:00000021 r5:85fbe800 [ 4169.447602][T30330] r4:846b1d00 [ 4169.447620][T30330] [<8156b6ac>] (call_seq_client_ctl) from [<8156bd58>] (snd_seq_kernel_client_ctl+0x30/0x70) [ 4169.447718][T30330] r4:846b1d00 [ 4169.447800][T30330] [<8156bd28>] (snd_seq_kernel_client_ctl) from [<81578c3c>] (snd_seq_oss_midi_open+0x17c/0x1e0) [ 4169.447873][T30330] r5:85fbe800 r4:846b1d00 [ 4169.447937][T30330] [<81578ac0>] (snd_seq_oss_midi_open) from [<81577ab0>] (snd_seq_oss_synth_setup_midi+0x4c/0xe0) [ 4169.448011][T30330] r7:0000002c r6:82be22c8 r5:00000003 r4:85fbe800 [ 4169.448061][T30330] [<81577a64>] (snd_seq_oss_synth_setup_midi) from [<81574fbc>] (snd_seq_oss_open+0x24c/0x280) [ 4169.448636][T30330] r9:82be22b4 r8:82e39eb8 r7:00000001 r6:86b39100 r5:00000000 r4:85fbe800 [ 4169.448690][T30330] [<81574d70>] (snd_seq_oss_open) from [<81574780>] (odev_open+0x44/0x58) [ 4169.448770][T30330] r9:00000020 r8:84181850 r7:00000008 r6:86b39100 r5:82e39ea4 r4:00000001 [ 4169.448793][T30330] [<8157473c>] (odev_open) from [<81532e4c>] (soundcore_open+0x17c/0x1e4) [ 4169.448862][T30330] r7:00000008 r6:82e389c4 r5:86b39100 r4:00000008 [ 4169.448881][T30330] [<81532cd0>] (soundcore_open) from [<805a8df8>] (chrdev_open+0xbc/0x234) [ 4169.448976][T30330] r10:00000000 r9:86b39100 r8:86b39128 r7:81e3721c r6:86b39100 r5:84181850 [ 4169.449005][T30330] r4:833d7500 r3:81532cd0 [ 4169.449021][T30330] [<805a8d3c>] (chrdev_open) from [<8059b744>] (do_dentry_open+0x138/0x50c) [ 4169.449086][T30330] r9:86b39100 r8:86b39128 r7:805a8d3c r6:84181850 r5:00000000 r4:86b39100 [ 4169.449105][T30330] [<8059b60c>] (do_dentry_open) from [<8059d2c4>] (vfs_open+0x2c/0xe8) [ 4169.450102][T30330] r9:86b39100 r8:840da4c0 r7:dfc05f20 r6:86b39128 r5:82b21e14 r4:86b39100 [ 4169.450145][T30330] [<8059d298>] (vfs_open) from [<805b9bd8>] (path_openat+0x430/0xa3c) [ 4169.450228][T30330] r6:00000000 r5:82b21e14 r4:dfc05e58 [ 4169.450275][T30330] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 4169.450373][T30330] r10:00000142 r9:840da4c0 r8:00000001 r7:ffffff9c r6:dfc05f20 r5:840da4c0 [ 4169.450425][T30330] r4:833c60c0 [ 4169.450445][T30330] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 4169.450523][T30330] r8:8020029c r7:200001c0 r6:ffffff9c r5:833c60c0 r4:00000004 [ 4169.450562][T30330] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 4169.450636][T30330] r7:00000142 r6:00356314 r5:200001c0 r4:ffffff9c [ 4169.450748][T30330] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4169.450828][T30330] Exception stack(0xdfc05fa8 to 0xdfc05ff0) [ 4169.450893][T30330] 5fa0: 00000000 00000000 ffffff9c 200001c0 00000000 00000000 [ 4169.450951][T30330] 5fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76f5c0dc [ 4169.451012][T30330] 5fe0: 76f5be88 76f5be78 00018fa0 00130a50 [ 4169.451045][T30330] r5:00000000 r4:00000000 [ 4172.231428][T30345] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6864'. [ 4172.233255][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'. [ 4174.768433][T30362] FAULT_INJECTION: forcing a failure. [ 4174.768433][T30362] name failslab, interval 1, probability 0, space 0, times 0 [ 4174.768833][T30362] CPU: 0 UID: 0 PID: 30362 Comm: syz.2.6868 Tainted: G L syzkaller #0 PREEMPT [ 4174.768916][T30362] Tainted: [L]=SOFTLOCKUP [ 4174.768936][T30362] Hardware name: ARM-Versatile Express [ 4174.768962][T30362] Call trace: [ 4174.769043][T30362] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4174.769168][T30362] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4174.769192][T30362] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4174.769261][T30362] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4174.769323][T30362] r7:0000001c r6:00000000 r5:845a3d40 r4:82b1ac48 [ 4174.769342][T30362] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4174.769425][T30362] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 4174.769503][T30362] r8:845a3d40 r7:0000001c r6:805a70d8 r5:00000dc0 r4:83001240 [ 4174.769532][T30362] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 4174.769587][T30362] [<80548874>] (__kmalloc_cache_noprof) from [<805a70d8>] (sget_fc+0x2f4/0x8c4) [ 4174.769653][T30362] r10:85a70f0c r9:82a22dc0 r8:00000001 r7:85a70c44 r6:00000000 r5:864e1c80 [ 4174.769676][T30362] r4:85a70c00 [ 4174.769735][T30362] [<805a6de4>] (sget_fc) from [<805a798c>] (get_tree_nodev+0x24/0x90) [ 4174.769811][T30362] r10:864e1c80 r9:00000000 r8:861c4600 r7:80665f38 r6:dfbb5f6c r5:864e1c80 [ 4174.769835][T30362] r4:00000020 [ 4174.769855][T30362] [<805a7968>] (get_tree_nodev) from [<80664fe0>] (proc_get_tree+0x18/0x1c) [ 4174.769918][T30362] r7:00000000 r6:dfbb5f6c r5:864e1c80 r4:00000020 [ 4174.769937][T30362] [<80664fc8>] (proc_get_tree) from [<805a3bb0>] (vfs_get_tree+0x2c/0x118) [ 4174.769987][T30362] [<805a3b84>] (vfs_get_tree) from [<805d1c20>] (fc_mount+0x14/0x7c) [ 4174.770042][T30362] r6:dfbb5f6c r5:864e1c80 r4:00000020 [ 4174.770075][T30362] [<805d1c0c>] (fc_mount) from [<805d7e64>] (path_mount+0x424/0xb70) [ 4174.770136][T30362] r5:00000000 r4:00000020 [ 4174.770166][T30362] [<805d7a40>] (path_mount) from [<805d8d84>] (sys_mount+0x1dc/0x260) [ 4174.770243][T30362] r10:00000015 r9:845a3d40 r8:00000000 r7:00000000 r6:861c4600 r5:00000000 [ 4174.770265][T30362] r4:00000000 [ 4174.770281][T30362] [<805d8ba8>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4174.770332][T30362] Exception stack(0xdfbb5fa8 to 0xdfbb5ff0) [ 4174.770375][T30362] 5fa0: 00000000 00000000 00000000 20000080 20000100 00000000 [ 4174.770407][T30362] 5fc0: 00000000 00000000 00356318 00000015 003562d8 00000000 00000001 76fe80dc [ 4174.770435][T30362] 5fe0: 76fe7e88 76fe7e78 00018fa0 00130a50 [ 4174.770470][T30362] r10:00000015 r9:845a3d40 r8:8020029c r7:00000015 r6:00356318 r5:00000000 [ 4174.770491][T30362] r4:00000000 [ 4174.772195][ T28] audit: type=1400 audit(4685.671:1592): avc: denied { mounton } for pid=30361 comm="syz.2.6868" path="/583/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 4177.220340][T30364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6869'. [ 4182.461256][T30390] netlink: 'syz.2.6876': attribute type 4 has an invalid length. [ 4183.569683][ T28] audit: type=1400 audit(4694.471:1593): avc: denied { write } for pid=30393 comm="syz.2.6878" name="ports" dev="configfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4183.579396][ T28] audit: type=1800 audit(4694.481:1594): pid=30394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6878" name="addr_trtype" dev="configfs" ino=80084 res=0 errno=0 [ 4183.669757][ T28] audit: type=1400 audit(4694.571:1595): avc: denied { write } for pid=30393 comm="syz.2.6878" name="subsystems" dev="configfs" ino=80907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4183.673691][ T28] audit: type=1400 audit(4694.571:1596): avc: denied { create } for pid=30393 comm="syz.2.6878" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 4184.487430][T30399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4184.493608][T30399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4186.749782][ T28] audit: type=1400 audit(4697.651:1597): avc: denied { mount } for pid=30404 comm="syz.0.6882" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 4186.912445][ T28] audit: type=1400 audit(4697.811:1598): avc: denied { unmount } for pid=27649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 4188.242323][ T28] audit: type=1400 audit(4699.141:1599): avc: denied { connect } for pid=30402 comm="syz.2.6881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 4195.401004][ T28] audit: type=1400 audit(4706.301:1600): avc: denied { create } for pid=30416 comm="syz.2.6885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 4201.968075][ T28] audit: type=1400 audit(4712.871:1601): avc: denied { read } for pid=30422 comm="syz.0.6887" name="kmsg" dev="proc" ino=4026532017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 4201.969985][ T28] audit: type=1400 audit(4712.871:1602): avc: denied { open } for pid=30422 comm="syz.0.6887" path="/327/proc/kmsg" dev="proc" ino=4026532017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 4215.119662][T22951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4215.184440][T22951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4215.278468][T22951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4215.364856][T22951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4215.778531][T22951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4215.784959][T22951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4215.797942][T22951] bond0 (unregistering): Released all slaves [ 4215.887330][T22951] hsr_slave_0: left promiscuous mode [ 4215.897597][T22951] hsr_slave_1: left promiscuous mode [ 4215.908065][T22951] veth1_macvtap: left promiscuous mode [ 4215.908906][T22951] veth0_macvtap: left promiscuous mode [ 4215.911256][T22951] veth1_vlan: left promiscuous mode [ 4215.912022][T22951] veth0_vlan: left promiscuous mode [ 4217.544455][ T28] audit: type=1400 audit(4728.441:1603): avc: denied { write } for pid=30507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4217.970491][ T28] audit: type=1400 audit(4728.871:1604): avc: denied { write } for pid=30574 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4218.239057][ T2965] 8021q: adding VLAN 0 to HW filter on device eth5 [ 4218.561798][T30452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4218.570508][T30452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4218.967119][ T28] audit: type=1400 audit(4729.861:1605): avc: denied { write } for pid=30614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4219.473414][ T28] audit: type=1400 audit(4730.371:1606): avc: denied { write } for pid=30620 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4219.751924][ T2965] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4220.202869][T30452] hsr_slave_0: entered promiscuous mode [ 4220.219372][T30452] hsr_slave_1: entered promiscuous mode [ 4220.837346][ T28] audit: type=1400 audit(4731.731:1607): avc: denied { write } for pid=30676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4221.072841][T30452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4221.103311][T30452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4221.113703][T30452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4221.134263][T30452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4221.143506][T30452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4221.164249][T30452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4221.172402][T30452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4221.193446][T30452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4221.448331][ T28] audit: type=1400 audit(4732.341:1608): avc: denied { write } for pid=30761 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4222.151740][T30452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4222.686023][ T28] audit: type=1400 audit(4733.581:1609): avc: denied { write } for pid=30779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4223.057388][ T28] audit: type=1400 audit(4733.951:1610): avc: denied { write } for pid=30785 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4223.125319][T30452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 4223.616999][ T28] audit: type=1400 audit(4734.511:1611): avc: denied { write } for pid=30789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4223.997104][ T28] audit: type=1400 audit(4734.881:1612): avc: denied { write } for pid=30794 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4224.484303][ T28] audit: type=1400 audit(4735.381:1613): avc: denied { write } for pid=30799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4224.887830][ T28] audit: type=1400 audit(4735.781:1614): avc: denied { write } for pid=30805 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4225.501550][ T28] audit: type=1400 audit(4736.401:1615): avc: denied { write } for pid=30812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4225.947090][ T28] audit: type=1400 audit(4736.841:1616): avc: denied { write } for pid=30818 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4226.453212][ T28] audit: type=1400 audit(4737.351:1617): avc: denied { write } for pid=30823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4226.533304][T30452] veth0_vlan: entered promiscuous mode [ 4226.564928][T30452] veth1_vlan: entered promiscuous mode [ 4226.674113][T30452] veth0_macvtap: entered promiscuous mode [ 4226.700606][T30452] veth1_macvtap: entered promiscuous mode [ 4226.788196][ T28] audit: type=1400 audit(4737.671:1618): avc: denied { write } for pid=30827 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4226.808049][T30039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4226.809706][T30039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4226.815445][T30039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4226.816004][T30039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4227.427210][T26495] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 4227.587302][T26495] usb 1-1: Using ep0 maxpacket: 32 [ 4227.597390][T26495] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 4227.650555][T26495] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 4227.671955][T26495] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 4227.672672][T26495] usb 1-1: Product: syz [ 4227.675102][T26495] usb 1-1: Manufacturer: syz [ 4227.679066][T26495] usb 1-1: SerialNumber: syz [ 4227.684665][T26495] usb 1-1: config 0 descriptor?? [ 4227.696085][T30834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4227.702474][T26495] hub 1-1:0.0: bad descriptor, ignoring hub [ 4227.703155][T26495] hub 1-1:0.0: probe with driver hub failed with error -5 [ 4228.247630][T26495] usb 1-1: USB disconnect, device number 61 [ 4228.870359][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 4228.874083][ T28] audit: type=1400 audit(4739.771:1621): avc: denied { write } for pid=30862 comm="syz.0.6903" name="namespaces" dev="configfs" ino=78526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4228.878725][T30863] nvmet: adding nsid 1 to subsystem testsubsys [ 4228.928790][T30863] nvmet: failed to open block device ./file0: (-2) [ 4239.073544][ T28] audit: type=1326 audit(4749.971:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.075497][ T28] audit: type=1326 audit(4749.971:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.081342][ T28] audit: type=1326 audit(4749.981:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.085043][ T28] audit: type=1326 audit(4749.981:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.089235][ T28] audit: type=1326 audit(4749.981:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.093200][ T28] audit: type=1326 audit(4749.981:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.096576][ T28] audit: type=1326 audit(4749.981:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.102556][ T28] audit: type=1326 audit(4750.011:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=426 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.103120][ T28] audit: type=1326 audit(4750.011:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4239.103470][ T28] audit: type=1326 audit(4750.011:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.2.6907" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4240.361238][T30882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4240.370572][T30882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4243.296280][T30896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4243.318926][T30896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4253.627830][T30907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4254.178431][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 4254.180153][ T28] audit: type=1326 audit(4765.081:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.182510][ T28] audit: type=1326 audit(4765.081:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.186321][ T28] audit: type=1326 audit(4765.081:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.190410][ T28] audit: type=1326 audit(4765.091:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=122 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.193812][ T28] audit: type=1326 audit(4765.091:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.196956][ T28] audit: type=1326 audit(4765.091:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.199122][ T28] audit: type=1326 audit(4765.101:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.207010][ T28] audit: type=1326 audit(4765.101:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4254.211302][ T28] audit: type=1326 audit(4765.111:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.0.6918" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4279.057359][T30205] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 4279.227652][T30205] usb 1-1: Using ep0 maxpacket: 16 [ 4279.237802][T30205] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 4279.250409][T30205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 4279.272921][T30205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4279.274535][T30205] usb 1-1: Product: syz [ 4279.275712][T30205] usb 1-1: Manufacturer: syz [ 4279.277808][T30205] usb 1-1: SerialNumber: syz [ 4279.283708][T30205] usb 1-1: config 0 descriptor?? [ 4284.284444][T30990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 4284.618780][T30994] hsr0: mtu greater than device maximum [ 4289.517421][ T8853] usb 1-1: USB disconnect, device number 62 [ 4303.548871][T31055] netlink: 'syz.2.6955': attribute type 27 has an invalid length. [ 4307.997903][T31080] fuse: Invalid rootmode [ 4316.134373][T31103] netlink: 'syz.2.6971': attribute type 4 has an invalid length. [ 4316.598770][T31109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4316.600370][T31109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4316.732404][T31113] comedi: valid board names for 8255 driver are: [ 4316.740294][T31113] 8255 [ 4316.747506][T31113] comedi: valid board names for vmk80xx driver are: [ 4316.750805][T31113] vmk80xx [ 4316.752523][T31113] comedi: valid board names for usbduxsigma driver are: [ 4316.754087][T31113] usbduxsigma [ 4316.755481][T31113] comedi: valid board names for usbduxfast driver are: [ 4316.758182][T31113] usbduxfast [ 4316.758535][T31113] comedi: valid board names for usbdux driver are: [ 4316.758600][T31113] usbdux [ 4316.758620][T31113] comedi: valid board names for ni6501 driver are: [ 4316.758636][T31113] ni6501 [ 4316.758650][T31113] comedi: valid board names for dt9812 driver are: [ 4316.758667][T31113] dt9812 [ 4316.758683][T31113] comedi: valid board names for ni_labpc_cs driver are: [ 4316.758701][T31113] ni_labpc_cs [ 4316.758727][T31113] comedi: valid board names for ni_daq_700 driver are: [ 4316.758745][T31113] ni_daq_700 [ 4316.758760][T31113] comedi: valid board names for labpc_pci driver are: [ 4316.758803][T31113] labpc_pci [ 4316.758823][T31113] comedi: valid board names for adl_pci9118 driver are: [ 4316.758891][T31113] pci9118dg [ 4316.758932][T31113] pci9118hg [ 4316.758946][T31113] pci9118hr [ 4316.758963][T31113] comedi: valid board names for 8255_pci driver are: [ 4316.758981][T31113] 8255_pci [ 4316.758995][T31113] comedi: valid board names for comedi_parport driver are: [ 4316.759011][T31113] comedi_parport [ 4316.759026][T31113] comedi: valid board names for comedi_test driver are: [ 4316.759057][T31113] comedi_test [ 4316.759076][T31113] comedi: valid board names for comedi_bond driver are: [ 4316.759093][T31113] comedi_bond [ 4316.882698][T31113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6975'. [ 4319.177180][ T28] audit: type=1326 audit(4830.071:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.177623][ T28] audit: type=1326 audit(4830.071:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.177988][ T28] audit: type=1326 audit(4830.071:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.178222][ T28] audit: type=1326 audit(4830.071:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.178441][ T28] audit: type=1326 audit(4830.071:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.178665][ T28] audit: type=1326 audit(4830.071:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.178885][ T28] audit: type=1326 audit(4830.071:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.179100][ T28] audit: type=1326 audit(4830.071:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.179326][ T28] audit: type=1326 audit(4830.071:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4319.225185][ T28] audit: type=1326 audit(4830.071:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31116 comm="syz.2.6977" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4321.618308][T31128] syzkaller1: entered promiscuous mode [ 4321.618550][T31128] syzkaller1: entered allmulticast mode [ 4321.891180][T31134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4321.891902][T31134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4323.869657][T31142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4323.877911][T31142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4327.185230][T31166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6995'. [ 4343.808714][T30205] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 4343.997319][T30205] usb 1-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 4344.010365][T30205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4344.218930][T30205] rc_core: IR keymap rc-rc6-mce not found [ 4344.220055][T30205] Registered IR keymap rc-empty [ 4344.330362][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.354842][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.368725][T30205] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0 [ 4344.371309][T30205] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input28 [ 4344.440144][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.468028][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.488001][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.508178][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.537381][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.558169][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.578092][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.598155][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.637547][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.662468][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.688785][T30205] mceusb 1-1:1.0: Error: mce write urb status = -71 [ 4344.720591][T30205] mceusb 1-1:1.0: Registered with mce emulator interface version 1 [ 4344.724764][T30205] mceusb 1-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 4344.737979][T30205] usb 1-1: USB disconnect, device number 63 [ 4350.403911][T31240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4350.405031][T31240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4368.187488][T29841] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 4368.348768][T29841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 4368.352522][T29841] usb 1-1: not running at top speed; connect to a high speed hub [ 4368.352903][T29841] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 4368.390517][T29841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4368.390805][T29841] usb 1-1: Product: syz [ 4368.392757][T29841] usb 1-1: Manufacturer: syz [ 4368.394289][T29841] usb 1-1: SerialNumber: syz [ 4368.665878][T29841] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 4368.706314][T29841] usb 1-1: USB disconnect, device number 64 [ 4370.037502][T29841] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 4370.187428][T29841] usb 1-1: Using ep0 maxpacket: 8 [ 4370.191196][T29841] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 4370.204460][T29841] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 4370.204856][T29841] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 4370.206993][T29841] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 4370.207333][T29841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4370.239988][T31313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4370.251015][T31313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4370.260693][T29841] mdc800 1-1:1.0: probe fails -> Wrong Endpoints. [ 4370.477174][T18187] usb 1-1: USB disconnect, device number 65 [ 4370.731243][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 4370.733649][ T28] audit: type=1800 audit(4881.631:1678): pid=31328 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.7032" name="addr_trtype" dev="configfs" ino=82233 res=0 errno=0 [ 4375.940417][T31353] device-mapper: ioctl: Unable to rename non-existent device, t to j [ 4378.743622][T31361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7044'. [ 4396.246041][ T28] audit: type=1326 audit(4907.141:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4396.249612][ T28] audit: type=1326 audit(4907.141:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4396.254020][ T28] audit: type=1326 audit(4907.151:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4396.255413][ T28] audit: type=1326 audit(4907.151:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4396.256300][ T28] audit: type=1326 audit(4907.151:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4396.265045][ T28] audit: type=1326 audit(4907.161:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=172 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4396.266315][ T28] audit: type=1326 audit(4907.161:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4396.271383][ T28] audit: type=1326 audit(4907.171:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4399.778707][T31389] binder: 31388:31389 ioctl 4018620d 0 returned -22 [ 4407.883479][T31399] FAULT_INJECTION: forcing a failure. [ 4407.883479][T31399] name failslab, interval 1, probability 0, space 0, times 0 [ 4407.885122][T31399] CPU: 1 UID: 0 PID: 31399 Comm: syz.2.7059 Tainted: G L syzkaller #0 PREEMPT [ 4407.885247][T31399] Tainted: [L]=SOFTLOCKUP [ 4407.885291][T31399] Hardware name: ARM-Versatile Express [ 4407.885316][T31399] Call trace: [ 4407.885357][T31399] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4407.885472][T31399] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4407.885492][T31399] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4407.885544][T31399] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4407.885601][T31399] r7:858abd40 r6:00000000 r5:858abd40 r4:82b1ac48 [ 4407.885617][T31399] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4407.885669][T31399] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 4407.885745][T31399] r8:00000000 r7:858abd40 r6:83001240 r5:00000cc0 r4:0000002a [ 4407.885766][T31399] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 4407.885820][T31399] [<8054778c>] (__kmalloc_noprof) from [<80894c6c>] (x509_fabricate_name+0x70/0x1dc) [ 4407.885893][T31399] r10:00000000 r9:00000029 r8:867f0800 r7:867f083f r6:865d01b0 r5:00000029 [ 4407.885914][T31399] r4:86aa1f40 [ 4407.885931][T31399] [<80894bfc>] (x509_fabricate_name) from [<8089564c>] (x509_note_issuer+0x60/0x94) [ 4407.885996][T31399] r10:81cf2f93 r9:00000015 r8:00000068 r7:00000034 r6:0000000c r5:00000002 [ 4407.886019][T31399] r4:86aa1f40 r3:865d01b0 [ 4407.886036][T31399] [<808955ec>] (x509_note_issuer) from [<80a06ec4>] (asn1_ber_decoder+0x55c/0xcc4) [ 4407.886100][T31399] r7:00000071 r6:00000034 r5:00000002 r4:808955ec [ 4407.886120][T31399] [<80a06968>] (asn1_ber_decoder) from [<80894e78>] (x509_cert_parse+0xa0/0x204) [ 4407.886183][T31399] r10:83eff780 r9:8238a9ec r8:82c221e8 r7:00000559 r6:867f0800 r5:865d0180 [ 4407.886204][T31399] r4:86aa1f40 [ 4407.886222][T31399] [<80894dd8>] (x509_cert_parse) from [<80895e7c>] (x509_key_preparse+0x18/0x1d8) [ 4407.886282][T31399] r7:dfc1dec0 r6:82b4d064 r5:dfc1dec0 r4:82b4d08c [ 4407.886304][T31399] [<80895e64>] (x509_key_preparse) from [<80892f9c>] (asymmetric_key_preparse+0x6c/0xf8) [ 4407.886371][T31399] r10:83eff780 r9:8238a9ec r8:82c221e8 r7:dfc1dec0 r6:82b4d064 r5:00000000 [ 4407.886455][T31399] r4:82b4d08c r3:80895e64 [ 4407.886490][T31399] [<80892f30>] (asymmetric_key_preparse) from [<807d4ae8>] (__key_create_or_update+0x1b4/0x568) [ 4407.886569][T31399] r9:82b42144 r8:858abd40 r7:867f0800 r6:83eff781 r5:00000000 r4:82b4d010 [ 4407.886588][T31399] [<807d4934>] (__key_create_or_update) from [<807d4ed0>] (key_create_or_update+0x34/0x3c) [ 4407.886651][T31399] r10:00000135 r9:858abd40 r8:867f0800 r7:83eff781 r6:00000000 r5:00000559 [ 4407.886672][T31399] r4:b5403587 [ 4407.886689][T31399] [<807d4e9c>] (key_create_or_update) from [<807d7390>] (sys_add_key+0x134/0x280) [ 4407.886755][T31399] [<807d725c>] (sys_add_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4407.886811][T31399] Exception stack(0xdfc1dfa8 to 0xdfc1dff0) [ 4407.886853][T31399] dfa0: ffffffff 00000000 20000000 00000000 20000200 00000559 [ 4407.886893][T31399] dfc0: ffffffff 00000000 00356318 00000135 003562d8 00000000 00000001 76f190dc [ 4407.886921][T31399] dfe0: 76f18e88 76f18e78 00018fa0 00130a50 [ 4407.886953][T31399] r8:8020029c r7:00000135 r6:00356318 r5:00000000 r4:ffffffff [ 4408.610185][T31403] FAULT_INJECTION: forcing a failure. [ 4408.610185][T31403] name failslab, interval 1, probability 0, space 0, times 0 [ 4408.611276][T31403] CPU: 1 UID: 0 PID: 31403 Comm: syz.2.7061 Tainted: G L syzkaller #0 PREEMPT [ 4408.611353][T31403] Tainted: [L]=SOFTLOCKUP [ 4408.611364][T31403] Hardware name: ARM-Versatile Express [ 4408.611377][T31403] Call trace: [ 4408.611398][T31403] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4408.611457][T31403] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4408.611467][T31403] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4408.611494][T31403] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4408.611527][T31403] r7:8655a4c0 r6:00000000 r5:8655a4c0 r4:82b1ac48 [ 4408.611535][T31403] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 4408.611563][T31403] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 4408.611599][T31403] r8:00000000 r7:8655a4c0 r6:805f8070 r5:00000cc0 r4:830bd240 [ 4408.611608][T31403] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 4408.611638][T31403] [<80546804>] (kmem_cache_alloc_noprof) from [<805f8070>] (copy_fs_struct+0x24/0x94) [ 4408.611675][T31403] r10:00000151 r9:8655a4c0 r8:8020029c r7:00000151 r6:00000000 r5:838abd80 [ 4408.611686][T31403] r4:28000600 [ 4408.611694][T31403] [<805f804c>] (copy_fs_struct) from [<80250b70>] (ksys_unshare+0x134/0x430) [ 4408.611735][T31403] r7:00000151 r6:00000000 r5:8655a4c0 r4:28000600 [ 4408.611824][T31403] [<80250a3c>] (ksys_unshare) from [<80250e7c>] (sys_unshare+0x10/0x14) [ 4408.611870][T31403] r10:00000151 r9:8655a4c0 r8:8020029c r7:00000151 r6:00356308 r5:00000000 [ 4408.611906][T31403] r4:00000000 [ 4408.611924][T31403] [<80250e6c>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4408.611977][T31403] Exception stack(0xdfc1dfa8 to 0xdfc1dff0) [ 4408.612014][T31403] dfa0: 00000000 00000000 28000600 00000000 00000000 00000000 [ 4408.612045][T31403] dfc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76f190dc [ 4408.612084][T31403] dfe0: 76f18e88 76f18e78 00018fa0 00130a50 [ 4414.599874][T31417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4414.600995][T31417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4417.927322][ T28] audit: type=1400 audit(4928.821:1687): avc: denied { write } for pid=31425 comm="syz.2.7070" name="usb_gadget" dev="configfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4417.949069][ T28] audit: type=1400 audit(4928.851:1688): avc: denied { write } for pid=31425 comm="syz.2.7070" name="configs" dev="configfs" ino=83284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4417.969726][ T28] audit: type=1400 audit(4928.871:1689): avc: denied { write } for pid=31425 comm="syz.2.7070" name="functions" dev="configfs" ino=83283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4418.039297][ T28] audit: type=1800 audit(4928.941:1690): pid=31426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7070" name="c_chmask" dev="configfs" ino=83291 res=0 errno=0 [ 4418.041058][ T28] audit: type=1400 audit(4928.941:1691): avc: denied { write } for pid=31425 comm="syz.2.7070" name="c.1" dev="configfs" ino=83288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4418.047975][ T28] audit: type=1400 audit(4928.951:1692): avc: denied { write } for pid=31425 comm="syz.2.7070" name="c.1" dev="configfs" ino=83288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 4418.070863][ T28] audit: type=1800 audit(4928.971:1693): pid=31426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7070" name="UDC" dev="configfs" ino=83293 res=0 errno=0 [ 4418.085820][T31426] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 4418.118527][T31426] udc dummy_udc.0: failed to start g1: -19 [ 4418.120121][T31426] UDC core: g1: couldn't find an available UDC or it's busy [ 4420.230071][ T28] audit: type=1400 audit(4931.131:1694): avc: denied { write } for pid=31440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4420.475959][ T28] audit: type=1400 audit(4931.371:1695): avc: denied { write } for pid=31444 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4421.145261][T31447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7075'. [ 4424.310011][T31470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7081'. [ 4425.428339][T31480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4425.429389][T31480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4426.842041][T31501] lo: entered promiscuous mode [ 4426.852694][T31501] tunl0: entered promiscuous mode [ 4426.865822][T31501] gre0: entered promiscuous mode [ 4426.874892][T31501] gretap0: entered promiscuous mode [ 4426.885810][T31501] erspan0: entered promiscuous mode [ 4426.893562][T31501] ip_vti0: entered promiscuous mode [ 4426.907672][T31501] ip6_vti0: entered promiscuous mode [ 4426.918948][T31501] sit0: entered promiscuous mode [ 4426.921297][T31501] ip6tnl0: entered promiscuous mode [ 4426.923592][T31501] ip6gre0: entered promiscuous mode [ 4426.937432][T31501] syz_tun: entered promiscuous mode [ 4426.942638][T31501] ip6gretap0: entered promiscuous mode [ 4426.959714][T31501] vcan0: entered promiscuous mode [ 4426.977326][T31501] bond0: entered promiscuous mode [ 4426.977653][T31501] bond_slave_0: entered promiscuous mode [ 4426.978124][T31501] bond_slave_1: entered promiscuous mode [ 4426.982873][T31501] dummy0: entered promiscuous mode [ 4427.029608][T31501] nlmon0: entered promiscuous mode [ 4427.057664][T31501] vxcan0: entered promiscuous mode [ 4427.060174][T31501] vxcan1: entered promiscuous mode [ 4427.062339][T31501] veth0: entered promiscuous mode [ 4427.064985][T31501] veth1: entered promiscuous mode [ 4427.139454][T31501] wg0: entered promiscuous mode [ 4427.167519][T31501] wg1: entered promiscuous mode [ 4427.187894][T31501] wg2: entered promiscuous mode [ 4427.195074][T31501] veth0_to_bridge: entered promiscuous mode [ 4427.228512][T31501] bridge_slave_0: entered promiscuous mode [ 4427.230068][T31501] veth1_to_bridge: entered promiscuous mode [ 4427.236258][T31501] bridge_slave_1: entered promiscuous mode [ 4427.240092][T31501] veth0_to_bond: entered promiscuous mode [ 4427.260088][T31501] veth1_to_bond: entered promiscuous mode [ 4427.299332][T31501] veth0_to_team: entered promiscuous mode [ 4427.307968][T31501] team_slave_0: entered promiscuous mode [ 4427.311676][T31501] veth1_to_team: entered promiscuous mode [ 4427.337869][T31501] team_slave_1: entered promiscuous mode [ 4427.339142][T31501] veth0_to_batadv: entered promiscuous mode [ 4427.351526][T31501] batadv_slave_0: entered promiscuous mode [ 4427.366036][T31501] veth1_to_batadv: entered promiscuous mode [ 4427.382941][T31501] batadv_slave_1: entered promiscuous mode [ 4427.398390][T31501] xfrm0: entered promiscuous mode [ 4427.410417][T31501] veth0_to_hsr: entered promiscuous mode [ 4427.432785][T31501] veth1_to_hsr: entered promiscuous mode [ 4427.457695][T31501] hsr0: entered promiscuous mode [ 4427.463457][T31501] veth1_virt_wifi: entered promiscuous mode [ 4427.478591][T31501] veth0_virt_wifi: entered promiscuous mode [ 4427.501696][T31501] vlan0: entered promiscuous mode [ 4427.505430][T31501] vlan1: entered promiscuous mode [ 4427.518237][T31501] macvlan0: entered promiscuous mode [ 4427.523548][T31501] macvlan1: entered promiscuous mode [ 4427.536198][T31501] ipvlan0: entered promiscuous mode [ 4427.539355][T31501] ipvlan1: entered promiscuous mode [ 4427.552719][T31501] macvtap0: entered promiscuous mode [ 4427.561967][T31501] macsec0: entered promiscuous mode [ 4427.571793][T31501] geneve0: entered promiscuous mode [ 4427.588607][T31501] geneve1: entered promiscuous mode [ 4427.596215][T31501] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 4427.608168][T31501] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 4427.620592][T31501] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 4427.643978][T31501] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 4427.652881][T31501] erspan0.1: entered promiscuous mode [ 4427.677540][T22951] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4427.677945][T22951] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4427.678054][T22951] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4427.678126][T22951] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4428.357303][ T28] audit: type=1400 audit(4939.251:1696): avc: denied { create } for pid=31506 comm="syz.2.7095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 4429.297085][T31515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4429.299060][T31515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4432.089991][T31523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4432.091411][T31523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4438.580787][T31544] binder: 31543:31544 ioctl c0306201 20000180 returned -22 [ 4439.579046][T31546] netlink: 'syz.2.7109': attribute type 6 has an invalid length. [ 4441.953123][T31552] netlink: 'syz.2.7110': attribute type 16 has an invalid length. [ 4441.954297][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7110'. [ 4441.970351][T31552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4443.043440][ T28] audit: type=1400 audit(4953.941:1697): avc: denied { bind } for pid=31566 comm="syz.2.7113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4443.578751][ T28] audit: type=1400 audit(4954.481:1698): avc: denied { shutdown } for pid=31566 comm="syz.2.7113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4445.868078][T31570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4465.177445][T30205] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 4465.330364][T30205] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 4465.367228][T30205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4465.368325][T30205] usb 1-1: Product: syz [ 4465.369078][T30205] usb 1-1: Manufacturer: syz [ 4465.369764][T30205] usb 1-1: SerialNumber: syz [ 4465.374593][T30205] usb 1-1: config 0 descriptor?? [ 4469.258040][T31624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 4475.615852][T18187] usb 1-1: USB disconnect, device number 66 [ 4476.157083][T26495] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 4476.306905][T26495] usb 1-1: Using ep0 maxpacket: 16 [ 4476.344288][T26495] usb 1-1: unable to get BOS descriptor or descriptor too short [ 4476.344525][T26495] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 4476.355549][T26495] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 4476.356009][T26495] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 4476.356969][T26495] usb 1-1: config 13 has no interface number 0 [ 4476.357074][T26495] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 4476.357118][T26495] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 4476.357161][T26495] usb 1-1: config 13 interface 50 has no altsetting 0 [ 4476.392912][T26495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4476.393307][T26495] usb 1-1: Product: syz [ 4476.395303][T26495] usb 1-1: Manufacturer: syz [ 4476.395642][T26495] usb 1-1: SerialNumber: syz [ 4476.420611][T31638] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 4476.670961][T26495] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 4476.671482][T26495] usb 1-1: MIDIStreaming interface descriptor not found [ 4476.721976][T26495] usb 1-1: USB disconnect, device number 67 [ 4477.150035][T31671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7131'. [ 4477.155492][T31671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7131'. [ 4482.264229][T31687] gadgetfs: bound to dummy_udc driver [ 4482.375138][ T28] audit: type=1400 audit(4993.271:1699): avc: denied { unmount } for pid=30452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 4492.100002][ T28] audit: type=1326 audit(5003.001:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4492.100425][ T28] audit: type=1326 audit(5003.001:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4492.121671][ T28] audit: type=1326 audit(5003.021:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=286 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4492.123561][ T28] audit: type=1326 audit(5003.021:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4492.129426][ T28] audit: type=1326 audit(5003.021:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4492.147174][ T28] audit: type=1326 audit(5003.041:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4492.684225][T31717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7143'. [ 4493.602714][ T28] audit: type=1326 audit(5004.501:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4493.604015][ T28] audit: type=1326 audit(5004.501:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.2.7143" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4508.189425][T31733] netlink: 'syz.2.7149': attribute type 3 has an invalid length. [ 4508.704115][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7151'. [ 4508.750496][ T28] audit: type=1326 audit(5019.651:1708): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31722 comm="syz.0.7145" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 4520.606136][T31749] input: syz0 as /devices/virtual/input/input29 [ 4520.877916][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7155'. [ 4521.177811][T31757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4521.187836][T31757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4521.452810][T31764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4521.467895][T31764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4522.752987][T30452] cgroup: fork rejected by pids controller in /syz2 [ 4523.349425][T22951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4523.355740][T22951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4523.361175][T22951] bond0 (unregistering): Released all slaves [ 4524.555324][ T28] audit: type=1400 audit(5035.451:1709): avc: denied { write } for pid=31808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4524.977264][ T28] audit: type=1400 audit(5035.871:1710): avc: denied { write } for pid=31842 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4525.278238][ T2965] 8021q: adding VLAN 0 to HW filter on device eth5 [ 4526.447211][ T28] audit: type=1400 audit(5037.341:1711): avc: denied { write } for pid=31917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4526.697608][T31781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4526.714934][T31781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4526.937300][ T28] audit: type=1400 audit(5037.831:1712): avc: denied { write } for pid=31940 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4527.239271][ T2965] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4527.861893][ T28] audit: type=1400 audit(5038.761:1713): avc: denied { write } for pid=31982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4528.080713][ T28] audit: type=1400 audit(5038.981:1714): avc: denied { write } for pid=31987 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4528.474955][T31781] hsr_slave_0: entered promiscuous mode [ 4528.491560][T31781] hsr_slave_1: entered promiscuous mode [ 4529.040863][ T2965] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4530.115021][T31781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4530.132533][T31781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4530.148675][T31781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4530.153518][T31781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4530.160831][T31781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4530.174433][T31781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4530.196186][T31781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4530.213151][T31781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4530.667604][ T28] audit: type=1400 audit(5041.561:1715): avc: denied { write } for pid=32103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4531.248587][ T28] audit: type=1400 audit(5042.141:1716): avc: denied { write } for pid=32123 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4531.307223][T26111] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 4531.548374][T26111] usb 1-1: Using ep0 maxpacket: 8 [ 4531.557920][T26111] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 4531.588710][T26111] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 4531.589473][T26111] usb 1-1: config 0 has no interface number 0 [ 4531.591265][T26111] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 4531.592823][T26111] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 4531.594286][T26111] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 4531.596918][T26111] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 4531.598628][T26111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4531.618710][T26111] usb 1-1: config 0 descriptor?? [ 4531.647330][T26111] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 4532.844325][T31781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4532.915283][T26111] usb 1-1: USB disconnect, device number 68 [ 4532.940029][T26111] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 4534.070333][ T28] audit: type=1400 audit(5044.971:1717): avc: denied { write } for pid=32155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4534.577488][ T28] audit: type=1400 audit(5045.471:1718): avc: denied { write } for pid=32160 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4535.247719][ T28] audit: type=1400 audit(5046.141:1719): avc: denied { write } for pid=32163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4535.677062][ T28] audit: type=1400 audit(5046.571:1720): avc: denied { write } for pid=32172 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4536.317297][ T28] audit: type=1400 audit(5047.211:1721): avc: denied { write } for pid=32175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4536.778991][ T28] audit: type=1400 audit(5047.681:1722): avc: denied { write } for pid=32182 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4537.509587][ T28] audit: type=1400 audit(5048.411:1723): avc: denied { write } for pid=32186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4537.937203][ T28] audit: type=1400 audit(5048.831:1724): avc: denied { write } for pid=32193 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4538.455010][T31781] veth0_vlan: entered promiscuous mode [ 4538.481229][T31781] veth1_vlan: entered promiscuous mode [ 4538.664282][T31781] veth0_macvtap: entered promiscuous mode [ 4538.704824][T31781] veth1_macvtap: entered promiscuous mode [ 4538.714732][ T28] audit: type=1400 audit(5049.611:1725): avc: denied { write } for pid=32199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4538.877561][T22946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4538.878017][T22946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4538.878122][T22946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4538.878203][T22946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4539.229545][ T28] audit: type=1400 audit(5050.111:1726): avc: denied { write } for pid=32203 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4539.791983][ T28] audit: type=1400 audit(5050.691:1727): avc: denied { write } for pid=32209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4540.274400][ T28] audit: type=1400 audit(5051.171:1728): avc: denied { write } for pid=32212 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4540.957345][ T28] audit: type=1400 audit(5051.851:1729): avc: denied { write } for pid=32214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4541.429252][ T28] audit: type=1400 audit(5052.331:1730): avc: denied { write } for pid=32217 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4541.880122][ T28] audit: type=1400 audit(5052.781:1731): avc: denied { write } for pid=32220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4542.185697][ T28] audit: type=1400 audit(5053.081:1732): avc: denied { write } for pid=32223 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4542.747235][ T28] audit: type=1400 audit(5053.641:1733): avc: denied { write } for pid=32229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4542.912308][ T28] audit: type=1400 audit(5053.811:1734): avc: denied { write } for pid=32233 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4543.061010][T32231] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.7174/32231 [ 4543.061401][T32231] caller is debug_smp_processor_id+0x20/0x24 [ 4543.061755][T32231] CPU: 0 UID: 0 PID: 32231 Comm: syz.2.7174 Tainted: G L syzkaller #0 PREEMPT [ 4543.061850][T32231] Tainted: [L]=SOFTLOCKUP [ 4543.061871][T32231] Hardware name: ARM-Versatile Express [ 4543.061893][T32231] Call trace: [ 4543.061933][T32231] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4543.062020][T32231] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 4543.062038][T32231] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4543.062099][T32231] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4543.062155][T32231] r7:00000000 r6:82345518 r5:81b6ebe0 r4:858b6200 [ 4543.062171][T32231] [<8021ec7c>] (dump_stack) from [<81b6ebbc>] (check_preemption_disabled+0xfc/0x100) [ 4543.062236][T32231] [<81b6eac0>] (check_preemption_disabled) from [<81b6ebe0>] (debug_smp_processor_id+0x20/0x24) [ 4543.062292][T32231] r7:828d00f0 r6:858b6200 r5:a428f3a0 r4:85bfc444 [ 4543.062309][T32231] [<81b6ebc0>] (debug_smp_processor_id) from [<8045f61c>] (bpf_mem_cache_free_rcu+0x1c/0x38) [ 4543.062361][T32231] [<8045f600>] (bpf_mem_cache_free_rcu) from [<8042f348>] (rhtab_delete_elem+0x2d8/0x934) [ 4543.062416][T32231] r5:863c5000 r4:85bfc444 [ 4543.062432][T32231] [<8042f070>] (rhtab_delete_elem) from [<8042fe6c>] (__rhtab_map_lookup_and_delete_batch+0x468/0x95c) [ 4543.062498][T32231] r10:87000000 r9:00000001 r8:00000000 r7:00000000 r6:00000000 r5:00000001 [ 4543.062520][T32231] r4:863c5000 [ 4543.062536][T32231] [<8042fa04>] (__rhtab_map_lookup_and_delete_batch) from [<80430374>] (rhtab_map_lookup_and_delete_batch+0x14/0x18) [ 4543.062604][T32231] r10:85dee901 r9:200018c0 r8:00000019 r7:85dee900 r6:863c5000 r5:dfa39e98 [ 4543.062625][T32231] r4:863c50b0 [ 4543.062642][T32231] [<80430360>] (rhtab_map_lookup_and_delete_batch) from [<803e277c>] (bpf_map_do_batch+0x120/0x208) [ 4543.062699][T32231] [<803e265c>] (bpf_map_do_batch) from [<803ebb80>] (__sys_bpf+0xf14/0x219c) [ 4543.062766][T32231] r10:858b6200 r9:00000038 r8:00000000 r7:00000038 r6:00000019 r5:dfa39e40 [ 4543.062792][T32231] r4:00000000 r3:00000335 [ 4543.062810][T32231] [<803eac6c>] (__sys_bpf) from [<803ed418>] (sys_bpf+0x50/0x6c) [ 4543.062873][T32231] r10:00000182 r9:858b6200 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 4543.062895][T32231] r4:00000000 [ 4543.062912][T32231] [<803ed3c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4543.062964][T32231] Exception stack(0xdfa39fa8 to 0xdfa39ff0) [ 4543.063005][T32231] 9fa0: 00000000 00000000 00000019 200018c0 00000038 00000000 [ 4543.063042][T32231] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76fc50dc [ 4543.063069][T32231] 9fe0: 76fc4e88 76fc4e78 00018fa0 00130a50 [ 4543.107382][ T28] audit: type=1400 audit(5054.001:1735): avc: denied { write } for pid=3105 comm="syz-executor" path="pipe:[1587]" dev="pipefs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4543.432967][T22951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4543.501302][T22951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4543.563617][T22951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4543.642426][T22951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4543.909413][T22951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4543.918156][T22951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4543.923347][T22951] bond0 (unregistering): Released all slaves [ 4544.018524][T22951] hsr_slave_0: left promiscuous mode [ 4544.021259][T22951] hsr_slave_1: left promiscuous mode [ 4544.038868][T22951] veth1_macvtap: left promiscuous mode [ 4544.039340][T22951] veth0_macvtap: left promiscuous mode [ 4544.039532][T22951] veth1_vlan: left promiscuous mode [ 4544.039657][T22951] veth0_vlan: left promiscuous mode [ 4544.932609][ T28] audit: type=1400 audit(5055.831:1736): avc: denied { write } for pid=32251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4545.173688][ T28] audit: type=1400 audit(5056.071:1737): avc: denied { write } for pid=32254 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4545.318647][ T2965] 8021q: adding VLAN 0 to HW filter on device eth5 [ 4546.044981][ T2965] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4546.491845][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 4546.492969][ T28] audit: type=1400 audit(5057.391:1740): avc: denied { write } for pid=32265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4546.635711][ T28] audit: type=1400 audit(5057.531:1741): avc: denied { write } for pid=32268 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4546.718152][ T2965] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4547.189101][ T28] audit: type=1400 audit(5058.091:1742): avc: denied { write } for pid=32272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4547.358431][ T28] audit: type=1400 audit(5058.261:1743): avc: denied { write } for pid=32275 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4547.528933][ T2965] 8021q: adding VLAN 0 to HW filter on device eth8 [ 4547.955726][T22946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4548.024026][T22946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4548.085255][T22946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4548.179886][T22946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4548.470401][T22946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4548.478560][T22946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4548.484002][T22946] bond0 (unregistering): Released all slaves [ 4548.493031][T22946] bond1 (unregistering): Released all slaves [ 4548.582994][T22946] hsr_slave_0: left promiscuous mode [ 4548.585426][T22946] hsr_slave_1: left promiscuous mode [ 4548.593890][T22946] veth1_macvtap: left promiscuous mode [ 4548.594361][T22946] veth0_macvtap: left promiscuous mode [ 4548.594769][T22946] veth1_vlan: left promiscuous mode [ 4548.595126][T22946] veth0_vlan: left promiscuous mode [ 4548.992967][ T28] audit: type=1400 audit(5059.891:1744): avc: denied { write } for pid=32297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4549.241797][ T28] audit: type=1400 audit(5060.141:1745): avc: denied { write } for pid=32300 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4549.391356][ T2965] 8021q: adding VLAN 0 to HW filter on device eth9 [ 4550.018968][ T28] audit: type=1400 audit(5060.921:1746): avc: denied { write } for pid=32307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4550.245440][ T28] audit: type=1400 audit(5061.141:1747): avc: denied { write } for pid=32310 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4550.355605][ T2965] 8021q: adding VLAN 0 to HW filter on device eth10 [ 4550.872594][ T28] audit: type=1400 audit(5061.771:1748): avc: denied { write } for pid=32315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4551.071003][ T28] audit: type=1400 audit(5061.971:1749): avc: denied { write } for pid=32318 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4551.219953][ T2965] 8021q: adding VLAN 0 to HW filter on device eth11 [ 4551.662178][ T28] audit: type=1400 audit(5062.571:1750): avc: denied { write } for pid=32322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4551.890065][ T28] audit: type=1400 audit(5062.791:1751): avc: denied { write } for pid=32325 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4552.042326][ T2965] 8021q: adding VLAN 0 to HW filter on device eth12 [ 4559.603783][ T28] audit: type=1400 audit(5070.501:1752): avc: denied { write } for pid=32343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4559.750178][ T28] audit: type=1400 audit(5070.651:1753): avc: denied { write } for pid=32346 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4560.024053][ T28] audit: type=1400 audit(5070.921:1754): avc: denied { write } for pid=32349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4560.236946][ T28] audit: type=1400 audit(5071.111:1755): avc: denied { write } for pid=32352 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4560.635067][ T28] audit: type=1400 audit(5071.531:1756): avc: denied { write } for pid=32355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4560.808542][ T28] audit: type=1400 audit(5071.711:1757): avc: denied { write } for pid=32358 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4561.186230][ T28] audit: type=1400 audit(5072.081:1758): avc: denied { write } for pid=32361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4561.379732][ T28] audit: type=1400 audit(5072.281:1759): avc: denied { write } for pid=32364 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4563.827684][ T28] audit: type=1400 audit(5074.721:1760): avc: denied { write } for pid=32367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4564.062603][ T28] audit: type=1400 audit(5074.961:1761): avc: denied { write } for pid=32370 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4564.738627][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 4564.738975][ T28] audit: type=1400 audit(5075.641:1763): avc: denied { write } for pid=32376 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4565.154164][ T28] audit: type=1400 audit(5076.051:1764): avc: denied { write } for pid=32379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4565.345503][ T28] audit: type=1400 audit(5076.241:1765): avc: denied { write } for pid=32382 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4565.768954][ T28] audit: type=1400 audit(5076.671:1766): avc: denied { write } for pid=32385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4565.989835][ T28] audit: type=1400 audit(5076.891:1767): avc: denied { write } for pid=32388 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1