last executing test programs: 8m21.242890697s ago: executing program 0 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002"], 0xbc}}, 0x0) 8m21.166883276s ago: executing program 0 (id=396): r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000140)={0x3f, 0x8000006, 0x1}) 8m21.087210995s ago: executing program 0 (id=397): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x3, 0x0, &(0x7f0000000fc0)) 8m20.997883525s ago: executing program 0 (id=398): syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000006c0)='.\x00', &(0x7f00000027c0)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000002800)='.\x00', &(0x7f0000002840)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000002880)='./file0\x00', 0x0, 0x24000, 0x0) 8m20.906450486s ago: executing program 0 (id=399): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001004040000000020000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 8m20.409029144s ago: executing program 0 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='nfs\x00', 0x0, &(0x7f0000000480)='addr=12:.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 8m20.408908774s ago: executing program 32 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='nfs\x00', 0x0, &(0x7f0000000480)='addr=12:.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 2m12.098100602s ago: executing program 2 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000002b40)="306663353a313232373a646133bc7e59256325ef564968291b4c9bf666210591a5a906edeb77b4bab9b868f0636d348598b189b276ab65ef0a67f2f78f4331b9fb78f2d875ea27de89bd646d6c", 0x4d) 2m11.251830351s ago: executing program 2 (id=891): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r1, 0x20, &(0x7f0000000100)={&(0x7f0000000140)=""/257, 0xfffffffffffffcbd, 0x0, 0x0}}, 0x10) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) ioctl$DM_LIST_DEVICES(r2, 0xc138fd02, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4001}) 2m8.237691644s ago: executing program 2 (id=892): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000740)={0xa, 0x4ea9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000000780)={0x0, 0x9584, &(0x7f00000007c0)=[{&(0x7f0000000800)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m8.028665918s ago: executing program 2 (id=893): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xe, 0x492f, 0x7f, 0x101, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x1000000, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r4}, 0x38) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0xfffffffb, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x7}) 1m56.572676131s ago: executing program 2 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x80000002}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x374, &(0x7f0000004200)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 1m56.356818136s ago: executing program 2 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) 1m11.239982793s ago: executing program 33 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) 45.688163577s ago: executing program 3 (id=979): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x8000, &(0x7f0000000100)={0xb, 0x0, 0x100000}, 0x20) 45.458551454s ago: executing program 3 (id=980): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f0000000040)='./sys\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) lseek(r2, 0x5, 0x2) getdents64(r2, 0x0, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) 44.46581615s ago: executing program 3 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 29.287698948s ago: executing program 3 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 29.1040939s ago: executing program 3 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000ac0)={0x28, 0x44, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x848}, @nested={0xd, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}, @generic="b1a1a8ee98"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x80) 28.865082788s ago: executing program 3 (id=984): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) 28.864861098s ago: executing program 34 (id=984): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) 8.817921087s ago: executing program 1 (id=997): setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000005c0)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000600)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000680)="c800", 0x2}], 0x1) 2.498319368s ago: executing program 4 (id=1000): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.30766531s ago: executing program 4 (id=1001): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x12403, 0xd140a9105b135a45}}) 2.098651394s ago: executing program 4 (id=1002): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r1, 0x0, 0x2) read(r1, &(0x7f0000000300)=""/174, 0xae) 696.274589ms ago: executing program 1 (id=1003): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 598.6662ms ago: executing program 1 (id=1004): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x7ffffffe}) 398.599134ms ago: executing program 1 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd0}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) 398.356664ms ago: executing program 4 (id=1006): syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "6c404000000062cf004ab77f8437"}}}}}, 0x0) 257.07165ms ago: executing program 4 (id=1007): unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) 256.85778ms ago: executing program 1 (id=1008): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000040)) 186.425058ms ago: executing program 4 (id=1009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000005c0)={'comedi_parport\x00', [0x4f24, 0x14, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x100, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x6, 0x4, 0x20001e58, 0x3, 0x1, 0x7c, 0x207, 0x6, 0x0, 0xb]}) 0s ago: executing program 1 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='nfs4\x00', 0x0, &(0x7f00000005c0)='\x01') setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r5, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000740)={0x16, 0x98, 0xfa00, {0x0, 0x4, r5, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) kernel console output (not intermixed with test programs): 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.411556][ T3665] keyspan 2-1:24.0: Keyspan - (without firmware) converter detected [ 205.430347][ T3665] usb 2-1: Direct firmware load for keyspan/usa18x.fw failed with error -2 [ 205.451865][ T3665] usb 2-1: Falling back to sysfs fallback for: keyspan/usa18x.fw [ 205.453332][ T28] audit: type=1400 audit(205.340:297): avc: denied { firmware_load } for pid=3665 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.436106][ T28] audit: type=1400 audit(206.330:298): avc: denied { create } for pid=4692 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 206.444134][ T28] audit: type=1400 audit(206.340:299): avc: denied { write } for pid=4692 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 210.002626][ T28] audit: type=1400 audit(209.890:300): avc: denied { ioctl } for pid=4717 comm="syz.0.346" path="socket:[4587]" dev="sockfs" ino=4587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.543608][ T4594] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 211.754829][ T4594] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 211.785463][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.785700][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.785850][ T4594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.790529][ T4594] usb 1-1: config 0 descriptor?? [ 212.346362][ T4594] hid_parser_main: 62 callbacks suppressed [ 212.346435][ T4594] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 212.346541][ T4594] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 212.346645][ T4594] hid-led 0003:27B8:01ED.0002: item fetching failed at offset 3/5 [ 212.347019][ T4594] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -22 [ 212.595749][ T4590] usb 1-1: USB disconnect, device number 3 [ 212.742560][ T4745] netlink: 164 bytes leftover after parsing attributes in process `syz.0.350'. [ 212.742964][ T28] audit: type=1400 audit(212.630:301): avc: denied { nlmsg_read } for pid=4744 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.115116][ T28] audit: type=1400 audit(224.010:302): avc: denied { mount } for pid=4762 comm="syz.0.355" name="/" dev="ramfs" ino=5518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 229.161061][ T28] audit: type=1400 audit(229.050:303): avc: denied { wake_alarm } for pid=4784 comm="syz.0.361" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.744836][ T4573] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 229.896427][ T4573] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 229.900570][ T4573] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 229.900661][ T4573] usb 1-1: config 1 has no interface number 0 [ 229.900801][ T4573] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 229.900906][ T4573] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 229.900958][ T4573] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 229.925870][ T4573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.925935][ T4573] usb 1-1: Product: syz [ 229.925952][ T4573] usb 1-1: Manufacturer: syz [ 229.925965][ T4573] usb 1-1: SerialNumber: syz [ 230.230610][ T4573] usb 1-1: USB disconnect, device number 4 [ 231.405030][ T4823] mmap: syz.0.365 (4823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 231.858122][ T4826] Illegal XDP return value 4122011600 on prog (id 45) dev syz_tun, expect packet loss! [ 231.982274][ T28] audit: type=1400 audit(231.870:304): avc: denied { execute } for pid=4827 comm="syz.0.367" name="file0" dev="ramfs" ino=5541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 231.992617][ T4828] process 'syz.0.367' launched './file0' with NULL argv: empty string added [ 232.013531][ T28] audit: type=1400 audit(231.900:305): avc: denied { execute_no_trans } for pid=4827 comm="syz.0.367" path="/file0" dev="ramfs" ino=5541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 235.569086][ T28] audit: type=1400 audit(235.460:306): avc: denied { ioctl } for pid=4832 comm="syz.0.369" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.965357][ T4835] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 236.952506][ T28] audit: type=1400 audit(236.840:307): avc: denied { write } for pid=4851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.170304][ T28] audit: type=1400 audit(237.060:308): avc: denied { write } for pid=4860 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.579253][ T28] audit: type=1400 audit(237.470:309): avc: denied { write } for pid=4865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.717592][ T28] audit: type=1400 audit(237.610:310): avc: denied { watch_reads } for pid=4871 comm="syz.0.375" path="/174" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.881072][ T28] audit: type=1400 audit(237.770:311): avc: denied { write } for pid=4873 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.223611][ T4544] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.373491][ T4544] usb 1-1: Using ep0 maxpacket: 32 [ 238.376027][ T4544] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 238.379602][ T4544] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 238.379690][ T4544] usb 1-1: config 0 has no interface number 0 [ 238.379759][ T4544] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 238.379813][ T4544] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.379854][ T4544] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 238.379922][ T4544] usb 1-1: config 0 interface 196 has no altsetting 0 [ 238.402286][ T4544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.402396][ T4544] usb 1-1: Product: syz [ 238.402423][ T4544] usb 1-1: Manufacturer: syz [ 238.402446][ T4544] usb 1-1: SerialNumber: syz [ 238.408285][ T4544] usb 1-1: config 0 descriptor?? [ 238.410528][ T4878] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 238.825476][ T4544] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 238.825919][ T4544] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 239.028448][ T4585] usb 1-1: USB disconnect, device number 5 [ 239.231690][ T28] audit: type=1400 audit(239.110:312): avc: denied { unmount } for pid=3113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 240.524721][ T4911] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 240.524721][ T4911] The task syz.0.383 (4911) triggered the difference, watch for misbehavior. [ 249.016641][ T4942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.395'. [ 249.017624][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 249.181361][ T28] audit: type=1400 audit(249.070:313): avc: denied { getopt } for pid=4945 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.286725][ T28] audit: type=1400 audit(249.180:314): avc: denied { unmount } for pid=3113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 249.507797][ T1333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.576265][ T1333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.657369][ T1333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.731669][ T1333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.228125][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.246655][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.249799][ T1333] bond0 (unregistering): Released all slaves [ 250.261453][ T1333] bond1 (unregistering): Released all slaves [ 250.386250][ T1333] hsr_slave_0: left promiscuous mode [ 250.389143][ T1333] hsr_slave_1: left promiscuous mode [ 250.454073][ T1333] veth1_macvtap: left promiscuous mode [ 250.454351][ T1333] veth0_macvtap: left promiscuous mode [ 250.454764][ T1333] veth1_vlan: left promiscuous mode [ 250.454999][ T1333] veth0_vlan: left promiscuous mode [ 251.036545][ T28] audit: type=1400 audit(250.930:315): avc: denied { write } for pid=4987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.315163][ T28] audit: type=1400 audit(251.210:316): avc: denied { write } for pid=4997 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.554404][ T2968] 8021q: adding VLAN 0 to HW filter on device eth1 [ 251.985366][ T28] audit: type=1400 audit(251.880:317): avc: denied { write } for pid=5008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.208133][ T28] audit: type=1400 audit(252.100:318): avc: denied { write } for pid=5012 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.420459][ T2968] 8021q: adding VLAN 0 to HW filter on device eth2 [ 253.062628][ T28] audit: type=1400 audit(252.950:319): avc: denied { write } for pid=5066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.306971][ T28] audit: type=1400 audit(253.200:320): avc: denied { write } for pid=5120 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.328995][ T4966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.345816][ T4966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.476652][ T2968] 8021q: adding VLAN 0 to HW filter on device eth3 [ 254.040729][ T28] audit: type=1400 audit(253.930:321): avc: denied { write } for pid=5178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.316115][ T4966] hsr_slave_0: entered promiscuous mode [ 254.317263][ T4966] hsr_slave_1: entered promiscuous mode [ 254.317876][ T4966] debugfs: 'hsr0' already exists in 'hsr' [ 254.317936][ T4966] Cannot create hsr debugfs directory [ 254.393211][ T28] audit: type=1400 audit(254.280:322): avc: denied { write } for pid=5202 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.581483][ T2968] 8021q: adding VLAN 0 to HW filter on device eth4 [ 254.728116][ T4966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.738739][ T4966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.741068][ T4966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.751843][ T4966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.755989][ T4966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.761996][ T4966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.769129][ T4966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.777178][ T4966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.379287][ T4966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.284852][ T4966] veth0_vlan: entered promiscuous mode [ 257.298181][ T4966] veth1_vlan: entered promiscuous mode [ 257.347469][ T4966] veth0_macvtap: entered promiscuous mode [ 257.355594][ T4966] veth1_macvtap: entered promiscuous mode [ 257.485318][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.487778][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.487872][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.487938][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.095165][ T5347] syz.2.417 uses obsolete (PF_INET,SOCK_PACKET) [ 258.101806][ T28] audit: type=1400 audit(257.990:323): avc: denied { bind } for pid=5346 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.401821][ T28] audit: type=1400 audit(258.290:324): avc: denied { connect } for pid=5352 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.775143][ T28] audit: type=1400 audit(258.670:325): avc: denied { read write } for pid=5360 comm="syz.2.424" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.775371][ T28] audit: type=1400 audit(258.670:326): avc: denied { open } for pid=5360 comm="syz.2.424" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.780897][ T28] audit: type=1400 audit(258.670:327): avc: denied { ioctl } for pid=5360 comm="syz.2.424" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0xc0306201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 264.327783][ T5387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.328407][ T5387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.556416][ T28] audit: type=1400 audit(266.450:328): avc: denied { write } for pid=5407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.277596][ T28] audit: type=1400 audit(267.170:329): avc: denied { bind } for pid=5419 comm="syz.1.441" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.280168][ T28] audit: type=1400 audit(267.170:330): avc: denied { name_bind } for pid=5419 comm="syz.1.441" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 267.292358][ T28] audit: type=1400 audit(267.180:331): avc: denied { node_bind } for pid=5419 comm="syz.1.441" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 267.386458][ T28] audit: type=1400 audit(267.280:332): avc: denied { write } for pid=5415 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.051504][ T28] audit: type=1400 audit(267.940:333): avc: denied { write } for pid=5425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.305728][ T28] audit: type=1400 audit(268.200:334): avc: denied { write } for pid=5431 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.319293][ T28] audit: type=1400 audit(268.200:335): avc: denied { block_suspend } for pid=5430 comm="syz.1.444" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.967438][ T28] audit: type=1400 audit(268.860:336): avc: denied { write } for pid=5442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.218839][ T28] audit: type=1400 audit(269.110:337): avc: denied { write } for pid=5453 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.390975][ T3665] usb 2-1: ezusb_ihex_firmware_download - request "keyspan/usa18x.fw" failed [ 269.391247][ T3665] usb 2-1: failed to load firmware "keyspan/usa18x.fw" [ 269.391575][ T3665] keyspan 2-1:24.0: probe with driver keyspan failed with error -2 [ 269.408188][ T3665] usb 2-1: USB disconnect, device number 2 [ 269.703468][ T3665] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 269.863555][ T3665] usb 2-1: Using ep0 maxpacket: 8 [ 269.884479][ T3665] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.909834][ T3665] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.909910][ T3665] usb 2-1: config 1 interface 0 has no altsetting 0 [ 269.949000][ T3665] usb 2-1: string descriptor 0 read error: -22 [ 269.949151][ T3665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.967619][ T3665] cdc_ether 2-1:1.0: invalid descriptor buffer length [ 269.967834][ T3665] cdc_ether 2-1:1.0: missing cdc header ether descriptor [ 270.320799][ T4585] usb 2-1: USB disconnect, device number 3 [ 272.012180][ T5482] ALSA: seq fatal error: cannot create timer (-22) [ 278.537501][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 278.537626][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 278.614526][ T5499] veth3: entered promiscuous mode [ 278.614635][ T5499] veth3: entered allmulticast mode [ 281.755907][ T5535] FAULT_INJECTION: forcing a failure. [ 281.755907][ T5535] name failslab, interval 1, probability 0, space 0, times 0 [ 281.756209][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.2.468 Tainted: G L syzkaller #0 PREEMPT [ 281.756352][ T5535] Tainted: [L]=SOFTLOCKUP [ 281.756380][ T5535] Hardware name: ARM-Versatile Express [ 281.756401][ T5535] Call trace: [ 281.756450][ T5535] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 281.756559][ T5535] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 281.756577][ T5535] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 281.756605][ T5535] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 281.756635][ T5535] r7:ffffffff r6:00000000 r5:84921900 r4:83316560 [ 281.756643][ T5535] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 281.756671][ T5535] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 281.756709][ T5535] r8:84921900 r7:ffffffff r6:83801240 r5:00000dc0 r4:00000008 [ 281.756717][ T5535] [<805809fc>] (should_failslab) from [<8055f008>] (__kmalloc_node_noprof+0xac/0x3d8) [ 281.756744][ T5535] [<8055ef5c>] (__kmalloc_node_noprof) from [<80539c40>] (__vmalloc_node_range_noprof+0x15c/0x6bc) [ 281.756778][ T5535] r10:00004000 r9:00000dc0 r8:00000002 r7:86973940 r6:ffffffff r5:df800000 [ 281.756788][ T5535] r4:00000008 [ 281.756795][ T5535] [<80539ae4>] (__vmalloc_node_range_noprof) from [<8053a9bc>] (__vmalloc_node_noprof+0x6c/0x74) [ 281.756837][ T5535] r10:84928000 r9:80250374 r8:00000000 r7:84921900 r6:ffffffff r5:e0179f30 [ 281.756861][ T5535] r4:ffffffff [ 281.756875][ T5535] [<8053a950>] (__vmalloc_node_noprof) from [<8024e6e0>] (copy_process+0x2ec/0x1e14) [ 281.756921][ T5535] r4:00100400 [ 281.756929][ T5535] [<8024e3f4>] (copy_process) from [<80250374>] (kernel_clone+0xc4/0x440) [ 281.756961][ T5535] r10:84921900 r9:84921900 r8:00000000 r7:00100000 r6:00000000 r5:e0179f30 [ 281.756976][ T5535] r4:00100400 [ 281.756996][ T5535] [<802502b0>] (kernel_clone) from [<80250aa8>] (sys_clone+0x78/0x9c) [ 281.757062][ T5535] r10:00000078 r9:84921900 r8:8020029c r7:00000000 r6:00000000 r5:00000000 [ 281.757081][ T5535] r4:00000011 [ 281.757093][ T5535] [<80250a30>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 281.757116][ T5535] Exception stack(0xe0179fa8 to 0xe0179ff0) [ 281.757137][ T5535] 9fa0: 00000000 00000000 00100411 00000000 00000000 00000000 [ 281.757153][ T5535] 9fc0: 00000000 00000000 00000000 00000078 003562d8 00000000 00000001 76fa90dc [ 281.757185][ T5535] 9fe0: 76fa8e60 76fa8e50 00019564 00130cf0 [ 281.757201][ T5535] r7:00000078 r6:00000000 r5:00000000 r4:00000000 [ 281.757893][ T5535] syz.2.468: vmalloc error: size 8192, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 281.759219][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.2.468 Tainted: G L syzkaller #0 PREEMPT [ 281.759341][ T5535] Tainted: [L]=SOFTLOCKUP [ 281.759390][ T5535] Hardware name: ARM-Versatile Express [ 281.759587][ T5535] Call trace: [ 281.759806][ T5535] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 281.760272][ T5535] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 281.760351][ T5535] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 281.760469][ T5535] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 281.760539][ T5535] r7:86973940 r6:82359850 r5:84921900 r4:00000000 [ 281.760554][ T5535] [<8021f434>] (dump_stack) from [<8054da44>] (warn_alloc+0xdc/0xf8) [ 281.760598][ T5535] [<8054d968>] (warn_alloc) from [<8053a154>] (__vmalloc_node_range_noprof+0x670/0x6bc) [ 281.760626][ T5535] r3:00002000 r2:82359850 [ 281.760637][ T5535] r6:ffffffff r5:df800000 r4:00000008 [ 281.760647][ T5535] [<80539ae4>] (__vmalloc_node_range_noprof) from [<8053a9bc>] (__vmalloc_node_noprof+0x6c/0x74) [ 281.760733][ T5535] r10:84928000 r9:80250374 r8:00000000 r7:84921900 r6:ffffffff r5:e0179f30 [ 281.760759][ T5535] r4:ffffffff [ 281.760779][ T5535] [<8053a950>] (__vmalloc_node_noprof) from [<8024e6e0>] (copy_process+0x2ec/0x1e14) [ 281.760834][ T5535] r4:00100400 [ 281.760849][ T5535] [<8024e3f4>] (copy_process) from [<80250374>] (kernel_clone+0xc4/0x440) [ 281.760888][ T5535] r10:84921900 r9:84921900 r8:00000000 r7:00100000 r6:00000000 r5:e0179f30 [ 281.760897][ T5535] r4:00100400 [ 281.760904][ T5535] [<802502b0>] (kernel_clone) from [<80250aa8>] (sys_clone+0x78/0x9c) [ 281.760957][ T5535] r10:00000078 r9:84921900 r8:8020029c r7:00000000 r6:00000000 r5:00000000 [ 281.760966][ T5535] r4:00000011 [ 281.760973][ T5535] [<80250a30>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 281.761047][ T5535] Exception stack(0xe0179fa8 to 0xe0179ff0) [ 281.761187][ T5535] 9fa0: 00000000 00000000 00100411 00000000 00000000 00000000 [ 281.761237][ T5535] 9fc0: 00000000 00000000 00000000 00000078 003562d8 00000000 00000001 76fa90dc [ 281.761257][ T5535] 9fe0: 76fa8e60 76fa8e50 00019564 00130cf0 [ 281.761296][ T5535] r7:00000078 r6:00000000 r5:00000000 r4:00000000 [ 281.761522][ T5535] Mem-Info: [ 281.761735][ T5535] active_anon:1569 inactive_anon:0 isolated_anon:0 [ 281.761735][ T5535] active_file:0 inactive_file:42598 isolated_file:0 [ 281.761735][ T5535] unevictable:768 dirty:20 writeback:0 [ 281.761735][ T5535] slab_reclaimable:1164 slab_unreclaimable:6755 [ 281.761735][ T5535] mapped:2419 shmem:777 pagetables:389 [ 281.761735][ T5535] sec_pagetables:0 bounce:0 [ 281.761735][ T5535] kernel_misc_reclaimable:0 [ 281.761735][ T5535] free:426722 free_pcp:3726 free_cma:4032 [ 281.762111][ T5535] Node 0 active_anon:6276kB inactive_anon:0kB active_file:0kB inactive_file:170392kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:9676kB dirty:80kB writeback:0kB shmem:3108kB kernel_stack:1840kB pagetables:1556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 281.762446][ T5535] Normal free:1362412kB boost:0kB min:4756kB low:6168kB high:7580kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1200kB unevictable:0kB writepending:36kB zspages:0kB present:1556480kB managed:1416612kB mlocked:0kB bounce:0kB free_pcp:3824kB local_pcp:1224kB free_cma:0kB [ 281.762574][ T5535] lowmem_reserve[]: 0 4224 4224 [ 281.779956][ T5535] HighMem free:344476kB boost:0kB min:512kB low:1052kB high:1592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6224kB inactive_anon:0kB active_file:0kB inactive_file:169192kB unevictable:3072kB writepending:44kB zspages:0kB present:540672kB managed:540672kB mlocked:0kB bounce:0kB free_pcp:11080kB local_pcp:2132kB free_cma:16128kB [ 281.780047][ T5535] lowmem_reserve[]: 0 0 0 [ 281.780218][ T5535] Normal: 1*4kB (M) 3*8kB (UME) 1*16kB (U) 0*32kB 1*64kB (E) 5*128kB (ME) 5*256kB (ME) 5*512kB (UM) 4*1024kB (M) 3*2048kB (UME) 329*4096kB (M) = 1362412kB [ 281.780670][ T5535] HighMem: 75*4kB (M) 33*8kB (UM) 18*16kB (UM) 9*32kB (UM) 5*64kB (UM) 6*128kB (U) 5*256kB (UMC) 6*512kB (UMC) 6*1024kB (MC) 2*2048kB (MC) 80*4096kB (UMC) = 344500kB [ 281.780904][ T5535] 43375 total pagecache pages [ 281.780952][ T5535] 0 pages in swap cache [ 281.780990][ T5535] Free swap = 124996kB [ 281.781016][ T5535] Total swap = 124996kB [ 281.781122][ T5535] 524288 pages RAM [ 281.781154][ T5535] 135168 pages HighMem/MovableOnly [ 281.781168][ T5535] 34967 pages reserved [ 281.781197][ T5535] 4096 pages cma reserved [ 284.059526][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 284.962870][ T5551] device-mapper: table: 248:0: start=1 not aligned to h/w logical block size 4096 of ram4 [ 284.974180][ T5551] device-mapper: core: Cannot calculate initial queue limits [ 284.974369][ T5551] device-mapper: ioctl: unable to set up device queue for new table. [ 286.889984][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 286.890106][ T28] audit: type=1400 audit(286.780:340): avc: denied { set_context_mgr } for pid=5564 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 287.756223][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 288.315408][ T28] audit: type=1400 audit(288.210:341): avc: denied { mounton } for pid=5582 comm="syz.1.488" path="/248/file0" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 290.103672][ T4590] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 290.255397][ T4590] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 290.259027][ T4590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.259210][ T4590] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.259288][ T4590] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.272300][ T4590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.272409][ T4590] usb 2-1: Product: syz [ 290.272439][ T4590] usb 2-1: Manufacturer: syz [ 290.272466][ T4590] usb 2-1: SerialNumber: syz [ 290.467286][ T5600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.469176][ T5600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.485209][ T3665] usb 2-1: USB disconnect, device number 4 [ 290.540313][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.540634][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.843510][ T28] audit: type=1400 audit(290.730:342): avc: denied { create } for pid=5618 comm="syz.2.496" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 290.911113][ T28] audit: type=1400 audit(290.800:343): avc: denied { read write } for pid=5618 comm="syz.2.496" name="file2" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 290.911294][ T28] audit: type=1400 audit(290.800:344): avc: denied { open } for pid=5618 comm="syz.2.496" path="/47/file2" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 290.987903][ T28] audit: type=1400 audit(290.880:345): avc: denied { unlink } for pid=4966 comm="syz-executor" name="file2" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.550176][ T28] audit: type=1400 audit(293.440:346): avc: denied { write } for pid=5639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.939107][ T28] audit: type=1400 audit(293.830:347): avc: denied { write } for pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.080078][ T28] audit: type=1400 audit(295.970:348): avc: denied { relabelfrom } for pid=5647 comm="syz.2.504" name="" dev="pipefs" ino=6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 296.863583][ T28] audit: type=1400 audit(296.750:349): avc: denied { write } for pid=5649 comm="syz.1.505" name="usb_gadget" dev="configfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.863772][ T28] audit: type=1400 audit(296.750:350): avc: denied { add_name } for pid=5649 comm="syz.1.505" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.863829][ T28] audit: type=1400 audit(296.750:351): avc: denied { create } for pid=5649 comm="syz.1.505" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 296.880435][ T28] audit: type=1400 audit(296.770:352): avc: denied { write } for pid=5649 comm="syz.1.505" name="configs" dev="configfs" ino=7286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.935745][ T28] audit: type=1400 audit(296.830:353): avc: denied { write } for pid=5649 comm="syz.1.505" name="functions" dev="configfs" ino=7285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.971435][ T28] audit: type=1400 audit(296.850:354): avc: denied { read } for pid=5649 comm="syz.1.505" name="no_out_endpoint" dev="configfs" ino=7293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 296.972381][ T28] audit: type=1400 audit(296.860:355): avc: denied { open } for pid=5649 comm="syz.1.505" path="/252/config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint" dev="configfs" ino=7293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 297.815343][ T5662] tun0: tun_chr_ioctl cmd 1074025677 [ 297.815662][ T5662] tun0: linktype set to 825 [ 298.061561][ T5670] SELinux: DCCP has been removed, pid=5670 comm=syz.2.512 [ 298.824870][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 298.824992][ T28] audit: type=1400 audit(298.720:359): avc: denied { write } for pid=5685 comm="syz.1.519" name="stat" dev="proc" ino=4026532660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 298.826453][ T28] audit: type=1400 audit(298.720:360): avc: denied { add_name } for pid=5685 comm="syz.1.519" name="rt_cache" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 298.827215][ T28] audit: type=1400 audit(298.720:361): avc: denied { create } for pid=5685 comm="syz.1.519" name="rt_cache" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 298.827771][ T28] audit: type=1400 audit(298.720:362): avc: denied { associate } for pid=5685 comm="syz.1.519" name="rt_cache" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 299.043409][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.046511][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.879049][ T5709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.881962][ T5709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.049524][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 301.175526][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.182747][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.935944][ T28] audit: type=1400 audit(306.830:363): avc: denied { map } for pid=5740 comm="syz.1.541" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 306.976027][ T28] audit: type=1400 audit(306.870:364): avc: denied { call } for pid=5740 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 306.996953][ T28] audit: type=1400 audit(306.890:365): avc: denied { transfer } for pid=5740 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 319.804655][ T5754] binder: 5753:5754 ioctl c018620c 20000640 returned -1 [ 323.535967][ T5782] raw_sendmsg: syz.1.556 forgot to set AF_INET. Fix it! [ 335.513391][ T4573] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 335.676248][ T4573] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 335.679908][ T4573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.588318][ T4573] usb 2-1: Cannot set autoneg [ 336.588755][ T4573] MOSCHIP usb-ethernet driver 2-1:7.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 336.601468][ T4573] usb 2-1: USB disconnect, device number 5 [ 337.477261][ T28] audit: type=1400 audit(337.370:366): avc: denied { write } for pid=5906 comm="syz.1.565" name="uprobe_events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 338.213473][ T4594] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 338.380321][ T4594] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 338.393752][ T4594] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 338.393864][ T4594] usb 2-1: config 0 has no interface number 0 [ 338.416524][ T4594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.416646][ T4594] usb 2-1: Product: syz [ 338.416676][ T4594] usb 2-1: Manufacturer: syz [ 338.416703][ T4594] usb 2-1: SerialNumber: syz [ 338.425160][ T4594] usb 2-1: config 0 descriptor?? [ 339.296862][ T4594] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 339.297098][ T4594] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 339.297503][ T4594] asix 2-1:0.251: probe with driver asix failed with error -71 [ 339.312171][ T4594] usb 2-1: USB disconnect, device number 6 [ 344.017798][ T28] audit: type=1400 audit(343.910:367): avc: denied { rename } for pid=5938 comm="syz.2.573" name="file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 344.172634][ T28] audit: type=1400 audit(344.060:368): avc: denied { bind } for pid=5957 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.843717][ T4590] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 349.003843][ T4590] usb 2-1: Using ep0 maxpacket: 8 [ 349.008149][ T4590] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 349.043781][ T4590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.044000][ T4590] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.072128][ T4590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.072224][ T4590] usb 2-1: SerialNumber: syz [ 349.090760][ T4590] usb-storage 2-1:1.0: USB Mass Storage device detected [ 349.116680][ T4590] usb-storage 2-1:1.0: USB Mass Storage not supported on this host controller [ 349.157510][ T4590] usb-storage 2-1:1.0: probe with driver usb-storage failed with error -22 [ 349.338625][ T3665] usb 2-1: USB disconnect, device number 7 [ 351.001466][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.005426][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.655314][ T28] audit: type=1400 audit(351.550:369): avc: denied { create } for pid=6006 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.659745][ T28] audit: type=1400 audit(351.550:370): avc: denied { bind } for pid=6006 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.678029][ T28] audit: type=1400 audit(351.570:371): avc: denied { write } for pid=6006 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.907439][ T28] audit: type=1400 audit(351.800:372): avc: denied { execute } for pid=5993 comm="syz.1.589" path="/304/file0" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 351.962233][ T28] audit: type=1400 audit(351.850:373): avc: denied { append } for pid=5993 comm="syz.1.589" name="uprobe_events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 352.220460][ T6010] event trace: Could not enable event p [ 354.834234][ T6018] faux_driver vgem: [drm] Unknown color mode 142; guessing buffer size. [ 358.569728][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.570082][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.992239][ T28] audit: type=1400 audit(359.880:374): avc: denied { unmount } for pid=4966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 360.131712][ T28] audit: type=1400 audit(360.020:375): avc: denied { write } for pid=6040 comm="syz.2.605" name="subsystems" dev="configfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.150119][ T28] audit: type=1400 audit(360.040:376): avc: denied { write } for pid=6040 comm="syz.2.605" name="ports" dev="configfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.166081][ T28] audit: type=1400 audit(360.060:377): avc: denied { write } for pid=6040 comm="syz.2.605" name="addr_trtype" dev="configfs" ino=7045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 360.197020][ T28] audit: type=1400 audit(360.090:378): avc: denied { write } for pid=6040 comm="syz.2.605" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.197868][ T28] audit: type=1400 audit(360.090:379): avc: denied { write } for pid=6040 comm="syz.2.605" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.198056][ T6041] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 360.338837][ T28] audit: type=1400 audit(360.230:380): avc: denied { write } for pid=6042 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.359626][ T28] audit: type=1400 audit(360.250:381): avc: denied { read } for pid=6042 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.510048][ T28] audit: type=1400 audit(360.400:382): avc: denied { name_bind } for pid=6044 comm="syz.2.607" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 361.926467][ T28] audit: type=1326 audit(361.820:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.2.612" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 365.474897][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 365.475005][ T28] audit: type=1400 audit(365.360:392): avc: denied { write } for pid=6059 comm="syz.2.613" name="instances" dev="tracefs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 365.480774][ T28] audit: type=1400 audit(365.370:393): avc: denied { add_name } for pid=6059 comm="syz.2.613" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 365.482552][ T28] audit: type=1400 audit(365.370:394): avc: denied { create } for pid=6059 comm="syz.2.613" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 367.747831][ T28] audit: type=1400 audit(367.640:395): avc: denied { mount } for pid=6095 comm="syz.1.625" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 367.828371][ T28] audit: type=1400 audit(367.720:396): avc: denied { write } for pid=6095 comm="syz.1.625" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 367.828516][ T6097] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 367.828577][ T28] audit: type=1400 audit(367.720:397): avc: denied { write } for pid=6095 comm="syz.1.625" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 367.858702][ T28] audit: type=1400 audit(367.750:398): avc: denied { unmount } for pid=3114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 368.241121][ T6104] ./dev/sda1: Can't lookup blockdev [ 368.401331][ T28] audit: type=1400 audit(368.290:399): avc: denied { write } for pid=6107 comm="syz.1.630" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 368.401817][ T28] audit: type=1400 audit(368.290:400): avc: denied { write } for pid=6107 comm="syz.1.630" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 368.402202][ T6108] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 368.481066][ T28] audit: type=1326 audit(368.370:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.1.631" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 371.394567][ T6118] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 379.254822][ T6125] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 379.255215][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 379.255281][ T28] audit: type=1400 audit(379.380:409): avc: denied { write } for pid=6124 comm="syz.2.635" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.255336][ T28] audit: type=1400 audit(379.380:410): avc: denied { write } for pid=6124 comm="syz.2.635" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.356976][ T28] audit: type=1326 audit(379.482:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 379.358261][ T28] audit: type=1326 audit(379.482:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 379.359647][ T28] audit: type=1326 audit(379.482:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 379.365593][ T28] audit: type=1326 audit(379.492:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 379.366120][ T28] audit: type=1326 audit(379.482:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=337 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 379.372141][ T28] audit: type=1326 audit(379.492:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 379.372262][ T28] audit: type=1326 audit(379.492:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 379.375337][ T28] audit: type=1326 audit(379.502:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.2.636" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.262888][ T6143] FAULT_INJECTION: forcing a failure. [ 385.262888][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 385.263088][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.1.641 Tainted: G L syzkaller #0 PREEMPT [ 385.263151][ T6143] Tainted: [L]=SOFTLOCKUP [ 385.263168][ T6143] Hardware name: ARM-Versatile Express [ 385.263191][ T6143] Call trace: [ 385.263230][ T6143] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 385.263328][ T6143] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 385.263346][ T6143] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 385.263397][ T6143] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 385.263458][ T6143] r7:00000010 r6:00000000 r5:83993e80 r4:83316560 [ 385.263473][ T6143] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 385.263531][ T6143] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 385.263607][ T6143] r8:83993e80 r7:00000010 r6:81a048d8 r5:00000cc0 r4:83801240 [ 385.263624][ T6143] [<805809fc>] (should_failslab) from [<80560474>] (__kmalloc_cache_noprof+0x58/0x338) [ 385.263684][ T6143] [<8056041c>] (__kmalloc_cache_noprof) from [<81a048d8>] (ipv6_flowlabel_opt+0x190/0x868) [ 385.263764][ T6143] r10:865c2000 r9:00000020 r8:00000020 r7:865c2000 r6:87467a00 r5:00000000 [ 385.263788][ T6143] r4:84f9df80 [ 385.263807][ T6143] [<81a04748>] (ipv6_flowlabel_opt) from [<819de250>] (do_ipv6_setsockopt+0x714/0x1018) [ 385.263879][ T6143] r10:865c2000 r9:00000020 r8:819debb4 r7:00000000 r6:00000020 r5:84f9df80 [ 385.263899][ T6143] r4:84f9e380 [ 385.263914][ T6143] [<819ddb40>] (do_ipv6_setsockopt) from [<819debb4>] (ipv6_setsockopt+0x60/0xbc) [ 385.263977][ T6143] r10:00000126 r9:83993e80 r8:00000020 r7:84f9df80 r6:00000020 r5:84f9df80 [ 385.263995][ T6143] r4:00000020 [ 385.264019][ T6143] [<819deb58>] (ipv6_setsockopt) from [<819ea4f4>] (rawv6_setsockopt+0xf8/0x1dc) [ 385.264080][ T6143] r6:00000020 r5:00000029 r4:00000029 [ 385.264098][ T6143] [<819ea400>] (rawv6_setsockopt) from [<816a7a18>] (sock_common_setsockopt+0x38/0x40) [ 385.264167][ T6143] r7:83cac2c0 r6:00000020 r5:00000029 r4:819ea3fc [ 385.264184][ T6143] [<816a79e4>] (sock_common_setsockopt) from [<816a2de4>] (do_sock_setsockopt+0x70/0xc8) [ 385.264239][ T6143] r4:816a79e0 [ 385.264256][ T6143] [<816a2d74>] (do_sock_setsockopt) from [<816a6cd0>] (__sys_setsockopt+0x7c/0xc4) [ 385.264327][ T6143] r8:00000000 r7:83b1f700 r6:83b1f701 r5:00000020 r4:00000029 [ 385.264344][ T6143] [<816a6c54>] (__sys_setsockopt) from [<816a6d34>] (sys_setsockopt+0x1c/0x24) [ 385.264406][ T6143] r8:8020029c r7:00000126 r6:00356318 r5:00000000 r4:00000020 [ 385.264422][ T6143] [<816a6d18>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 385.264466][ T6143] Exception stack(0xdfb05fa8 to 0xdfb05ff0) [ 385.264502][ T6143] 5fa0: 00000020 00000000 00000003 00000029 00000020 20000000 [ 385.264537][ T6143] 5fc0: 00000020 00000000 00356318 00000126 003562d8 00000000 00000001 76f4c0dc [ 385.264568][ T6143] 5fe0: 76f4be88 76f4be78 0001903c 00130cf0 [ 385.384064][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 385.384164][ T28] audit: type=1326 audit(385.596:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.384236][ T28] audit: type=1326 audit(385.596:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.384298][ T28] audit: type=1326 audit(385.596:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.384796][ T28] audit: type=1326 audit(385.596:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.385278][ T28] audit: type=1326 audit(385.596:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.385908][ T28] audit: type=1326 audit(385.596:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.386314][ T28] audit: type=1326 audit(385.596:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.397789][ T28] audit: type=1326 audit(385.606:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.397880][ T28] audit: type=1326 audit(385.606:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.397910][ T28] audit: type=1326 audit(385.606:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 385.952408][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.961228][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.186346][ T6162] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 397.532992][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 397.533113][ T28] audit: type=1400 audit(397.841:465): avc: denied { watch } for pid=6167 comm="syz.2.649" path="/proc/283/fdinfo" dev="proc" ino=7873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 399.394433][ T28] audit: type=1400 audit(399.711:466): avc: denied { create } for pid=6176 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.686769][ T28] audit: type=1400 audit(405.021:467): avc: denied { mounton } for pid=6206 comm="syz.1.660" path="/proc/728/task" dev="proc" ino=8355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 404.909408][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 405.341277][ T6215] bond1: entered promiscuous mode [ 405.342472][ T6215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.353535][ T28] audit: type=1400 audit(405.694:468): avc: denied { create } for pid=6214 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.359626][ T28] audit: type=1400 audit(405.694:469): avc: denied { ioctl } for pid=6214 comm="syz.1.663" path="socket:[8370]" dev="sockfs" ino=8370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.364461][ T28] audit: type=1400 audit(405.704:470): avc: denied { bind } for pid=6214 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.382263][ T28] audit: type=1400 audit(405.724:471): avc: denied { write } for pid=6214 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 406.104402][ T6258] FAULT_INJECTION: forcing a failure. [ 406.104402][ T6258] name failslab, interval 1, probability 0, space 0, times 0 [ 406.104544][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.1.668 Tainted: G L syzkaller #0 PREEMPT [ 406.104603][ T6258] Tainted: [L]=SOFTLOCKUP [ 406.104619][ T6258] Hardware name: ARM-Versatile Express [ 406.104640][ T6258] Call trace: [ 406.104679][ T6258] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 406.104773][ T6258] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 406.104790][ T6258] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 406.104839][ T6258] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 406.104899][ T6258] r7:83993e80 r6:00000000 r5:83993e80 r4:83316560 [ 406.104913][ T6258] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 406.104968][ T6258] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 406.105037][ T6258] r8:00000000 r7:83993e80 r6:8052e0e8 r5:00000cc0 r4:83802d80 [ 406.105062][ T6258] [<805809fc>] (should_failslab) from [<8055e408>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 406.105118][ T6258] [<8055e3ac>] (kmem_cache_alloc_noprof) from [<8052e0e8>] (anon_vma_clone+0x148/0x4c4) [ 406.105189][ T6258] r10:86669e60 r9:834dc3d8 r8:85e20c24 r7:86669e60 r6:85e20c24 r5:85e20c00 [ 406.105209][ T6258] r4:86681a80 [ 406.105224][ T6258] [<8052dfa0>] (anon_vma_clone) from [<8053d394>] (__split_vma+0x188/0x85c) [ 406.105291][ T6258] r10:20000000 r9:20ff0fff r8:20ff1000 r7:dfd6de48 r6:8364de9c r5:86681a80 [ 406.105311][ T6258] r4:85e20c00 [ 406.105326][ T6258] [<8053d20c>] (__split_vma) from [<8053db14>] (vms_gather_munmap_vmas+0x74/0x4fc) [ 406.105389][ T6258] r10:dfd6dd04 r9:7f000000 r8:dfd6dd10 r7:00000000 r6:20ff1000 r5:dfd6dd40 [ 406.105410][ T6258] r4:dfd6de48 [ 406.105425][ T6258] [<8053daa0>] (vms_gather_munmap_vmas) from [<80540abc>] (do_vmi_align_munmap+0xfc/0x278) [ 406.105489][ T6258] r10:dfd6dd04 r9:7f000000 r8:00002000 r7:00000000 r6:20ff1000 r5:20ff2000 [ 406.105509][ T6258] r4:dfd6de48 [ 406.105524][ T6258] [<805409c0>] (do_vmi_align_munmap) from [<80540cb8>] (do_vmi_munmap+0x80/0xfc) [ 406.105586][ T6258] r10:85117c00 r9:dfd6de48 r8:20ff1000 r7:00000000 r6:dfd6de48 r5:85117c00 [ 406.105607][ T6258] r4:20ff2000 [ 406.105622][ T6258] [<80540c38>] (do_vmi_munmap) from [<80528d70>] (move_vma+0x380/0x8b8) [ 406.105683][ T6258] r8:20000000 r7:0000a6d6 r6:20ff1000 r5:00000000 r4:dfd6df38 [ 406.105701][ T6258] [<805289f0>] (move_vma) from [<80529358>] (mremap_to+0xb0/0x124) [ 406.105763][ T6258] r10:00000000 r9:20ff1000 r8:85117d10 r7:85117c00 r6:83993e80 r5:85117c00 [ 406.105783][ T6258] r4:dfd6df38 [ 406.105798][ T6258] [<805292a8>] (mremap_to) from [<80529700>] (sys_mremap+0x334/0x888) [ 406.105852][ T6258] r5:00000000 r4:00000003 [ 406.105866][ T6258] [<805293cc>] (sys_mremap) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 406.105909][ T6258] Exception stack(0xdfd6dfa8 to 0xdfd6dff0) [ 406.105945][ T6258] dfa0: 20ff6000 00000000 20ff1000 00003000 00001000 00000003 [ 406.105978][ T6258] dfc0: 20ff6000 00000000 00356318 000000a3 003562d8 00000000 00000001 76f4c0dc [ 406.106004][ T6258] dfe0: 76f4be88 76f4be78 0001903c 00130cf0 [ 406.106038][ T6258] r10:000000a3 r9:83993e80 r8:8020029c r7:000000a3 r6:00356318 r5:00000000 [ 406.106066][ T6258] r4:20ff6000 [ 410.647667][ T28] audit: type=1400 audit(411.008:472): avc: denied { map } for pid=6267 comm="syz.2.672" path="/dev/comedi0" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.648869][ T28] audit: type=1400 audit(411.008:473): avc: denied { execute } for pid=6267 comm="syz.2.672" path="/dev/comedi0" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.832993][ T6280] FAULT_INJECTION: forcing a failure. [ 419.832993][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 419.833151][ T6280] CPU: 0 UID: 0 PID: 6280 Comm: syz.2.677 Tainted: G L syzkaller #0 PREEMPT [ 419.833209][ T6280] Tainted: [L]=SOFTLOCKUP [ 419.833225][ T6280] Hardware name: ARM-Versatile Express [ 419.833246][ T6280] Call trace: [ 419.833286][ T6280] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 419.833378][ T6280] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 419.833396][ T6280] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 419.833447][ T6280] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 419.833514][ T6280] r7:8512b200 r6:00000000 r5:8512b200 r4:83316560 [ 419.833530][ T6280] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 419.833582][ T6280] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 419.833644][ T6280] r8:00000000 r7:8512b200 r6:8050fb58 r5:00000cc0 r4:838f03c0 [ 419.833661][ T6280] [<805809fc>] (should_failslab) from [<8055e408>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 419.833714][ T6280] [<8055e3ac>] (kmem_cache_alloc_noprof) from [<8050fb58>] (vm_area_alloc+0x24/0x64) [ 419.833777][ T6280] r10:df9adc70 r9:81c260b4 r8:8512b200 r7:86cfdf00 r6:85d363c0 r5:85117840 [ 419.833797][ T6280] r4:20ff4000 [ 419.833811][ T6280] [<8050fb34>] (vm_area_alloc) from [<8053fcf8>] (__mmap_region+0x5c0/0x1034) [ 419.833860][ T6280] r5:00000000 r4:20ff4000 [ 419.833874][ T6280] [<8053f738>] (__mmap_region) from [<80541fd8>] (mmap_region+0xa0/0x188) [ 419.833929][ T6280] r10:02000000 r9:df9adebc r8:85117840 r7:8512b200 r6:0000c000 r5:20ff4000 [ 419.833947][ T6280] r4:00000000 [ 419.833963][ T6280] [<80541f38>] (mmap_region) from [<805233c8>] (do_mmap+0x4d0/0x5e8) [ 419.834014][ T6280] r7:8512b200 r6:20ff4000 r5:00020031 r4:0000c000 [ 419.834029][ T6280] [<80522ef8>] (do_mmap) from [<804ebc38>] (vm_mmap_pgoff+0x128/0x20c) [ 419.834086][ T6280] r10:85117840 r9:20ff4000 r8:0000c000 r7:df9adf18 r6:00000000 r5:02000000 [ 419.834106][ T6280] r4:00000000 [ 419.834121][ T6280] [<804ebb10>] (vm_mmap_pgoff) from [<80522690>] (ksys_mmap_pgoff+0x48/0xec) [ 419.834180][ T6280] r10:000000c0 r9:8512b200 r8:8020029c r7:20ff4000 r6:0000c000 r5:02000000 [ 419.834201][ T6280] r4:00020031 [ 419.834215][ T6280] [<80522648>] (ksys_mmap_pgoff) from [<80522750>] (sys_mmap_pgoff+0x1c/0x24) [ 419.834354][ T6280] r8:8020029c r7:000000c0 r6:0035631c r5:b9ddd000 r4:ffffffff [ 419.834372][ T6280] [<80522734>] (sys_mmap_pgoff) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 419.834416][ T6280] Exception stack(0xdf9adfa8 to 0xdf9adff0) [ 419.834465][ T6280] dfa0: ffffffff b9ddd000 20ff4000 0000c000 02000000 00020031 [ 419.834499][ T6280] dfc0: ffffffff b9ddd000 0035631c 000000c0 003562d8 00000000 00000001 76fa90dc [ 419.834525][ T6280] dfe0: 76fa8e88 76fa8e78 0001903c 00130cf0 [ 419.944116][ T28] audit: type=1400 audit(420.314:474): avc: denied { create } for pid=6281 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 430.001995][ T28] audit: type=1400 audit(430.383:475): avc: denied { create } for pid=6298 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.676372][ T28] audit: type=1400 audit(433.055:476): avc: denied { write } for pid=6310 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 435.125456][ T28] audit: type=1400 audit(435.506:477): avc: denied { allowed } for pid=6320 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 435.464800][ T28] audit: type=1400 audit(435.847:478): avc: denied { map } for pid=6320 comm="syz.2.692" path="socket:[8025]" dev="sockfs" ino=8025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 435.552150][ T28] audit: type=1400 audit(435.937:479): avc: denied { cmd } for pid=6320 comm="iou-wrk-6322" path="socket:[8025]" dev="sockfs" ino=8025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 448.023791][ T4541] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 448.195698][ T4541] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.212399][ T4541] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.212499][ T4541] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 448.212546][ T4541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.218141][ T6347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 448.226628][ T4541] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.051419][ T4590] usb 2-1: USB disconnect, device number 8 [ 449.746999][ T28] audit: type=1400 audit(456.131:480): avc: denied { create } for pid=6375 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 449.756002][ T28] audit: type=1400 audit(456.141:481): avc: denied { bind } for pid=6375 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 450.379548][ T28] audit: type=1400 audit(456.761:482): avc: denied { bind } for pid=6388 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.393741][ T28] audit: type=1400 audit(456.781:483): avc: denied { setopt } for pid=6388 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.403423][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 453.598132][ T28] audit: type=1400 audit(459.981:484): avc: denied { write } for pid=6412 comm="syz.2.713" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 453.598262][ T6413] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 453.598315][ T28] audit: type=1400 audit(459.981:485): avc: denied { write } for pid=6412 comm="syz.2.713" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 469.886190][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.887549][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.203559][ T6471] FAULT_INJECTION: forcing a failure. [ 473.203559][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 473.203648][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.2.729 Tainted: G L syzkaller #0 PREEMPT [ 473.203681][ T6471] Tainted: [L]=SOFTLOCKUP [ 473.203689][ T6471] Hardware name: ARM-Versatile Express [ 473.203700][ T6471] Call trace: [ 473.203720][ T6471] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 473.203774][ T6471] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 473.203782][ T6471] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 473.203808][ T6471] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 473.203838][ T6471] r7:00000020 r6:00000000 r5:84925780 r4:83316560 [ 473.203846][ T6471] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 473.203873][ T6471] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 473.203908][ T6471] r8:84925780 r7:00000020 r6:805eb2d8 r5:00400dc0 r4:83802000 [ 473.203915][ T6471] [<805809fc>] (should_failslab) from [<80560474>] (__kmalloc_cache_noprof+0x58/0x338) [ 473.203941][ T6471] [<8056041c>] (__kmalloc_cache_noprof) from [<805eb2d8>] (alloc_vfsmnt+0x4c/0x218) [ 473.203975][ T6471] r10:83c07088 r9:8321e280 r8:00000005 r7:83900b00 r6:82551944 r5:86b38600 [ 473.203985][ T6471] r4:86b38b00 [ 473.203992][ T6471] [<805eb28c>] (alloc_vfsmnt) from [<805eb7a4>] (clone_mnt+0x20/0x228) [ 473.204018][ T6471] r7:83c07088 r6:00000005 r5:86b38600 r4:85d7c000 [ 473.204025][ T6471] [<805eb784>] (clone_mnt) from [<805f08b0>] (copy_tree+0x64/0x3c4) [ 473.204056][ T6471] r9:8321e280 r8:00000005 r7:86cf0480 r6:86b38600 r5:86b38600 r4:85d7c000 [ 473.204064][ T6471] [<805f084c>] (copy_tree) from [<805f36e8>] (copy_mnt_ns+0x17c/0x55c) [ 473.204101][ T6471] r10:00000000 r9:8321e280 r8:08020680 r7:86cf0480 r6:85e5cc00 r5:86b38600 [ 473.204110][ T6471] r4:85d7c000 [ 473.204117][ T6471] [<805f356c>] (copy_mnt_ns) from [<80285044>] (create_new_namespaces+0x64/0x454) [ 473.204152][ T6471] r10:83489728 r9:8321e280 r8:08020680 r7:00000000 r6:84925780 r5:86669960 [ 473.204161][ T6471] r4:08020680 [ 473.204168][ T6471] [<80284fe0>] (create_new_namespaces) from [<802858c8>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 473.204202][ T6471] r10:00000151 r9:84925780 r8:8020029c r7:8321e280 r6:dfb41f70 r5:86cf0480 [ 473.204211][ T6471] r4:08020680 [ 473.204218][ T6471] [<80285844>] (unshare_nsproxy_namespaces) from [<80250d80>] (ksys_unshare+0x1a8/0x3d4) [ 473.204252][ T6471] r7:86cf0480 r6:84925780 r5:00000000 r4:08020680 [ 473.204259][ T6471] [<80250bd8>] (ksys_unshare) from [<80250fbc>] (sys_unshare+0x10/0x14) [ 473.204289][ T6471] r7:00000151 r6:00356308 r5:00000000 r4:00000000 [ 473.204296][ T6471] [<80250fac>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 473.204318][ T6471] Exception stack(0xdfb41fa8 to 0xdfb41ff0) [ 473.204336][ T6471] 1fa0: 00000000 00000000 08020480 00000000 00000000 00000000 [ 473.204352][ T6471] 1fc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76fa90dc [ 473.204365][ T6471] 1fe0: 76fa8e88 76fa8e78 0001903c 00130cf0 [ 474.904543][ T28] audit: type=1400 audit(481.291:486): avc: denied { mount } for pid=6487 comm="syz.2.733" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 492.378844][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 492.571643][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.579762][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.693980][ T6526] netlink: 14 bytes leftover after parsing attributes in process `syz.2.745'. [ 495.852907][ T28] audit: type=1400 audit(508.231:487): avc: denied { create } for pid=6531 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 503.843084][ T4541] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 503.999092][ T4541] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 504.014383][ T4541] usb 2-1: config 0 interface 0 has no altsetting 0 [ 504.014518][ T4541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.027469][ T4541] usb 2-1: config 0 descriptor?? [ 504.501202][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.501427][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.501525][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.501617][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.501713][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.501812][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.501905][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.501998][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.502099][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.512897][ T4541] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 504.525090][ T4541] petalynx 0003:18B1:0037.0003: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 504.701370][ T4541] usb 2-1: USB disconnect, device number 9 [ 505.652991][ T4573] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 505.823275][ T4573] usb 2-1: Using ep0 maxpacket: 16 [ 505.826764][ T4573] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 505.837007][ T4573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.837159][ T4573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.841825][ T4573] usb 2-1: config 0 descriptor?? [ 505.863457][ T4573] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input3 [ 506.578298][ T6580] bcm5974 2-1:0.0: could not read from device [ 506.580097][ T4585] usb 2-1: USB disconnect, device number 10 [ 506.723500][ T6605] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.763007][ T6605] md: array md1 already has disks! [ 506.823968][ T6605] md: could not open device unknown-block(1,2). [ 506.824351][ T6605] md: error, md_import_device() returned -16 [ 506.963549][ T6607] FAULT_INJECTION: forcing a failure. [ 506.963549][ T6607] name failslab, interval 1, probability 0, space 0, times 0 [ 506.963958][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.1.757 Tainted: G L syzkaller #0 PREEMPT [ 506.964047][ T6607] Tainted: [L]=SOFTLOCKUP [ 506.964068][ T6607] Hardware name: ARM-Versatile Express [ 506.964092][ T6607] Call trace: [ 506.964165][ T6607] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 506.964275][ T6607] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 506.964294][ T6607] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 506.964371][ T6607] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 506.964437][ T6607] r7:0000001c r6:00000000 r5:85158c80 r4:83316560 [ 506.964456][ T6607] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 506.964523][ T6607] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 506.964595][ T6607] r8:85158c80 r7:0000001c r6:809645d8 r5:00000dc0 r4:83801240 [ 506.964616][ T6607] [<805809fc>] (should_failslab) from [<80560474>] (__kmalloc_cache_noprof+0x58/0x338) [ 506.964672][ T6607] [<8056041c>] (__kmalloc_cache_noprof) from [<809645d8>] (percpu_ref_init+0x68/0x108) [ 506.964744][ T6607] r10:85b66014 r9:00000040 r8:00000002 r7:802085ec r6:00000000 r5:85b66014 [ 506.964767][ T6607] r4:00000cc0 [ 506.964784][ T6607] [<80964570>] (percpu_ref_init) from [<8093468c>] (io_uring_setup+0x1fc/0x880) [ 506.964849][ T6607] r7:85b66100 r6:85b662c0 r5:85b66000 r4:85158c80 [ 506.964867][ T6607] [<80934490>] (io_uring_setup) from [<80934d58>] (sys_io_uring_setup+0x48/0x88) [ 506.964932][ T6607] r10:000001a9 r9:85158c80 r8:8020029c r7:000001a9 r6:00000020 r5:200000c0 [ 506.964951][ T6607] r4:8320b770 [ 506.964967][ T6607] [<80934d10>] (sys_io_uring_setup) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 506.965021][ T6607] Exception stack(0xdfc75fa8 to 0xdfc75ff0) [ 506.965058][ T6607] 5fa0: 68abe984 000a79e0 00000020 200000c0 00000000 00000000 [ 506.965094][ T6607] 5fc0: 68abe984 000a79e0 00000001 000001a9 00000000 00000000 00000001 76f4c0dc [ 506.965120][ T6607] 5fe0: 76f4be48 76f4be38 0001488c 00130cf0 [ 506.965150][ T6607] r7:000001a9 r6:00000001 r5:000a79e0 r4:68abe984 [ 507.737153][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 507.737326][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.762'. [ 507.737366][ T6619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.762'. [ 508.073106][ T4585] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 508.222963][ T4585] usb 2-1: Using ep0 maxpacket: 16 [ 508.225813][ T4585] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 508.231133][ T4585] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 508.231190][ T4585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 508.244292][ T4585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.244351][ T4585] usb 2-1: Product: syz [ 508.244365][ T4585] usb 2-1: Manufacturer: syz [ 508.244377][ T4585] usb 2-1: SerialNumber: syz [ 508.257275][ T4585] usb 2-1: config 0 descriptor?? [ 518.501784][ T3665] usb 2-1: USB disconnect, device number 11 [ 525.042631][ T28] audit: type=1400 audit(537.421:488): avc: denied { create } for pid=6650 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 525.673891][ T6656] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 526.207343][ T6664] vlan2: entered promiscuous mode [ 526.207462][ T6664] bond0: entered promiscuous mode [ 526.207496][ T6664] bond_slave_0: entered promiscuous mode [ 526.216715][ T6664] bond_slave_1: entered promiscuous mode [ 526.456110][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.457547][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.285572][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 533.214230][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.215866][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.554875][ T28] audit: type=1400 audit(545.931:489): avc: denied { create } for pid=6703 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 533.567305][ T28] audit: type=1400 audit(545.951:490): avc: denied { bind } for pid=6703 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 534.713345][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.717650][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.893749][ T28] audit: type=1400 audit(549.261:491): avc: denied { getopt } for pid=6734 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 537.193107][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.194842][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.588688][ T6744] syzkaller1: entered promiscuous mode [ 537.589024][ T6744] syzkaller1: entered allmulticast mode [ 537.617502][ T28] audit: type=1400 audit(550.001:492): avc: denied { lock } for pid=6743 comm="syz.2.806" path="socket:[9509]" dev="sockfs" ino=9509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 539.103073][ T28] audit: type=1400 audit(551.481:493): avc: denied { map } for pid=6759 comm="syz.1.810" path="/410/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 547.628569][ T28] audit: type=1400 audit(560.011:494): avc: denied { write } for pid=6795 comm="syz.2.821" name="subsystems" dev="configfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 547.640880][ T28] audit: type=1400 audit(560.021:495): avc: denied { write } for pid=6795 comm="syz.2.821" name="subsystems" dev="configfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 547.641057][ T28] audit: type=1400 audit(560.021:496): avc: denied { remove_name } for pid=6795 comm="syz.2.821" name="testnqn" dev="configfs" ino=9035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 547.641727][ T28] audit: type=1400 audit(560.021:497): avc: denied { rmdir } for pid=6795 comm="syz.2.821" name="testnqn" dev="configfs" ino=9035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 548.920195][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.925572][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.317782][ T6808] FAULT_INJECTION: forcing a failure. [ 549.317782][ T6808] name failslab, interval 1, probability 0, space 0, times 0 [ 549.317954][ T6808] CPU: 0 UID: 0 PID: 6808 Comm: syz.2.825 Tainted: G L syzkaller #0 PREEMPT [ 549.318022][ T6808] Tainted: [L]=SOFTLOCKUP [ 549.318041][ T6808] Hardware name: ARM-Versatile Express [ 549.318062][ T6808] Call trace: [ 549.318102][ T6808] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 549.318204][ T6808] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 549.318222][ T6808] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 549.318281][ T6808] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 549.318345][ T6808] r7:83994b00 r6:00000000 r5:83994b00 r4:83316560 [ 549.318362][ T6808] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 549.318453][ T6808] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 549.318522][ T6808] r8:00000000 r7:83994b00 r6:8039cac8 r5:00000dc0 r4:838fa780 [ 549.318541][ T6808] [<805809fc>] (should_failslab) from [<8055e408>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 549.318600][ T6808] [<8055e3ac>] (kmem_cache_alloc_noprof) from [<8039cac8>] (taskstats_exit+0x260/0x398) [ 549.318675][ T6808] r10:00000000 r9:00000001 r8:00000000 r7:850ef300 r6:850ef300 r5:834d0118 [ 549.318733][ T6808] r4:83994b00 [ 549.318748][ T6808] [<8039c868>] (taskstats_exit) from [<802589fc>] (do_exit+0x1c0/0xad0) [ 549.318822][ T6808] r10:86c2ca80 r9:00000001 r8:df971e98 r7:850ef300 r6:00000000 r5:00000000 [ 549.318843][ T6808] r4:83994b00 [ 549.318859][ T6808] [<8025883c>] (do_exit) from [<802594e0>] (do_group_exit+0x40/0x8c) [ 549.318911][ T6808] r7:00130cec [ 549.318927][ T6808] [<802594a0>] (do_group_exit) from [<8026a35c>] (get_signal+0xa68/0xa90) [ 549.318992][ T6808] r7:00130cec r4:83994b00 [ 549.319007][ T6808] [<802698f4>] (get_signal) from [<8022b784>] (do_work_pending+0x228/0x4fc) [ 549.319075][ T6808] r10:000000f0 r9:00130cf0 r8:fffffe00 r7:00130cec r6:00000001 r5:df971fb0 [ 549.319093][ T6808] r4:83994b00 [ 549.319107][ T6808] [<8022b55c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 549.319220][ T6808] Exception stack(0xdf971fb0 to 0xdf971ff8) [ 549.319258][ T6808] 1fa0: 003562e0 00000080 00000000 00000000 [ 549.319292][ T6808] 1fc0: 00132078 ffffffff 76fa97d4 000000f0 00340000 00000000 00000001 76fa90dc [ 549.319320][ T6808] 1fe0: 76fa8f38 76fa8f28 00021e2c 00130cec 60000010 003562e0 [ 549.319355][ T6808] r10:000000f0 r9:83994b00 r8:8020029c r7:000000f0 r6:76fa97d4 r5:ffffffff [ 549.319373][ T6808] r4:00132078 [ 553.288260][ T28] audit: type=1400 audit(565.671:498): avc: denied { connect } for pid=6816 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 560.207156][ T6835] FAULT_INJECTION: forcing a failure. [ 560.207156][ T6835] name fail_futex, interval 1, probability 0, space 0, times 1 [ 560.207242][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.1.833 Tainted: G L syzkaller #0 PREEMPT [ 560.207275][ T6835] Tainted: [L]=SOFTLOCKUP [ 560.207283][ T6835] Hardware name: ARM-Versatile Express [ 560.207295][ T6835] Call trace: [ 560.207316][ T6835] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 560.207369][ T6835] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 560.207377][ T6835] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 560.207404][ T6835] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 560.207434][ T6835] r7:df95ded8 r6:00000000 r5:841b3200 r4:832f6780 [ 560.207441][ T6835] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 560.207475][ T6835] [<80a30018>] (should_fail_ex) from [<80a30248>] (should_fail+0x14/0x18) [ 560.207505][ T6835] r8:00000000 r7:df95ded8 r6:00000004 r5:003562e4 r4:00000000 [ 560.207513][ T6835] [<80a30234>] (should_fail) from [<8035a90c>] (get_futex_key+0xa4/0x4a8) [ 560.207543][ T6835] [<8035a868>] (get_futex_key) from [<8035f4c8>] (futex_wake+0x70/0x25c) [ 560.207577][ T6835] r10:000000f0 r9:00132078 r8:df95dec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 560.207586][ T6835] r4:00000002 [ 560.207592][ T6835] [<8035f458>] (futex_wake) from [<8035bf58>] (do_futex+0x194/0x1d0) [ 560.207640][ T6835] r10:000000f0 r9:00000001 r8:841b3200 r7:000f4240 r6:003562e4 r5:00000081 [ 560.207663][ T6835] r4:000f4240 [ 560.207678][ T6835] [<8035bdc4>] (do_futex) from [<8035c82c>] (sys_futex_time32+0x11c/0x1bc) [ 560.207707][ T6835] r4:00000000 [ 560.207713][ T6835] [<8035c710>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 560.207736][ T6835] Exception stack(0xdf95dfa8 to 0xdf95dff0) [ 560.207756][ T6835] dfa0: 00132078 ffffffff 003562e4 00000081 000f4240 00000000 [ 560.207773][ T6835] dfc0: 00132078 ffffffff 76f4c7d4 000000f0 00340000 00000000 00000001 76f4c0dc [ 560.207786][ T6835] dfe0: 76f4bf38 76f4bf28 00021ed0 00130cf0 [ 560.207803][ T6835] r9:841b3200 r8:8020029c r7:000000f0 r6:76f4c7d4 r5:ffffffff r4:00132078 [ 561.614927][ T28] audit: type=1326 audit(574.001:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.615653][ T28] audit: type=1326 audit(574.001:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.620886][ T28] audit: type=1326 audit(574.001:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.628637][ T28] audit: type=1326 audit(574.011:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.629974][ T28] audit: type=1326 audit(574.011:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=367 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.631808][ T28] audit: type=1326 audit(574.011:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.633072][ T28] audit: type=1326 audit(574.011:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.641059][ T28] audit: type=1400 audit(574.021:506): avc: denied { audit_write } for pid=6842 comm="syz.2.837" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 561.645056][ T28] audit: type=1326 audit(574.031:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 561.645458][ T28] audit: type=1326 audit(574.031:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.2.837" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 570.715331][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 570.715452][ T28] audit: type=1400 audit(583.101:537): avc: denied { remount } for pid=6850 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 572.043397][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.843'. [ 572.085038][ T28] audit: type=1400 audit(584.471:538): avc: denied { execute_no_trans } for pid=6867 comm="syz.1.844" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 598.973196][ T3665] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 599.137688][ T3665] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 599.160374][ T3665] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.160518][ T3665] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 599.160570][ T3665] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.206011][ T3665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.206114][ T3665] usb 2-1: Product: syz [ 599.206142][ T3665] usb 2-1: Manufacturer: syz [ 599.206166][ T3665] usb 2-1: SerialNumber: syz [ 601.966738][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.968199][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.049809][ T28] audit: type=1326 audit(614.431:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.050222][ T28] audit: type=1326 audit(614.431:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.050281][ T28] audit: type=1326 audit(614.431:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.050624][ T28] audit: type=1326 audit(614.431:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.050676][ T28] audit: type=1326 audit(614.431:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.051024][ T28] audit: type=1326 audit(614.431:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.051450][ T28] audit: type=1326 audit(614.431:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.051508][ T28] audit: type=1326 audit(614.431:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.051923][ T28] audit: type=1326 audit(614.431:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 602.053141][ T28] audit: type=1326 audit(614.431:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 604.529889][ T6956] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 609.467150][ T4577] usb 2-1: USB disconnect, device number 12 [ 612.318311][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 612.318463][ T28] audit: type=1400 audit(624.701:556): avc: denied { write } for pid=6977 comm="syz.2.879" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 612.318944][ T6978] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 612.319296][ T28] audit: type=1400 audit(624.701:557): avc: denied { write } for pid=6977 comm="syz.2.879" name="subsystems" dev="configfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 616.408440][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 616.478573][ T6992] hsr_slave_1 (unregistering): left promiscuous mode [ 627.865236][ T28] audit: type=1400 audit(640.251:558): avc: denied { setopt } for pid=7028 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 638.627455][ T7056] FAULT_INJECTION: forcing a failure. [ 638.627455][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 638.627597][ T7056] CPU: 1 UID: 0 PID: 7056 Comm: syz.1.905 Tainted: G L syzkaller #0 PREEMPT [ 638.627654][ T7056] Tainted: [L]=SOFTLOCKUP [ 638.627670][ T7056] Hardware name: ARM-Versatile Express [ 638.627694][ T7056] Call trace: [ 638.627733][ T7056] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 638.627838][ T7056] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 638.627859][ T7056] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 638.627910][ T7056] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 638.627982][ T7056] r7:83bbb200 r6:00000000 r5:83bbb200 r4:83316560 [ 638.627998][ T7056] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 638.628055][ T7056] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 638.628122][ T7056] r8:00000000 r7:83bbb200 r6:8081519c r5:00000d40 r4:838f06c0 [ 638.628140][ T7056] [<805809fc>] (should_failslab) from [<8055e408>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 638.628195][ T7056] [<8055e3ac>] (kmem_cache_alloc_noprof) from [<8081519c>] (security_inode_alloc+0x30/0x1d0) [ 638.628262][ T7056] r10:86127ac0 r9:00000000 r8:00000000 r7:00000c40 r6:8402c800 r5:861279c0 [ 638.628282][ T7056] r4:861279c0 [ 638.628295][ T7056] [<8081516c>] (security_inode_alloc) from [<805e2388>] (inode_init_always_gfp+0x184/0x1d8) [ 638.628350][ T7056] r5:00000000 r4:861279c0 [ 638.628365][ T7056] [<805e2204>] (inode_init_always_gfp) from [<805e5db8>] (alloc_inode+0x40/0xd0) [ 638.628426][ T7056] r10:00000000 r9:0000000f r8:00000010 r7:00000002 r6:81e68d80 r5:8402c800 [ 638.628449][ T7056] r4:861279c0 r3:00000001 [ 638.628466][ T7056] [<805e5d78>] (alloc_inode) from [<816a287c>] (sock_alloc+0x20/0x78) [ 638.628539][ T7056] r7:00000002 r6:dfb61e00 r5:dfb61e38 r4:00000000 [ 638.628557][ T7056] [<816a285c>] (sock_alloc) from [<816a291c>] (sock_create_lite+0x48/0x90) [ 638.628615][ T7056] r5:dfb61e38 r4:00000000 [ 638.628631][ T7056] [<816a28d4>] (sock_create_lite) from [<817e00b0>] (__netlink_kernel_create+0x64/0x250) [ 638.628707][ T7056] r9:865c1080 r8:00000000 r7:865c1000 r6:8320f610 r5:dfb61e38 r4:0000000f [ 638.628727][ T7056] [<817e004c>] (__netlink_kernel_create) from [<81bc2f84>] (uevent_net_init+0x80/0x140) [ 638.628801][ T7056] r10:00000000 r9:865c1080 r8:dfb61ea0 r7:833e95a0 r6:865c1000 r5:00000000 [ 638.628821][ T7056] r4:87470d00 [ 638.628837][ T7056] [<81bc2f04>] (uevent_net_init) from [<816c7654>] (ops_init+0xb0/0x100) [ 638.628903][ T7056] r6:865c1000 r5:00000000 r4:83407d50 [ 638.628919][ T7056] [<816c75a4>] (ops_init) from [<816c7734>] (setup_net+0x90/0x170) [ 638.628995][ T7056] r9:865c1080 r8:dfb61ea0 r7:833e95a0 r6:833e95cc r5:865c1000 r4:83407d50 [ 638.629013][ T7056] [<816c76a4>] (setup_net) from [<816c9468>] (copy_net_ns+0x140/0x3a8) [ 638.629080][ T7056] r10:83489728 r9:8321e280 r8:865c1080 r7:8321fb20 r6:00000000 r5:8321e280 [ 638.629099][ T7056] r4:865c1000 [ 638.629115][ T7056] [<816c9328>] (copy_net_ns) from [<8028510c>] (create_new_namespaces+0x12c/0x454) [ 638.629186][ T7056] r9:8321e280 r8:4a000200 r7:00000000 r6:83bbb200 r5:86b8a460 r4:87079300 [ 638.629204][ T7056] [<80284fe0>] (create_new_namespaces) from [<802858c8>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 638.629273][ T7056] r10:00000151 r9:83bbb200 r8:8020029c r7:8321e280 r6:dfb61f70 r5:86abd100 [ 638.629296][ T7056] r4:4a000200 [ 638.629312][ T7056] [<80285844>] (unshare_nsproxy_namespaces) from [<80250d80>] (ksys_unshare+0x1a8/0x3d4) [ 638.629381][ T7056] r7:86abd100 r6:83bbb200 r5:00000000 r4:4a000200 [ 638.629397][ T7056] [<80250bd8>] (ksys_unshare) from [<80250fbc>] (sys_unshare+0x10/0x14) [ 638.629461][ T7056] r7:00000151 r6:00356308 r5:00000000 r4:00000000 [ 638.629479][ T7056] [<80250fac>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 638.629528][ T7056] Exception stack(0xdfb61fa8 to 0xdfb61ff0) [ 638.629564][ T7056] 1fa0: 00000000 00000000 4a000200 00000000 00000000 00000000 [ 638.629599][ T7056] 1fc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76f4c0dc [ 638.629626][ T7056] 1fe0: 76f4be88 76f4be78 0001903c 00130cf0 [ 638.629862][ T7056] kobject_uevent: unable to create netlink socket! [ 639.272987][ T4577] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 639.439450][ T4577] usb 2-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 639.449473][ T4577] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 639.449912][ T4577] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 639.450021][ T4577] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.450070][ T4577] usb 2-1: config 0 interface 0 has no altsetting 0 [ 639.450137][ T4577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.459212][ T4577] usb 2-1: config 0 descriptor?? [ 639.480388][ T7062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 639.945839][ T4577] hid_parser_main: 14 callbacks suppressed [ 639.945973][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946089][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946186][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946285][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946378][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946471][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946578][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946675][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946806][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.946897][ T4577] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 639.947145][ T4577] sony 0003:1430:474C.0004: unbalanced collection at end of report description [ 639.947585][ T4577] sony 0003:1430:474C.0004: parse failed [ 639.947717][ T4577] sony 0003:1430:474C.0004: probe with driver sony failed with error -22 [ 640.144147][ T4577] usb 2-1: USB disconnect, device number 13 [ 640.355492][ T28] audit: type=1400 audit(652.741:559): avc: denied { watch watch_reads } for pid=7079 comm="syz.1.909" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 643.454977][ T7089] device-mapper: table: 248:2: crypt: Device lookup failed (-EBUSY) [ 643.455358][ T7089] device-mapper: ioctl: error adding target to table [ 645.604450][ T28] audit: type=1400 audit(657.951:560): avc: denied { lock } for pid=7121 comm="syz.1.919" path="socket:[9870]" dev="sockfs" ino=9870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 648.414368][ T28] audit: type=1400 audit(660.801:561): avc: denied { shutdown } for pid=7157 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 656.526106][ T28] audit: type=1400 audit(668.911:562): avc: denied { write } for pid=7163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.765002][ T28] audit: type=1400 audit(669.151:563): avc: denied { write } for pid=7166 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.350190][ T7301] syz.1.930 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 666.834399][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 670.579840][ T7314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.936'. [ 670.796058][ T28] audit: type=1400 audit(683.181:564): avc: denied { create } for pid=7320 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 681.864037][ T4541] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 681.954451][ T7328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.959287][ T7328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.016958][ T4541] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 682.054309][ T4541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.054422][ T4541] usb 2-1: Product: syz [ 682.054456][ T4541] usb 2-1: Manufacturer: syz [ 682.054485][ T4541] usb 2-1: SerialNumber: syz [ 682.865544][ T7328] hsr_slave_0: entered promiscuous mode [ 682.866783][ T7328] hsr_slave_1: entered promiscuous mode [ 682.867481][ T7328] debugfs: 'hsr0' already exists in 'hsr' [ 682.867540][ T7328] Cannot create hsr debugfs directory [ 683.201076][ T7328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.208145][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.209752][ T7328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.220309][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.226472][ T7328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.229921][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.231691][ T7328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.239190][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.734118][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.266509][ T7328] veth0_vlan: entered promiscuous mode [ 686.291023][ T7328] veth1_vlan: entered promiscuous mode [ 686.378652][ T7328] veth0_macvtap: entered promiscuous mode [ 686.398643][ T7328] veth1_macvtap: entered promiscuous mode [ 686.497673][ T6327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.499343][ T6327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.499419][ T6327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.499485][ T6327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.594196][ T28] audit: type=1400 audit(698.981:565): avc: denied { unmount } for pid=7328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 686.748970][ T7667] device-mapper: ioctl: Unable to rename non-existent device, syzd1 to uuid syzd1 [ 687.569927][ T7695] FAULT_INJECTION: forcing a failure. [ 687.569927][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 687.570066][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.3.949 Tainted: G L syzkaller #0 PREEMPT [ 687.570128][ T7695] Tainted: [L]=SOFTLOCKUP [ 687.570146][ T7695] Hardware name: ARM-Versatile Express [ 687.570168][ T7695] Call trace: [ 687.570208][ T7695] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 687.570305][ T7695] r7:60000013 r6:60000013 r5:82336578 r4:00000000 [ 687.570322][ T7695] [<80201ae4>] (show_stack) from [<8021f420>] (dump_stack_lvl+0x5c/0x70) [ 687.570390][ T7695] [<8021f3c4>] (dump_stack_lvl) from [<8021f44c>] (dump_stack+0x18/0x1c) [ 687.570451][ T7695] r7:85a2f080 r6:00000000 r5:85a2f080 r4:83316560 [ 687.570467][ T7695] [<8021f434>] (dump_stack) from [<80a301d4>] (should_fail_ex+0x1bc/0x21c) [ 687.570522][ T7695] [<80a30018>] (should_fail_ex) from [<80580a68>] (should_failslab+0x6c/0x94) [ 687.570588][ T7695] r8:00000000 r7:85a2f080 r6:8028ab90 r5:00000dc0 r4:83802e40 [ 687.570604][ T7695] [<805809fc>] (should_failslab) from [<8055e408>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 687.570656][ T7695] [<8055e3ac>] (kmem_cache_alloc_noprof) from [<8028ab90>] (cred_alloc_blank+0x20/0x60) [ 687.570737][ T7695] r10:00000137 r9:85a2f080 r8:8020029c r7:00000137 r6:00356308 r5:840fc841 [ 687.570759][ T7695] r4:00000025 [ 687.570772][ T7695] [<8028ab70>] (cred_alloc_blank) from [<807ffe2c>] (keyctl_session_to_parent+0x2c/0x248) [ 687.570830][ T7695] r5:840fc841 r4:00000025 [ 687.570845][ T7695] [<807ffe00>] (keyctl_session_to_parent) from [<80800508>] (sys_keyctl+0xd0/0x2a4) [ 687.570906][ T7695] r7:00000137 r6:00356308 r5:00000000 r4:00000025 [ 687.570921][ T7695] [<80800438>] (sys_keyctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 687.570964][ T7695] Exception stack(0xea5f5fa8 to 0xea5f5ff0) [ 687.571002][ T7695] 5fa0: 00000000 00000000 00000012 00000000 00000000 00000000 [ 687.571037][ T7695] 5fc0: 00000000 00000000 00356308 00000137 003562d8 00000000 00000001 76fa80dc [ 687.571064][ T7695] 5fe0: 76fa7e88 76fa7e78 0001903c 00130cf0 [ 687.571090][ T7695] r5:00000000 r4:00000000 [ 691.650973][ T4573] usb 2-1: USB disconnect, device number 14 [ 692.494286][ T28] audit: type=1400 audit(704.881:566): avc: denied { setopt } for pid=7743 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 692.514830][ T28] audit: type=1400 audit(704.901:567): avc: denied { getopt } for pid=7743 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 696.267141][ T2197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.380952][ T2197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.475189][ T2197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.573453][ T2197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.285294][ T2197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.299081][ T2197] bond_slave_0: left promiscuous mode [ 697.329427][ T2197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.333356][ T2197] bond_slave_1: left promiscuous mode [ 697.334939][ T2197] bond0 (unregistering): Released all slaves [ 697.588217][ T2197] hsr_slave_0: left promiscuous mode [ 697.778209][ T2197] veth1_macvtap: left promiscuous mode [ 697.779346][ T2197] veth0_macvtap: left promiscuous mode [ 697.829468][ T2197] veth1_vlan: left promiscuous mode [ 697.829776][ T2197] veth0_vlan: left promiscuous mode [ 699.999482][ T28] audit: type=1400 audit(712.381:568): avc: denied { write } for pid=7785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.581793][ T28] audit: type=1400 audit(712.961:569): avc: denied { write } for pid=7798 comm="syz.3.971" name="namespaces" dev="configfs" ino=7692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 700.582198][ T7800] nvmet: adding nsid 1 to subsystem testsubsys [ 700.734659][ T28] audit: type=1400 audit(713.121:570): avc: denied { ioctl } for pid=7798 comm="syz.3.971" path="/19/config/nvmet/ports/1/addr_trtype" dev="configfs" ino=11168 ioctlcmd=0x81e8943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 701.060872][ T28] audit: type=1400 audit(713.441:571): avc: denied { write } for pid=7801 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.338902][ T6327] nvmet: connect request for invalid subsystem testsubsys! [ 701.341250][ T7800] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 701.558920][ T2968] 8021q: adding VLAN 0 to HW filter on device eth5 [ 702.816537][ T28] audit: type=1400 audit(715.201:572): avc: denied { write } for pid=7823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.163862][ T28] audit: type=1400 audit(715.551:573): avc: denied { write } for pid=7828 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.371068][ T2968] 8021q: adding VLAN 0 to HW filter on device eth6 [ 704.238749][ T28] audit: type=1400 audit(716.621:574): avc: denied { write } for pid=7832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.599878][ T28] audit: type=1400 audit(716.981:575): avc: denied { write } for pid=7836 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.702983][ T28] audit: type=1326 audit(717.081:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7839 comm="syz.3.979" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 704.703100][ T28] audit: type=1326 audit(717.081:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7839 comm="syz.3.979" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130cf0 code=0x7ffc0000 [ 704.859034][ T2968] 8021q: adding VLAN 0 to HW filter on device eth7 [ 705.731403][ T6327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.896246][ T6327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.001879][ T6327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.106589][ T6327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.253518][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 706.253586][ T28] audit: type=1400 audit(718.641:588): avc: denied { write } for pid=7847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.800019][ T28] audit: type=1400 audit(719.181:589): avc: denied { write } for pid=7864 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.876974][ T6327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.894315][ T6327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.916557][ T6327] bond0 (unregistering): Released all slaves [ 707.039760][ T6327] hsr_slave_0: left promiscuous mode [ 707.041940][ T6327] hsr_slave_1: left promiscuous mode [ 707.063191][ T6327] veth1_macvtap: left promiscuous mode [ 707.063338][ T6327] veth0_macvtap: left promiscuous mode [ 707.063424][ T6327] veth1_vlan: left promiscuous mode [ 707.063484][ T6327] veth0_vlan: left promiscuous mode [ 709.144626][ T2968] 8021q: adding VLAN 0 to HW filter on device eth8 [ 711.846827][ T28] audit: type=1400 audit(724.231:590): avc: denied { write } for pid=7975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.935079][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.954308][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.207354][ T28] audit: type=1400 audit(724.591:591): avc: denied { write } for pid=8014 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.296334][ T2968] 8021q: adding VLAN 0 to HW filter on device eth9 [ 713.286278][ T28] audit: type=1400 audit(725.671:592): avc: denied { write } for pid=8040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.476356][ T7846] hsr_slave_0: entered promiscuous mode [ 713.477746][ T7846] hsr_slave_1: entered promiscuous mode [ 713.488711][ T7846] debugfs: 'hsr0' already exists in 'hsr' [ 713.488822][ T7846] Cannot create hsr debugfs directory [ 713.663154][ T28] audit: type=1400 audit(726.041:593): avc: denied { write } for pid=8070 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.970727][ T2968] 8021q: adding VLAN 0 to HW filter on device eth10 [ 714.359689][ T7846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 714.378327][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.381113][ T7846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 714.396100][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.405892][ T7846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 714.414328][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.416954][ T7846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 714.428251][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.609642][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.692100][ T28] audit: type=1400 audit(728.071:594): avc: denied { write } for pid=8177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.133630][ T28] audit: type=1400 audit(728.521:595): avc: denied { write } for pid=8185 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.870315][ T28] audit: type=1400 audit(729.251:596): avc: denied { create } for pid=8180 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 717.401485][ T28] audit: type=1400 audit(729.781:597): avc: denied { write } for pid=8192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.084212][ T28] audit: type=1400 audit(730.471:598): avc: denied { write } for pid=8202 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.589735][ T28] audit: type=1400 audit(730.971:599): avc: denied { write } for pid=8208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.955389][ T28] audit: type=1400 audit(731.341:600): avc: denied { write } for pid=8213 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.388379][ T28] audit: type=1400 audit(731.771:601): avc: denied { write } for pid=8218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.539593][ T28] audit: type=1400 audit(731.921:602): avc: denied { write } for pid=8223 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.954250][ T28] audit: type=1400 audit(732.341:603): avc: denied { write } for pid=8226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.180634][ T28] audit: type=1400 audit(732.561:604): avc: denied { write } for pid=8232 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.557948][ T7846] veth0_vlan: entered promiscuous mode [ 720.599262][ T7846] veth1_vlan: entered promiscuous mode [ 720.679576][ T7846] veth0_macvtap: entered promiscuous mode [ 720.691953][ T7846] veth1_macvtap: entered promiscuous mode [ 720.793202][ T6327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.793530][ T6327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.793606][ T6327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.793675][ T6327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.347114][ T6327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.395796][ T6327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.518454][ T6327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.608291][ T6327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.974140][ T6327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.980484][ T6327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.987180][ T6327] bond0 (unregistering): Released all slaves [ 722.073488][ T6327] hsr_slave_0: left promiscuous mode [ 722.075667][ T6327] hsr_slave_1: left promiscuous mode [ 722.084162][ T6327] veth1_macvtap: left promiscuous mode [ 722.084305][ T6327] veth0_macvtap: left promiscuous mode [ 722.084426][ T6327] veth1_vlan: left promiscuous mode [ 722.084530][ T6327] veth0_vlan: left promiscuous mode [ 723.074453][ T28] audit: type=1400 audit(735.461:605): avc: denied { write } for pid=8264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.319188][ T28] audit: type=1400 audit(735.701:606): avc: denied { write } for pid=8269 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.529790][ T2968] 8021q: adding VLAN 0 to HW filter on device eth9 [ 723.882874][ T28] audit: type=1400 audit(736.261:607): avc: denied { write } for pid=8299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.216343][ T28] audit: type=1400 audit(736.601:608): avc: denied { write } for pid=8322 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.772804][ T28] audit: type=1400 audit(737.151:609): avc: denied { write } for pid=8376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.875117][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.878481][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.995014][ T28] audit: type=1400 audit(737.381:610): avc: denied { write } for pid=8412 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.298774][ T28] audit: type=1400 audit(737.681:611): avc: denied { write } for pid=8417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.598596][ T28] audit: type=1400 audit(737.981:612): avc: denied { write } for pid=8422 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.590056][ T8243] hsr_slave_0: entered promiscuous mode [ 726.591186][ T8243] hsr_slave_1: entered promiscuous mode [ 726.591793][ T8243] debugfs: 'hsr0' already exists in 'hsr' [ 726.591848][ T8243] Cannot create hsr debugfs directory [ 726.693442][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 726.695511][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 727.373382][ T4541] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 727.446181][ T28] audit: type=1400 audit(739.831:613): avc: denied { write } for pid=8470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.545612][ T4541] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 727.550901][ T4541] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.551002][ T4541] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 727.580837][ T4541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.580943][ T4541] usb 2-1: Product: syz [ 727.580974][ T4541] usb 2-1: Manufacturer: syz [ 727.581000][ T4541] usb 2-1: SerialNumber: syz [ 728.034839][ T28] audit: type=1400 audit(740.411:614): avc: denied { write } for pid=8523 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.158235][ T8243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.178473][ T8243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.188318][ T8243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 728.206732][ T8243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.215912][ T8243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 728.231702][ T8243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.241671][ T8243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 728.273440][ T8243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.308173][ T2968] 8021q: adding VLAN 0 to HW filter on device eth10 [ 728.943165][ T28] audit: type=1400 audit(741.321:615): avc: denied { write } for pid=8573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.477296][ T28] audit: type=1400 audit(741.861:616): avc: denied { write } for pid=8580 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.279388][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.031868][ T28] audit: type=1400 audit(743.411:617): avc: denied { write } for pid=8588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.247450][ T28] audit: type=1400 audit(743.631:618): avc: denied { write } for pid=8595 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.383990][ T2968] 8021q: adding VLAN 0 to HW filter on device eth11 [ 731.990992][ T28] audit: type=1400 audit(744.371:619): avc: denied { write } for pid=8604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.216454][ T28] audit: type=1400 audit(744.601:620): avc: denied { write } for pid=8610 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.337753][ T2968] 8021q: adding VLAN 0 to HW filter on device eth12 [ 734.128082][ T8243] veth0_vlan: entered promiscuous mode [ 734.145619][ T8243] veth1_vlan: entered promiscuous mode [ 734.206387][ T8243] veth0_macvtap: entered promiscuous mode [ 734.219650][ T8243] veth1_macvtap: entered promiscuous mode [ 734.295627][ T6327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.296052][ T6327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.296130][ T6327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.296195][ T6327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.844146][ T4541] usb 2-1: USB disconnect, device number 15 [ 739.234329][ T8671] ======================================================= [ 739.234329][ T8671] WARNING: The mand mount option has been deprecated and [ 739.234329][ T8671] and is ignored by this kernel. Remove the mand [ 739.234329][ T8671] option from the mount to silence this warning. [ 739.234329][ T8671] ======================================================= [ 739.235076][ T8671] ./dev/sda1: Can't lookup blockdev [ 739.613953][ T7005] hid-generic 0009:046D:C082.0005: hidraw0: HID v0.04 Device [syz0] on syz0 [ 740.952890][ T7005] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 741.102872][ T7005] usb 2-1: Using ep0 maxpacket: 16 [ 741.104798][ T7005] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 741.107591][ T7005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.107705][ T7005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.111275][ T7005] usb 2-1: config 0 descriptor?? [ 741.126025][ T7005] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 741.327973][ T7005] usb 2-1: USB disconnect, device number 16 [ 742.956587][ T28] audit: type=1400 audit(755.341:621): avc: denied { write } for pid=8708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.259892][ T28] audit: type=1400 audit(755.641:622): avc: denied { write } for pid=8711 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.008997][ T28] audit: type=1400 audit(756.391:623): avc: denied { write } for pid=8714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.424372][ T28] audit: type=1400 audit(756.811:624): avc: denied { write } for pid=8717 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.332057][ T28] audit: type=1400 audit(757.711:625): avc: denied { write } for pid=8720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.789885][ T28] audit: type=1400 audit(758.171:626): avc: denied { write } for pid=8723 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.249257][ T28] audit: type=1400 audit(758.631:627): avc: denied { write } for pid=8726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.389768][ T28] audit: type=1400 audit(758.771:628): avc: denied { write } for pid=8729 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.528892][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.530230][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.649528][ T28] audit: type=1400 audit(760.031:629): avc: denied { setopt } for pid=8736 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 749.696172][ T28] audit: type=1400 audit(762.071:630): avc: denied { ioctl } for pid=8746 comm="syz.1.1004" path="/506/md0" dev="tmpfs" ino=2639 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 749.733050][ T8747] md: array md1 already has disks! [ 749.773457][ T8747] md: could not open device unknown-block(1,3). [ 749.773633][ T8747] md: error, md_import_device() returned -16 [ 749.916660][ T8750] bridge_slave_0: entered promiscuous mode [ 750.629815][ T8760] 8<--- cut here --- [ 750.629892][ T8760] Unable to handle kernel paging request at virtual address fee04f24 when write [ 750.629948][ T8760] [fee04f24] *pgd=80000080007003, *pmd=00000000 [ 750.630611][ T8760] Internal error: Oops: a06 [#1] SMP ARM [ 750.633436][ T8760] Modules linked in: [ 750.634495][ T8760] CPU: 1 UID: 0 PID: 8760 Comm: syz.4.1009 Tainted: G L syzkaller #0 PREEMPT [ 750.635251][ T8760] Tainted: [L]=SOFTLOCKUP [ 750.635422][ T8760] Hardware name: ARM-Versatile Express [ 750.636050][ T8760] PC is at parport_attach+0x5c/0x1e8 [ 750.636574][ T8760] LR is at parport_attach+0x50/0x1e8 [ 750.636959][ T8760] pc : [<8150eb48>] lr : [<8150eb3c>] psr: 60000013 [ 750.637267][ T8760] sp : e0169d30 ip : e0169d30 fp : e0169d54 [ 750.637490][ T8760] r10: 83536930 r9 : 00000003 r8 : 85002300 [ 750.637822][ T8760] r7 : e0169d90 r6 : e0169d90 r5 : 85002300 r4 : 00000000 [ 750.638224][ T8760] r3 : fee04f24 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 750.638672][ T8760] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 750.639065][ T8760] Control: 30c5387d Table: 875529c0 DAC: 00000000 [ 750.639367][ T8760] Register r0 information: NULL pointer [ 750.640062][ T8760] Register r1 information: NULL pointer [ 750.640285][ T8760] Register r2 information: NULL pointer [ 750.640564][ T8760] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 750.641131][ T8760] Register r4 information: NULL pointer [ 750.641389][ T8760] Register r5 information: slab kmalloc-192 start 85002300 pointer offset 0 size 192 [ 750.642433][ T8760] Register r6 information: 2-page vmalloc region starting at 0xe0168000 allocated at kernel_clone+0xc4/0x440 [ 750.642996][ T8760] Register r7 information: 2-page vmalloc region starting at 0xe0168000 allocated at kernel_clone+0xc4/0x440 [ 750.643481][ T8760] Register r8 information: slab kmalloc-192 start 85002300 pointer offset 0 size 192 [ 750.643974][ T8760] Register r9 information: non-paged memory [ 750.644291][ T8760] Register r10 information: non-slab/vmalloc memory [ 750.644694][ T8760] Register r11 information: 2-page vmalloc region starting at 0xe0168000 allocated at kernel_clone+0xc4/0x440 [ 750.645243][ T8760] Register r12 information: 2-page vmalloc region starting at 0xe0168000 allocated at kernel_clone+0xc4/0x440 [ 750.645797][ T8760] Process syz.4.1009 (pid: 8760, stack limit = 0xe0168000) [ 750.646159][ T8760] Stack: (0xe0169d30 to 0xe016a000) [ 750.646419][ T8760] 9d20: ffffffff 00000004 833dc6f0 81e351a8 [ 750.646817][ T8760] 9d40: 00000000 e0169d90 e0169d8c e0169d58 8150a7d8 8150eaf8 40946400 00000000 [ 750.647154][ T8760] 9d60: e0169d7c 200005c0 85002300 b5403587 40946400 00000003 00000006 85a2d780 [ 750.647549][ T8760] 9d80: e0169e4c e0169d90 81505ff4 8150a6dc 656d6f63 705f6964 6f707261 00007472 [ 750.647923][ T8760] 9da0: 00000000 00004f24 00000014 00010000 000000ff 00000005 00000cc8 00000006 [ 750.648302][ T8760] 9dc0: 00000007 00000009 00000100 00000003 ffffffff 00000001 00000009 00000003 [ 750.648692][ T8760] 9de0: 00000002 00000000 00000007 00000003 40000003 00000003 00000006 00000004 [ 750.649038][ T8760] 9e00: 20001e58 00000003 00000001 0000007c 00000207 00000006 00000000 0000000b [ 750.649415][ T8760] 9e20: 00000000 3bb7c28b 00000000 85dcd600 85002300 200005c0 40946400 00000003 [ 750.649802][ T8760] 9e40: e0169f14 e0169e50 81507304 81505f34 8255ca54 84d4cb68 00000064 84c7a054 [ 750.650157][ T8760] 9e60: e0169ee4 e0169e70 80832fe4 80829344 00000064 85002330 00000000 e0169e90 [ 750.650529][ T8760] 9e80: 00000000 83b4f510 83cf13b8 40946400 0000000b 00000000 e0169e84 00000000 [ 750.650918][ T8760] 9ea0: 00000000 00000000 00000000 00000000 00000000 3bb7c28b 00000000 85dcd600 [ 750.651259][ T8760] 9ec0: 40946400 200005c0 200005c0 85dcd600 00000006 85a2d780 e0169ef4 e0169ee8 [ 750.651605][ T8760] 9ee0: 80833114 3bb7c28b e0169f14 00000000 85dcd601 40946400 200005c0 85dcd600 [ 750.651971][ T8760] 9f00: 00000006 85a2d780 e0169fa4 e0169f18 805d804c 81506fbc ecac8b10 85a2d780 [ 750.652391][ T8760] 9f20: e0169f3c e0169f30 81be804c 81be7f18 e0169f54 e0169f40 8025bb4c 80291178 [ 750.652838][ T8760] 9f40: e0169fb0 40000000 e0169f84 e0169f58 80221bfc 8025bb04 00000000 8321a04c [ 750.653180][ T8760] 9f60: e0169fb0 0013ee90 ecac8b10 80221b50 00000000 3bb7c28b e0169fac 00000000 [ 750.653564][ T8760] 9f80: 00000000 003563b0 00000036 8020029c 85a2d780 00000036 00000000 e0169fa8 [ 750.653916][ T8760] 9fa0: 80200060 805d7e14 00000000 00000000 00000006 40946400 200005c0 00000000 [ 750.654252][ T8760] 9fc0: 00000000 00000000 003563b0 00000036 00356378 00000000 00000001 76fad0dc [ 750.654612][ T8760] 9fe0: 76face88 76face78 0001903c 00130cf0 60000010 00000006 00000000 00000000 [ 750.655039][ T8760] Call trace: [ 750.655318][ T8760] [<8150eaec>] (parport_attach) from [<8150a7d8>] (comedi_device_attach+0x108/0x244) [ 750.655790][ T8760] r7:e0169d90 r6:00000000 r5:81e351a8 r4:833dc6f0 [ 750.656066][ T8760] [<8150a6d0>] (comedi_device_attach) from [<81505ff4>] (do_devconfig_ioctl+0xcc/0x218) [ 750.656494][ T8760] r10:85a2d780 r9:00000006 r8:00000003 r7:40946400 r6:b5403587 r5:85002300 [ 750.656851][ T8760] r4:200005c0 [ 750.656997][ T8760] [<81505f28>] (do_devconfig_ioctl) from [<81507304>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 750.657418][ T8760] r8:00000003 r7:40946400 r6:200005c0 r5:85002300 r4:85dcd600 [ 750.657755][ T8760] [<81506fb0>] (comedi_unlocked_ioctl) from [<805d804c>] (sys_ioctl+0x244/0xb5c) [ 750.658268][ T8760] r10:85a2d780 r9:00000006 r8:85dcd600 r7:200005c0 r6:40946400 r5:85dcd601 [ 750.658635][ T8760] r4:00000000 [ 750.658832][ T8760] [<805d7e08>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 750.659285][ T8760] Exception stack(0xe0169fa8 to 0xe0169ff0) [ 750.659654][ T8760] 9fa0: 00000000 00000000 00000006 40946400 200005c0 00000000 [ 750.660026][ T8760] 9fc0: 00000000 00000000 003563b0 00000036 00356378 00000000 00000001 76fad0dc [ 750.660411][ T8760] 9fe0: 76face88 76face78 0001903c 00130cf0 [ 750.660668][ T8760] r10:00000036 r9:85a2d780 r8:8020029c r7:00000036 r6:003563b0 r5:00000000 [ 750.660988][ T8760] r4:00000000 [ 750.661445][ T8760] Code: ebb49c4d e5953064 e7f33053 e2433612 (e5c34000) [ 750.663573][ T8760] ---[ end trace 0000000000000000 ]--- [ 750.725929][ T28] audit: type=1400 audit(763.091:631): avc: denied { read } for pid=2920 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 750.726076][ T28] audit: type=1400 audit(763.091:632): avc: denied { search } for pid=2920 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.726129][ T28] audit: type=1400 audit(763.101:633): avc: denied { write search } for pid=2920 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.737466][ T28] audit: type=1400 audit(763.111:634): avc: denied { add_name } for pid=2920 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.737642][ T28] audit: type=1400 audit(763.111:635): avc: denied { create } for pid=2920 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 750.737703][ T28] audit: type=1400 audit(763.111:636): avc: denied { append open } for pid=2920 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 750.754464][ T28] audit: type=1400 audit(763.111:637): avc: denied { getattr } for pid=2920 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 750.830181][ T8760] Kernel panic - not syncing: Fatal exception [ 750.833528][ T8760] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:56:48 Registers: info registers vcpu 0 CPU#0 R00=00000001 R01=7ea0f940 R02=7ed0e000 R03=00000001 R04=7ea0f920 R05=0002479c R06=00000000 R07=000b7473 R08=7ea0f940 R09=003562e4 R10=00000000 R11=7ea0f82c R12=7ea0f830 R13=7ea0f7e0 R14=001288a8 R15=7ed12c78 PSR=20000010 --C- A S usr32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=ffffffff R02=00000000 R03=60000193 R04=00000000 R05=85a2d780 R06=00000000 R07=00000000 R08=8231d8b8 R09=85a2d780 R10=00000000 R11=e0169ae4 R12=00000000 R13=e0169a60 R14=802ee060 R15=802ec4cc PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000