last executing test programs: 22.863944864s ago: executing program 0 (id=786): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014c"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 21.204136477s ago: executing program 1 (id=788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2c00, 0x0, 0x0) 20.372522643s ago: executing program 0 (id=789): syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl(r0, 0xc4c85513, 0x0) 19.620789479s ago: executing program 1 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0xc00000}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000003840)=""/154, 0x9a}, {&(0x7f0000000280)=""/151, 0x97}], 0x5}, 0x9}], 0x4, 0x0, 0x0) 17.642722774s ago: executing program 0 (id=791): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 16.8715723s ago: executing program 0 (id=792): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16.348864934s ago: executing program 1 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x14, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 15.743491879s ago: executing program 0 (id=794): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b7070000000002006a0102000000000007000000000000009500000000000000561cf53109c66825d874b16b2cba"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x0, [0x2, 0x1, 0x0, 0xa6e], 0x0}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) shmget(0x1, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.640704927s ago: executing program 1 (id=795): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 13.604340175s ago: executing program 1 (id=796): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) 8.197773127s ago: executing program 1 (id=797): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 0 (id=798): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "2286694c8c70714f", "b0b5c8408edfd16c7d4972b0abfd23f3", "301b3a81", "226ef139560d7c66"}, 0x28) writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000440)="b76617", 0x3}], 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): [ 218.044764][ T30] audit: type=1400 audit(217.600:79): avc: denied { write } for pid=3352 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.260028][ T30] audit: type=1400 audit(218.830:80): avc: denied { write } for pid=3357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.426198][ T30] audit: type=1400 audit(220.000:81): avc: denied { write } for pid=3363 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.432265][ T30] audit: type=1400 audit(222.000:82): avc: denied { write } for pid=3367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.993542][ T30] audit: type=1400 audit(223.570:83): avc: denied { write } for pid=3371 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:32907' (ED25519) to the list of known hosts. [ 262.781675][ T30] audit: type=1400 audit(262.350:84): avc: denied { name_bind } for pid=3377 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 263.395673][ T30] audit: type=1400 audit(262.970:85): avc: denied { execute } for pid=3378 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 263.405272][ T30] audit: type=1400 audit(262.980:86): avc: denied { execute_no_trans } for pid=3378 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 272.193187][ T30] audit: type=1400 audit(271.770:87): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 272.261820][ T30] audit: type=1400 audit(271.830:88): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.314535][ T3378] cgroup: Unknown subsys name 'net' [ 272.367307][ T30] audit: type=1400 audit(271.940:89): avc: denied { unmount } for pid=3378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.704643][ T3378] cgroup: Unknown subsys name 'cpuset' [ 272.751056][ T3378] cgroup: Unknown subsys name 'rlimit' [ 273.122247][ T30] audit: type=1400 audit(272.700:90): avc: denied { setattr } for pid=3378 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.128202][ T30] audit: type=1400 audit(272.700:91): avc: denied { mounton } for pid=3378 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 273.136580][ T30] audit: type=1400 audit(272.710:92): avc: denied { mount } for pid=3378 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 273.913639][ T3380] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 273.923602][ T30] audit: type=1400 audit(273.500:93): avc: denied { relabelto } for pid=3380 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 273.933108][ T30] audit: type=1400 audit(273.510:94): avc: denied { write } for pid=3380 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 274.073923][ T30] audit: type=1400 audit(273.640:95): avc: denied { read } for pid=3378 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 274.074871][ T30] audit: type=1400 audit(273.650:96): avc: denied { open } for pid=3378 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 274.108477][ T3378] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 291.264660][ T30] audit: type=1400 audit(290.840:97): avc: denied { execmem } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 291.385121][ T30] audit: type=1400 audit(290.960:98): avc: denied { read } for pid=3383 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 291.393722][ T30] audit: type=1400 audit(290.960:99): avc: denied { open } for pid=3383 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 291.439676][ T30] audit: type=1400 audit(291.010:100): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 291.527254][ T30] audit: type=1400 audit(291.100:101): avc: denied { module_request } for pid=3383 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 291.853579][ T30] audit: type=1400 audit(291.420:102): avc: denied { sys_module } for pid=3384 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 301.252195][ T3384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.413997][ T3384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.574724][ T3383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.747126][ T3383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.273384][ T3384] hsr_slave_0: entered promiscuous mode [ 305.284671][ T3384] hsr_slave_1: entered promiscuous mode [ 305.627803][ T3383] hsr_slave_0: entered promiscuous mode [ 305.637183][ T3383] hsr_slave_1: entered promiscuous mode [ 305.653752][ T3383] debugfs: 'hsr0' already exists in 'hsr' [ 305.656379][ T3383] Cannot create hsr debugfs directory [ 308.705426][ T30] audit: type=1400 audit(308.280:103): avc: denied { create } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.721070][ T30] audit: type=1400 audit(308.290:104): avc: denied { write } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.722118][ T30] audit: type=1400 audit(308.290:105): avc: denied { read } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.808053][ T3384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.965311][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.993729][ T3384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.074223][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.187299][ T3384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.240170][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.336680][ T3384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 309.367310][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.877342][ T3383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.934152][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.970493][ T3383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.013521][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.026021][ T3383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.062746][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.086840][ T3383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.151153][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.653230][ T3384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.940193][ T3383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.807267][ T3384] veth0_vlan: entered promiscuous mode [ 328.915121][ T3384] veth1_vlan: entered promiscuous mode [ 329.367365][ T3384] veth0_macvtap: entered promiscuous mode [ 329.423539][ T3384] veth1_macvtap: entered promiscuous mode [ 330.064056][ T1640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.080644][ T1653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.095801][ T1022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.122589][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.150704][ T3383] veth0_vlan: entered promiscuous mode [ 330.435671][ T3383] veth1_vlan: entered promiscuous mode [ 330.792162][ T30] audit: type=1400 audit(330.360:106): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.1j5HS2/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 330.805099][ T30] audit: type=1400 audit(330.380:107): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 330.865483][ T30] audit: type=1400 audit(330.440:108): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.1j5HS2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 330.897075][ T30] audit: type=1400 audit(330.470:109): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 330.936842][ T30] audit: type=1400 audit(330.510:110): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.1j5HS2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 330.965423][ T30] audit: type=1400 audit(330.540:111): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/syzkaller.1j5HS2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 331.029983][ T30] audit: type=1400 audit(330.600:112): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 331.057765][ T30] audit: type=1400 audit(330.630:113): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 331.085822][ T30] audit: type=1400 audit(330.660:114): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="gadgetfs" ino=4216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 331.222398][ T30] audit: type=1400 audit(330.800:115): avc: denied { mount } for pid=3384 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 331.658420][ T3383] veth0_macvtap: entered promiscuous mode [ 331.688061][ T3384] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 331.788130][ T3383] veth1_macvtap: entered promiscuous mode [ 332.820483][ T1017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.852460][ T1640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.855073][ T1640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.856940][ T1640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.817411][ T3536] FAULT_INJECTION: forcing a failure. [ 335.817411][ T3536] name failslab, interval 1, probability 0, space 0, times 1 [ 335.818468][ T3536] CPU: 0 UID: 0 PID: 3536 Comm: syz.1.3 Tainted: G W syzkaller #0 PREEMPT [ 335.818702][ T3536] Tainted: [W]=WARN [ 335.818766][ T3536] Hardware name: linux,dummy-virt (DT) [ 335.818916][ T3536] Call trace: [ 335.819144][ T3536] show_stack+0x18/0x24 (C) [ 335.819369][ T3536] dump_stack_lvl+0x7c/0xb0 [ 335.820129][ T3536] dump_stack+0x1c/0x28 [ 335.820717][ T3536] should_fail_ex+0x6b4/0x6c4 [ 335.820899][ T3536] should_failslab+0xbc/0x120 [ 335.821026][ T3536] __kmalloc_noprof+0x4dc/0x74c [ 335.821145][ T3536] iovec_from_user+0x50/0xf0 [ 335.821260][ T3536] __import_iovec+0x64/0x5c0 [ 335.821379][ T3536] import_iovec+0x3c/0x80 [ 335.821609][ T3536] vfs_writev+0x120/0x6e8 [ 335.821740][ T3536] do_pwritev+0x154/0x218 [ 335.821856][ T3536] __arm64_sys_pwritev2+0xb0/0x124 [ 335.821979][ T3536] invoke_syscall+0x74/0x240 [ 335.822097][ T3536] el0_svc_common.constprop.0+0xac/0x230 [ 335.822207][ T3536] do_el0_svc+0x40/0x58 [ 335.822318][ T3536] el0_svc+0x58/0x2a4 [ 335.822452][ T3536] el0t_64_sync_handler+0xa0/0xe4 [ 335.822573][ T3536] el0t_64_sync+0x198/0x19c [ 336.144329][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 336.145117][ T30] audit: type=1400 audit(335.710:123): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 336.767930][ T30] audit: type=1400 audit(336.340:124): avc: denied { read } for pid=3537 comm="syz.1.4" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.777398][ T30] audit: type=1400 audit(336.350:125): avc: denied { open } for pid=3537 comm="syz.1.4" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.808007][ T30] audit: type=1400 audit(336.380:126): avc: denied { ioctl } for pid=3537 comm="syz.1.4" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.824220][ T3538] binder: 3537:3538 ioctl c0306201 0 returned -14 [ 336.872040][ T3538] binder: 3537:3538 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 336.875400][ T3538] binder: 3538 RLIMIT_NICE not set [ 338.300434][ T30] audit: type=1400 audit(337.860:127): avc: denied { read write } for pid=3544 comm="syz.1.5" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.315724][ T30] audit: type=1400 audit(337.880:129): avc: denied { name_bind } for pid=3543 comm="syz.0.6" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 338.321530][ T30] audit: type=1400 audit(337.890:130): avc: denied { node_bind } for pid=3543 comm="syz.0.6" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 338.329996][ T30] audit: type=1400 audit(337.870:128): avc: denied { open } for pid=3544 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.338532][ T30] audit: type=1400 audit(337.910:131): avc: denied { ioctl } for pid=3544 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=704 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.384847][ T3546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.403810][ T3546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.360977][ T30] audit: type=1400 audit(338.930:132): avc: denied { name_bind } for pid=3549 comm="syz.0.8" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 339.806742][ T3552] binder: 3551:3552 ioctl c0306201 0 returned -14 [ 339.857193][ T3552] binder: 3551:3552 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 339.857930][ T3552] binder: 3552 RLIMIT_NICE not set [ 341.675504][ T30] audit: type=1400 audit(341.250:133): avc: denied { create } for pid=3558 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 342.860326][ T30] audit: type=1400 audit(342.420:134): avc: denied { read } for pid=3563 comm="syz.1.14" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 342.860990][ T30] audit: type=1400 audit(342.420:135): avc: denied { open } for pid=3563 comm="syz.1.14" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 342.911381][ T30] audit: type=1400 audit(342.460:136): avc: denied { ioctl } for pid=3563 comm="syz.1.14" path="/dev/dri/card1" dev="devtmpfs" ino=619 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 343.615298][ T30] audit: type=1400 audit(343.190:137): avc: denied { ioctl } for pid=3566 comm="syz.0.16" path="socket:[4310]" dev="sockfs" ino=4310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.935745][ T3572] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 344.716706][ T3575] binder: 3574:3575 ioctl c0306201 0 returned -14 [ 344.758309][ T3575] binder: 3574:3575 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 344.771722][ T3575] binder: 3575 RLIMIT_NICE not set [ 345.533180][ T3577] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 345.564159][ T30] audit: type=1400 audit(345.120:138): avc: denied { create } for pid=3576 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 345.565203][ T30] audit: type=1400 audit(345.130:139): avc: denied { ioctl } for pid=3576 comm="syz.0.19" path="socket:[4328]" dev="sockfs" ino=4328 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.203231][ T3579] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 347.996987][ T30] audit: type=1400 audit(347.570:140): avc: denied { map } for pid=3580 comm="syz.0.21" path="socket:[3855]" dev="sockfs" ino=3855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 349.420744][ T30] audit: type=1400 audit(348.990:141): avc: denied { prog_load } for pid=3585 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.444275][ T30] audit: type=1400 audit(349.020:142): avc: denied { bpf } for pid=3585 comm="syz.0.24" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.457003][ T30] audit: type=1400 audit(349.030:143): avc: denied { perfmon } for pid=3585 comm="syz.0.24" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.663948][ T30] audit: type=1400 audit(349.230:144): avc: denied { prog_run } for pid=3585 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.970731][ T30] audit: type=1400 audit(349.530:145): avc: denied { mmap_zero } for pid=3585 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 350.002652][ T30] audit: type=1400 audit(349.580:146): avc: denied { create } for pid=3585 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.036734][ T30] audit: type=1400 audit(349.610:147): avc: denied { setopt } for pid=3585 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.430021][ T3591] binder: 3590:3591 ioctl c0306201 0 returned -14 [ 351.491614][ T3591] binder: 3590:3591 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 351.492523][ T3591] binder: 3591 RLIMIT_NICE not set [ 354.514612][ T30] audit: type=1400 audit(354.090:148): avc: denied { create } for pid=3595 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.538719][ T30] audit: type=1400 audit(354.110:149): avc: denied { setopt } for pid=3595 comm="syz.0.29" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.567859][ T3597] xt_hashlimit: size too large, truncated to 1048576 [ 355.156966][ T30] audit: type=1400 audit(354.730:150): avc: denied { connect } for pid=3595 comm="syz.0.29" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.201667][ T30] audit: type=1400 audit(354.770:151): avc: denied { write } for pid=3595 comm="syz.0.29" laddr=fe80::13 lport=60 faddr=fe80::d fport=259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.652474][ T3596] syzkaller0: entered promiscuous mode [ 355.655509][ T3596] syzkaller0: entered allmulticast mode [ 355.765964][ T30] audit: type=1400 audit(355.340:152): avc: denied { setopt } for pid=3594 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.988506][ T30] audit: type=1400 audit(355.560:153): avc: denied { write } for pid=3594 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.172705][ T30] audit: type=1400 audit(359.750:154): avc: denied { allowed } for pid=3613 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 360.187284][ T30] audit: type=1400 audit(359.760:155): avc: denied { create } for pid=3613 comm="syz.0.33" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.203680][ T30] audit: type=1400 audit(359.780:156): avc: denied { map } for pid=3613 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.208069][ T30] audit: type=1400 audit(359.780:157): avc: denied { read write } for pid=3613 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.568220][ T3615] FAULT_INJECTION: forcing a failure. [ 360.568220][ T3615] name failslab, interval 1, probability 0, space 0, times 0 [ 360.601457][ T3615] CPU: 1 UID: 0 PID: 3615 Comm: syz.1.34 Tainted: G W syzkaller #0 PREEMPT [ 360.601738][ T3615] Tainted: [W]=WARN [ 360.601779][ T3615] Hardware name: linux,dummy-virt (DT) [ 360.601822][ T3615] Call trace: [ 360.601857][ T3615] show_stack+0x18/0x24 (C) [ 360.601982][ T3615] dump_stack_lvl+0x7c/0xb0 [ 360.602054][ T3615] dump_stack+0x1c/0x28 [ 360.602125][ T3615] should_fail_ex+0x6b4/0x6c4 [ 360.602206][ T3615] should_failslab+0xbc/0x120 [ 360.602284][ T3615] __kmalloc_cache_noprof+0x3ec/0x628 [ 360.602366][ T3615] io_uring_alloc_task_context+0x154/0x52c [ 360.602452][ T3615] __io_uring_add_tctx_node+0x384/0x4e0 [ 360.602541][ T3615] io_uring_setup+0x14d8/0x173c [ 360.602622][ T3615] __arm64_sys_io_uring_setup+0x94/0x1c0 [ 360.602697][ T3615] invoke_syscall+0x74/0x240 [ 360.602778][ T3615] el0_svc_common.constprop.0+0xac/0x230 [ 360.602852][ T3615] do_el0_svc+0x40/0x58 [ 360.602939][ T3615] el0_svc+0x58/0x2a4 [ 360.603026][ T3615] el0t_64_sync_handler+0xa0/0xe4 [ 360.603097][ T3615] el0t_64_sync+0x198/0x19c [ 366.360427][ T3630] binder: 3629:3630 ioctl c0306201 0 returned -14 [ 366.414085][ T3630] binder: 3629:3630 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 366.414542][ T3630] binder: 3630 RLIMIT_NICE not set [ 368.324309][ T30] audit: type=1400 audit(367.900:158): avc: denied { getopt } for pid=3632 comm="syz.0.42" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.264893][ T3643] process 'syz.0.45' launched './file0' with NULL argv: empty string added [ 373.431959][ T30] audit: type=1400 audit(372.820:159): avc: denied { execute } for pid=3637 comm="syz.0.45" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 373.471862][ T30] audit: type=1400 audit(372.850:160): avc: denied { execute_no_trans } for pid=3637 comm="syz.0.45" path="/22/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 382.114971][ T3647] binder: 3645:3647 ioctl c0306201 0 returned -14 [ 382.133191][ T3647] binder: 3645:3647 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 382.135243][ T3647] binder: 3647 RLIMIT_NICE not set [ 385.733246][ T3656] xt_hashlimit: size too large, truncated to 1048576 [ 386.080926][ T30] audit: type=1400 audit(385.650:161): avc: denied { write } for pid=3646 comm="syz.1.47" name="config" dev="proc" ino=4026532708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 388.120151][ T30] audit: type=1400 audit(387.690:162): avc: denied { read write } for pid=3660 comm="syz.0.51" name="vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 388.150088][ T30] audit: type=1400 audit(387.720:163): avc: denied { open } for pid=3660 comm="syz.0.51" path="/dev/vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 390.364702][ T3666] binder: 3665:3666 ioctl c0306201 0 returned -14 [ 390.412661][ T3666] binder: 3665:3666 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 390.413545][ T3666] binder: 3666 RLIMIT_NICE not set [ 393.684249][ T30] audit: type=1400 audit(393.260:164): avc: denied { write } for pid=3668 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 393.693829][ T3669] Zero length message leads to an empty skb [ 397.241757][ T3678] binder: 3677:3678 ioctl c0306201 0 returned -14 [ 397.255321][ T3678] binder: 3677:3678 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 397.257314][ T3678] binder: 3678 RLIMIT_NICE not set [ 400.912930][ T30] audit: type=1400 audit(400.490:165): avc: denied { bind } for pid=3685 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 412.760905][ T30] audit: type=1400 audit(412.330:166): avc: denied { create } for pid=3701 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.777656][ T30] audit: type=1400 audit(412.350:167): avc: denied { bind } for pid=3701 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.787968][ T30] audit: type=1400 audit(412.360:168): avc: denied { setopt } for pid=3701 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.796604][ T30] audit: type=1400 audit(412.370:169): avc: denied { accept } for pid=3701 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 412.803878][ T30] audit: type=1400 audit(412.380:170): avc: denied { write } for pid=3701 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 414.046199][ T3706] FAULT_INJECTION: forcing a failure. [ 414.046199][ T3706] name fail_futex, interval 1, probability 0, space 0, times 1 [ 414.052129][ T3706] CPU: 0 UID: 0 PID: 3706 Comm: syz.1.68 Tainted: G W syzkaller #0 PREEMPT [ 414.052337][ T3706] Tainted: [W]=WARN [ 414.052434][ T3706] Hardware name: linux,dummy-virt (DT) [ 414.052507][ T3706] Call trace: [ 414.052560][ T3706] show_stack+0x18/0x24 (C) [ 414.052731][ T3706] dump_stack_lvl+0x7c/0xb0 [ 414.052840][ T3706] dump_stack+0x1c/0x28 [ 414.052946][ T3706] should_fail_ex+0x6b4/0x6c4 [ 414.053065][ T3706] should_fail+0x14/0x34 [ 414.053175][ T3706] get_futex_key+0x3d0/0xf84 [ 414.053288][ T3706] futex_wake+0xc0/0x49c [ 414.053451][ T3706] do_futex+0x258/0x280 [ 414.053591][ T3706] mm_exit_exec_release+0x1b8/0x260 [ 414.053710][ T3706] do_exit+0x504/0x2158 [ 414.053816][ T3706] do_group_exit+0xa4/0x208 [ 414.053928][ T3706] get_signal+0x1b20/0x1f00 [ 414.054029][ T3706] arch_do_signal_or_restart+0x168/0x700 [ 414.054124][ T3706] exit_to_user_mode_loop+0x13c/0x1c8 [ 414.054217][ T3706] el0_svc+0x244/0x2a4 [ 414.054313][ T3706] el0t_64_sync_handler+0xa0/0xe4 [ 414.054409][ T3706] el0t_64_sync+0x198/0x19c [ 414.756550][ T3710] Injecting memory failure for pfn 0x62b0f at process virtual address 0x20f0f000 [ 414.993795][ T3710] Memory failure: 0x62b0f: unhandlable page. [ 414.998256][ T3710] Memory failure: 0x62b0f: recovery action for get hwpoison page: Ignored [ 416.401577][ T3720] binder: 3719:3720 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 419.200948][ T30] audit: type=1400 audit(418.770:171): avc: denied { mount } for pid=3725 comm="syz.0.76" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 419.377798][ T3726] syz.0.76 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 420.503564][ T30] audit: type=1400 audit(419.870:172): avc: denied { create } for pid=3717 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.537663][ T30] audit: type=1400 audit(419.990:173): avc: denied { map_create } for pid=3717 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.691393][ T840] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.212449][ T30] audit: type=1400 audit(421.760:174): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 423.225304][ T30] audit: type=1400 audit(422.790:175): avc: denied { create } for pid=3729 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.365381][ T30] audit: type=1400 audit(422.940:176): avc: denied { write } for pid=3729 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.417375][ T30] audit: type=1400 audit(422.990:177): avc: denied { nlmsg_write } for pid=3729 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.520813][ T30] audit: type=1400 audit(423.090:178): avc: denied { nlmsg_read } for pid=3729 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.542503][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 425.110651][ T3734] FAULT_INJECTION: forcing a failure. [ 425.110651][ T3734] name fail_futex, interval 1, probability 0, space 0, times 0 [ 425.114044][ T3734] CPU: 0 UID: 0 PID: 3734 Comm: syz.0.79 Tainted: G W syzkaller #0 PREEMPT [ 425.114173][ T3734] Tainted: [W]=WARN [ 425.114210][ T3734] Hardware name: linux,dummy-virt (DT) [ 425.114279][ T3734] Call trace: [ 425.114310][ T3734] show_stack+0x18/0x24 (C) [ 425.114410][ T3734] dump_stack_lvl+0x7c/0xb0 [ 425.114468][ T3734] dump_stack+0x1c/0x28 [ 425.114521][ T3734] should_fail_ex+0x6b4/0x6c4 [ 425.114582][ T3734] should_fail+0x14/0x34 [ 425.114635][ T3734] get_futex_key+0x198/0xf84 [ 425.114689][ T3734] futex_wait_requeue_pi+0x198/0x620 [ 425.114743][ T3734] do_futex+0x1cc/0x280 [ 425.114838][ T3734] __arm64_sys_futex+0x1e8/0x310 [ 425.114899][ T3734] invoke_syscall+0x74/0x240 [ 425.114955][ T3734] el0_svc_common.constprop.0+0xac/0x230 [ 425.115010][ T3734] do_el0_svc+0x40/0x58 [ 425.115062][ T3734] el0_svc+0x58/0x2a4 [ 425.115119][ T3734] el0t_64_sync_handler+0xa0/0xe4 [ 425.115171][ T3734] el0t_64_sync+0x198/0x19c [ 427.498500][ T30] audit: type=1400 audit(427.070:179): avc: denied { ioctl } for pid=3737 comm="syz.0.81" path="socket:[4600]" dev="sockfs" ino=4600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 427.531958][ T30] audit: type=1400 audit(427.090:180): avc: denied { bind } for pid=3737 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.612813][ T30] audit: type=1400 audit(427.150:181): avc: denied { write } for pid=3737 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.745355][ T3740] ip_tables: iptables: counters copy to user failed while replacing table [ 428.433749][ T30] audit: type=1400 audit(427.990:182): avc: denied { mount } for pid=3743 comm="syz.1.84" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 428.481583][ T30] audit: type=1400 audit(428.050:183): avc: denied { search } for pid=3743 comm="syz.1.84" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 428.486799][ T30] audit: type=1400 audit(428.060:184): avc: denied { search } for pid=3743 comm="syz.1.84" name="events" dev="tracefs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 428.536673][ T30] audit: type=1400 audit(428.110:185): avc: denied { search } for pid=3743 comm="syz.1.84" name="sched" dev="tracefs" ino=4607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 428.543630][ T30] audit: type=1400 audit(428.120:186): avc: denied { search } for pid=3743 comm="syz.1.84" name="sched_switch" dev="tracefs" ino=4609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 428.613125][ T30] audit: type=1400 audit(428.190:187): avc: denied { write } for pid=3743 comm="syz.1.84" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 428.624723][ T30] audit: type=1400 audit(428.200:188): avc: denied { open } for pid=3743 comm="syz.1.84" path="/36/trace/events/sched/sched_switch/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 435.600008][ T3770] netlink: 'syz.0.92': attribute type 5 has an invalid length. [ 443.304305][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 443.304781][ T30] audit: type=1400 audit(442.880:192): avc: denied { map_read map_write } for pid=3780 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.315968][ T30] audit: type=1400 audit(446.880:193): avc: denied { read write } for pid=3802 comm="syz.1.108" name="mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 447.330504][ T30] audit: type=1400 audit(446.900:194): avc: denied { open } for pid=3802 comm="syz.1.108" path="/dev/input/mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 449.020798][ T30] audit: type=1400 audit(448.560:195): avc: denied { write } for pid=3809 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.006133][ T30] audit: type=1400 audit(450.580:196): avc: denied { bind } for pid=3814 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 451.012134][ T30] audit: type=1400 audit(450.580:197): avc: denied { node_bind } for pid=3814 comm="syz.1.113" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 451.976674][ T30] audit: type=1400 audit(451.450:198): avc: denied { create } for pid=3807 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 452.029659][ T30] audit: type=1400 audit(451.480:199): avc: denied { ioctl } for pid=3807 comm="syz.0.110" path="socket:[5398]" dev="sockfs" ino=5398 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 453.977712][ T3818] vxlan: RTM_NEWNEIGH with invalid state 0x4 [ 455.336023][ T3822] FAULT_INJECTION: forcing a failure. [ 455.336023][ T3822] name failslab, interval 1, probability 0, space 0, times 0 [ 455.343210][ T3822] CPU: 0 UID: 0 PID: 3822 Comm: syz.1.116 Tainted: G W syzkaller #0 PREEMPT [ 455.343450][ T3822] Tainted: [W]=WARN [ 455.343497][ T3822] Hardware name: linux,dummy-virt (DT) [ 455.343548][ T3822] Call trace: [ 455.343592][ T3822] show_stack+0x18/0x24 (C) [ 455.343741][ T3822] dump_stack_lvl+0x7c/0xb0 [ 455.343834][ T3822] dump_stack+0x1c/0x28 [ 455.343921][ T3822] should_fail_ex+0x6b4/0x6c4 [ 455.344025][ T3822] should_failslab+0xbc/0x120 [ 455.344120][ T3822] __kvmalloc_node_noprof+0x61c/0x8b8 [ 455.344215][ T3822] bpf_check_cfg+0xe0/0x8e0 [ 455.344313][ T3822] bpf_check+0x4a40/0x7698 [ 455.344472][ T3822] bpf_prog_load+0x1098/0x1fb0 [ 455.344570][ T3822] __sys_bpf+0xadc/0x2c70 [ 455.344661][ T3822] __arm64_sys_bpf+0xb0/0x10c [ 455.344751][ T3822] invoke_syscall+0x74/0x240 [ 455.344841][ T3822] el0_svc_common.constprop.0+0xac/0x230 [ 455.344932][ T3822] do_el0_svc+0x40/0x58 [ 455.345020][ T3822] el0_svc+0x58/0x2a4 [ 455.345114][ T3822] el0t_64_sync_handler+0xa0/0xe4 [ 455.345201][ T3822] el0t_64_sync+0x198/0x19c [ 461.458321][ T30] audit: type=1400 audit(461.030:200): avc: denied { ioctl } for pid=3839 comm="syz.0.125" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5462 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.610696][ T30] audit: type=1400 audit(462.180:201): avc: denied { mounton } for pid=3842 comm="syz.0.126" path="/60/proc/145/task/146/fail-nth" dev="proc" ino=4731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 462.633962][ T3844] FAULT_INJECTION: forcing a failure. [ 462.633962][ T3844] name failslab, interval 1, probability 0, space 0, times 0 [ 462.637535][ T3844] CPU: 0 UID: 0 PID: 3844 Comm: syz.0.126 Tainted: G W syzkaller #0 PREEMPT [ 462.637723][ T3844] Tainted: [W]=WARN [ 462.637818][ T3844] Hardware name: linux,dummy-virt (DT) [ 462.637882][ T3844] Call trace: [ 462.637943][ T3844] show_stack+0x18/0x24 (C) [ 462.638105][ T3844] dump_stack_lvl+0x7c/0xb0 [ 462.638211][ T3844] dump_stack+0x1c/0x28 [ 462.638312][ T3844] should_fail_ex+0x6b4/0x6c4 [ 462.638428][ T3844] should_failslab+0xbc/0x120 [ 462.638540][ T3844] __kmalloc_cache_noprof+0x3ec/0x628 [ 462.638675][ T3844] shrinker_alloc+0xb8/0x8a0 [ 462.638792][ T3844] sget_fc+0x6f4/0x16c4 [ 462.638904][ T3844] get_tree_nodev+0x2c/0x148 [ 462.639069][ T3844] pseudo_fs_get_tree+0x18/0x24 [ 462.639190][ T3844] vfs_get_tree+0x74/0x280 [ 462.639300][ T3844] fc_mount+0x18/0x19c [ 462.639415][ T3844] path_mount+0x6d8/0x1830 [ 462.639518][ T3844] __arm64_sys_mount+0x318/0x3dc [ 462.639615][ T3844] invoke_syscall+0x74/0x240 [ 462.639719][ T3844] el0_svc_common.constprop.0+0xac/0x230 [ 462.639820][ T3844] do_el0_svc+0x40/0x58 [ 462.639918][ T3844] el0_svc+0x58/0x2a4 [ 462.640045][ T3844] el0t_64_sync_handler+0xa0/0xe4 [ 462.640144][ T3844] el0t_64_sync+0x198/0x19c [ 467.311113][ T30] audit: type=1400 audit(466.860:202): avc: denied { read write } for pid=3859 comm="syz.0.134" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 467.355700][ T30] audit: type=1400 audit(466.920:203): avc: denied { open } for pid=3859 comm="syz.0.134" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 467.475311][ T30] audit: type=1400 audit(467.040:204): avc: denied { create } for pid=3859 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 468.396215][ T30] audit: type=1400 audit(467.960:205): avc: denied { name_bind } for pid=3859 comm="syz.0.134" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 468.793825][ T3862] dvmrp8: entered allmulticast mode [ 482.371143][ T3876] netlink: 276 bytes leftover after parsing attributes in process `syz.0.138'. [ 482.387655][ T3876] netlink: 276 bytes leftover after parsing attributes in process `syz.0.138'. [ 493.752987][ T30] audit: type=1400 audit(493.320:206): avc: denied { setopt } for pid=3882 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 494.781102][ T30] audit: type=1400 audit(494.360:207): avc: denied { setopt } for pid=3886 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 494.834012][ T30] audit: type=1400 audit(494.410:208): avc: denied { getopt } for pid=3886 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 509.901780][ T30] audit: type=1400 audit(509.460:209): avc: denied { read } for pid=3912 comm="syz.0.147" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 509.905534][ T30] audit: type=1400 audit(509.480:210): avc: denied { open } for pid=3912 comm="syz.0.147" path="/dev/mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 509.918568][ T30] audit: type=1400 audit(509.490:211): avc: denied { ioctl } for pid=3912 comm="syz.0.147" path="/dev/mtd0" dev="devtmpfs" ino=683 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 511.161244][ T30] audit: type=1400 audit(510.730:212): avc: denied { set_context_mgr } for pid=3916 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 511.173759][ T3917] FAULT_INJECTION: forcing a failure. [ 511.173759][ T3917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 511.176594][ T3917] CPU: 0 UID: 0 PID: 3917 Comm: syz.0.149 Tainted: G W syzkaller #0 PREEMPT [ 511.176771][ T3917] Tainted: [W]=WARN [ 511.176830][ T3917] Hardware name: linux,dummy-virt (DT) [ 511.176914][ T3917] Call trace: [ 511.176978][ T3917] show_stack+0x18/0x24 (C) [ 511.177164][ T3917] dump_stack_lvl+0x7c/0xb0 [ 511.177283][ T3917] dump_stack+0x1c/0x28 [ 511.177406][ T3917] should_fail_ex+0x6b4/0x6c4 [ 511.177533][ T3917] should_fail+0x14/0x34 [ 511.177655][ T3917] get_futex_key+0x198/0xf84 [ 511.177774][ T3917] futex_wait_setup+0x64/0x55c [ 511.177901][ T3917] __futex_wait+0x138/0x218 [ 511.178020][ T3917] futex_wait+0xe4/0x2ac [ 511.178138][ T3917] do_futex+0x1e8/0x280 [ 511.178255][ T3917] __arm64_sys_futex+0x1e8/0x310 [ 511.178373][ T3917] invoke_syscall+0x74/0x240 [ 511.178502][ T3917] el0_svc_common.constprop.0+0xac/0x230 [ 511.178625][ T3917] do_el0_svc+0x40/0x58 [ 511.178816][ T3917] el0_svc+0x58/0x2a4 [ 511.178966][ T3917] el0t_64_sync_handler+0xa0/0xe4 [ 511.179088][ T3917] el0t_64_sync+0x198/0x19c [ 511.252776][ T30] audit: type=1400 audit(510.830:213): avc: denied { map } for pid=3916 comm="syz.0.149" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 511.290376][ T3917] binder: 3916:3917 tried to acquire reference to desc 0, got 1 instead [ 511.302906][ T3917] binder: 3916:3917 ioctl c0306201 0 returned -14 [ 514.440228][ T30] audit: type=1400 audit(514.010:214): avc: denied { mount } for pid=3906 comm="syz.1.145" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 514.448436][ T30] audit: type=1400 audit(514.020:215): avc: denied { search } for pid=3906 comm="syz.1.145" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 514.471718][ T30] audit: type=1400 audit(514.020:216): avc: denied { search } for pid=3906 comm="syz.1.145" name="usb_gadget" dev="configfs" ino=2370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 516.397721][ T30] audit: type=1400 audit(515.970:217): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 516.445678][ T30] audit: type=1400 audit(516.020:218): avc: denied { create } for pid=3923 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 516.471853][ T30] audit: type=1400 audit(516.040:219): avc: denied { bind } for pid=3923 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 516.483221][ T30] audit: type=1400 audit(516.060:220): avc: denied { name_bind } for pid=3923 comm="syz.0.152" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 516.491705][ T30] audit: type=1400 audit(516.070:221): avc: denied { node_bind } for pid=3923 comm="syz.0.152" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 524.931532][ T30] audit: type=1400 audit(524.500:222): avc: denied { write } for pid=3953 comm="syz.1.165" name="event0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 524.955340][ T30] audit: type=1400 audit(524.520:223): avc: denied { open } for pid=3953 comm="syz.1.165" path="/dev/input/event0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 525.121906][ T30] audit: type=1400 audit(524.690:224): avc: denied { ioctl } for pid=3953 comm="syz.1.165" path="/dev/input/event0" dev="devtmpfs" ino=750 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 525.788408][ T3957] binder: 3956:3957 ioctl c0306201 0 returned -14 [ 525.817178][ T3957] binder: 3956:3957 ioctl c0306201 0 returned -14 [ 532.361480][ T1653] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.362352][ T1653] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.363050][ T1653] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.512314][ T3905] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.941238][ C1] TC_ACT_REPEAT abuse ? [ 533.572211][ C1] TC_ACT_REPEAT abuse ? [ 533.592583][ C1] TC_ACT_REPEAT abuse ? [ 533.875113][ C1] TC_ACT_REPEAT abuse ? [ 535.246756][ T30] audit: type=1400 audit(534.810:225): avc: denied { read } for pid=3965 comm="syz.1.170" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 535.252207][ T30] audit: type=1400 audit(534.820:226): avc: denied { open } for pid=3965 comm="syz.1.170" path="/dev/fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 536.284152][ T3968] FAULT_INJECTION: forcing a failure. [ 536.284152][ T3968] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 536.284782][ T3968] CPU: 0 UID: 0 PID: 3968 Comm: syz.0.171 Tainted: G W syzkaller #0 PREEMPT [ 536.284910][ T3968] Tainted: [W]=WARN [ 536.284941][ T3968] Hardware name: linux,dummy-virt (DT) [ 536.285012][ T3968] Call trace: [ 536.285069][ T3968] show_stack+0x18/0x24 (C) [ 536.285166][ T3968] dump_stack_lvl+0x7c/0xb0 [ 536.285249][ T3968] dump_stack+0x1c/0x28 [ 536.285387][ T3968] should_fail_ex+0x6b4/0x6c4 [ 536.285478][ T3968] should_fail_alloc_page+0x70/0xc0 [ 536.285540][ T3968] prepare_alloc_pages+0x1cc/0x578 [ 536.285596][ T3968] __alloc_frozen_pages_noprof+0x1a4/0x3498 [ 536.285703][ T3968] alloc_pages_mpol+0xf8/0x41c [ 536.285786][ T3968] folio_alloc_mpol_noprof+0x18/0x18c [ 536.285844][ T3968] shmem_alloc_folio+0x160/0x1cc [ 536.285907][ T3968] shmem_alloc_and_add_folio+0x210/0xdac [ 536.285978][ T3968] shmem_get_folio_gfp+0x204/0x1174 [ 536.286034][ T3968] shmem_fault+0x1a8/0x7c0 [ 536.286442][ T3968] __do_fault+0xc8/0x3d8 [ 536.287173][ T3968] do_fault+0x6cc/0xe28 [ 536.287316][ T3968] __handle_mm_fault+0x7c8/0x1b60 [ 536.287626][ T3968] handle_mm_fault+0x1e8/0x8ac [ 536.287742][ T3968] __get_user_pages+0x320/0x1400 [ 536.287886][ T3968] populate_vma_page_range+0x198/0x2a4 [ 536.287980][ T3968] __mm_populate+0x164/0x2cc [ 536.288075][ T3968] do_mlock+0x288/0x580 [ 536.288187][ T3968] __arm64_sys_mlock+0xb8/0x110 [ 536.288248][ T3968] invoke_syscall+0x74/0x240 [ 536.288308][ T3968] el0_svc_common.constprop.0+0xac/0x230 [ 536.288364][ T3968] do_el0_svc+0x40/0x58 [ 536.288479][ T3968] el0_svc+0x58/0x2a4 [ 536.288543][ T3968] el0t_64_sync_handler+0xa0/0xe4 [ 536.288655][ T3968] el0t_64_sync+0x198/0x19c [ 537.463407][ C1] TC_ACT_REPEAT abuse ? [ 544.903651][ C1] TC_ACT_REPEAT abuse ? [ 548.276173][ T30] audit: type=1400 audit(547.850:227): avc: denied { bind } for pid=3980 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.272288][ C1] TC_ACT_REPEAT abuse ? [ 564.270309][ T30] audit: type=1400 audit(563.840:228): avc: denied { create } for pid=3993 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 564.284168][ T3994] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 564.292859][ T3994] audit: out of memory in audit_log_start [ 568.335075][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 569.355820][ T4005] bond1: entered allmulticast mode [ 570.803711][ T4013] FAULT_INJECTION: forcing a failure. [ 570.803711][ T4013] name failslab, interval 1, probability 0, space 0, times 0 [ 570.804326][ T4013] CPU: 1 UID: 0 PID: 4013 Comm: syz.1.188 Tainted: G W syzkaller #0 PREEMPT [ 570.804463][ T4013] Tainted: [W]=WARN [ 570.804495][ T4013] Hardware name: linux,dummy-virt (DT) [ 570.804530][ T4013] Call trace: [ 570.804559][ T4013] show_stack+0x18/0x24 (C) [ 570.804654][ T4013] dump_stack_lvl+0x7c/0xb0 [ 570.804718][ T4013] dump_stack+0x1c/0x28 [ 570.804791][ T4013] should_fail_ex+0x6b4/0x6c4 [ 570.804920][ T4013] should_failslab+0xbc/0x120 [ 570.805007][ T4013] kmem_cache_alloc_noprof+0x3d4/0x610 [ 570.805065][ T4013] alloc_vfsmnt+0x2c/0x650 [ 570.805123][ T4013] clone_mnt+0x44/0x6dc [ 570.805206][ T4013] copy_tree+0x234/0xa04 [ 570.805390][ T4013] copy_mnt_ns+0x1b0/0xa0c [ 570.805558][ T4013] create_new_namespaces+0xd0/0x7f4 [ 570.805698][ T4013] unshare_nsproxy_namespaces+0x88/0x184 [ 570.805807][ T4013] ksys_unshare+0x2ac/0x6e0 [ 570.805892][ T4013] __arm64_sys_unshare+0x34/0x50 [ 570.805980][ T4013] invoke_syscall+0x74/0x240 [ 570.806081][ T4013] el0_svc_common.constprop.0+0xac/0x230 [ 570.806189][ T4013] do_el0_svc+0x40/0x58 [ 570.806260][ T4013] el0_svc+0x58/0x2a4 [ 570.806347][ T4013] el0t_64_sync_handler+0xa0/0xe4 [ 570.806473][ T4013] el0t_64_sync+0x198/0x19c [ 573.176210][ T4023] batadv_slave_1: entered promiscuous mode [ 573.202437][ T4021] batadv_slave_1: left promiscuous mode [ 574.455720][ T30] audit: type=1400 audit(574.030:229): avc: denied { write } for pid=4022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.483383][ T30] audit: type=1400 audit(574.030:230): avc: denied { create } for pid=4022 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 574.484440][ T30] audit: type=1400 audit(574.050:231): avc: denied { write open } for pid=4022 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=1517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 574.497097][ T30] audit: type=1400 audit(574.070:232): avc: denied { append } for pid=4022 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 574.534966][ T30] audit: type=1400 audit(574.100:233): avc: denied { getattr } for pid=4022 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 575.392675][ T30] audit: type=1400 audit(574.970:234): avc: denied { read } for pid=4031 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 575.466284][ T4037] FAULT_INJECTION: forcing a failure. [ 575.466284][ T4037] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 575.475282][ T4037] CPU: 0 UID: 0 PID: 4037 Comm: syz.0.197 Tainted: G W syzkaller #0 PREEMPT [ 575.475537][ T4037] Tainted: [W]=WARN [ 575.475589][ T4037] Hardware name: linux,dummy-virt (DT) [ 575.475649][ T4037] Call trace: [ 575.475700][ T4037] show_stack+0x18/0x24 (C) [ 575.475873][ T4037] dump_stack_lvl+0x7c/0xb0 [ 575.475985][ T4037] dump_stack+0x1c/0x28 [ 575.476086][ T4037] should_fail_ex+0x6b4/0x6c4 [ 575.476201][ T4037] should_fail+0x14/0x34 [ 575.476304][ T4037] should_fail_usercopy+0x1c/0x40 [ 575.476458][ T4037] __arm64_sys_getitimer+0x164/0x230 [ 575.476570][ T4037] invoke_syscall+0x74/0x240 [ 575.476675][ T4037] el0_svc_common.constprop.0+0xac/0x230 [ 575.476779][ T4037] do_el0_svc+0x40/0x58 [ 575.476880][ T4037] el0_svc+0x58/0x2a4 [ 575.476993][ T4037] el0t_64_sync_handler+0xa0/0xe4 [ 575.477094][ T4037] el0t_64_sync+0x198/0x19c [ 576.661042][ T30] audit: type=1400 audit(576.230:235): avc: denied { write } for pid=4038 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.666288][ T30] audit: type=1400 audit(576.230:236): avc: denied { unlink } for pid=4038 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 576.943609][ T30] audit: type=1400 audit(576.510:237): avc: denied { write } for pid=4040 comm="syz.0.198" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 577.012068][ T4034] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 577.022267][ T4041] binder: 4040:4041 tried to acquire reference to desc 0, got 1 instead [ 577.132034][ T30] audit: type=1400 audit(576.700:238): avc: denied { call } for pid=4040 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 577.158121][ T4041] binder: 4040:4041 got transaction with invalid offset (80, min 80 max 110) or object. [ 577.227127][ T4041] binder: 4040:4041 transaction call to 4040:0 failed 9/29201/-22, code 0 size 110-24 line 3524 [ 577.367028][ T29] binder: undelivered TRANSACTION_ERROR: 29201 [ 579.557098][ T4050] capability: warning: `syz.0.201' uses 32-bit capabilities (legacy support in use) [ 583.658258][ T4064] binder: 4063:4064 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 583.673161][ T4064] binder: 4064 RLIMIT_NICE not set [ 595.028249][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 595.040619][ T30] audit: type=1400 audit(594.600:241): avc: denied { mount } for pid=4084 comm="syz.1.213" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 596.240037][ T30] audit: type=1400 audit(595.810:242): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 604.598539][ T30] audit: type=1400 audit(604.170:243): avc: denied { execute } for pid=4090 comm="syz.1.215" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 608.183618][ T30] audit: type=1400 audit(607.740:244): avc: denied { mount } for pid=4100 comm="syz.1.220" name="/" dev="autofs" ino=5913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 608.246358][ T30] audit: type=1400 audit(607.820:245): avc: denied { read write } for pid=4100 comm="syz.1.220" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 608.260434][ T30] audit: type=1400 audit(607.820:246): avc: denied { open } for pid=4100 comm="syz.1.220" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 608.314846][ T30] audit: type=1400 audit(607.890:247): avc: denied { ioctl } for pid=4100 comm="syz.1.220" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 608.726435][ T30] audit: type=1400 audit(608.300:248): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 612.513740][ T4110] FAULT_INJECTION: forcing a failure. [ 612.513740][ T4110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 612.517915][ T4110] CPU: 0 UID: 0 PID: 4110 Comm: syz.0.224 Tainted: G W syzkaller #0 PREEMPT [ 612.518142][ T4110] Tainted: [W]=WARN [ 612.518203][ T4110] Hardware name: linux,dummy-virt (DT) [ 612.518270][ T4110] Call trace: [ 612.518327][ T4110] show_stack+0x18/0x24 (C) [ 612.518534][ T4110] dump_stack_lvl+0x7c/0xb0 [ 612.518701][ T4110] dump_stack+0x1c/0x28 [ 612.518862][ T4110] should_fail_ex+0x6b4/0x6c4 [ 612.518990][ T4110] should_fail_alloc_page+0x70/0xc0 [ 612.519110][ T4110] prepare_alloc_pages+0x1cc/0x578 [ 612.519221][ T4110] __alloc_frozen_pages_noprof+0x1a4/0x3498 [ 612.519391][ T4110] alloc_pages_mpol+0xf8/0x41c [ 612.519513][ T4110] alloc_frozen_pages_noprof+0xb8/0x200 [ 612.519641][ T4110] alloc_pages_noprof+0x14/0x120 [ 612.519764][ T4110] __pte_alloc_kernel+0x24/0x4a0 [ 612.519900][ T4110] __apply_to_page_range+0xbf4/0xea0 [ 612.520032][ T4110] apply_to_page_range+0x14/0x20 [ 612.520154][ T4110] __kasan_populate_vmalloc+0x134/0x204 [ 612.520266][ T4110] alloc_vmap_area+0x61c/0x2ebc [ 612.520379][ T4110] __get_vm_area_node+0x1a8/0x2ec [ 612.520522][ T4110] __vmalloc_node_range_noprof+0x198/0x1024 [ 612.520632][ T4110] __kvmalloc_node_noprof+0x3bc/0x8b8 [ 612.520747][ T4110] xt_alloc_entry_offsets+0x2c/0x40 [ 612.520880][ T4110] translate_table+0x32c/0x176c [ 612.520997][ T4110] do_ip6t_set_ctl+0x370/0xa2c [ 612.521104][ T4110] nf_setsockopt+0x80/0xf4 [ 612.521228][ T4110] ipv6_setsockopt+0xc0/0x120 [ 612.521363][ T4110] rawv6_setsockopt+0x148/0x390 [ 612.521495][ T4110] sock_common_setsockopt+0x70/0xe0 [ 612.521617][ T4110] do_sock_setsockopt+0x178/0x35c [ 612.521742][ T4110] __sys_setsockopt+0xc8/0x160 [ 612.521883][ T4110] __arm64_sys_setsockopt+0xa8/0x104 [ 612.522004][ T4110] invoke_syscall+0x74/0x240 [ 612.522118][ T4110] el0_svc_common.constprop.0+0xac/0x230 [ 612.522235][ T4110] do_el0_svc+0x40/0x58 [ 612.522348][ T4110] el0_svc+0x58/0x2a4 [ 612.522475][ T4110] el0t_64_sync_handler+0xa0/0xe4 [ 612.522584][ T4110] el0t_64_sync+0x198/0x19c [ 612.732002][ T4110] syz.0.224: vmalloc error: size 536870904, align 0x200000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 612.794915][ T4110] CPU: 1 UID: 0 PID: 4110 Comm: syz.0.224 Tainted: G W syzkaller #0 PREEMPT [ 612.795109][ T4110] Tainted: [W]=WARN [ 612.795163][ T4110] Hardware name: linux,dummy-virt (DT) [ 612.795226][ T4110] Call trace: [ 612.795283][ T4110] show_stack+0x18/0x24 (C) [ 612.795575][ T4110] dump_stack_lvl+0x7c/0xb0 [ 612.795791][ T4110] dump_stack+0x1c/0x28 [ 612.796085][ T4110] warn_alloc+0x1d0/0x210 [ 612.796347][ T4110] __vmalloc_node_range_noprof+0xb08/0x1024 [ 612.796606][ T4110] __kvmalloc_node_noprof+0x3bc/0x8b8 [ 612.796780][ T4110] xt_alloc_entry_offsets+0x2c/0x40 [ 612.797021][ T4110] translate_table+0x32c/0x176c [ 612.797152][ T4110] do_ip6t_set_ctl+0x370/0xa2c [ 612.797294][ T4110] nf_setsockopt+0x80/0xf4 [ 612.797501][ T4110] ipv6_setsockopt+0xc0/0x120 [ 612.797866][ T4110] rawv6_setsockopt+0x148/0x390 [ 612.798263][ T4110] sock_common_setsockopt+0x70/0xe0 [ 612.798525][ T4110] do_sock_setsockopt+0x178/0x35c [ 612.798690][ T4110] __sys_setsockopt+0xc8/0x160 [ 612.798863][ T4110] __arm64_sys_setsockopt+0xa8/0x104 [ 612.799161][ T4110] invoke_syscall+0x74/0x240 [ 612.799441][ T4110] el0_svc_common.constprop.0+0xac/0x230 [ 612.799649][ T4110] do_el0_svc+0x40/0x58 [ 612.799776][ T4110] el0_svc+0x58/0x2a4 [ 612.799900][ T4110] el0t_64_sync_handler+0xa0/0xe4 [ 612.800015][ T4110] el0t_64_sync+0x198/0x19c [ 612.841487][ T4110] Mem-Info: [ 612.843183][ T4110] active_anon:5181 inactive_anon:0 isolated_anon:0 [ 612.843183][ T4110] active_file:0 inactive_file:14531 isolated_file:0 [ 612.843183][ T4110] unevictable:768 dirty:6 writeback:0 [ 612.843183][ T4110] slab_reclaimable:7140 slab_unreclaimable:30400 [ 612.843183][ T4110] mapped:2786 shmem:825 pagetables:2827 [ 612.843183][ T4110] sec_pagetables:0 bounce:0 [ 612.843183][ T4110] kernel_misc_reclaimable:0 [ 612.843183][ T4110] free:157627 free_pcp:5342 free_cma:8128 [ 612.843856][ T4110] Node 0 active_anon:20724kB inactive_anon:0kB active_file:0kB inactive_file:58124kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:11144kB dirty:24kB writeback:0kB shmem:3300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6296kB pagetables:11308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 612.844377][ T4110] Node 0 DMA free:630508kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20724kB inactive_anon:0kB active_file:0kB inactive_file:58124kB unevictable:3072kB writepending:24kB zspages:0kB present:2097152kB managed:1524544kB mlocked:0kB bounce:0kB free_pcp:21368kB local_pcp:11364kB free_cma:32512kB [ 612.845351][ T4110] lowmem_reserve[]: 0 0 0 0 0 [ 612.846145][ T4110] Node 0 DMA: 25*4kB (M) 13*8kB (ME) 39*16kB (M) 42*32kB (ME) 39*64kB (UME) 11*128kB (UME) 3*256kB (UEC) 6*512kB (UMEC) 10*1024kB (UMEC) 8*2048kB (UMEC) 145*4096kB (UMC) = 630460kB [ 612.886116][ T4110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.891791][ T4110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 612.894674][ T4110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 612.896570][ T4110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 612.898460][ T4110] 15352 total pagecache pages [ 612.901228][ T4110] 0 pages in swap cache [ 612.903086][ T4110] Free swap = 124996kB [ 612.906201][ T4110] Total swap = 124996kB [ 612.913225][ T4110] 524288 pages RAM [ 612.914785][ T4110] 0 pages HighMem/MovableOnly [ 612.917328][ T4110] 143152 pages reserved [ 612.921445][ T4110] 8192 pages cma reserved [ 612.923197][ T4110] 1 pages hwpoisoned [ 613.160575][ T30] audit: type=1400 audit(612.720:249): avc: denied { create } for pid=4112 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 613.374339][ T30] audit: type=1400 audit(612.950:250): avc: denied { sys_admin } for pid=4112 comm="syz.1.226" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 628.207330][ T30] audit: type=1400 audit(627.760:251): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 633.603833][ T4136] FAULT_INJECTION: forcing a failure. [ 633.603833][ T4136] name failslab, interval 1, probability 0, space 0, times 0 [ 633.605558][ T4136] CPU: 0 UID: 0 PID: 4136 Comm: syz.0.235 Tainted: G W syzkaller #0 PREEMPT [ 633.605644][ T4136] Tainted: [W]=WARN [ 633.605672][ T4136] Hardware name: linux,dummy-virt (DT) [ 633.605705][ T4136] Call trace: [ 633.605733][ T4136] show_stack+0x18/0x24 (C) [ 633.605825][ T4136] dump_stack_lvl+0x7c/0xb0 [ 633.605891][ T4136] dump_stack+0x1c/0x28 [ 633.605967][ T4136] should_fail_ex+0x6b4/0x6c4 [ 633.606054][ T4136] should_failslab+0xbc/0x120 [ 633.606115][ T4136] kmem_cache_alloc_noprof+0x3d4/0x610 [ 633.606173][ T4136] alloc_empty_file+0x60/0x164 [ 633.606232][ T4136] alloc_file_pseudo+0x144/0x23c [ 633.606289][ T4136] anon_inode_getfile+0x8c/0x184 [ 633.606358][ T4136] bpf_link_prime+0x19c/0x3d0 [ 633.606419][ T4136] bpf_xdp_link_attach+0x230/0x840 [ 633.606483][ T4136] __sys_bpf+0x2454/0x2c70 [ 633.606572][ T4136] __arm64_sys_bpf+0xb0/0x10c [ 633.606629][ T4136] invoke_syscall+0x74/0x240 [ 633.606687][ T4136] el0_svc_common.constprop.0+0xac/0x230 [ 633.606743][ T4136] do_el0_svc+0x40/0x58 [ 633.606797][ T4136] el0_svc+0x58/0x2a4 [ 633.606858][ T4136] el0t_64_sync_handler+0xa0/0xe4 [ 633.606913][ T4136] el0t_64_sync+0x198/0x19c [ 646.111745][ T4166] FAULT_INJECTION: forcing a failure. [ 646.111745][ T4166] name failslab, interval 1, probability 0, space 0, times 0 [ 646.112152][ T4166] CPU: 1 UID: 0 PID: 4166 Comm: syz.1.244 Tainted: G W syzkaller #0 PREEMPT [ 646.112237][ T4166] Tainted: [W]=WARN [ 646.112264][ T4166] Hardware name: linux,dummy-virt (DT) [ 646.112296][ T4166] Call trace: [ 646.112323][ T4166] show_stack+0x18/0x24 (C) [ 646.112486][ T4166] dump_stack_lvl+0x7c/0xb0 [ 646.112548][ T4166] dump_stack+0x1c/0x28 [ 646.112601][ T4166] should_fail_ex+0x6b4/0x6c4 [ 646.112673][ T4166] should_failslab+0xbc/0x120 [ 646.112733][ T4166] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 646.112791][ T4166] __d_alloc+0x38/0x98c [ 646.112848][ T4166] d_alloc_pseudo+0x14/0xb8 [ 646.112909][ T4166] alloc_file_pseudo+0xf4/0x23c [ 646.112970][ T4166] sock_alloc_file+0x40/0x1d8 [ 646.113058][ T4166] __sys_socket+0x160/0x1f0 [ 646.113113][ T4166] __arm64_sys_socket+0x70/0xa4 [ 646.113165][ T4166] invoke_syscall+0x74/0x240 [ 646.113222][ T4166] el0_svc_common.constprop.0+0xac/0x230 [ 646.113280][ T4166] do_el0_svc+0x40/0x58 [ 646.113333][ T4166] el0_svc+0x58/0x2a4 [ 646.113400][ T4166] el0t_64_sync_handler+0xa0/0xe4 [ 646.113455][ T4166] el0t_64_sync+0x198/0x19c [ 652.608299][ T4174] loop5: detected capacity change from 0 to 7 [ 654.588559][ T30] audit: type=1400 audit(654.160:252): avc: denied { read } for pid=4175 comm="syz.1.248" name="event0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 659.103484][ T30] audit: type=1400 audit(658.670:253): avc: denied { map } for pid=4177 comm="syz.1.249" path="socket:[6224]" dev="sockfs" ino=6224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 659.275265][ T30] audit: type=1400 audit(658.840:254): avc: denied { cmd } for pid=4177 comm="iou-wrk-4178" path="socket:[6224]" dev="sockfs" ino=6224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 663.732213][ T4185] nvme nvme0: failed to connect socket: -111 [ 667.556104][ T4198] input: syz0 as /devices/virtual/input/input1 [ 668.327792][ T30] audit: type=1400 audit(667.860:255): avc: denied { mounton } for pid=4197 comm="syz.1.253" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 669.362670][ T30] audit: type=1400 audit(668.940:256): avc: denied { ioctl } for pid=4199 comm="syz.0.254" path="/dev/vhost-vsock" dev="devtmpfs" ino=717 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 670.076328][ T30] audit: type=1400 audit(669.650:257): avc: denied { create } for pid=4199 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 670.147655][ T30] audit: type=1400 audit(669.720:258): avc: denied { connect } for pid=4199 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.609792][ T30] audit: type=1400 audit(679.180:259): avc: denied { node_bind } for pid=4223 comm="syz.1.263" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 679.768201][ T4226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.264'. [ 679.782287][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 685.827601][ T4238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=4238 comm=syz.1.267 [ 694.049963][ T30] audit: type=1400 audit(693.610:260): avc: denied { watch } for pid=4254 comm="syz.0.274" path="/132" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 694.787571][ T30] audit: type=1400 audit(694.360:261): avc: denied { create } for pid=4257 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 694.863644][ T30] audit: type=1400 audit(694.440:262): avc: denied { bind } for pid=4257 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 699.717252][ T4269] raw_sendmsg: syz.1.280 forgot to set AF_INET. Fix it! [ 705.005160][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 712.343360][ T4294] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 712.352311][ T4294] flags: 0x1ffc00000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 712.368355][ T4294] raw: 01ffc00000002000 fffffdffc0200008 fffffdffc0200008 0000000000000000 [ 712.380267][ T4294] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 712.382642][ T4294] page dumped because: unmovable page [ 724.026478][ T4308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 729.953089][ T4313] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 732.852570][ T4325] binder: 4324:4325 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 732.854571][ T4325] binder: 4325 RLIMIT_NICE not set [ 739.180625][ T4332] ipvlan2: entered allmulticast mode [ 739.181213][ T4332] batadv_slave_1: entered allmulticast mode [ 742.987279][ T30] audit: type=1400 audit(742.560:263): avc: denied { mounton } for pid=4335 comm="syz.0.307" path="/147/file0" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 745.571145][ T30] audit: type=1400 audit(745.140:264): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 750.355338][ T30] audit: type=1400 audit(749.930:265): avc: denied { read write } for pid=4351 comm="syz.0.312" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 750.364531][ T30] audit: type=1400 audit(749.930:266): avc: denied { open } for pid=4351 comm="syz.0.312" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 750.401044][ T30] audit: type=1400 audit(749.970:267): avc: denied { ioctl } for pid=4351 comm="syz.0.312" path="/dev/nullb0" dev="devtmpfs" ino=672 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 756.118250][ T30] audit: type=1400 audit(755.670:268): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 757.352842][ T30] audit: type=1400 audit(756.930:269): avc: denied { read } for pid=4373 comm="syz.1.323" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 757.395513][ T30] audit: type=1400 audit(756.930:270): avc: denied { open } for pid=4373 comm="syz.1.323" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 757.471541][ T30] audit: type=1400 audit(757.040:271): avc: denied { ioctl } for pid=4373 comm="syz.1.323" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 758.655253][ T4376] syzkaller0: entered promiscuous mode [ 758.672278][ T4376] syzkaller0: entered allmulticast mode [ 766.190525][ T30] audit: type=1400 audit(765.740:272): avc: denied { create } for pid=4400 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 769.482465][ T4406] gadgetfs: bound to dummy_udc driver [ 770.305598][ T4398] gadgetfs: suspended from state 2 [ 770.336708][ T3531] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 774.051261][ T30] audit: type=1400 audit(773.620:273): avc: denied { create } for pid=4420 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 774.643032][ T30] audit: type=1400 audit(774.200:274): avc: denied { create } for pid=4420 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 774.727908][ T30] audit: type=1400 audit(774.300:275): avc: denied { setopt } for pid=4420 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 775.713511][ T4423] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 776.344615][ T4423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.748219][ T4425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.804228][ T4425] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 776.855421][ T4425] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 779.691556][ T30] audit: type=1400 audit(779.270:276): avc: denied { map_create } for pid=4429 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.709900][ T30] audit: type=1400 audit(779.280:277): avc: denied { map_read map_write } for pid=4429 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.734792][ T30] audit: type=1400 audit(779.310:278): avc: denied { prog_load } for pid=4429 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.766018][ T30] audit: type=1400 audit(779.340:279): avc: denied { prog_run } for pid=4429 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.802061][ T4430] FAULT_INJECTION: forcing a failure. [ 779.802061][ T4430] name fail_futex, interval 1, probability 0, space 0, times 0 [ 779.810590][ T4430] CPU: 1 UID: 0 PID: 4430 Comm: syz.0.343 Tainted: G W L syzkaller #0 PREEMPT [ 779.810839][ T4430] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 779.810900][ T4430] Hardware name: linux,dummy-virt (DT) [ 779.810981][ T4430] Call trace: [ 779.811045][ T4430] show_stack+0x18/0x24 (C) [ 779.811248][ T4430] dump_stack_lvl+0x7c/0xb0 [ 779.811398][ T4430] dump_stack+0x1c/0x28 [ 779.811533][ T4430] should_fail_ex+0x6b4/0x6c4 [ 779.811669][ T4430] should_fail+0x14/0x34 [ 779.811796][ T4430] get_futex_key+0x198/0xf84 [ 779.811935][ T4430] futex_wake+0xc0/0x49c [ 779.812064][ T4430] do_futex+0x258/0x280 [ 779.812192][ T4430] mm_exit_exec_release+0x1b8/0x260 [ 779.812328][ T4430] do_exit+0x504/0x2158 [ 779.812499][ T4430] do_group_exit+0xa4/0x208 [ 779.812624][ T4430] get_signal+0x1b20/0x1f00 [ 779.812754][ T4430] arch_do_signal_or_restart+0x168/0x700 [ 779.812886][ T4430] exit_to_user_mode_loop+0x13c/0x1c8 [ 779.813018][ T4430] el0_svc+0x244/0x2a4 [ 779.813147][ T4430] el0t_64_sync_handler+0xa0/0xe4 [ 779.813264][ T4430] el0t_64_sync+0x198/0x19c [ 780.154184][ T30] audit: type=1400 audit(779.730:280): avc: denied { create } for pid=4431 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 784.755735][ T4439] syzkaller0: entered promiscuous mode [ 784.756351][ T4439] syzkaller0: entered allmulticast mode [ 784.854104][ T30] audit: type=1400 audit(784.430:281): avc: denied { setopt } for pid=4437 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 784.943583][ T30] audit: type=1400 audit(784.500:282): avc: denied { write } for pid=4437 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 793.300053][ T30] audit: type=1400 audit(792.870:283): avc: denied { write } for pid=4458 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 809.347507][ T4528] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 810.357825][ T4529] nvme nvme0: failed to connect socket: -111 [ 820.262300][ T30] audit: type=1400 audit(819.820:284): avc: denied { search } for pid=4558 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.263320][ T30] audit: type=1400 audit(819.840:285): avc: denied { search } for pid=4558 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=849 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.287492][ T30] audit: type=1400 audit(819.840:286): avc: denied { search } for pid=4558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.288655][ T30] audit: type=1400 audit(819.850:287): avc: denied { search } for pid=4558 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.350513][ T30] audit: type=1400 audit(819.920:288): avc: denied { read } for pid=4561 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.357123][ T30] audit: type=1400 audit(819.930:289): avc: denied { read open } for pid=4561 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.380734][ T30] audit: type=1400 audit(819.930:290): avc: denied { getattr } for pid=4561 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.450239][ T30] audit: type=1400 audit(820.020:291): avc: denied { write } for pid=4558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.454834][ T30] audit: type=1400 audit(820.030:292): avc: denied { add_name } for pid=4558 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.631038][ T30] audit: type=1400 audit(822.190:293): avc: denied { write } for pid=4567 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.655086][ T4576] nvme nvme0: failed to connect socket: -111 [ 831.127415][ T4590] nvme nvme0: failed to connect socket: -111 [ 839.875654][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 839.890946][ T30] audit: type=1400 audit(839.450:298): avc: denied { create } for pid=4606 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 840.321908][ T30] audit: type=1400 audit(839.890:299): avc: denied { write } for pid=4609 comm="syz.0.392" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 840.564044][ T30] audit: type=1400 audit(840.140:300): avc: denied { create } for pid=4606 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 841.295186][ T4613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.336232][ T4613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.707551][ T30] audit: type=1400 audit(851.280:301): avc: denied { map } for pid=4629 comm="syz.1.397" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 851.724774][ T30] audit: type=1400 audit(851.300:302): avc: denied { read write } for pid=4629 comm="syz.1.397" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 852.087801][ T4630] input: syz0 as /devices/virtual/input/input2 [ 858.371934][ T30] audit: type=1400 audit(857.950:303): avc: denied { read } for pid=4652 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 860.073611][ T4661] binder: 4660:4661 ioctl 4018620d 0 returned -22 [ 860.144911][ T4661] binder: 4660:4661 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 860.237564][ T4661] binder: 4660:4661 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 860.253368][ T4661] binder: 4660:4661 ioctl c0306201 20000040 returned -22 [ 862.411968][ T30] audit: type=1400 audit(861.980:304): avc: denied { write } for pid=4669 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 862.414556][ T4670] netlink: 68 bytes leftover after parsing attributes in process `syz.0.414'. [ 862.418568][ T30] audit: type=1400 audit(861.990:305): avc: denied { nlmsg_write } for pid=4669 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 863.370854][ T30] audit: type=1400 audit(862.940:306): avc: denied { ioctl } for pid=4671 comm="syz.1.415" path="socket:[7682]" dev="sockfs" ino=7682 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 864.516186][ T4676] binder: 4675:4676 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 864.517305][ T4676] binder: 4675:4676 ioctl c0306201 20000040 returned -22 [ 865.098126][ T4678] binder: tried to use weak ref as strong ref [ 865.112117][ T4678] binder: 4677:4678 Acquire 1 refcount change on invalid ref 0 ret -22 [ 865.143116][ T4678] binder: 4677:4678 got transaction to invalid handle, 1 [ 865.144251][ T4678] binder: 4677:4678 cannot find target node [ 865.150594][ T4678] binder: 4677:4678 transaction call to 0:0 failed 17/29201/-22, code 0 size 0-0 line 3252 [ 865.962496][ T3485] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 866.215995][ T3485] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.307492][ T3485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.311355][ T3485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.315009][ T3485] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.322208][ T3485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.435869][ T4681] kernel profiling enabled (shift: 17) [ 866.472755][ T3485] usb 1-1: config 0 descriptor?? [ 867.554095][ T3471] binder: undelivered TRANSACTION_ERROR: 29201 [ 867.718555][ T3485] hid-generic 0003:047F:FFFF.0001: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 872.046909][ T4139] usb 1-1: USB disconnect, device number 3 [ 873.672983][ T4692] fido_id[4692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 877.984767][ T4705] binder: 4704:4705 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 877.985720][ T4705] binder: 4704:4705 ioctl c0306201 20000040 returned -22 [ 881.254594][ T30] audit: type=1400 audit(880.830:307): avc: denied { mount } for pid=4710 comm="syz.0.425" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 881.390108][ T30] audit: type=1400 audit(880.960:308): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 882.221577][ T4717] binder: 4715:4717 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 882.241641][ T4717] binder: 4715:4717 ioctl c0306201 20000040 returned -22 [ 883.083630][ T4139] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 883.342220][ T4139] usb 1-1: Using ep0 maxpacket: 8 [ 883.436098][ T4139] usb 1-1: unable to get BOS descriptor or descriptor too short [ 883.437380][ T4139] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 883.592494][ T4139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.593003][ T4139] usb 1-1: Product: syz [ 883.593551][ T4139] usb 1-1: Manufacturer: syz [ 883.593665][ T4139] usb 1-1: SerialNumber: syz [ 884.151087][ T4721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.429'. [ 884.223104][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 884.546496][ T4139] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 884.631790][ T4139] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 885.284429][ T4139] usb 1-1: USB disconnect, device number 4 [ 887.622179][ T4732] binder: 4731:4732 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 887.623072][ T4732] binder: 4732 RLIMIT_NICE not set [ 887.908265][ T4628] udevd[4628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.377108][ T4739] netlink: 84 bytes leftover after parsing attributes in process `syz.0.437'. [ 890.927228][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 892.969874][ T30] audit: type=1400 audit(892.540:309): avc: denied { allowed } for pid=4750 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 898.076216][ T30] audit: type=1400 audit(897.650:310): avc: denied { write } for pid=4764 comm="syz.1.447" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 898.106219][ T4765] random: crng reseeded on system resumption [ 898.146270][ T30] audit: type=1400 audit(897.650:311): avc: denied { open } for pid=4764 comm="syz.1.447" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 898.323892][ T30] audit: type=1400 audit(897.900:312): avc: denied { ioctl } for pid=4764 comm="syz.1.447" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 909.100689][ T30] audit: type=1400 audit(908.670:313): avc: denied { read } for pid=4799 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 910.825582][ T4802] nvme_fabrics: missing parameter 'transport=%s' [ 910.827891][ T4802] nvme_fabrics: missing parameter 'nqn=%s' [ 915.932417][ T4813] nvme_fabrics: missing parameter 'transport=%s' [ 915.933602][ T4813] nvme_fabrics: missing parameter 'nqn=%s' [ 918.727243][ T4816] netlink: 'syz.1.468': attribute type 3 has an invalid length. [ 918.727808][ T4816] netlink: 152 bytes leftover after parsing attributes in process `syz.1.468'. [ 919.863749][ T4820] FAULT_INJECTION: forcing a failure. [ 919.863749][ T4820] name failslab, interval 1, probability 0, space 0, times 0 [ 919.864459][ T4820] CPU: 1 UID: 0 PID: 4820 Comm: syz.1.470 Tainted: G W L syzkaller #0 PREEMPT [ 919.864652][ T4820] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 919.864713][ T4820] Hardware name: linux,dummy-virt (DT) [ 919.864781][ T4820] Call trace: [ 919.864842][ T4820] show_stack+0x18/0x24 (C) [ 919.865094][ T4820] dump_stack_lvl+0x7c/0xb0 [ 919.865301][ T4820] dump_stack+0x1c/0x28 [ 919.865520][ T4820] should_fail_ex+0x6b4/0x6c4 [ 919.865730][ T4820] should_failslab+0xbc/0x120 [ 919.865874][ T4820] __kmalloc_cache_noprof+0x3ec/0x628 [ 919.866046][ T4820] fsnotify_alloc_group+0x7c/0x2ac [ 919.866239][ T4820] do_inotify_init+0x40/0x4e0 [ 919.866424][ T4820] __arm64_sys_inotify_init1+0x34/0x50 [ 919.866650][ T4820] invoke_syscall+0x74/0x240 [ 919.866802][ T4820] el0_svc_common.constprop.0+0xac/0x230 [ 919.866970][ T4820] do_el0_svc+0x40/0x58 [ 919.867119][ T4820] el0_svc+0x58/0x2a4 [ 919.867312][ T4820] el0t_64_sync_handler+0xa0/0xe4 [ 919.867456][ T4820] el0t_64_sync+0x198/0x19c [ 920.482911][ T4822] ¨à'©ÿˆ: renamed from hsr0 (while UP) [ 921.612278][ T4824] nvme_fabrics: missing parameter 'transport=%s' [ 921.612749][ T4824] nvme_fabrics: missing parameter 'nqn=%s' [ 922.146915][ T4831] FAULT_INJECTION: forcing a failure. [ 922.146915][ T4831] name failslab, interval 1, probability 0, space 0, times 0 [ 922.147645][ T4831] CPU: 1 UID: 0 PID: 4831 Comm: syz.0.475 Tainted: G W L syzkaller #0 PREEMPT [ 922.147801][ T4831] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 922.147859][ T4831] Hardware name: linux,dummy-virt (DT) [ 922.147943][ T4831] Call trace: [ 922.147994][ T4831] show_stack+0x18/0x24 (C) [ 922.148180][ T4831] dump_stack_lvl+0x7c/0xb0 [ 922.148581][ T4831] dump_stack+0x1c/0x28 [ 922.148796][ T4831] should_fail_ex+0x6b4/0x6c4 [ 922.148925][ T4831] should_failslab+0xbc/0x120 [ 922.149010][ T4831] __kmalloc_cache_noprof+0x3ec/0x628 [ 922.149158][ T4831] fsnotify_alloc_group+0x7c/0x2ac [ 922.149281][ T4831] do_inotify_init+0x40/0x4e0 [ 922.149376][ T4831] __arm64_sys_inotify_init1+0x34/0x50 [ 922.149490][ T4831] invoke_syscall+0x74/0x240 [ 922.149564][ T4831] el0_svc_common.constprop.0+0xac/0x230 [ 922.149652][ T4831] do_el0_svc+0x40/0x58 [ 922.149726][ T4831] el0_svc+0x58/0x2a4 [ 922.149859][ T4831] el0t_64_sync_handler+0xa0/0xe4 [ 922.149957][ T4831] el0t_64_sync+0x198/0x19c [ 923.893107][ T30] audit: type=1400 audit(923.470:314): avc: denied { nlmsg_write } for pid=4836 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 925.098582][ T4841] FAULT_INJECTION: forcing a failure. [ 925.098582][ T4841] name failslab, interval 1, probability 0, space 0, times 0 [ 925.101755][ T4841] CPU: 1 UID: 0 PID: 4841 Comm: syz.1.480 Tainted: G W L syzkaller #0 PREEMPT [ 925.101966][ T4841] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 925.102028][ T4841] Hardware name: linux,dummy-virt (DT) [ 925.102096][ T4841] Call trace: [ 925.102157][ T4841] show_stack+0x18/0x24 (C) [ 925.102342][ T4841] dump_stack_lvl+0x7c/0xb0 [ 925.102509][ T4841] dump_stack+0x1c/0x28 [ 925.102697][ T4841] should_fail_ex+0x6b4/0x6c4 [ 925.102977][ T4841] should_failslab+0xbc/0x120 [ 925.103179][ T4841] __kmalloc_cache_noprof+0x3ec/0x628 [ 925.103297][ T4841] fsnotify_alloc_group+0x7c/0x2ac [ 925.103435][ T4841] do_inotify_init+0x40/0x4e0 [ 925.103628][ T4841] __arm64_sys_inotify_init1+0x34/0x50 [ 925.103866][ T4841] invoke_syscall+0x74/0x240 [ 925.104053][ T4841] el0_svc_common.constprop.0+0xac/0x230 [ 925.104246][ T4841] do_el0_svc+0x40/0x58 [ 925.104369][ T4841] el0_svc+0x58/0x2a4 [ 925.104631][ T4841] el0t_64_sync_handler+0xa0/0xe4 [ 925.104774][ T4841] el0t_64_sync+0x198/0x19c [ 926.545536][ T4845] nvme_fabrics: missing parameter 'transport=%s' [ 926.550154][ T4845] nvme_fabrics: missing parameter 'nqn=%s' [ 929.185326][ T30] audit: type=1400 audit(928.760:315): avc: denied { create } for pid=4847 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 929.230871][ T30] audit: type=1400 audit(928.790:316): avc: denied { write } for pid=4847 comm="syz.1.483" path="socket:[7904]" dev="sockfs" ino=7904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 932.585484][ T4854] FAULT_INJECTION: forcing a failure. [ 932.585484][ T4854] name failslab, interval 1, probability 0, space 0, times 0 [ 932.593012][ T4854] CPU: 0 UID: 0 PID: 4854 Comm: syz.1.485 Tainted: G W L syzkaller #0 PREEMPT [ 932.593252][ T4854] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 932.593314][ T4854] Hardware name: linux,dummy-virt (DT) [ 932.593384][ T4854] Call trace: [ 932.593446][ T4854] show_stack+0x18/0x24 (C) [ 932.593631][ T4854] dump_stack_lvl+0x7c/0xb0 [ 932.593761][ T4854] dump_stack+0x1c/0x28 [ 932.593874][ T4854] should_fail_ex+0x6b4/0x6c4 [ 932.594022][ T4854] should_failslab+0xbc/0x120 [ 932.594146][ T4854] __kmalloc_cache_noprof+0x3ec/0x628 [ 932.594268][ T4854] fsnotify_alloc_group+0x7c/0x2ac [ 932.594392][ T4854] do_inotify_init+0x40/0x4e0 [ 932.594510][ T4854] __arm64_sys_inotify_init1+0x34/0x50 [ 932.594628][ T4854] invoke_syscall+0x74/0x240 [ 932.594749][ T4854] el0_svc_common.constprop.0+0xac/0x230 [ 932.594868][ T4854] do_el0_svc+0x40/0x58 [ 932.594993][ T4854] el0_svc+0x58/0x2a4 [ 932.595118][ T4854] el0t_64_sync_handler+0xa0/0xe4 [ 932.595227][ T4854] el0t_64_sync+0x198/0x19c [ 948.050389][ T4915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 948.053082][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 948.057867][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 948.060094][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 962.311092][ T4962] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 968.801742][ T4972] nvme_fabrics: missing parameter 'nqn=%s' [ 973.625036][ T4992] nvme_fabrics: missing parameter 'nqn=%s' [ 978.227577][ T5004] nvme_fabrics: missing parameter 'nqn=%s' [ 982.644698][ T5015] nvme_fabrics: unknown parameter or missing value 'nq' in ctrl creation request [ 987.278231][ T5035] nvme_fabrics: unknown parameter or missing value 'nq' in ctrl creation request [ 992.124581][ T5045] nvme_fabrics: unknown parameter or missing value 'nq' in ctrl creation request [ 1003.897292][ T5077] netlink: 84 bytes leftover after parsing attributes in process `syz.1.588'. [ 1013.313641][ T5104] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 1014.114764][ T5108] netlink: 'syz.0.603': attribute type 29 has an invalid length. [ 1014.135108][ T5108] netlink: 'syz.0.603': attribute type 29 has an invalid length. [ 1014.158038][ T5108] netlink: 'syz.0.603': attribute type 29 has an invalid length. [ 1037.458666][ T5186] netlink: 'syz.1.642': attribute type 39 has an invalid length. [ 1042.167267][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 1044.493562][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 1047.253464][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 1062.381687][ T5223] netlink: 5316 bytes leftover after parsing attributes in process `syz.1.660'. [ 1105.096062][ T5298] FAULT_INJECTION: forcing a failure. [ 1105.096062][ T5298] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1105.101084][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: syz.0.695 Tainted: G W L syzkaller #0 PREEMPT [ 1105.101370][ T5298] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1105.101436][ T5298] Hardware name: linux,dummy-virt (DT) [ 1105.101524][ T5298] Call trace: [ 1105.101564][ T5298] show_stack+0x18/0x24 (C) [ 1105.101696][ T5298] dump_stack_lvl+0x7c/0xb0 [ 1105.101759][ T5298] dump_stack+0x1c/0x28 [ 1105.101817][ T5298] should_fail_ex+0x6b4/0x6c4 [ 1105.101938][ T5298] should_fail+0x14/0x34 [ 1105.102005][ T5298] get_futex_key+0x198/0xf84 [ 1105.102066][ T5298] futex_wake+0xc0/0x49c [ 1105.102123][ T5298] do_futex+0x258/0x280 [ 1105.102223][ T5298] mm_exit_exec_release+0x1b8/0x260 [ 1105.102288][ T5298] do_exit+0x504/0x2158 [ 1105.102347][ T5298] do_group_exit+0xa4/0x208 [ 1105.102402][ T5298] get_signal+0x1b20/0x1f00 [ 1105.102469][ T5298] arch_do_signal_or_restart+0x168/0x700 [ 1105.102530][ T5298] exit_to_user_mode_loop+0x13c/0x1c8 [ 1105.102597][ T5298] el0_svc+0x244/0x2a4 [ 1105.102682][ T5298] el0t_64_sync_handler+0xa0/0xe4 [ 1105.102745][ T5298] el0t_64_sync+0x198/0x19c [ 1108.831796][ T4487] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1109.121611][ T4487] usb 1-1: Using ep0 maxpacket: 16 [ 1109.128367][ T4487] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1109.146257][ T4487] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 1109.146809][ T4487] usb 1-1: config 0 has no interface number 0 [ 1109.147324][ T4487] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1109.147467][ T4487] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1109.196099][ T4487] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1109.196711][ T4487] usb 1-1: Product: syz [ 1109.197016][ T4487] usb 1-1: Manufacturer: syz [ 1109.197155][ T4487] usb 1-1: SerialNumber: syz [ 1109.266671][ T4487] usb 1-1: config 0 descriptor?? [ 1109.483046][ T4487] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 1109.486078][ T4487] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 1109.536511][ T4487] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 1109.615157][ T4487] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1109.707970][ T4487] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 1109.811612][ T4487] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1109.906123][ T4487] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 1109.983977][ T4487] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1110.143414][ T4487] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 1110.222489][ T4487] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1110.455255][ T4487] usb 1-1: USB disconnect, device number 5 [ 1110.836508][ T4487] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1111.127698][ T4487] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1111.375684][ T4487] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1111.694712][ T4487] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1111.745154][ T4487] keyspan 1-1:0.107: device disconnected [ 1113.146790][ T30] audit: type=1326 audit(1112.690:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.158617][ T30] audit: type=1326 audit(1112.730:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.190053][ T30] audit: type=1326 audit(1112.760:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.240124][ T30] audit: type=1326 audit(1112.810:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.260518][ T30] audit: type=1326 audit(1112.810:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.273583][ T30] audit: type=1326 audit(1112.850:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.316000][ T30] audit: type=1326 audit(1112.890:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=184 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.335314][ T30] audit: type=1326 audit(1112.910:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.340650][ T30] audit: type=1326 audit(1112.910:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1113.362015][ T30] audit: type=1326 audit(1112.910:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.707" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb23792a8 code=0x7ffc0000 [ 1115.401385][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.712'. [ 1120.238182][ T5348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.278590][ T5348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.091391][ T804] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1126.352419][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1126.368199][ T804] usb 1-1: not running at top speed; connect to a high speed hub [ 1126.385401][ T804] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 1126.430488][ T804] usb 1-1: config 1 has an invalid interface number: 93 but max is 0 [ 1126.432892][ T804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.450392][ T804] usb 1-1: config 1 has no interface number 0 [ 1126.461644][ T804] usb 1-1: config 1 interface 93 has no altsetting 0 [ 1126.585742][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.591135][ T804] usb 1-1: Product: syz [ 1126.593655][ T804] usb 1-1: Manufacturer: syz [ 1126.599920][ T804] usb 1-1: SerialNumber: syz [ 1127.827041][ T804] peak_usb 1-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1127.830584][ T804] peak_usb 1-1:1.93: unable to read PCAN-USB serial number (err -22) [ 1128.332939][ T804] peak_usb 1-1:1.93: probe with driver peak_usb failed with error -22 [ 1128.594773][ T804] usb 1-1: USB disconnect, device number 6 [ 1131.833186][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1131.835756][ T30] audit: type=1400 audit(1131.390:332): avc: denied { read } for pid=3228 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1133.695256][ T5382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1135.534388][ T5389] netlink: 136 bytes leftover after parsing attributes in process `syz.1.734'. [ 1135.535391][ T5389] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1136.828145][ T30] audit: type=1400 audit(1136.400:333): avc: denied { name_bind } for pid=5392 comm="syz.1.736" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1141.453676][ T30] audit: type=1400 audit(1141.030:334): avc: denied { read write } for pid=5407 comm="syz.0.742" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1141.464647][ T30] audit: type=1400 audit(1141.040:335): avc: denied { open } for pid=5407 comm="syz.0.742" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1142.578507][ T30] audit: type=1400 audit(1142.150:336): avc: denied { setopt } for pid=5413 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1143.192063][ T4184] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1143.471562][ T4184] usb 1-1: Using ep0 maxpacket: 8 [ 1143.640663][ T4184] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1143.806398][ T4184] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1143.807611][ T4184] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1143.808378][ T4184] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1143.809871][ T4184] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.810178][ T4184] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.810613][ T4184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.456507][ T4184] usb 1-1: usb_control_msg returned -32 [ 1144.457417][ T4184] usbtmc 1-1:16.0: can't read capabilities [ 1145.138535][ T30] audit: type=1400 audit(1144.710:337): avc: denied { bind } for pid=5419 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1148.326556][ T30] audit: type=1400 audit(1147.900:338): avc: denied { write } for pid=5415 comm="syz.0.746" name="usbtmc0" dev="devtmpfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1148.519957][ T4139] usb 1-1: USB disconnect, device number 7 [ 1148.531468][ T5429] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71 [ 1153.308034][ T30] audit: type=1400 audit(1152.880:339): avc: denied { write } for pid=5435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1155.454053][ T30] audit: type=1400 audit(1155.020:340): avc: denied { write } for pid=5440 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1156.314078][ T5445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.408635][ T5445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.301531][ T5454] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1168.008648][ T5476] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1171.765007][ T5490] netlink: 276 bytes leftover after parsing attributes in process `syz.0.772'. [ 1173.386970][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.416700][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.224383][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 1174.261141][ T5498] netlink: 'syz.0.776': attribute type 22 has an invalid length. [ 1174.261903][ T5498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'. [ 1174.506190][ T30] audit: type=1400 audit(1174.060:341): avc: denied { write } for pid=5497 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1176.814519][ T30] audit: type=1400 audit(1176.390:342): avc: denied { append } for pid=5510 comm="syz.1.781" name="iommu" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1176.982476][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.025051][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.458155][ T5516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5516 comm=syz.1.783 [ 1178.897784][ T5518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.903673][ T5518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.940446][ T804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1181.253181][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1181.254131][ T804] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1181.567535][ T804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.568276][ T804] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1181.573099][ T804] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1181.711005][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.711939][ T804] usb 1-1: Product: syz [ 1181.715982][ T804] usb 1-1: Manufacturer: syz [ 1181.716644][ T804] usb 1-1: SerialNumber: syz [ 1183.027750][ T804] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1183.196432][ T804] usb 1-1: USB disconnect, device number 8 [ 1184.040141][ T804] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1184.274107][ T5231] udevd[5231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.293151][ T804] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1184.467536][ T804] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1184.468138][ T804] usb 1-1: config 1 has no interface number 0 [ 1184.537589][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.538177][ T804] usb 1-1: Product: syz [ 1184.538610][ T804] usb 1-1: Manufacturer: syz [ 1184.539444][ T804] usb 1-1: SerialNumber: syz [ 1184.755129][ T804] usb 1-1: 3:1 : does not exist [ 1184.755927][ T804] usb 1-1: 3:2 : does not exist [ 1185.204166][ T804] usb 1-1: USB disconnect, device number 9 [ 1186.992107][ T5538] FAULT_INJECTION: forcing a failure. [ 1186.992107][ T5538] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.996899][ T5538] CPU: 1 UID: 0 PID: 5538 Comm: syz.0.792 Tainted: G W L syzkaller #0 PREEMPT [ 1186.997077][ T5538] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1186.997142][ T5538] Hardware name: linux,dummy-virt (DT) [ 1186.997220][ T5538] Call trace: [ 1186.997281][ T5538] show_stack+0x18/0x24 (C) [ 1186.997464][ T5538] dump_stack_lvl+0x7c/0xb0 [ 1186.997583][ T5538] dump_stack+0x1c/0x28 [ 1186.997691][ T5538] should_fail_ex+0x6b4/0x6c4 [ 1186.997829][ T5538] should_failslab+0xbc/0x120 [ 1186.997948][ T5538] __kmalloc_noprof+0x4dc/0x74c [ 1186.998075][ T5538] lsm_blob_alloc+0x60/0x80 [ 1186.998205][ T5538] security_prepare_creds+0x30/0x200 [ 1186.998334][ T5538] prepare_creds+0x358/0x6bc [ 1186.998453][ T5538] prepare_exec_creds+0x14/0x210 [ 1186.998562][ T5538] bprm_execve+0xa0/0x1220 [ 1186.998755][ T5538] do_execveat_common.isra.0+0x370/0x460 [ 1186.998895][ T5538] __arm64_sys_execveat+0xd8/0x12c [ 1186.999009][ T5538] invoke_syscall+0x74/0x240 [ 1186.999131][ T5538] el0_svc_common.constprop.0+0xac/0x230 [ 1186.999247][ T5538] do_el0_svc+0x40/0x58 [ 1186.999361][ T5538] el0_svc+0x58/0x2a4 [ 1186.999491][ T5538] el0t_64_sync_handler+0xa0/0xe4 [ 1186.999687][ T5538] el0t_64_sync+0x198/0x19c [ 1187.501736][ T5231] udevd[5231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.152037][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1188.580469][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1188.582692][ T29] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1188.594842][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.600249][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1188.687872][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.699551][ T29] usb 1-1: Product: syz [ 1188.699996][ T29] usb 1-1: Manufacturer: syz [ 1188.700120][ T29] usb 1-1: SerialNumber: syz [ 1188.807177][ T29] usb 1-1: selecting invalid altsetting 1 [ 1188.830853][ T29] usb 1-1: unit 6 not found! [ 1194.370908][ T29] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1194.934132][ T29] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1195.613023][ T5231] udevd[5231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1202.863456][ T29] usb 1-1: USB disconnect, device number 10 [ 1235.726813][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 37s! [ 1235.730328][ C0] Showing busy workqueues and worker pools: [ 1235.730839][ C0] workqueue events: flags=0x100 [ 1235.731555][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=5 refcnt=6 [ 1235.732289][ C0] pending: 3*nsim_dev_hwstats_traffic_work, psi_avgs_work, vmstat_shepherd [ 1235.733970][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.734475][ C0] in-flight: 5310:free_ipc for 33s [ 1235.735574][ C0] workqueue events_unbound: flags=0x2 [ 1235.735847][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1235.736300][ C0] in-flight: 4492:nsim_dev_trap_report_work for 0s [ 1235.736729][ C0] pending: flush_memcg_stats_dwork [ 1235.737132][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 [ 1235.737482][ C0] in-flight: 4512:fsnotify_mark_destroy_workfn for 31s fsnotify_mark_destroy_workfn ,4493:fsnotify_connector_destroy_workfn for 31s fsnotify_connector_destroy_workfn ,4510:bpf_map_free_deferred for 41s [ 1235.739027][ C0] workqueue events_power_efficient: flags=0x82 [ 1235.739300][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1235.739757][ C0] in-flight: 4504:wg_ratelimiter_gc_entries for 0s ,4506:gc_worker for 0s [ 1235.740888][ C0] workqueue rcu_gp: flags=0x108 [ 1235.741002][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.741306][ C0] pending: srcu_invoke_callbacks [ 1235.742237][ C0] workqueue wg-kex-wg0: flags=0x124 [ 1235.742369][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.742714][ C0] pending: wg_packet_handshake_receive_worker [ 1235.743206][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1235.743316][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 1235.743916][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 1235.744679][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1235.744792][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1235.745175][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 1235.745550][ C0] workqueue wg-kex-wg2: flags=0x124 [ 1235.745648][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.746003][ C0] pending: wg_packet_handshake_receive_worker [ 1235.746294][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1235.746443][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1235.746812][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 1235.747256][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1235.747364][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1235.747706][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 1235.748055][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.748535][ C0] pending: wg_packet_decrypt_worker [ 1235.748804][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1235.748935][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 1235.749488][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 1235.749939][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.750265][ C0] in-flight: 4487:wg_packet_tx_worker for 0s [ 1235.750740][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1235.750867][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.751194][ C0] pending: wg_packet_encrypt_worker [ 1235.751495][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1235.751831][ C0] pending: wg_packet_encrypt_worker [ 1235.752799][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=5 idle: 4184 29 3485 [ 1235.753845][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=7 idle: 4520 [ 1235.754490][ C0] Showing backtraces of busy workers in stalled worker pools: [ 1235.755126][ C0] pool 2: no worker in running state, cpu=0 is busy (nr_workers=5 nr_idle=5) [ 1235.755242][ C0] The pool might have trouble waking an idle worker. [ 1235.755331][ C0] Backtrace of last woken worker: [ 1235.755791][ C0] task:kworker/0:0 state:R running task stack:0 pid:4139 tgid:4139 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 1235.757338][ C0] Workqueue: 0x0 (wg-crypt-wg1) [ 1235.758359][ C0] Call trace: [ 1235.758518][ C0] __switch_to+0x20c/0x520 (T) [ 1235.758710][ C0] __schedule+0xf98/0x34f4 [ 1235.758852][ C0] schedule+0xcc/0x288 [ 1235.759015][ C0] worker_thread+0x200/0xc90 [ 1235.759170][ C0] kthread+0x2ec/0x384 [ 1235.759308][ C0] ret_from_fork+0x10/0x20 [ 1235.760412][ C0] NMI backtrace for cpu 0 [ 1235.760662][ C0] CPU: 0 UID: 0 PID: 3384 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT [ 1235.760816][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1235.760869][ C0] Hardware name: linux,dummy-virt (DT) [ 1235.760937][ C0] Call trace: [ 1235.761001][ C0] show_stack+0x18/0x24 (C) [ 1235.761167][ C0] dump_stack_lvl+0x7c/0xb0 [ 1235.761315][ C0] dump_stack+0x1c/0x28 [ 1235.761469][ C0] nmi_cpu_backtrace+0x198/0x228 [ 1235.761609][ C0] nmi_trigger_cpumask_backtrace+0x244/0x358 [ 1235.761762][ C0] arch_trigger_cpumask_backtrace+0x18/0x24 [ 1235.761910][ C0] cpumask_backtrace+0x10/0x20 [ 1235.762063][ C0] wq_watchdog_timer_fn+0xa48/0xb5c [ 1235.762214][ C0] call_timer_fn+0x1b4/0xa8c [ 1235.762360][ C0] __run_timers+0x890/0xb04 [ 1235.762517][ C0] run_timer_base+0x110/0x180 [ 1235.762671][ C0] run_timer_softirq+0x24/0x50 [ 1235.762816][ C0] handle_softirqs+0x2d8/0x1048 [ 1235.762968][ C0] __do_softirq+0x14/0x20 [ 1235.763164][ C0] ____do_softirq+0x10/0x20 [ 1235.763323][ C0] call_on_irq_stack+0x30/0x48 [ 1235.763486][ C0] do_softirq_own_stack+0x1c/0x40 [ 1235.763630][ C0] __irq_exit_rcu+0x470/0x598 [ 1235.763767][ C0] irq_exit_rcu+0x14/0x80 [ 1235.763903][ C0] el1_interrupt+0x40/0x60 [ 1235.764128][ C0] el1h_64_irq_handler+0x18/0x30 [ 1235.764282][ C0] el1h_64_irq+0x6c/0x70 [ 1235.764544][ C0] kasan_check_range+0x38/0x1a8 (P) [ 1235.764711][ C0] __destroy_inode+0x398/0x700 [ 1235.764858][ C0] destroy_inode+0x78/0x164 [ 1235.764997][ C0] evict+0x3e4/0x74c [ 1235.765154][ C0] iput.part.0+0x404/0xb40 [ 1235.765290][ C0] iput+0x34/0x44 [ 1235.765426][ C0] filename_unlinkat+0x320/0x4fc [ 1235.765558][ C0] __arm64_sys_unlinkat+0x98/0xe8 [ 1235.765689][ C0] invoke_syscall+0x74/0x240 [ 1235.765844][ C0] el0_svc_common.constprop.0+0xac/0x230 [ 1235.766010][ C0] do_el0_svc+0x40/0x58 [ 1235.766155][ C0] el0_svc+0x58/0x2a4 [ 1235.766310][ C0] el0t_64_sync_handler+0xa0/0xe4 [ 1235.766467][ C0] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1239.526381][ T30] audit: type=1400 audit(1239.100:343): avc: denied { read } for pid=3183 comm="syslogd" name="log" dev="vda" ino=1857 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1239.530515][ T30] audit: type=1400 audit(1239.100:344): avc: denied { search } for pid=3183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.539609][ T30] audit: type=1400 audit(1239.100:345): avc: denied { write search } for pid=3183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.543113][ T30] audit: type=1400 audit(1239.100:346): avc: denied { add_name } for pid=3183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.547524][ T30] audit: type=1400 audit(1239.100:347): avc: denied { create } for pid=3183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1239.556432][ T30] audit: type=1400 audit(1239.100:348): avc: denied { append open } for pid=3183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1239.562933][ T30] audit: type=1400 audit(1239.100:349): avc: denied { getattr } for pid=3183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 VM DIAGNOSIS: 06:13:51 Registers: info registers vcpu 0 CPU#0 PC=ffff80008423472c X00=ffff8000859b1ea0 X01=0000000000000000 X02=0000000000000000 X03=1fffe00002eae741 X04=ffff80008db97510 X05=ffff000017573a00 X06=ffff800087764369 X07=00000000f2000000 X08=00000000f2f2f2f2 X09=00000000f3f3f300 X10=00000000f204f204 X11=1ffff00010f0d7d0 X12=ffff700010f0d7d1 X13=00000000f1f1f1f1 X14=fffffffffffebcb8 X15=1ffff00010f33f1c X16=ffff800084a28a18 X17=ffff800084a2f150 X18=0000000000000012 X19=ffff800087a17630 X20=ffff000017573a00 X21=0000000000000003 X22=0000000000000028 X23=dfff800000000000 X24=ffff800087a17600 X25=0000000000000000 X26=0000000000000004 X27=ffff800087a17630 X28=ffff00006bf79369 X29=ffff80008db97290 X30=ffff8000859b1eb0 SP=ffff80008db97290 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=732528746174736c:00000073252f7325 Q02=0000000000000002:0000000000000000 Q03=00ff000000000000:ffffff00ff0000ff Q04=0000000000000000:0f000000fff0f00f Q05=0000000000000002:0000000000000002 Q06=0000ffffa7dd65b0:0000ffffa7dd6590 Q07=0000ffffa7dd65a8:0000ffffa7dd6578 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=bb448243222c92da:e3914ed4e87380b0 Q23=43788d6f07084f17:4508b00c6052a10f Q24=b20fae707afde253:388e9c6c4fa85ca0 Q25=8e9f894b2581e79e:20c883c9819d5c97 Q26=57c93d417f4d0394:89cd11f6992873d1 Q27=6b69be1163cb6500:a4ac85c293540e63 Q28=6edc4d3a2914b135:d8e9c869e2695c88 Q29=0000000000000000:0009000700030001 Q30=ffffff80ffffffd8:0000fffffa09ca20 Q31=0000fffffa09ca50:0000fffffa09ca50 info registers vcpu 1 CPU#1 PC=ffff800081ec5184 X00=0000000000000002 X01=0000000000000007 X02=0000000000000000 X03=1fffe00001dfc832 X04=0000000000000018 X05=ffff80008e027a10 X06=ffff700011c04f42 X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011c04f42 X11=1ffff00011c04f42 X12=ffff700011c04f43 X13=205d304320202020 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff00000efe4080 X20=ffff80008db8d018 X21=ffff8000881215c0 X22=0000000000000020 X23=dfff800000000000 X24=ffff00000f244002 X25=0000000000000001 X26=0000000000000051 X27=ffff800081ec5000 X28=ffff80008e027db8 X29=ffff80008e027a10 X30=ffff800081ec593c SP=ffff80008e027a10 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=8004010000000806:0c01698c000001ff Q01=0128100017800420:82100001d010002d Q02=fffff5081798030c:020017960301be02 Q03=0017a203aaaaaaaa:aa01ffffffffffff Q04=a203aaaaaaaaaa01:ffffffffffffffff Q05=fffffffffffffffb:0817a40354020017 Q06=c4003270756f7267:6301ffffffffffff Q07=0008060a0105dc00:10004d8004040006 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:000001f40000000a Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000200000000:0000000000000002 Q25=0000ffffabe0c210:0000000000000000 Q26=00000000000001d8:0000aaaadced8740 Q27=0000ffffabc5159c:0000ffffdc0b0be0 Q28=b2041db5c9b23c00:0000000000000004 Q29=0000aaaadcef4b0e:0000aaaadcef49d0 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000001