last executing test programs: 22.765319067s ago: executing program 1 (id=1541): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.284118547s ago: executing program 0 (id=1546): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4, 0xeffffe01, 0x7fff, 0xff, "fe67e23fb5533a39eb5c0b319b7d34441000", 0x6, 0x10}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 16.772456249s ago: executing program 0 (id=1547): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r0, &(0x7f00000002c0)=""/153, 0x99) r1 = memfd_create(0x0, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r1, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) getpgid(0xffffffffffffffff) 8.572775314s ago: executing program 1 (id=1548): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000013b84beb23dbf5396dd026fd11a576bedf00010000000000000000e206000000", @ANYRES32=0x0, @ANYBLOB="06a00000000000000c001a800800058004000180"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000640)="ffffffffffff0011223344554305000f3200000000010011221f445500112233445500ff0000", 0x26, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14) 6.621480394s ago: executing program 0 (id=1549): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 5.887438018s ago: executing program 0 (id=1550): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="01154e0001000011ca01000188", 0xd, 0x840, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fff9, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.992363713s ago: executing program 0 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 4.479467846s ago: executing program 0 (id=1552): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.320889357s ago: executing program 1 (id=1553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x12e, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e23, 0x116, 0x0, @wg=@data={0x4, 0x202, 0x10001, "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"}}}}, 0x13c) 3.159444373s ago: executing program 1 (id=1554): r0 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x30b8, 0x8, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd33, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x7, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x204, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) 0s ago: executing program 1 (id=1555): r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmdt(r0) syz_open_procfs$namespace(0x0, &(0x7f00000012c0)='ns/uts\x00') write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x13c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8, 0x3a, ':`%', 0x3a, 'bridge0\x00', 0x3a, './myconfig/usb_gadget/g1/functions/acm.0', 0x3a, [0x50, 0x50, 0x50, 0x4f]}, 0x57) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x800008a, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') syz_usb_connect$uac2(0x2, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000401e04003040000102030109028600030180a00e080b0101010a20760904000000010120000924010000032600de11240906420000000200000000000000000c2403fd0405a80406060022090401000001022000090401010101022000090501094000050400082501010909020009040200000102200009040201010102200009058209ff03090402082501023c0a02001e9f52daa1c32c1d7a94d429bcf5118a83c57863e78e400a07b58ad1b39c8ac3231eff16683cae418abc1485fe"], 0x0) socket$kcm(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): n process `syz.1.280'. [ 646.376216][ T4330] netlink: 92 bytes leftover after parsing attributes in process `syz.1.283'. [ 659.904431][ T29] audit: type=1400 audit(659.490:336): avc: denied { sqpoll } for pid=4344 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 662.380561][ T29] audit: type=1400 audit(661.970:337): avc: denied { map } for pid=4361 comm="syz.1.293" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 662.605285][ T29] audit: type=1400 audit(662.190:338): avc: denied { create } for pid=4366 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 662.908306][ T29] audit: type=1400 audit(662.500:339): avc: denied { append } for pid=4366 comm="syz.1.295" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 662.928863][ T4367] FAULT_INJECTION: forcing a failure. [ 662.928863][ T4367] name fail_futex, interval 1, probability 0, space 0, times 1 [ 662.930471][ T4367] CPU: 1 UID: 0 PID: 4367 Comm: syz.1.295 Tainted: G W L syzkaller #0 PREEMPT [ 662.930557][ T4367] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 662.930584][ T4367] Hardware name: linux,dummy-virt (DT) [ 662.930619][ T4367] Call trace: [ 662.930647][ T4367] show_stack+0x18/0x24 (C) [ 662.930748][ T4367] dump_stack_lvl+0x7c/0xb0 [ 662.930805][ T4367] dump_stack+0x1c/0x28 [ 662.930857][ T4367] should_fail_ex+0x6b4/0x6c4 [ 662.930919][ T4367] should_fail+0x14/0x34 [ 662.930980][ T4367] get_futex_key+0x198/0xf84 [ 662.931035][ T4367] futex_wait_setup+0x64/0x55c [ 662.931088][ T4367] __futex_wait+0x138/0x218 [ 662.931139][ T4367] futex_wait+0xe4/0x2ac [ 662.931190][ T4367] do_futex+0x1e8/0x280 [ 662.931240][ T4367] __arm64_sys_futex+0x1e8/0x310 [ 662.931300][ T4367] invoke_syscall+0x74/0x240 [ 662.931356][ T4367] el0_svc_common.constprop.0+0xac/0x230 [ 662.931451][ T4367] do_el0_svc+0x40/0x58 [ 662.931507][ T4367] el0_svc+0x58/0x2a4 [ 662.931568][ T4367] el0t_64_sync_handler+0xa0/0xe4 [ 662.931620][ T4367] el0t_64_sync+0x198/0x19c [ 677.842450][ T4420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.865868][ T4420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.386163][ T29] audit: type=1400 audit(689.930:340): avc: denied { kexec_image_load } for pid=4440 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 691.929622][ T29] audit: type=1400 audit(691.520:341): avc: denied { create } for pid=4450 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 691.939695][ T29] audit: type=1400 audit(691.530:342): avc: denied { ioctl } for pid=4450 comm="syz.0.326" path="socket:[7097]" dev="sockfs" ino=7097 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 693.388610][ T29] audit: type=1400 audit(692.970:343): avc: denied { write } for pid=4452 comm="syz.0.327" name="usb_gadget" dev="configfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.393469][ T29] audit: type=1400 audit(692.980:344): avc: denied { add_name } for pid=4452 comm="syz.0.327" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.412186][ T29] audit: type=1400 audit(693.000:345): avc: denied { create } for pid=4452 comm="syz.0.327" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 693.455132][ T29] audit: type=1400 audit(693.040:346): avc: denied { write } for pid=4452 comm="syz.0.327" name="functions" dev="configfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.485948][ T29] audit: type=1400 audit(693.070:347): avc: denied { write } for pid=4452 comm="syz.0.327" name="core" dev="configfs" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.538101][ T29] audit: type=1400 audit(693.130:348): avc: denied { write } for pid=4452 comm="syz.0.327" name="target" dev="configfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.565332][ T29] audit: type=1400 audit(693.150:349): avc: denied { write } for pid=4452 comm="syz.0.327" name="usb_gadget" dev="configfs" ino=7108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 698.800992][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 698.808261][ T29] audit: type=1400 audit(698.390:354): avc: denied { map_create } for pid=4461 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.172443][ T805] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 699.448266][ T805] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 699.654959][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.657172][ T805] usb 1-1: Product: syz [ 699.666124][ T805] usb 1-1: Manufacturer: syz [ 699.669402][ T805] usb 1-1: SerialNumber: syz [ 705.893367][ T805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -ETIMEDOUT [ 705.919090][ T805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -110 [ 705.919814][ T805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 706.098820][ T805] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -110 [ 710.633950][ T3528] usb 1-1: USB disconnect, device number 5 [ 712.695991][ T3528] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 713.540906][ T3528] usb 1-1: Using ep0 maxpacket: 16 [ 713.564817][ T3528] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 713.582093][ T3528] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.582764][ T3528] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 713.583146][ T3528] usb 1-1: config 0 interface 0 has no altsetting 0 [ 713.584791][ T3528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.548259][ T3528] usb 1-1: config 0 descriptor?? [ 716.862429][ T3528] hid-generic 0003:0810:0001.0002: unexpected long global item [ 716.901138][ T3528] hid-generic 0003:0810:0001.0002: probe with driver hid-generic failed with error -22 [ 717.406940][ T3528] usb 1-1: USB disconnect, device number 6 [ 722.805027][ T29] audit: type=1400 audit(722.370:355): avc: denied { read } for pid=4494 comm="syz.0.342" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 722.823241][ T29] audit: type=1400 audit(722.400:356): avc: denied { open } for pid=4494 comm="syz.0.342" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 723.118884][ T4497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.198247][ T4497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.003052][ T29] audit: type=1400 audit(727.590:357): avc: denied { ioctl } for pid=4519 comm="syz.0.350" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 730.383312][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 731.265094][ T3528] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 731.434494][ T3528] usb 1-1: Using ep0 maxpacket: 32 [ 731.445666][ T3528] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 731.486892][ T3528] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 731.488829][ T3528] usb 1-1: config 0 has no interface number 0 [ 731.572975][ T3528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.584377][ T3528] usb 1-1: Product: syz [ 731.586250][ T3528] usb 1-1: Manufacturer: syz [ 731.587678][ T3528] usb 1-1: SerialNumber: syz [ 731.620781][ T3528] usb 1-1: config 0 descriptor?? [ 740.733158][ T3528] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -110 [ 740.738170][ T3528] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 740.765791][ T3528] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -32 [ 740.777192][ T3528] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 744.000362][ T29] audit: type=1400 audit(743.590:358): avc: denied { read } for pid=4548 comm="syz.1.360" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 744.001291][ T29] audit: type=1400 audit(743.590:359): avc: denied { open } for pid=4548 comm="syz.1.360" path="/dev/fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 744.015506][ T29] audit: type=1400 audit(743.600:360): avc: denied { ioctl } for pid=4548 comm="syz.1.360" path="/dev/fb0" dev="devtmpfs" ino=620 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 745.076693][ T29] audit: type=1400 audit(744.660:361): avc: denied { prog_load } for pid=4552 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 745.127316][ T29] audit: type=1400 audit(744.720:362): avc: denied { prog_run } for pid=4552 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 745.145473][ T29] audit: type=1400 audit(744.730:363): avc: denied { relabelfrom } for pid=4552 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 745.148283][ T29] audit: type=1400 audit(744.740:364): avc: denied { relabelto } for pid=4552 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 745.837403][ T29] audit: type=1400 audit(745.400:365): avc: denied { create } for pid=4554 comm="syz.1.363" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 745.961258][ T3528] usb 1-1: USB disconnect, device number 7 [ 746.831618][ T4562] Could not find key with description: [0123456789abcdef] [ 746.850580][ T4562] process_request_key_err: No key [ 746.852081][ T4562] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 746.853205][ T4562] One or more global auth toks could not properly register; rc = [-2] [ 746.855696][ T4562] Error validating options; rc = [-2] [ 747.130374][ T4565] netlink: 'syz.0.366': attribute type 29 has an invalid length. [ 748.206483][ T3487] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 748.887059][ T3487] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 749.290740][ T3487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.291572][ T3487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 749.291964][ T3487] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.208157][ T3487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.208804][ T3487] usb 1-1: Product: syz [ 750.211917][ T3487] usb 1-1: Manufacturer: syz [ 750.212471][ T3487] usb 1-1: SerialNumber: syz [ 752.048790][ T3487] usb 1-1: USB disconnect, device number 8 [ 758.855565][ T4580] __vm_enough_memory: pid: 4580, comm: syz.0.372, bytes: 4503599627366400 not enough memory for the allocation [ 769.858916][ T4587] mmap: syz.0.374 (4587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 771.651256][ T29] audit: type=1400 audit(771.240:366): avc: denied { bind } for pid=4592 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 774.199706][ T29] audit: type=1326 audit(773.790:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.0.381" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x0 [ 776.137341][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.161203][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.937366][ T29] audit: type=1400 audit(776.530:368): avc: denied { write } for pid=4611 comm="syz.1.384" name="001" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 776.962949][ T4612] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 778.689155][ T4616] Console: switching to colour dummy device 80x25 [ 778.813251][ T4616] Console: switching to colour frame buffer device 128x48 [ 783.796559][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 784.017361][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 784.039659][ T9] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 784.065203][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.141437][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.145053][ T9] usb 1-1: Product: syz [ 784.148172][ T9] usb 1-1: Manufacturer: syz [ 784.149760][ T9] usb 1-1: SerialNumber: syz [ 784.240609][ T9] usb 1-1: config 0 descriptor?? [ 784.320051][ T9] xr_serial 1-1:0.0: failed to claim sibling interface: -16 [ 784.326858][ T9] xr_serial 1-1:0.0: probe with driver xr_serial failed with error -16 [ 784.596757][ T4020] usb 1-1: USB disconnect, device number 9 [ 785.697474][ T29] audit: type=1400 audit(785.290:369): avc: denied { node_bind } for pid=4636 comm="syz.0.393" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 787.576148][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 787.756697][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 787.790051][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 787.792715][ T10] usb 1-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=30.d7 [ 787.816949][ T10] usb 1-1: config 248 has an invalid interface number: 107 but max is 0 [ 787.819011][ T10] usb 1-1: config 248 has no interface number 0 [ 787.821094][ T10] usb 1-1: config 248 interface 107 has no altsetting 0 [ 788.000352][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.006482][ T10] usb 1-1: Product: syz [ 788.012707][ T10] usb 1-1: Manufacturer: syz [ 788.014975][ T10] usb 1-1: SerialNumber: syz [ 788.328412][ T10] rtl8150 1-1:248.107: couldn't find required endpoints [ 788.336708][ T10] rtl8150 1-1:248.107: probe with driver rtl8150 failed with error -5 [ 788.540580][ T10] usb 1-1: USB disconnect, device number 10 [ 795.597679][ T29] audit: type=1400 audit(795.180:370): avc: denied { write } for pid=4647 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 795.632282][ T29] audit: type=1400 audit(795.220:371): avc: denied { map_read map_write } for pid=4647 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 796.764398][ T29] audit: type=1400 audit(796.340:372): avc: denied { read write } for pid=4650 comm="syz.0.399" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 796.765446][ T29] audit: type=1400 audit(796.340:373): avc: denied { open } for pid=4650 comm="syz.0.399" path="/dev/mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 796.771623][ T29] audit: type=1400 audit(796.360:374): avc: denied { ioctl } for pid=4650 comm="syz.0.399" path="/dev/mtd0" dev="devtmpfs" ino=683 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 797.022817][ T29] audit: type=1326 audit(796.610:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.398" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 797.030800][ T29] audit: type=1326 audit(796.620:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.398" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 797.044665][ T29] audit: type=1326 audit(796.630:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.398" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 797.050022][ T29] audit: type=1326 audit(796.640:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.398" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 797.059610][ T29] audit: type=1326 audit(796.650:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.398" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 801.067417][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 801.069797][ T29] audit: type=1400 audit(800.580:386): avc: denied { connect } for pid=4661 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 809.428155][ T29] audit: type=1326 audit(809.020:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.431943][ T29] audit: type=1326 audit(809.020:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.479062][ T29] audit: type=1326 audit(809.020:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.487661][ T29] audit: type=1326 audit(809.030:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=183 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.488541][ T29] audit: type=1326 audit(809.030:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.488872][ T29] audit: type=1326 audit(809.030:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.489197][ T29] audit: type=1326 audit(809.030:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.489522][ T29] audit: type=1326 audit(809.030:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 809.489807][ T29] audit: type=1326 audit(809.030:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.1.406" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbcd79368 code=0x7ffc0000 [ 810.592898][ T29] audit: type=1400 audit(810.180:396): avc: denied { create } for pid=4676 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 815.945395][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 815.949721][ T29] audit: type=1400 audit(815.540:406): avc: denied { write } for pid=4681 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.178745][ T29] audit: type=1400 audit(815.550:407): avc: denied { remove_name } for pid=4681 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.825489][ T29] audit: type=1326 audit(816.360:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.0.409" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x0 [ 825.675693][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 825.994735][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 826.055525][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 826.058553][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 826.061449][ T10] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 826.064092][ T10] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 826.066217][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.128194][ T4697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 826.606210][ T10] ims_pcu 1-1:1.0: GET_INFO command failed, error: -71 [ 826.626457][ T10] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -71 [ 826.808287][ T23] usb 1-1: USB disconnect, device number 11 [ 832.646630][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 835.547572][ T4711] serio: Serial port ptm0 [ 840.364716][ T4720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 842.630010][ T29] audit: type=1400 audit(842.220:409): avc: denied { allowed } for pid=4721 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 847.434265][ T29] audit: type=1400 audit(847.020:410): avc: denied { mount } for pid=4725 comm="syz.0.421" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 847.518661][ T29] audit: type=1400 audit(847.100:411): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 848.143034][ T29] audit: type=1400 audit(847.730:412): avc: denied { create } for pid=4729 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 848.325790][ T29] audit: type=1400 audit(847.910:413): avc: denied { map } for pid=4729 comm="syz.0.423" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 848.346559][ T29] audit: type=1400 audit(847.930:414): avc: denied { read write } for pid=4729 comm="syz.0.423" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 851.607106][ T29] audit: type=1400 audit(851.200:415): avc: denied { write } for pid=4745 comm="syz.0.427" name="functions" dev="configfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.636034][ T29] audit: type=1400 audit(851.230:416): avc: denied { write } for pid=4745 comm="syz.0.427" name="interface.ncm" dev="configfs" ino=8312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.645275][ T29] audit: type=1400 audit(851.240:417): avc: denied { write } for pid=4745 comm="syz.0.427" name="functions" dev="configfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.655643][ T29] audit: type=1400 audit(851.250:418): avc: denied { write } for pid=4745 comm="syz.0.427" name="interface.rndis" dev="configfs" ino=8317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 852.296923][ T29] audit: type=1400 audit(851.890:419): avc: denied { bind } for pid=4750 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 852.304587][ T29] audit: type=1400 audit(851.890:420): avc: denied { name_bind } for pid=4750 comm="syz.1.429" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 852.306797][ T29] audit: type=1400 audit(851.890:421): avc: denied { node_bind } for pid=4750 comm="syz.1.429" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 863.997247][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 864.383439][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 864.389640][ T29] audit: type=1400 audit(863.970:423): avc: denied { connect } for pid=4774 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 864.442152][ T29] audit: type=1400 audit(864.030:424): avc: denied { bind } for pid=4774 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 864.456489][ T29] audit: type=1400 audit(864.050:425): avc: denied { write } for pid=4774 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 866.727853][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 866.930326][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 866.943131][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 866.957651][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 866.958342][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.958575][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 866.958795][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 866.959008][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.959366][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.359897][ T23] usb 1-1: usb_control_msg returned -32 [ 867.361929][ T23] usbtmc 1-1:16.0: can't read capabilities [ 868.967020][ T29] audit: type=1400 audit(868.560:426): avc: denied { read } for pid=4800 comm="syz.1.449" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 868.970264][ T29] audit: type=1400 audit(868.560:427): avc: denied { open } for pid=4800 comm="syz.1.449" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 868.981057][ T4801] binder: 4800:4801 ioctl 4018620d 0 returned -22 [ 868.981093][ T29] audit: type=1400 audit(868.570:428): avc: denied { ioctl } for pid=4800 comm="syz.1.449" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 869.103147][ T29] audit: type=1400 audit(868.690:429): avc: denied { cmd } for pid=4800 comm="iou-wrk-4801" path="socket:[8413]" dev="sockfs" ino=8413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 874.449329][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.480256][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.566146][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.569601][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.841539][ T4810] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 881.562789][ T23] usb 1-1: USB disconnect, device number 12 [ 884.456477][ T29] audit: type=1400 audit(884.050:430): avc: denied { read write } for pid=4825 comm="syz.0.454" name="vhost-vsock" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 884.470195][ T29] audit: type=1400 audit(884.060:431): avc: denied { open } for pid=4825 comm="syz.0.454" path="/dev/vhost-vsock" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 884.514542][ T29] audit: type=1400 audit(884.100:432): avc: denied { ioctl } for pid=4825 comm="syz.0.454" path="/dev/vhost-vsock" dev="devtmpfs" ino=717 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 888.671736][ T4840] FAULT_INJECTION: forcing a failure. [ 888.671736][ T4840] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 888.672609][ T4840] CPU: 1 UID: 0 PID: 4840 Comm: syz.0.460 Tainted: G W L syzkaller #0 PREEMPT [ 888.672774][ T4840] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 888.672834][ T4840] Hardware name: linux,dummy-virt (DT) [ 888.672907][ T4840] Call trace: [ 888.673026][ T4840] show_stack+0x18/0x24 (C) [ 888.673232][ T4840] dump_stack_lvl+0x7c/0xb0 [ 888.673359][ T4840] dump_stack+0x1c/0x28 [ 888.673515][ T4840] should_fail_ex+0x6b4/0x6c4 [ 888.673650][ T4840] should_fail+0x14/0x34 [ 888.673769][ T4840] should_fail_usercopy+0x1c/0x40 [ 888.673884][ T4840] strncpy_from_user+0x38/0x2e0 [ 888.673994][ T4840] path_setxattrat+0xfc/0x260 [ 888.674113][ T4840] __arm64_sys_lsetxattr+0xac/0x120 [ 888.674278][ T4840] invoke_syscall+0x74/0x240 [ 888.674394][ T4840] el0_svc_common.constprop.0+0xac/0x230 [ 888.674511][ T4840] do_el0_svc+0x40/0x58 [ 888.674617][ T4840] el0_svc+0x58/0x2a4 [ 888.674786][ T4840] el0t_64_sync_handler+0xa0/0xe4 [ 888.675158][ T4840] el0t_64_sync+0x198/0x19c [ 889.667548][ T29] audit: type=1400 audit(889.260:433): avc: denied { write } for pid=4844 comm="syz.0.461" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 895.805616][ T4837] syz.1.459 (4837): drop_caches: 1 [ 902.985734][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.989611][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.685335][ T4875] FAULT_INJECTION: forcing a failure. [ 904.685335][ T4875] name failslab, interval 1, probability 0, space 0, times 0 [ 904.689530][ T4875] CPU: 1 UID: 0 PID: 4875 Comm: syz.1.470 Tainted: G W L syzkaller #0 PREEMPT [ 904.689692][ T4875] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 904.689749][ T4875] Hardware name: linux,dummy-virt (DT) [ 904.689835][ T4875] Call trace: [ 904.689895][ T4875] show_stack+0x18/0x24 (C) [ 904.690085][ T4875] dump_stack_lvl+0x7c/0xb0 [ 904.690204][ T4875] dump_stack+0x1c/0x28 [ 904.690323][ T4875] should_fail_ex+0x6b4/0x6c4 [ 904.690467][ T4875] should_failslab+0xbc/0x120 [ 904.690591][ T4875] kmem_cache_alloc_noprof+0x3d4/0x610 [ 904.690713][ T4875] vm_area_alloc+0x28/0x150 [ 904.690845][ T4875] __mmap_region+0x1350/0x1c20 [ 904.690967][ T4875] mmap_region+0x220/0x4d0 [ 904.691085][ T4875] do_mmap+0x9d0/0x13a0 [ 904.691200][ T4875] vm_mmap_pgoff+0x1f4/0x348 [ 904.691431][ T4875] ksys_mmap_pgoff+0x50/0x684 [ 904.691551][ T4875] __arm64_sys_mmap+0xd0/0x148 [ 904.691667][ T4875] invoke_syscall+0x74/0x240 [ 904.691789][ T4875] el0_svc_common.constprop.0+0xac/0x230 [ 904.691913][ T4875] do_el0_svc+0x40/0x58 [ 904.692023][ T4875] el0_svc+0x58/0x2a4 [ 904.692152][ T4875] el0t_64_sync_handler+0xa0/0xe4 [ 904.692270][ T4875] el0t_64_sync+0x198/0x19c [ 911.577774][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 911.578431][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 914.921293][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.939982][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.482972][ T4899] Illegal XDP return value 3212111872 on prog (id 16) dev syz_tun, expect packet loss! [ 933.845863][ T29] audit: type=1400 audit(933.430:434): avc: denied { ioctl } for pid=4930 comm="syz.0.489" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7812 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 938.120434][ T29] audit: type=1400 audit(937.690:435): avc: denied { write } for pid=4935 comm="syz.0.490" name="vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 938.121004][ T29] audit: type=1400 audit(937.710:436): avc: denied { open } for pid=4935 comm="syz.0.490" path="/dev/vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 943.656492][ T29] audit: type=1400 audit(942.900:437): avc: denied { setopt } for pid=4943 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 949.371955][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 949.400026][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 955.819300][ T29] audit: type=1400 audit(955.410:438): avc: denied { setopt } for pid=4955 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 956.088993][ T29] audit: type=1400 audit(955.680:439): avc: denied { write } for pid=4955 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 957.173238][ T4963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.499'. [ 957.455492][ T4963] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 957.508114][ T4963] bond1 (unregistering): Released all slaves [ 957.774600][ T4967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.499'. [ 958.684944][ T4967] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 958.713450][ T4967] bond1 (unregistering): Released all slaves [ 959.694685][ T29] audit: type=1400 audit(959.270:440): avc: denied { ioctl } for pid=4971 comm="syz.1.502" path="socket:[8715]" dev="sockfs" ino=8715 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 959.700307][ T4973] : renamed from bond0 (while UP) [ 967.224547][ T29] audit: type=1400 audit(966.810:441): avc: denied { create } for pid=4987 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 967.256869][ T29] audit: type=1400 audit(966.840:442): avc: denied { sys_admin } for pid=4987 comm="syz.0.508" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 967.754149][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 969.096317][ T29] audit: type=1400 audit(968.690:443): avc: denied { create } for pid=4999 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 975.440027][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.492948][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.947271][ T5039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 980.619754][ T5039] md: personality for level is not loaded! [ 991.061649][ T5059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 994.468401][ T5080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 997.152182][ T5094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 997.165894][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 997.389896][ T5094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 997.392549][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 1004.379163][ T5111] : (slave bond_slave_0): Releasing backup interface [ 1004.621435][ T5111] : (slave bond_slave_1): Releasing backup interface [ 1005.199191][ T5111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1006.030841][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 1007.848452][ T29] audit: type=1400 audit(1007.430:444): avc: denied { create } for pid=5124 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1015.135888][ T29] audit: type=1400 audit(1014.700:445): avc: denied { watch watch_reads } for pid=5138 comm="syz.0.563" path=2F6D656D66643A2D42D54E49C56A9A707078F00884A26D202864656C6574656429 dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1021.697444][ T5160] LUN: removable file: (no medium) [ 1021.710178][ T5160] LUN: removable file: (no medium) [ 1021.796109][ T29] audit: type=1400 audit(1021.280:446): avc: denied { write } for pid=5147 comm="syz.1.567" name="functions" dev="configfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1021.797119][ T29] audit: type=1400 audit(1021.300:447): avc: denied { write } for pid=5147 comm="syz.1.567" name="mass_storage.0" dev="configfs" ino=8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1029.291362][ T5180] fuse: Bad value for 'fd' [ 1032.589387][ T29] audit: type=1400 audit(1032.180:448): avc: denied { read write } for pid=5204 comm="syz.1.589" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1032.595546][ T29] audit: type=1400 audit(1032.180:449): avc: denied { open } for pid=5204 comm="syz.1.589" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1034.184821][ T5220] FAULT_INJECTION: forcing a failure. [ 1034.184821][ T5220] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.185268][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz.1.597 Tainted: G W L syzkaller #0 PREEMPT [ 1034.185355][ T5220] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1034.185383][ T5220] Hardware name: linux,dummy-virt (DT) [ 1034.185419][ T5220] Call trace: [ 1034.185455][ T5220] show_stack+0x18/0x24 (C) [ 1034.185612][ T5220] dump_stack_lvl+0x7c/0xb0 [ 1034.185714][ T5220] dump_stack+0x1c/0x28 [ 1034.185768][ T5220] should_fail_ex+0x6b4/0x6c4 [ 1034.185834][ T5220] should_failslab+0xbc/0x120 [ 1034.185894][ T5220] __kmalloc_node_track_caller_noprof+0x44c/0x754 [ 1034.185962][ T5220] kmemdup_noprof+0x34/0x60 [ 1034.186021][ T5220] key_alloc+0x380/0xf44 [ 1034.186077][ T5220] keyring_alloc+0x58/0xc0 [ 1034.186129][ T5220] install_session_keyring_to_cred+0x140/0x1ac [ 1034.186262][ T5220] join_session_keyring+0x15c/0x2a0 [ 1034.186460][ T5220] lookup_user_key+0x8f4/0xc4c [ 1034.186633][ T5220] __arm64_sys_add_key+0x1e0/0x398 [ 1034.186755][ T5220] invoke_syscall+0x74/0x240 [ 1034.186861][ T5220] el0_svc_common.constprop.0+0xac/0x230 [ 1034.187023][ T5220] do_el0_svc+0x40/0x58 [ 1034.187128][ T5220] el0_svc+0x58/0x2a4 [ 1034.187283][ T5220] el0t_64_sync_handler+0xa0/0xe4 [ 1034.187356][ T5220] el0t_64_sync+0x198/0x19c [ 1034.607933][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 1039.637618][ T5239] netlink: 248 bytes leftover after parsing attributes in process `syz.0.603'. [ 1039.874463][ T29] audit: type=1400 audit(1039.200:450): avc: denied { nlmsg_read } for pid=5233 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1039.876548][ T29] audit: type=1400 audit(1039.310:451): avc: denied { write } for pid=5233 comm="syz.0.603" name="udp6" dev="proc" ino=4026532754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1042.490145][ T5241] FAULT_INJECTION: forcing a failure. [ 1042.490145][ T5241] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.490854][ T5241] CPU: 0 UID: 0 PID: 5241 Comm: syz.1.605 Tainted: G W L syzkaller #0 PREEMPT [ 1042.491036][ T5241] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1042.491100][ T5241] Hardware name: linux,dummy-virt (DT) [ 1042.491179][ T5241] Call trace: [ 1042.491243][ T5241] show_stack+0x18/0x24 (C) [ 1042.491466][ T5241] dump_stack_lvl+0x7c/0xb0 [ 1042.491577][ T5241] dump_stack+0x1c/0x28 [ 1042.491694][ T5241] should_fail_ex+0x6b4/0x6c4 [ 1042.491823][ T5241] should_failslab+0xbc/0x120 [ 1042.491946][ T5241] __kmalloc_cache_noprof+0x3ec/0x628 [ 1042.492059][ T5241] alloc_workqueue_attrs_noprof+0x40/0x1c4 [ 1042.492178][ T5241] __alloc_workqueue+0xb4/0x1248 [ 1042.492297][ T5241] alloc_workqueue_noprof+0xb8/0x110 [ 1042.492412][ T5241] nci_register_device+0x2d0/0x8c4 [ 1042.492596][ T5241] virtual_ncidev_open+0x110/0x1d0 [ 1042.492720][ T5241] misc_open+0x1c8/0x36c [ 1042.492860][ T5241] chrdev_open+0x1a0/0x4dc [ 1042.492991][ T5241] do_dentry_open+0x37c/0xfe8 [ 1042.493110][ T5241] vfs_open+0x5c/0x300 [ 1042.493221][ T5241] path_openat+0x12d4/0x1e40 [ 1042.493352][ T5241] do_file_open+0x18c/0x380 [ 1042.493518][ T5241] do_sys_openat2+0xdc/0x180 [ 1042.493636][ T5241] __arm64_sys_openat+0x134/0x1e0 [ 1042.493759][ T5241] invoke_syscall+0x74/0x240 [ 1042.493880][ T5241] el0_svc_common.constprop.0+0xac/0x230 [ 1042.494001][ T5241] do_el0_svc+0x40/0x58 [ 1042.494198][ T5241] el0_svc+0x58/0x2a4 [ 1042.494332][ T5241] el0t_64_sync_handler+0xa0/0xe4 [ 1042.494463][ T5241] el0t_64_sync+0x198/0x19c [ 1045.035554][ T29] audit: type=1400 audit(1044.550:452): avc: denied { write } for pid=5247 comm="syz.1.608" name="strings" dev="configfs" ino=7103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.040568][ T29] audit: type=1400 audit(1044.570:453): avc: denied { write } for pid=5247 comm="syz.1.608" name="configs" dev="configfs" ino=7102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.084768][ T29] audit: type=1400 audit(1044.650:454): avc: denied { write } for pid=5247 comm="syz.1.608" name="strings" dev="configfs" ino=9324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.104909][ T29] audit: type=1400 audit(1044.680:455): avc: denied { write } for pid=5247 comm="syz.1.608" name="functions" dev="configfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.142874][ T29] audit: type=1400 audit(1044.730:456): avc: denied { read } for pid=5247 comm="syz.1.608" name="no_out_endpoint" dev="configfs" ino=9328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1045.240503][ T29] audit: type=1400 audit(1044.830:457): avc: denied { write } for pid=5247 comm="syz.1.608" name="c.1" dev="configfs" ino=9323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.250110][ T29] audit: type=1400 audit(1044.840:458): avc: denied { create } for pid=5247 comm="syz.1.608" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1045.262148][ T29] audit: type=1400 audit(1044.850:459): avc: denied { write } for pid=5247 comm="syz.1.608" name="c.1" dev="configfs" ino=9323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1045.682010][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.711129][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.021299][ T29] audit: type=1400 audit(1052.570:460): avc: denied { accept } for pid=5271 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1053.202762][ T29] audit: type=1400 audit(1052.580:461): avc: denied { read } for pid=5271 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1055.912663][ T5293] fuse: Bad value for 'fd' [ 1059.977884][ T29] audit: type=1400 audit(1059.570:462): avc: denied { create } for pid=5311 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1060.821337][ T5321] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 1060.822106][ T5321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.637'. [ 1060.838779][ T5321] veth0: entered promiscuous mode [ 1060.839746][ T5321] veth0: entered allmulticast mode [ 1060.861273][ T5321] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1061.390406][ T29] audit: type=1400 audit(1060.980:463): avc: denied { create } for pid=5327 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1062.341198][ T29] audit: type=1400 audit(1061.930:464): avc: denied { write } for pid=5331 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1064.217574][ T5348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.645'. [ 1064.257790][ T5342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.645'. [ 1064.280141][ T5344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.645'. [ 1067.142456][ T5362] netlink: 60 bytes leftover after parsing attributes in process `syz.0.648'. [ 1067.150941][ T5358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.648'. [ 1067.160648][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.648'. [ 1070.369144][ T5376] netlink: 188 bytes leftover after parsing attributes in process `syz.0.653'. [ 1077.929655][ T5391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.656'. [ 1077.950473][ T5389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.656'. [ 1077.970849][ T5390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.656'. [ 1090.989675][ T29] audit: type=1400 audit(1090.580:465): avc: denied { write } for pid=5463 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1094.556653][ T5472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.578799][ T5472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.349581][ T29] audit: type=1400 audit(1098.940:466): avc: denied { bind } for pid=5488 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1100.698976][ T29] audit: type=1400 audit(1100.280:467): avc: denied { write } for pid=5496 comm="syz.1.703" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1100.741223][ T29] audit: type=1400 audit(1100.330:468): avc: denied { set_context_mgr } for pid=5496 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1100.766690][ T5497] binder: 5496:5497 ioctl c0306201 20000080 returned -14 [ 1124.301042][ T29] audit: type=1400 audit(1123.870:469): avc: denied { load_policy } for pid=5561 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1124.311357][ T5563] SELinux: policydb magic number 0xe248d450 does not match expected magic number 0xf97cff8c [ 1124.320010][ T5563] SELinux: failed to load policy [ 1125.289869][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 1125.295370][ T5572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.301166][ T5572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.379156][ T5581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.406189][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.676006][ T5587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.700420][ T5587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.040902][ T5596] fuse: Bad value for 'fd' [ 1130.408013][ T29] audit: type=1326 audit(1130.000:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.1.741" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcd79368 code=0x0 [ 1131.668910][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 1135.800241][ T29] audit: type=1400 audit(1135.390:471): avc: denied { getopt } for pid=5627 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1136.309244][ T5631] netlink: 136 bytes leftover after parsing attributes in process `syz.0.756'. [ 1142.992771][ T29] audit: type=1400 audit(1142.580:472): avc: denied { setattr } for pid=5641 comm="syz.0.761" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1143.239947][ T29] audit: type=1400 audit(1142.830:473): avc: denied { write } for pid=5643 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1145.739450][ T5653] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1145.739450][ T5653] The task syz.0.766 (5653) triggered the difference, watch for misbehavior. [ 1146.866845][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.876336][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.554449][ T29] audit: type=1400 audit(1150.130:474): avc: denied { create } for pid=5686 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1150.557318][ T29] audit: type=1400 audit(1150.150:475): avc: denied { bind } for pid=5686 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1150.562113][ T29] audit: type=1400 audit(1150.150:476): avc: denied { listen } for pid=5686 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1150.592503][ T29] audit: type=1400 audit(1150.180:477): avc: denied { connect } for pid=5686 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1150.624340][ T29] audit: type=1400 audit(1150.210:478): avc: denied { write } for pid=5686 comm="syz.1.780" path="socket:[10752]" dev="sockfs" ino=10752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1152.022579][ T5700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.049762][ T5700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.860734][ T29] audit: type=1400 audit(1163.450:479): avc: denied { write } for pid=5723 comm="syz.1.796" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1163.885906][ T29] audit: type=1400 audit(1163.470:480): avc: denied { open } for pid=5723 comm="syz.1.796" path="/dev/rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1163.909243][ T29] audit: type=1400 audit(1163.500:481): avc: denied { ioctl } for pid=5723 comm="syz.1.796" path="/dev/rtc0" dev="devtmpfs" ino=710 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1171.308110][ T29] audit: type=1326 audit(1170.900:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.0.809" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1171.340495][ T29] audit: type=1326 audit(1170.910:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.0.809" exe="/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1171.347760][ T29] audit: type=1326 audit(1170.940:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.0.809" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1171.357429][ T29] audit: type=1326 audit(1170.950:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.0.809" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1171.691654][ T5757] fuse: Bad value for 'fd' [ 1175.226775][ T5765] fuse: Bad value for 'fd' [ 1181.242539][ T5796] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 1181.242944][ T5796] netlink: 'syz.1.826': attribute type 2 has an invalid length. [ 1181.243198][ T5796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.826'. [ 1182.656558][ T29] audit: type=1400 audit(1182.250:486): avc: denied { read write } for pid=5809 comm="syz.1.833" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1182.668386][ T29] audit: type=1400 audit(1182.250:487): avc: denied { open } for pid=5809 comm="syz.1.833" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1185.916022][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.938256][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.320563][ T5827] netlink: 56 bytes leftover after parsing attributes in process `syz.1.840'. [ 1186.878257][ T29] audit: type=1400 audit(1186.470:488): avc: denied { remount } for pid=5830 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1188.852134][ T29] audit: type=1400 audit(1188.440:489): avc: denied { create } for pid=5842 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1188.870166][ T29] audit: type=1400 audit(1188.460:490): avc: denied { getopt } for pid=5842 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1190.028358][ T29] audit: type=1326 audit(1189.620:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1190.030079][ T29] audit: type=1326 audit(1189.620:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1190.041670][ T29] audit: type=1326 audit(1189.630:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1190.049451][ T29] audit: type=1326 audit(1189.640:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1190.055747][ T29] audit: type=1326 audit(1189.640:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1190.064599][ T29] audit: type=1326 audit(1189.650:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1190.072259][ T29] audit: type=1326 audit(1189.660:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89179368 code=0x7ffc0000 [ 1190.072951][ T29] audit: type=1326 audit(1189.660:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.852" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8915c22c code=0x7ffc0000 [ 1190.333111][ T4020] hid_parser_main: 243 callbacks suppressed [ 1190.345496][ T4020] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1190.387512][ T4020] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1194.750238][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1194.751105][ T29] audit: type=1400 audit(1194.340:510): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1196.070333][ T5875] hid-generic 0000:0000:0000.0003: pid 5875 passed too short report [ 1197.798230][ T5888] netlink: 168 bytes leftover after parsing attributes in process `syz.0.866'. [ 1200.937617][ T29] audit: type=1400 audit(1200.530:511): avc: denied { read write } for pid=5920 comm="syz.0.881" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1200.946975][ T29] audit: type=1400 audit(1200.530:512): avc: denied { open } for pid=5920 comm="syz.0.881" path="/493/dev/mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1202.369759][ T29] audit: type=1400 audit(1201.960:513): avc: denied { ioctl } for pid=5936 comm="syz.1.889" path="/390/dev/mtd0" dev="devtmpfs" ino=683 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1209.784685][ T5975] syz_tun: entered allmulticast mode [ 1211.208743][ T29] audit: type=1400 audit(1210.800:514): avc: denied { ioctl } for pid=5973 comm="syz.0.906" path="socket:[11245]" dev="sockfs" ino=11245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1211.286484][ T29] audit: type=1400 audit(1210.880:515): avc: denied { connect } for pid=5973 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1211.337458][ T29] audit: type=1400 audit(1210.930:516): avc: denied { write } for pid=5973 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1211.656672][ T29] audit: type=1400 audit(1211.230:517): avc: denied { write } for pid=5971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1212.492116][ T5973] syz_tun: left allmulticast mode [ 1212.757458][ T29] audit: type=1400 audit(1212.350:518): avc: denied { write } for pid=5988 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.498553][ T29] audit: type=1400 audit(1220.090:519): avc: denied { name_bind } for pid=6032 comm="syz.0.919" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1224.417616][ T6039] bridge_slave_1: entered promiscuous mode [ 1224.421860][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 1224.551486][ T6039] bridge_slave_1 (unregistering): left promiscuous mode [ 1230.065233][ T6079] syzkaller0: entered promiscuous mode [ 1230.065809][ T6079] syzkaller0: entered allmulticast mode [ 1240.431134][ T29] audit: type=1400 audit(1240.020:520): avc: denied { accept } for pid=6115 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1240.528717][ T6118] TC_ACT_REPEAT abuse ? [ 1243.774700][ T6121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1249.135626][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 1257.707517][ T29] audit: type=1400 audit(1257.300:521): avc: denied { bind } for pid=6197 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1264.810061][ T6215] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1267.988189][ T29] audit: type=1400 audit(1267.580:522): avc: denied { read } for pid=6244 comm="syz.0.974" path="socket:[12619]" dev="sockfs" ino=12619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1274.638276][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 1276.671779][ T29] audit: type=1400 audit(1276.260:523): avc: denied { accept } for pid=6283 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1277.699211][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 1281.310927][ T29] audit: type=1400 audit(1280.890:524): avc: denied { ioctl } for pid=6310 comm="syz.0.995" path="socket:[11795]" dev="sockfs" ino=11795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1283.955989][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 1284.099616][ T6334] netlink: 'syz.1.999': attribute type 2 has an invalid length. [ 1297.627322][ T6385] binder: 6384:6385 tried to acquire reference to desc 0, got 1 instead [ 1297.658069][ T6385] binder: 6384:6385 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1297.669121][ T6385] binder: 6384:6385 unknown command 0 [ 1297.671989][ T6385] binder: 6384:6385 ioctl c0306201 20000240 returned -22 [ 1300.301976][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.327936][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.345463][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.349430][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.180811][ T29] audit: type=1400 audit(1314.770:525): avc: denied { read write } for pid=6442 comm="syz.1.1042" name="vhost-vsock" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1315.188296][ T29] audit: type=1400 audit(1314.780:526): avc: denied { open } for pid=6442 comm="syz.1.1042" path="/dev/vhost-vsock" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1315.199177][ T29] audit: type=1400 audit(1314.790:527): avc: denied { ioctl } for pid=6442 comm="syz.1.1042" path="/dev/vhost-vsock" dev="devtmpfs" ino=717 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1315.566386][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.569834][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.892553][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.905620][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.638446][ T29] audit: type=1400 audit(1320.230:528): avc: denied { append } for pid=6465 comm="syz.1.1050" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1331.105379][ T6476] ip_tables: iptables: counters copy to user failed while replacing table [ 1345.360385][ T29] audit: type=1400 audit(1344.950:529): avc: denied { read } for pid=6494 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1350.700133][ T1001] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1350.745512][ T1001] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1357.408784][ T6516] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1067'. [ 1357.705358][ T6518] FAULT_INJECTION: forcing a failure. [ 1357.705358][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.709281][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.1069 Tainted: G W L syzkaller #0 PREEMPT [ 1357.709481][ T6518] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1357.709537][ T6518] Hardware name: linux,dummy-virt (DT) [ 1357.709603][ T6518] Call trace: [ 1357.709663][ T6518] show_stack+0x18/0x24 (C) [ 1357.709856][ T6518] dump_stack_lvl+0x7c/0xb0 [ 1357.709975][ T6518] dump_stack+0x1c/0x28 [ 1357.710095][ T6518] should_fail_ex+0x6b4/0x6c4 [ 1357.710223][ T6518] should_failslab+0xbc/0x120 [ 1357.710357][ T6518] __kmalloc_cache_node_noprof+0x360/0x634 [ 1357.710476][ T6518] __get_vm_area_node+0x118/0x2ec [ 1357.710577][ T6518] __vmalloc_node_range_noprof+0x198/0x1024 [ 1357.710673][ T6518] __vmalloc_node_noprof+0xe4/0x14c [ 1357.710767][ T6518] __vmalloc_noprof+0x48/0x70 [ 1357.710864][ T6518] bpf_prog_alloc_no_stats+0x48/0x540 [ 1357.710969][ T6518] bpf_prog_alloc+0x24/0x18c [ 1357.711068][ T6518] bpf_prog_create_from_user+0x94/0x240 [ 1357.711174][ T6518] do_seccomp+0x4e0/0x1b64 [ 1357.711263][ T6518] __arm64_sys_seccomp+0x70/0xa0 [ 1357.711360][ T6518] invoke_syscall+0x74/0x240 [ 1357.711478][ T6518] el0_svc_common.constprop.0+0xac/0x230 [ 1357.711579][ T6518] do_el0_svc+0x40/0x58 [ 1357.711670][ T6518] el0_svc+0x58/0x2a4 [ 1357.711767][ T6518] el0t_64_sync_handler+0xa0/0xe4 [ 1357.711860][ T6518] el0t_64_sync+0x198/0x19c [ 1357.732481][ T6518] syz.0.1069: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1357.740864][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.0.1069 Tainted: G W L syzkaller #0 PREEMPT [ 1357.740978][ T6518] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1357.741009][ T6518] Hardware name: linux,dummy-virt (DT) [ 1357.741042][ T6518] Call trace: [ 1357.741070][ T6518] show_stack+0x18/0x24 (C) [ 1357.741164][ T6518] dump_stack_lvl+0x7c/0xb0 [ 1357.741219][ T6518] dump_stack+0x1c/0x28 [ 1357.741270][ T6518] warn_alloc+0x1d0/0x210 [ 1357.741337][ T6518] __vmalloc_node_range_noprof+0xb08/0x1024 [ 1357.741399][ T6518] __vmalloc_node_noprof+0xe4/0x14c [ 1357.741452][ T6518] __vmalloc_noprof+0x48/0x70 [ 1357.741505][ T6518] bpf_prog_alloc_no_stats+0x48/0x540 [ 1357.741564][ T6518] bpf_prog_alloc+0x24/0x18c [ 1357.741616][ T6518] bpf_prog_create_from_user+0x94/0x240 [ 1357.741676][ T6518] do_seccomp+0x4e0/0x1b64 [ 1357.741727][ T6518] __arm64_sys_seccomp+0x70/0xa0 [ 1357.741776][ T6518] invoke_syscall+0x74/0x240 [ 1357.741834][ T6518] el0_svc_common.constprop.0+0xac/0x230 [ 1357.741887][ T6518] do_el0_svc+0x40/0x58 [ 1357.741938][ T6518] el0_svc+0x58/0x2a4 [ 1357.741993][ T6518] el0t_64_sync_handler+0xa0/0xe4 [ 1357.742044][ T6518] el0t_64_sync+0x198/0x19c [ 1357.817447][ T6518] Mem-Info: [ 1357.837649][ T6518] active_anon:6816 inactive_anon:0 isolated_anon:0 [ 1357.837649][ T6518] active_file:0 inactive_file:8859 isolated_file:0 [ 1357.837649][ T6518] unevictable:768 dirty:15 writeback:0 [ 1357.837649][ T6518] slab_reclaimable:7232 slab_unreclaimable:31074 [ 1357.837649][ T6518] mapped:2675 shmem:3250 pagetables:521 [ 1357.837649][ T6518] sec_pagetables:0 bounce:0 [ 1357.837649][ T6518] kernel_misc_reclaimable:0 [ 1357.837649][ T6518] free:227295 free_pcp:5324 free_cma:7744 [ 1357.839306][ T6518] Node 0 active_anon:27264kB inactive_anon:0kB active_file:0kB inactive_file:35436kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:10700kB dirty:60kB writeback:0kB shmem:13000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6288kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1357.839862][ T6518] Node 0 DMA free:909180kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27264kB inactive_anon:0kB active_file:0kB inactive_file:35436kB unevictable:3072kB writepending:60kB zspages:0kB present:2097152kB managed:1524544kB mlocked:0kB bounce:0kB free_pcp:21284kB local_pcp:12600kB free_cma:30976kB [ 1357.856956][ T6518] lowmem_reserve[]: 0 0 0 0 0 [ 1357.857824][ T6518] Node 0 DMA: 505*4kB (UMEC) 345*8kB (UMEC) 195*16kB (UMEC) 215*32kB (UMEC) 97*64kB (UME) 19*128kB (UME) 16*256kB (UME) 14*512kB (ME) 10*1024kB (UME) 6*2048kB (UMC) 208*4096kB (MC) = 909180kB [ 1357.921812][ T6518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.922005][ T6518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 1357.922098][ T6518] Node 0 hugepages_total=132 hugepages_free=132 hugepages_surp=0 hugepages_size=2048kB [ 1357.922190][ T6518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 1357.922416][ T6518] 12105 total pagecache pages [ 1357.922556][ T6518] 0 pages in swap cache [ 1357.922680][ T6518] Free swap = 124996kB [ 1357.922788][ T6518] Total swap = 124996kB [ 1357.923059][ T6518] 524288 pages RAM [ 1357.923149][ T6518] 0 pages HighMem/MovableOnly [ 1357.923223][ T6518] 143152 pages reserved [ 1357.923297][ T6518] 8192 pages cma reserved [ 1357.976247][ T6518] 1 pages hwpoisoned [ 1370.701330][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.720160][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.294201][ T29] audit: type=1400 audit(1374.880:530): avc: denied { block_suspend } for pid=6559 comm="syz.1.1084" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1379.027593][ T6571] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1379.106982][ T6571] md: could not open device unknown-block(1,1). [ 1388.432540][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 1408.400330][ T6649] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1114'. [ 1427.574984][ T6687] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1440.138488][ T29] audit: type=1400 audit(1439.730:531): avc: denied { getopt } for pid=6727 comm="syz.1.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1442.548341][ T29] audit: type=1400 audit(1442.140:532): avc: denied { execute } for pid=6739 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1442.560188][ T29] audit: type=1400 audit(1442.150:533): avc: denied { execute_no_trans } for pid=6739 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1448.968558][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.135649][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.310083][ T4487] bond0 (unregistering): Released all slaves [ 1450.161340][ T4487] hsr_slave_0: left promiscuous mode [ 1450.190811][ T4487] hsr_slave_1: left promiscuous mode [ 1457.119013][ T29] audit: type=1400 audit(1456.710:534): avc: denied { write } for pid=6764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.354624][ T29] audit: type=1400 audit(1457.940:535): avc: denied { write } for pid=6769 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.201016][ T3228] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1462.511925][ T29] audit: type=1400 audit(1462.100:536): avc: denied { write } for pid=6784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1462.668842][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.718693][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.094943][ T29] audit: type=1400 audit(1463.670:537): avc: denied { write } for pid=6790 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1465.207426][ T3228] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1467.667857][ T6740] hsr_slave_0: entered promiscuous mode [ 1467.681598][ T6740] hsr_slave_1: entered promiscuous mode [ 1467.962344][ T29] audit: type=1400 audit(1467.550:538): avc: denied { write } for pid=6804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1469.322989][ T29] audit: type=1400 audit(1468.910:539): avc: denied { write } for pid=6816 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1469.852662][ T3228] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1472.941843][ T29] audit: type=1400 audit(1472.530:540): avc: denied { write } for pid=6822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1474.601432][ T6740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1474.628016][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1474.645261][ T6740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1474.663102][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1474.669041][ T6740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1474.694239][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1474.700578][ T6740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1474.724973][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1474.736315][ T29] audit: type=1400 audit(1474.310:541): avc: denied { write } for pid=6826 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1477.154413][ T29] audit: type=1400 audit(1476.720:542): avc: denied { write } for pid=6837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.951663][ T29] audit: type=1400 audit(1478.540:543): avc: denied { write } for pid=6844 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1479.233780][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.846128][ T29] audit: type=1400 audit(1480.420:544): avc: denied { write } for pid=6848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.025302][ T29] audit: type=1400 audit(1481.610:545): avc: denied { write } for pid=6854 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1483.310894][ T29] audit: type=1400 audit(1482.900:546): avc: denied { write } for pid=6857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1484.164856][ T29] audit: type=1400 audit(1483.750:547): avc: denied { write } for pid=6864 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.223267][ T29] audit: type=1400 audit(1485.810:548): avc: denied { write } for pid=6869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1488.425930][ T29] audit: type=1400 audit(1488.010:549): avc: denied { write } for pid=6877 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1489.929477][ T29] audit: type=1400 audit(1489.520:550): avc: denied { write } for pid=6885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.855301][ T29] audit: type=1400 audit(1491.440:551): avc: denied { write } for pid=6891 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.651964][ T6740] veth0_vlan: entered promiscuous mode [ 1494.765948][ T6740] veth1_vlan: entered promiscuous mode [ 1495.161349][ T6740] veth0_macvtap: entered promiscuous mode [ 1495.210637][ T6740] veth1_macvtap: entered promiscuous mode [ 1495.516576][ T3658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.521779][ T3658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.543206][ T3658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.550463][ T3658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.240902][ T29] audit: type=1400 audit(1495.830:552): avc: denied { mounton } for pid=6740 comm="syz-executor" path="/syzkaller.DLRTl7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1496.641229][ T29] audit: type=1400 audit(1496.230:553): avc: denied { execute } for pid=6902 comm="syz.0.1148" path="/0/net_prio.prioidx" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1497.056797][ T29] audit: type=1326 audit(1496.640:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.064247][ T29] audit: type=1326 audit(1496.650:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.076734][ T29] audit: type=1326 audit(1496.650:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.088800][ T29] audit: type=1326 audit(1496.650:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.100807][ T29] audit: type=1326 audit(1496.650:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.101718][ T29] audit: type=1326 audit(1496.650:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.102078][ T29] audit: type=1326 audit(1496.670:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.102405][ T29] audit: type=1326 audit(1496.670:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.119448][ T29] audit: type=1326 audit(1496.700:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=223 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1497.132845][ T29] audit: type=1326 audit(1496.720:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.1158" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1509.913032][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1509.914179][ T29] audit: type=1400 audit(1509.500:567): avc: denied { map } for pid=6929 comm="syz.1.1168" path="socket:[13836]" dev="sockfs" ino=13836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1537.705475][ T29] audit: type=1400 audit(1537.290:568): avc: denied { write } for pid=6980 comm="syz.1.1187" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1541.675494][ T29] audit: type=1400 audit(1541.260:569): avc: denied { append } for pid=6986 comm="syz.1.1189" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1570.256901][ T4690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.711235][ T4690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.169348][ T4690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.657801][ T4690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.958533][ T29] audit: type=1326 audit(1572.550:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.014611][ T29] audit: type=1326 audit(1572.600:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.044458][ T29] audit: type=1326 audit(1572.620:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.046486][ T29] audit: type=1326 audit(1572.640:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.054199][ T29] audit: type=1326 audit(1572.640:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.054492][ T29] audit: type=1326 audit(1572.640:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.054683][ T29] audit: type=1326 audit(1572.640:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.054879][ T29] audit: type=1326 audit(1572.640:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.069123][ T29] audit: type=1326 audit(1572.650:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1573.069508][ T29] audit: type=1326 audit(1572.650:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1576.153071][ T4690]  (unregistering): Released all slaves [ 1576.323223][ T4690] b (unregistering): Released all slaves [ 1576.761333][ T4690] bond1 (unregistering): Released all slaves [ 1577.201463][ T4690] bond2 (unregistering): Released all slaves [ 1577.827238][ T4690] hsr_slave_0: left promiscuous mode [ 1577.866543][ T4690] hsr_slave_1: left promiscuous mode [ 1578.030567][ T4690] veth1_macvtap: left promiscuous mode [ 1578.048865][ T4690] veth0_macvtap: left promiscuous mode [ 1578.051735][ T4690] veth1_vlan: left promiscuous mode [ 1578.057273][ T4690] veth0_vlan: left promiscuous mode [ 1586.185739][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1586.186609][ T29] audit: type=1400 audit(1585.770:583): avc: denied { write } for pid=7116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1587.839578][ T29] audit: type=1326 audit(1587.420:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.840777][ T29] audit: type=1326 audit(1587.430:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.852122][ T29] audit: type=1326 audit(1587.430:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.853111][ T29] audit: type=1326 audit(1587.430:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=239 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.866270][ T29] audit: type=1326 audit(1587.430:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.867278][ T29] audit: type=1326 audit(1587.450:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.867978][ T29] audit: type=1326 audit(1587.450:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.868284][ T29] audit: type=1326 audit(1587.450:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1587.868645][ T29] audit: type=1326 audit(1587.450:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.1239" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab379368 code=0x7ffc0000 [ 1588.472214][ T3228] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1591.254448][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1591.265291][ T29] audit: type=1400 audit(1590.840:617): avc: denied { write } for pid=7142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1593.050637][ T29] audit: type=1400 audit(1592.640:618): avc: denied { write } for pid=7153 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1593.811252][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1593.878537][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.072506][ T3228] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1598.274669][ T29] audit: type=1400 audit(1597.860:619): avc: denied { write } for pid=7168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1598.983052][ T7073] hsr_slave_0: entered promiscuous mode [ 1599.049568][ T7073] hsr_slave_1: entered promiscuous mode [ 1599.105600][ T7073] debugfs: 'hsr0' already exists in 'hsr' [ 1599.106323][ T7073] Cannot create hsr debugfs directory [ 1600.069757][ T29] audit: type=1400 audit(1599.660:620): avc: denied { write } for pid=7178 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1601.591139][ T3228] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1605.629652][ T29] audit: type=1400 audit(1605.210:621): avc: denied { write } for pid=7192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1606.538385][ T7073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1606.579037][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1606.610766][ T7073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1606.693048][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1606.708650][ T7073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1606.782400][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1606.859140][ T7073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1606.923030][ T7073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1607.756994][ T29] audit: type=1400 audit(1607.340:622): avc: denied { write } for pid=7198 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.502698][ T29] audit: type=1400 audit(1611.090:623): avc: denied { setattr } for pid=7216 comm="syz.0.1252" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1613.508426][ T29] audit: type=1400 audit(1613.090:624): avc: denied { write } for pid=7220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1613.607584][ T29] audit: type=1400 audit(1613.190:625): avc: denied { setopt } for pid=7223 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1614.781750][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.229241][ T29] audit: type=1400 audit(1615.790:626): avc: denied { write } for pid=7230 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.024938][ T29] audit: type=1400 audit(1618.610:627): avc: denied { write } for pid=7240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.214690][ T29] audit: type=1400 audit(1620.800:628): avc: denied { write } for pid=7252 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1623.649206][ T7263] pimreg: tun_chr_ioctl cmd 1074025677 [ 1623.675930][ T7263] pimreg: linktype set to 776 [ 1625.139966][ T29] audit: type=1400 audit(1624.720:629): avc: denied { write } for pid=7265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1627.128179][ T29] audit: type=1400 audit(1626.720:630): avc: denied { write } for pid=7275 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.415282][ T29] audit: type=1400 audit(1628.990:631): avc: denied { write } for pid=7281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.745231][ T29] audit: type=1400 audit(1630.320:632): avc: denied { write } for pid=7284 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.125665][ T29] audit: type=1400 audit(1633.710:633): avc: denied { write } for pid=7287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.871991][ T29] audit: type=1400 audit(1634.460:634): avc: denied { write } for pid=7299 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.591134][ T29] audit: type=1400 audit(1636.160:635): avc: denied { write } for pid=7304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.814576][ T29] audit: type=1400 audit(1637.390:636): avc: denied { write } for pid=7311 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1640.726966][ T7073] veth0_vlan: entered promiscuous mode [ 1640.841637][ T7073] veth1_vlan: entered promiscuous mode [ 1641.362187][ T7073] veth0_macvtap: entered promiscuous mode [ 1641.531616][ T7073] veth1_macvtap: entered promiscuous mode [ 1641.860462][ T4690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.889955][ T4690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.891350][ T4690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.966118][ T3681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.082736][ T7339] netlink: 'syz.1.1276': attribute type 33 has an invalid length. [ 1645.083198][ T7339] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1276'. [ 1647.545904][ T7349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1281'. [ 1647.828970][ T7349] bond_slave_0: entered allmulticast mode [ 1655.272302][ T7379] binder: 7378:7379 ERROR: BC_REGISTER_LOOPER called without request [ 1655.281793][ T7379] binder: 7379 RLIMIT_NICE not set [ 1657.018516][ T29] audit: type=1400 audit(1656.610:637): avc: denied { write } for pid=7377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1658.510539][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.607702][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.092088][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.097790][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.214678][ T29] audit: type=1400 audit(1660.800:638): avc: denied { write } for pid=7388 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.715434][ T4020] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1661.905045][ T4020] usb 1-1: Using ep0 maxpacket: 32 [ 1661.918140][ T4020] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1661.945036][ T4020] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1661.946304][ T4020] usb 1-1: config 0 has no interface number 0 [ 1661.947436][ T4020] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1661.989145][ T4020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.989456][ T4020] usb 1-1: Product: syz [ 1661.989758][ T4020] usb 1-1: Manufacturer: syz [ 1661.989878][ T4020] usb 1-1: SerialNumber: syz [ 1662.038522][ T4020] usb 1-1: config 0 descriptor?? [ 1662.061075][ T7393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1662.349783][ T7393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1662.710821][ T7398] netlink: 'syz.1.1300': attribute type 16 has an invalid length. [ 1662.711886][ T7398] netlink: 63874 bytes leftover after parsing attributes in process `syz.1.1300'. [ 1663.146564][ T4020] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1663.562347][ T4020] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 123 [ 1663.792299][ T4020] usb 1-1: USB disconnect, device number 13 [ 1666.045964][ T3487] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1666.225897][ T3487] usb 1-1: Using ep0 maxpacket: 16 [ 1666.238455][ T3487] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1666.249924][ T3487] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1666.252288][ T3487] usb 1-1: config 0 has no interface number 0 [ 1666.254551][ T3487] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1666.255998][ T3487] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1666.297537][ T3487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.298744][ T3487] usb 1-1: Product: syz [ 1666.299655][ T3487] usb 1-1: Manufacturer: syz [ 1666.300311][ T3487] usb 1-1: SerialNumber: syz [ 1666.372604][ T3487] usb 1-1: config 0 descriptor?? [ 1666.398785][ T7407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1666.400279][ T7407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1666.697535][ T7407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1666.713319][ T7407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1666.965670][ T3487] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1667.246326][ T3487] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1667.248934][ T3487] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1667.252750][ T3487] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1667.385732][ T3487] usb 1-1: USB disconnect, device number 14 [ 1667.718519][ T7397] udevd[7397]: setting mode of /dev/bus/usb/001/014 to 020664 failed: No such file or directory [ 1667.720410][ T7397] udevd[7397]: setting owner of /dev/bus/usb/001/014 to uid=0, gid=0 failed: No such file or directory [ 1668.855200][ T3528] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1668.979692][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 1669.114421][ T3528] usb 1-1: Using ep0 maxpacket: 32 [ 1669.204795][ T3528] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1669.398292][ T3528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.398665][ T3528] usb 1-1: Product: syz [ 1669.398966][ T3528] usb 1-1: Manufacturer: syz [ 1669.399125][ T3528] usb 1-1: SerialNumber: syz [ 1670.307305][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.377474][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.620427][ T3528] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1671.403205][ T3528] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1671.570549][ T3528] usb 1-1: USB disconnect, device number 15 [ 1672.498704][ T7429] netlink: 'syz.0.1312': attribute type 64 has an invalid length. [ 1673.112688][ T7397] udevd[7397]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1674.488881][ T3528] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1674.887574][ T3528] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1674.939242][ T3528] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1674.940482][ T3528] usb 1-1: config 0 has no interface number 0 [ 1674.940926][ T3528] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1675.067029][ T3528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.067738][ T3528] usb 1-1: Product: syz [ 1675.068271][ T3528] usb 1-1: Manufacturer: syz [ 1675.068400][ T3528] usb 1-1: SerialNumber: syz [ 1675.140007][ T3528] usb 1-1: config 0 descriptor?? [ 1676.116477][ T3528] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1678.001635][ T3528] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1678.026179][ T3528] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1678.339694][ T3528] usb 1-1: USB disconnect, device number 16 [ 1679.011098][ T29] audit: type=1400 audit(1678.600:639): avc: denied { mounton } for pid=7436 comm="syz.0.1316" path="/86/file0" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1680.887484][ T6951] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1681.115827][ T6951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1681.195418][ T6951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.306835][ T6951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.307547][ T6951] usb 1-1: Product: syz [ 1681.308119][ T6951] usb 1-1: Manufacturer: syz [ 1681.308336][ T6951] usb 1-1: SerialNumber: syz [ 1681.748652][ T6951] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1682.080645][ T6951] usb 1-1: USB disconnect, device number 17 [ 1683.171263][ T29] audit: type=1400 audit(1682.760:640): avc: denied { read write } for pid=7451 comm="syz.1.1322" name="control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1683.171837][ T29] audit: type=1400 audit(1682.760:641): avc: denied { open } for pid=7451 comm="syz.1.1322" path="/32/dev/mapper/control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1683.222555][ T29] audit: type=1400 audit(1682.810:642): avc: denied { ioctl } for pid=7451 comm="syz.1.1322" path="/32/dev/mapper/control" dev="devtmpfs" ino=712 ioctlcmd=0xfd01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1683.299444][ T7452] serio: Serial port ptm0 [ 1683.441838][ T29] audit: type=1400 audit(1683.030:643): avc: denied { write } for pid=7453 comm="syz.0.1323" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1683.453417][ T29] audit: type=1400 audit(1683.040:644): avc: denied { open } for pid=7453 comm="syz.0.1323" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1683.466023][ T7454] random: crng reseeded on system resumption [ 1683.753175][ T7454] hibernate: Hibernate image not generated by this kernel! [ 1683.766466][ T7454] PM: hibernation: Image mismatch: architecture specific data [ 1685.555536][ T3528] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1685.835760][ T3528] usb 1-1: Using ep0 maxpacket: 16 [ 1686.021506][ T3528] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1686.139154][ T3528] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1686.139895][ T3528] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1686.140607][ T3528] usb 1-1: config 0 has no interface number 0 [ 1686.236489][ T3528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.237115][ T3528] usb 1-1: Product: syz [ 1686.237597][ T3528] usb 1-1: Manufacturer: syz [ 1686.237806][ T3528] usb 1-1: SerialNumber: syz [ 1686.458773][ T3528] usb 1-1: config 0 descriptor?? [ 1686.753335][ T1001] usb 1-1: USB disconnect, device number 18 [ 1687.171453][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.200916][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.645305][ T6999] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1688.846383][ T6999] usb 1-1: Using ep0 maxpacket: 16 [ 1688.962869][ T6999] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1689.092803][ T6999] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.094414][ T6999] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1689.109826][ T6999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1689.110548][ T6999] usb 1-1: SerialNumber: syz [ 1689.261591][ T6999] usb 1-1: 0:2 : does not exist [ 1689.678704][ T6999] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1690.066978][ T6999] usb 1-1: USB disconnect, device number 19 [ 1690.758499][ T7397] udevd[7397]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1693.255702][ T3487] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1693.456288][ T3487] usb 1-1: Using ep0 maxpacket: 16 [ 1693.559894][ T3487] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1693.581509][ T3487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.582089][ T3487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1693.618780][ T3487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.619551][ T3487] usb 1-1: Product: syz [ 1693.619670][ T3487] usb 1-1: Manufacturer: syz [ 1693.619780][ T3487] usb 1-1: SerialNumber: syz [ 1693.840605][ T3487] usb 1-1: 0:2 : does not exist [ 1694.078980][ T3487] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1694.579276][ T29] audit: type=1400 audit(1694.160:645): avc: denied { read } for pid=7494 comm="syz.1.1342" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1695.001059][ T3487] usb 1-1: USB disconnect, device number 20 [ 1695.338862][ T7497] FAULT_INJECTION: forcing a failure. [ 1695.338862][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.340230][ T7497] CPU: 1 UID: 0 PID: 7497 Comm: syz.0.1343 Tainted: G W L syzkaller #0 PREEMPT [ 1695.340435][ T7497] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1695.340518][ T7497] Hardware name: linux,dummy-virt (DT) [ 1695.340591][ T7497] Call trace: [ 1695.340647][ T7497] show_stack+0x18/0x24 (C) [ 1695.340864][ T7497] dump_stack_lvl+0x7c/0xb0 [ 1695.341012][ T7497] dump_stack+0x1c/0x28 [ 1695.341145][ T7497] should_fail_ex+0x6b4/0x6c4 [ 1695.341291][ T7497] should_failslab+0xbc/0x120 [ 1695.341435][ T7497] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 1695.341561][ T7497] __d_alloc+0x38/0x98c [ 1695.341686][ T7497] d_alloc_pseudo+0x14/0xb8 [ 1695.341885][ T7497] alloc_file_pseudo+0xf4/0x23c [ 1695.342019][ T7497] __shmem_file_setup+0x2d8/0x354 [ 1695.342146][ T7497] shmem_file_setup+0x30/0x40 [ 1695.342286][ T7497] memfd_alloc_file+0x144/0x420 [ 1695.342429][ T7497] __arm64_sys_memfd_create+0x174/0x2e0 [ 1695.342574][ T7497] invoke_syscall+0x74/0x240 [ 1695.342723][ T7497] el0_svc_common.constprop.0+0xac/0x230 [ 1695.342898][ T7497] do_el0_svc+0x40/0x58 [ 1695.343040][ T7497] el0_svc+0x58/0x2a4 [ 1695.343246][ T7497] el0t_64_sync_handler+0xa0/0xe4 [ 1695.343413][ T7497] el0t_64_sync+0x198/0x19c [ 1695.575671][ T29] audit: type=1400 audit(1695.150:646): avc: denied { read } for pid=7498 comm="syz.1.1344" name="trace" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1695.579684][ T29] audit: type=1400 audit(1695.170:647): avc: denied { open } for pid=7498 comm="syz.1.1344" path="/45/trace/trace" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1696.177266][ T29] audit: type=1400 audit(1695.760:648): avc: denied { ioctl } for pid=7500 comm="syz.0.1345" path="/dev/fuse" dev="devtmpfs" ino=92 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1696.477070][ T7503] netlink: 'syz.1.1346': attribute type 4 has an invalid length. [ 1697.159745][ T7397] udevd[7397]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1700.864693][ T6999] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1701.045360][ T6999] usb 1-1: Using ep0 maxpacket: 16 [ 1701.071523][ T6999] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1701.118073][ T6999] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1701.119578][ T6999] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1701.120924][ T6999] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1701.121921][ T6999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.147791][ T7520] input: syz1 as /devices/virtual/input/input5 [ 1701.192822][ T6999] usb 1-1: config 0 descriptor?? [ 1701.997720][ T6999] hid-generic 0003:046D:C22D.0005: unknown main item tag 0x0 [ 1702.000126][ T6999] hid-generic 0003:046D:C22D.0005: unknown main item tag 0x0 [ 1702.002926][ T6999] hid-generic 0003:046D:C22D.0005: unknown main item tag 0x0 [ 1702.008018][ T6999] hid-generic 0003:046D:C22D.0005: unknown main item tag 0x0 [ 1702.010040][ T6999] hid-generic 0003:046D:C22D.0005: unknown main item tag 0x0 [ 1702.232214][ T6999] hid-generic 0003:046D:C22D.0005: hiddev0,hidraw0: USB HID v0.96 Device [HID 046d:c22d] on usb-dummy_hcd.0-1/input0 [ 1705.981302][ T10] usb 1-1: USB disconnect, device number 21 [ 1709.211344][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.218877][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.957039][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.976418][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.247291][ T29] audit: type=1400 audit(1716.840:649): avc: denied { write } for pid=7573 comm="syz.0.1377" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1718.037249][ T7576] input: syz0 as /devices/virtual/input/input6 [ 1722.590379][ T7585] process 'syz.0.1381' launched './file0' with NULL argv: empty string added [ 1725.950967][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.986727][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.902007][ T7604] FAULT_INJECTION: forcing a failure. [ 1726.902007][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.902658][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.1.1390 Tainted: G W L syzkaller #0 PREEMPT [ 1726.902816][ T7604] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1726.902873][ T7604] Hardware name: linux,dummy-virt (DT) [ 1726.902960][ T7604] Call trace: [ 1726.903022][ T7604] show_stack+0x18/0x24 (C) [ 1726.903308][ T7604] dump_stack_lvl+0x7c/0xb0 [ 1726.903495][ T7604] dump_stack+0x1c/0x28 [ 1726.903609][ T7604] should_fail_ex+0x6b4/0x6c4 [ 1726.903741][ T7604] should_failslab+0xbc/0x120 [ 1726.903857][ T7604] __kmalloc_cache_noprof+0x3ec/0x628 [ 1726.903970][ T7604] shrinker_alloc+0xb8/0x8a0 [ 1726.904206][ T7604] sget_fc+0x6f4/0x16c4 [ 1726.904336][ T7604] kernfs_get_tree+0x19c/0x900 [ 1726.904466][ T7604] vfs_get_tree+0x74/0x280 [ 1726.904644][ T7604] fc_mount+0x18/0x19c [ 1726.904797][ T7604] path_mount+0x6d8/0x1830 [ 1726.904966][ T7604] __arm64_sys_mount+0x318/0x3dc [ 1726.905099][ T7604] invoke_syscall+0x74/0x240 [ 1726.905257][ T7604] el0_svc_common.constprop.0+0xac/0x230 [ 1726.905416][ T7604] do_el0_svc+0x40/0x58 [ 1726.905589][ T7604] el0_svc+0x58/0x2a4 [ 1726.905720][ T7604] el0t_64_sync_handler+0xa0/0xe4 [ 1726.905944][ T7604] el0t_64_sync+0x198/0x19c [ 1729.267105][ T7609] syzkaller0: entered promiscuous mode [ 1729.268254][ T7609] syzkaller0: entered allmulticast mode [ 1729.606746][ T7612] input: syz1 as /devices/virtual/input/input7 [ 1733.255813][ T1001] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1733.476015][ T1001] usb 1-1: Using ep0 maxpacket: 32 [ 1733.488996][ T1001] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1733.549845][ T1001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.552104][ T1001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.554904][ T1001] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1733.557191][ T1001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.602783][ T1001] usb 1-1: config 0 descriptor?? [ 1734.552225][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.553303][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.585156][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.597188][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.600507][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.605813][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.607910][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.625398][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.627941][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1734.629710][ T1001] hid-generic 0003:0458:5011.0006: unknown main item tag 0x0 [ 1735.005170][ T1001] hid-generic 0003:0458:5011.0006: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 1735.102855][ T1001] usb 1-1: USB disconnect, device number 22 [ 1736.060856][ T7623] fido_id[7623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1739.197658][ T7634] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1740.394143][ T7641] SELinux: policydb version 536870932 does not match my version range 15-35 [ 1740.398103][ T7641] SELinux: failed to load policy [ 1742.571259][ T805] hid_parser_main: 877 callbacks suppressed [ 1742.588586][ T805] hid-generic 0000:0008:0000.0007: unknown main item tag 0x0 [ 1742.589329][ T805] hid-generic 0000:0008:0000.0007: unknown main item tag 0x0 [ 1742.732349][ T805] hid-generic 0000:0008:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1743.087920][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.091553][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.562074][ T29] audit: type=1400 audit(1746.150:650): avc: denied { read } for pid=7663 comm="syz.0.1414" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1746.571948][ T29] audit: type=1400 audit(1746.150:651): avc: denied { open } for pid=7663 comm="syz.0.1414" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1746.584913][ T29] audit: type=1400 audit(1746.170:652): avc: denied { ioctl } for pid=7663 comm="syz.0.1414" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1747.180568][ T7668] FAULT_INJECTION: forcing a failure. [ 1747.180568][ T7668] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.181699][ T7668] CPU: 0 UID: 0 PID: 7668 Comm: syz.0.1416 Tainted: G W L syzkaller #0 PREEMPT [ 1747.181797][ T7668] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1747.181825][ T7668] Hardware name: linux,dummy-virt (DT) [ 1747.181859][ T7668] Call trace: [ 1747.181897][ T7668] show_stack+0x18/0x24 (C) [ 1747.182004][ T7668] dump_stack_lvl+0x7c/0xb0 [ 1747.182062][ T7668] dump_stack+0x1c/0x28 [ 1747.182114][ T7668] should_fail_ex+0x6b4/0x6c4 [ 1747.182221][ T7668] should_failslab+0xbc/0x120 [ 1747.182432][ T7668] __kmalloc_noprof+0x4dc/0x74c [ 1747.182582][ T7668] lsm_blob_alloc+0x60/0x80 [ 1747.182788][ T7668] security_sk_alloc+0x30/0x218 [ 1747.182999][ T7668] sk_prot_alloc+0x190/0x204 [ 1747.183142][ T7668] sk_alloc+0x3c/0x8c8 [ 1747.183363][ T7668] packet_create+0xe0/0x760 [ 1747.183637][ T7668] __sock_create+0x23c/0x5fc [ 1747.183724][ T7668] __sys_socket+0x124/0x1f0 [ 1747.183777][ T7668] __arm64_sys_socket+0x70/0xa4 [ 1747.183828][ T7668] invoke_syscall+0x74/0x240 [ 1747.183883][ T7668] el0_svc_common.constprop.0+0xac/0x230 [ 1747.183946][ T7668] do_el0_svc+0x40/0x58 [ 1747.183997][ T7668] el0_svc+0x58/0x2a4 [ 1747.184105][ T7668] el0t_64_sync_handler+0xa0/0xe4 [ 1747.184163][ T7668] el0t_64_sync+0x198/0x19c [ 1748.608329][ T29] audit: type=1400 audit(1748.200:653): avc: denied { wake_alarm } for pid=7673 comm="syz.1.1419" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1748.619526][ T29] audit: type=1400 audit(1748.210:654): avc: denied { ioctl } for pid=7674 comm="syz.0.1420" path="/139/tracefs/available_tracers" dev="tracefs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1749.525652][ T805] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1749.724904][ T805] usb 1-1: Using ep0 maxpacket: 8 [ 1749.737622][ T805] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1749.750394][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.750779][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.750906][ T805] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1749.751099][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.780034][ T805] usb 1-1: config 0 descriptor?? [ 1750.604919][ T805] input: HID 054c:042f as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:042F.0008/input/input8 [ 1750.851640][ T805] hid-generic 0003:054C:042F.0008: input,hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.0-1/input0 [ 1764.199486][ T3487] usb 1-1: USB disconnect, device number 23 [ 1770.349583][ T7728] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1439'. [ 1770.360661][ T7728] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1439'. [ 1770.615736][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.619880][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.841202][ T7739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1442'. [ 1780.853362][ T7739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1442'. [ 1782.270135][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 1782.270814][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 1782.280572][ T7748] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1444'. [ 1810.764236][ T29] audit: type=1400 audit(1810.340:655): avc: denied { write } for pid=7799 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1823.043356][ T7820] netlink: 'syz.0.1473': attribute type 39 has an invalid length. [ 1825.476647][ T29] audit: type=1400 audit(1825.060:656): avc: denied { mounton } for pid=7822 comm="syz.1.1474" path="/syzcgroup/unified/syz1/cgroup.procs" dev="cgroup2" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1825.964502][ T29] audit: type=1400 audit(1825.550:657): avc: denied { mount } for pid=7822 comm="syz.1.1474" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1846.431677][ T7868] xt_hashlimit: size too large, truncated to 1048576 [ 1850.519201][ T7882] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 1850.529260][ T7882] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 1850.532160][ T7882] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 1856.404432][ T7910] tap0: tun_chr_ioctl cmd 1074025677 [ 1856.405108][ T7910] tap0: linktype set to 776 [ 1866.688900][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1518'. [ 1881.221727][ T29] audit: type=1400 audit(1880.810:658): avc: denied { mount } for pid=7966 comm="syz.1.1528" name="/" dev="hugetlbfs" ino=17826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1882.368021][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.379875][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.116316][ T29] audit: type=1400 audit(1887.670:659): avc: denied { mount } for pid=7972 comm="syz.0.1530" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1888.165772][ T29] audit: type=1400 audit(1887.750:660): avc: denied { remount } for pid=7972 comm="syz.0.1530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1888.626558][ T29] audit: type=1400 audit(1888.190:661): avc: denied { unmount } for pid=6740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1892.689467][ T29] audit: type=1400 audit(1892.280:662): avc: denied { unmount } for pid=7073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1908.688363][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.714655][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.908864][ T8008] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 1910.054912][ T805] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1910.352292][ T805] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1910.478027][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.479010][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.591304][ T805] usb 1-1: config 0 descriptor?? [ 1910.995371][ T805] usbhid 1-1:0.0: can't add hid device: -71 [ 1910.997108][ T805] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1911.182087][ T805] usb 1-1: USB disconnect, device number 24 [ 1911.697741][ T805] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1911.876102][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 1911.898525][ T805] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1911.924732][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.925583][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.964938][ T805] usb 1-1: config 0 descriptor?? [ 1912.066672][ T805] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1912.100243][ T805] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1913.035931][ T3487] usb 1-1: USB disconnect, device number 25 [ 1913.187479][ T3487] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1924.717293][ T29] audit: type=1400 audit(1924.310:663): avc: denied { create } for pid=8034 comm="syz.1.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1924.765183][ T29] audit: type=1400 audit(1924.350:664): avc: denied { ioctl } for pid=8034 comm="syz.1.1548" path="socket:[18972]" dev="sockfs" ino=18972 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1934.189565][ T29] audit: type=1400 audit(1933.780:665): avc: denied { write } for pid=8056 comm="syz.1.1555" name="functions" dev="configfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1934.280533][ T29] audit: type=1400 audit(1933.860:666): avc: denied { write } for pid=8056 comm="syz.1.1555" name="functions" dev="configfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1935.244746][ T29] audit: type=1400 audit(1934.790:667): avc: denied { remove_name } for pid=8056 comm="syz.1.1555" name="acm.0" dev="configfs" ino=17958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1935.279349][ T29] audit: type=1400 audit(1934.870:668): avc: denied { rmdir } for pid=8056 comm="syz.1.1555" name="acm.0" dev="configfs" ino=17958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1935.282295][ T8057] [ 1935.282618][ T8057] ====================================================== [ 1935.282960][ T8057] WARNING: possible circular locking dependency detected [ 1935.283363][ T8057] syzkaller #0 Tainted: G W L [ 1935.283844][ T8057] ------------------------------------------------------ [ 1935.284250][ T8057] syz.1.1555/8057 is trying to acquire lock: [ 1935.284621][ T8057] ffff800088854088 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x434/0x728 [ 1935.285736][ T8057] [ 1935.285736][ T8057] but task is already holding lock: [ 1935.286029][ T8057] ffff000020635900 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xac/0x638 [ 1935.286679][ T8057] [ 1935.286679][ T8057] which lock already depends on the new lock. [ 1935.286679][ T8057] [ 1935.287068][ T8057] [ 1935.287068][ T8057] the existing dependency chain (in reverse order) is: [ 1935.287450][ T8057] [ 1935.287450][ T8057] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 1935.288007][ T8057] lock_acquire+0x3d0/0x44c [ 1935.288265][ T8057] down_write+0xb4/0x1ac [ 1935.288487][ T8057] configfs_depend_item_unlocked+0xac/0x500 [ 1935.288729][ T8057] usbg_make_tpg+0x1cc/0x47c [ 1935.288923][ T8057] target_fabric_make_tpg+0x84/0x738 [ 1935.289132][ T8057] configfs_mkdir+0x394/0xb78 [ 1935.289321][ T8057] vfs_mkdir+0x1dc/0x5bc [ 1935.289504][ T8057] filename_mkdirat+0x354/0x408 [ 1935.289695][ T8057] __arm64_sys_mkdirat+0x90/0xd4 [ 1935.289928][ T8057] invoke_syscall+0x74/0x240 [ 1935.290102][ T8057] el0_svc_common.constprop.0+0xac/0x230 [ 1935.290319][ T8057] do_el0_svc+0x40/0x58 [ 1935.290535][ T8057] el0_svc+0x58/0x2a4 [ 1935.290695][ T8057] el0t_64_sync_handler+0xa0/0xe4 [ 1935.290867][ T8057] el0t_64_sync+0x198/0x19c [ 1935.291143][ T8057] [ 1935.291143][ T8057] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1935.291561][ T8057] lock_acquire+0x3d0/0x44c [ 1935.291774][ T8057] __mutex_lock+0x150/0x1530 [ 1935.291956][ T8057] mutex_lock_nested+0x24/0x30 [ 1935.292165][ T8057] tcm_alloc_inst+0x64/0x1b0 [ 1935.292340][ T8057] try_get_usb_function_instance+0x100/0x1d0 [ 1935.292599][ T8057] usb_get_function_instance+0x18/0x60 [ 1935.292854][ T8057] function_make+0x14c/0x2f0 [ 1935.293040][ T8057] configfs_mkdir+0x394/0xb78 [ 1935.293233][ T8057] vfs_mkdir+0x1dc/0x5bc [ 1935.293401][ T8057] filename_mkdirat+0x354/0x408 [ 1935.293648][ T8057] __arm64_sys_mkdirat+0x90/0xd4 [ 1935.293818][ T8057] invoke_syscall+0x74/0x240 [ 1935.294002][ T8057] el0_svc_common.constprop.0+0xac/0x230 [ 1935.294197][ T8057] do_el0_svc+0x40/0x58 [ 1935.294362][ T8057] el0_svc+0x58/0x2a4 [ 1935.294624][ T8057] el0t_64_sync_handler+0xa0/0xe4 [ 1935.294844][ T8057] el0t_64_sync+0x198/0x19c [ 1935.295101][ T8057] [ 1935.295101][ T8057] -> #1 (func_lock){+.+.}-{4:4}: [ 1935.295549][ T8057] lock_acquire+0x3d0/0x44c [ 1935.295768][ T8057] __mutex_lock+0x150/0x1530 [ 1935.295968][ T8057] mutex_lock_nested+0x24/0x30 [ 1935.296143][ T8057] try_get_usb_function_instance+0x2c/0x1d0 [ 1935.296330][ T8057] usb_get_function_instance+0x18/0x60 [ 1935.296529][ T8057] function_make+0x14c/0x2f0 [ 1935.296733][ T8057] configfs_mkdir+0x394/0xb78 [ 1935.296904][ T8057] vfs_mkdir+0x1dc/0x5bc [ 1935.297154][ T8057] filename_mkdirat+0x354/0x408 [ 1935.297347][ T8057] __arm64_sys_mkdirat+0x90/0xd4 [ 1935.297584][ T8057] invoke_syscall+0x74/0x240 [ 1935.297790][ T8057] el0_svc_common.constprop.0+0xac/0x230 [ 1935.298047][ T8057] do_el0_svc+0x40/0x58 [ 1935.298217][ T8057] el0_svc+0x58/0x2a4 [ 1935.298372][ T8057] el0t_64_sync_handler+0xa0/0xe4 [ 1935.298547][ T8057] el0t_64_sync+0x198/0x19c [ 1935.298706][ T8057] [ 1935.298706][ T8057] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1935.299020][ T8057] check_prev_add+0x114/0xca0 [ 1935.299186][ T8057] __lock_acquire+0x13f4/0x1a5c [ 1935.299383][ T8057] lock_acquire+0x3d0/0x44c [ 1935.299603][ T8057] __mutex_lock+0x150/0x1530 [ 1935.299880][ T8057] mutex_lock_nested+0x24/0x30 [ 1935.300081][ T8057] configfs_rmdir+0x434/0x728 [ 1935.300253][ T8057] vfs_rmdir+0x230/0x638 [ 1935.300463][ T8057] filename_rmdir+0x240/0x3e8 [ 1935.300634][ T8057] __arm64_sys_unlinkat+0xc0/0xe8 [ 1935.300818][ T8057] invoke_syscall+0x74/0x240 [ 1935.301034][ T8057] el0_svc_common.constprop.0+0xac/0x230 [ 1935.301250][ T8057] do_el0_svc+0x40/0x58 [ 1935.301421][ T8057] el0_svc+0x58/0x2a4 [ 1935.301587][ T8057] el0t_64_sync_handler+0xa0/0xe4 [ 1935.301761][ T8057] el0t_64_sync+0x198/0x19c [ 1935.301956][ T8057] [ 1935.301956][ T8057] other info that might help us debug this: [ 1935.301956][ T8057] [ 1935.302253][ T8057] Chain exists of: [ 1935.302253][ T8057] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25 [ 1935.302253][ T8057] [ 1935.302834][ T8057] Possible unsafe locking scenario: [ 1935.302834][ T8057] [ 1935.303005][ T8057] CPU0 CPU1 [ 1935.303162][ T8057] ---- ---- [ 1935.303333][ T8057] lock(&sb->s_type->i_mutex_key#25); [ 1935.303691][ T8057] lock(tpg_instances_lock); [ 1935.303928][ T8057] lock(&sb->s_type->i_mutex_key#25); [ 1935.304290][ T8057] lock(gadget_subsys.su_mutex); [ 1935.304510][ T8057] [ 1935.304510][ T8057] *** DEADLOCK *** [ 1935.304510][ T8057] [ 1935.304795][ T8057] locks held by syz.1.1555/8057: 3, last CPU#0: [ 1935.305049][ T8057] #0: ffff00000fe18460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3c/0xb0 [ 1935.305581][ T8057] #1: ffff00002049cf80 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x1b8/0x3e8 [ 1935.306091][ T8057] #2: ffff000020635900 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xac/0x638 [ 1935.306551][ T8057] [ 1935.306551][ T8057] stack backtrace: [ 1935.306770][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.1.1555 Tainted: G W L syzkaller #0 PREEMPT [ 1935.307086][ T8057] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1935.307226][ T8057] Hardware name: linux,dummy-virt (DT) [ 1935.307448][ T8057] Call trace: [ 1935.307593][ T8057] show_stack+0x18/0x24 (C) [ 1935.307786][ T8057] dump_stack_lvl+0x7c/0xb0 [ 1935.307935][ T8057] dump_stack+0x1c/0x28 [ 1935.308079][ T8057] print_circular_bug+0x23c/0x284 [ 1935.308233][ T8057] check_noncircular+0x174/0x194 [ 1935.308418][ T8057] check_prev_add+0x114/0xca0 [ 1935.308566][ T8057] __lock_acquire+0x13f4/0x1a5c [ 1935.308741][ T8057] lock_acquire+0x3d0/0x44c [ 1935.308985][ T8057] __mutex_lock+0x150/0x1530 [ 1935.309141][ T8057] mutex_lock_nested+0x24/0x30 [ 1935.309447][ T8057] configfs_rmdir+0x434/0x728 [ 1935.309788][ T8057] vfs_rmdir+0x230/0x638 [ 1935.310071][ T8057] filename_rmdir+0x240/0x3e8 [ 1935.310263][ T8057] __arm64_sys_unlinkat+0xc0/0xe8 [ 1935.310480][ T8057] invoke_syscall+0x74/0x240 [ 1935.310659][ T8057] el0_svc_common.constprop.0+0xac/0x230 [ 1935.310896][ T8057] do_el0_svc+0x40/0x58 [ 1935.311557][ T8057] el0_svc+0x58/0x2a4 [ 1935.311836][ T8057] el0t_64_sync_handler+0xa0/0xe4 [ 1935.312077][ T8057] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1935.529443][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1935.569435][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.267197][ T8057] printk: legacy console [ttyGS0] disabled [ 1937.069887][ T4690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.361865][ T4690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.692303][ T4690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.880659][ T4690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.252856][ T4690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1939.303119][ T4690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1939.359216][ T4690] bond0 (unregistering): Released all slaves [ 1939.542276][ T4690] hsr_slave_0: left promiscuous mode [ 1939.552946][ T4690] hsr_slave_1: left promiscuous mode [ 1939.590235][ T4690] veth1_macvtap: left promiscuous mode [ 1939.590896][ T4690] veth0_macvtap: left promiscuous mode [ 1939.591942][ T4690] veth1_vlan: left promiscuous mode [ 1939.592468][ T4690] veth0_vlan: left promiscuous mode [ 1942.661523][ T4690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.861959][ T4690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.882003][ T29] audit: type=1400 audit(1942.470:669): avc: denied { write } for pid=8069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1943.013137][ T4690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.230185][ T4690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.246615][ T29] audit: type=1400 audit(1942.840:670): avc: denied { write } for pid=8072 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1943.450802][ T3228] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1944.541925][ T4690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1944.587206][ T4690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1944.660413][ T4690] bond0 (unregistering): Released all slaves [ 1944.870577][ T4690] hsr_slave_0: left promiscuous mode [ 1944.888834][ T4690] hsr_slave_1: left promiscuous mode [ 1944.928767][ T4690] veth1_macvtap: left promiscuous mode [ 1944.929516][ T4690] veth0_macvtap: left promiscuous mode [ 1946.836363][ T29] audit: type=1400 audit(1946.420:671): avc: denied { write } for pid=8081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1947.335504][ T29] audit: type=1400 audit(1946.910:672): avc: denied { write } for pid=8084 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1947.731421][ T3228] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1948.489326][ T29] audit: type=1400 audit(1948.080:673): avc: denied { write } for pid=8089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1948.944351][ T29] audit: type=1400 audit(1948.530:674): avc: denied { write } for pid=8092 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1949.215343][ T3228] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1949.868601][ T29] audit: type=1400 audit(1949.460:675): avc: denied { write } for pid=8096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1950.231151][ T29] audit: type=1400 audit(1949.820:676): avc: denied { write } for pid=8099 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1950.579920][ T3228] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1951.482571][ T29] audit: type=1400 audit(1951.070:677): avc: denied { write } for pid=8103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1951.998063][ T29] audit: type=1400 audit(1951.590:678): avc: denied { write } for pid=8106 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1952.352629][ T3228] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1953.147817][ T29] audit: type=1400 audit(1952.740:679): avc: denied { write } for pid=8110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1953.400001][ T29] audit: type=1400 audit(1952.990:680): avc: denied { write } for pid=8113 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1953.715276][ T3228] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1954.562030][ T29] audit: type=1400 audit(1954.150:681): avc: denied { write } for pid=8118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1954.826568][ T29] audit: type=1400 audit(1954.420:682): avc: denied { write } for pid=8121 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1955.024286][ T3228] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1955.751205][ T29] audit: type=1400 audit(1955.340:683): avc: denied { write } for pid=8125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1956.217237][ T29] audit: type=1400 audit(1955.810:684): avc: denied { write } for pid=8128 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1956.561720][ T3228] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1960.438120][ T29] audit: type=1400 audit(1960.030:685): avc: denied { write } for pid=8144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1960.857941][ T29] audit: type=1400 audit(1960.450:686): avc: denied { write } for pid=8147 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1