last executing test programs: 36m19.514507989s ago: executing program 1 (id=489): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, r0, 0xe}, 0x14) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0xa, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x20}}], 0x1, 0x4000080) 36m19.125750802s ago: executing program 1 (id=490): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071000c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) flistxattr(r0, &(0x7f00000001c0)=""/97, 0x61) 36m18.578395326s ago: executing program 1 (id=491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) unshare(0x24020400) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff3, 0x4012011, r1, 0x4000) sync_file_range(r0, 0x5, 0x9, 0x1) 36m18.06975266s ago: executing program 1 (id=493): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) 36m15.451749361s ago: executing program 1 (id=496): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000240)='k', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) inotify_init1(0x180800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 36m13.568179317s ago: executing program 1 (id=498): syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x2b, 0x0, @private2, @local, {[], {0x4e23, 0x0, 0x8}}}}}}, 0x0) 35m27.184183999s ago: executing program 32 (id=498): syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x2b, 0x0, @private2, @local, {[], {0x4e23, 0x0, 0x8}}}}}}, 0x0) 26m54.84864302s ago: executing program 2 (id=1160): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, 0x0) 26m54.007774367s ago: executing program 2 (id=1162): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001340)={0x0, 0x0, "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", "7b46c5e8e4551741ae4403818434ca6f5d3fb03cc865b46b2a953019d5a140f4627d6f22b135f9f4c841ddddddc8b3f2dd03bd6c7f973cd89444238e9caa4d62645ebac41f5736eea93b49ae92b7589e0e58c4a433633a46986234d3e5103e6d209f46bcaca570d3064de0b4a07a9c33a7ebea2d6b58cad80ee422587e3b57cc718c740c78ef58afd726af5550c167cc1db45a7f08666b3cb0475fd5fee62568c80efa599001667e628358ca29a4f33a6903f5f873c5b69c766ce78001f20df4555f30f6024681d7999ea525accf14525a41373d4ba97c3edfc718a65fc384df9ab993478a30e4ecabcccad26285dceb30c0faac291e41782cfdb22ea6cb4ad8f40422dd61fb4ff07d4a9994f878c1326097e5c76dbd448885851f4d46be2fa0a4fdd1726aaceb0a415596302334a32e0d59eda9b406dd7afc1bf8a92bb01552faabc08eae64d59bd6a2396c7a4b7dca5ce5a0f698b6436b2dd4d3a2188354422c73fc31132559b629a7cd7f6d10094a953f03a7aa18957db2956fd37561404eb872a82abaad04aa759aaafff1e0f11924d7fea774fdbe313d1a64ede2b635f5f43e2933f072d35c82bcc946ad9520ebc0d467833715e0a20c1b36314ca84ea714e40533106d23bf2436a1619dca870dd3e66e73a21d6768a78b08d619344aae8346d3266730107239dec759ad2a7831cef9fe6971c407c7791f3e4be74577c120a2d2dd199a70ac6a6ebd17ebe31b7a985b0674d86a7cc53fc4c18ad0dac48ce428d5b7b0c059d7c9057075f93e0699b5ff248fe7cae69cb75354167b38cf8a2de64881435004ebebec79936c4b5cbe2785b6e70ad98c4c1196dee68a0eeff91022ce854cb0f8f1b0305558d6e3f3b282ddb0c497c891844c5ac1a320ad046bc80462b5dca30c5ebf8f734c9c28531e5175df28c1f68698ee992846aa3e435578df9c1dffabeb686d87c9f7a43a55434eb8e35c962ab96cbeb790af56eb03408a06911328a7e9e6efeccfd6ace9dbf693ff12718cda4531a3468f1f9df596f89947f3e663facc3e8e56e1589781006862dec6dc8dd36cc0ba99b4c53fd293403fc9538f6bd8426a4ad1ea68f0da80e1c4159a46a3cf37e71952eebe0af8d770d9c85209bb5a421563e5ea6e5ae52c1fce1b6620602cff389fe2abcf387e1ea1524946afbfcbb692698126b79c5824ff4a2892719f84c931e89e1b205eb72450c2496218e359ca0997aa2ad75f4b405091f5e93b4391397d77cf7e9c16068397af544f1a7082d2d3d9e38be4d8c4db12c5b6ae16bbba1e087ab7389ffcb27b4eca12048d8c96925c3b2705a39228099f3b19d634d44217193c4029e17af97d82b74aeaf782efe1e3148c37fdbf603698808ead3c2bbe259b7c5fc04437ec3893693b29cc1e9184bbcb4e4680008e0fbbd098ef68e4212c0a59f344c40fcd77f4a78b11b64f6130ef7c83df615b60be5315a64d8aa44b7a4e85810337103e8295c5ca49abb3c68f5b1dbbb48c899106aa57483cf42622c2e9a16cbb03a3a493af65a242ce51709e3917663b58fab0afed9a51b2b773c79330b2a8cd0efc131944a11d06ac0c1031339fa6b506037a32bcacc9be3b835f1f0ace5935fbb124d8257866ad99fc9c680282e84477db1d9f3996d4e437e4561f89272efa071da74e09f80d37f167c0a509f5f44aa5ea5970a3d380fa0e6719e3a4f21a0e90b1812119c1099e22e5cc34c749929800c46dab005f670f82bf14742d3ed52f58aac3ccfe9ce2438ae0381ce52befac5c6d8b0a89094864eac3a52a7354f495f0bf43e4879a6cb6ee13d089999222eae8ff6411c5ad8ae8a7e109cdeea70c32364c5ea0485aa7ba76328e326a3b5557af20ec341594d73bd586f8f833a1adda51821f8aa0f24b2f9feff361504083c45385a30df58d2b7fd0a2bd3158d2cb2c7b2b8ef1eeb7ede01e8fb532de029c10bde87cf4de5a3c63a97c43f74b868d64c0ffdbea0b85fed27995c57482efb8c78fe0de43a641df870dc5fcd508e42eb87cf5f9bef182dc83a4039be8880b4ee5965f41a799318b7fd77530f18ea71014a95d0ea932ed3699dd6831227b4e1df16edbf2d1b20fab45e1b31e4aab96c72faf0648045b54af827f0491e74d10c9ba071d86d691b44af9ff44fe41979d648ea90fe8d9d59c0dd6f1815601669b5a972718c8e31fa071a18a312ae9c6dabb0464e27de6c81097816b96c2ede17bde0af29682f620d708e3e6355729afc9fc998f9c58809d51bda45a670bb3c381e82ddbe091da5b38e1b313c11bfeba448448d420fc98b4819ee2ce31d2adaddcb12d87dbe9e20795047884690a04b85f05d321fb6b11b9a8a3e816700b9e15063a1aee5105854253c1f3f89b57af16eeaabc6a34738ea94983add87e6435ec6f1f86b22da5e659423594f66c96cb9a31d85ce2a9798549b637378be8a76490345d1618238fcb55fbab711c3c873bf0d48318a392b3174a18bc44427d1c21cd93db3f0acda6829b2f38e666d6241b0f7b0ad0d7af6c90ce9eec3b61bfe907368be80a79027f8cac55971c3d0a65faf480aaea49a83ae2a5293f94875765f1335873bcc9d18e7d46301f1a407f0af02bb7ab36b5b5628193031b92c31e513d559e7659061ba7e289e6b5a867ff917f08b817d9ed1fc41875c8eed0c6e34bb590dd2e6d473832c1463e6a46c4d8fec154ba0fe779e57b323dae4f7baa139c74400db7b5f40d3080a691e4796e0e693f40c2e18c9c0ddca5778d8361e2ecfca8ef9ab3fe410e41691cd5c8544f96afbd07b89b9bb2411f939d47225324ac9e74cd374195455f9e57e08519e1b3cee0f2ea1e991d16f30e9b5054cd2407e1b10a2ba99c13f882d65a58299fca0a3e522405fb4b5735038c970478b3dce901bfad275d61a130195605c25a1ec3b191b178af479f926788abb179e2ef74856f2ce049117219c63c7aecf1506f2047a6a21088fa8722c212d6e9d1f5b29f1ed2675801f571b2533b8cf336ddfc1ad6c160e9dab92d1f68eff47c7f97bca629be01f71b63503ef2b602e4b9e66a7902f1cd118f4ce1924fc41ffad2dec0d6dc86c5e03d33c5017efcdc9c09459135b0023d4b3e3da747514c8dced163353fe079c22cc128f0bc6c2de837de59419622feeab7ec74e2881f3da7f5ebbbb7978522435d99b8e523769b242628a2bfa7bd2eb157d4d20a6391b07057ff846d3052bf6df6f82538876f1c7851ef1147c6c05e91c8f9d66507476c107fa4dcd778486e733f942582fe85daeae6da3a0da94880cc5adeffb9434aa99f9fbcf992a9ab58f642ac0d5db7b6f75301ad24540bb10cab1db4cd2916ac7a53c405ad95b19e64c76fa4633a91f0689472190adc187643ee76d40cc64862c0cc5a9222195edac0c99674c3c3a721e77ca1d216b4fab18eb9f678c54d99e72c98a70ef87af1d167e200690208ab64de41662af2f80055e777f097e86a7ab7e07d6fa024d75454023f92eab496ae62f82f17b5870b9d3e72f9cae5d801dedb30455effcc2a087a6db37b941be129c051ffed3456017b6f84e49818a9a05f08f2ce61d4781d6abb59a2f2658b88fe70c23117e9e4fddc3fbbfeaeb8dab1d4954bc1f0df72732ab3bd078162add4a61588d62d546d30270ef82c7af82fc0353fa46e872dfd8e3156e7f599912095fea2e8007f25d6db46788c4be160452a74aac493a4567b495bed6317d6c751e0229882d5aceea5779feff189cd6befbb70957d0098ebcce7c51a35f115d335adf661b8c58eb5b0e5cbf08b3878de13552b30cd99f584c18b3969de6f0207ebdf14d5611989f87d19c29773786afbf125cbbd3bc8135bdc9117d3bc4078e5089bbeb643d4b34d9d3fad16b4eb1a4c18d3ff9e5675aeaf722e355c406a142d3516f394de15ff4569462cf9477e43c876ae31eee04cd1cbf42cde02346421cbddaa1e5be58ed7a665adcd6cf8a4e12f0cd2d94bfe91037a1e23de5601e8c0d7a9961d027d83a04a200995289d74f4f54435f3e4bd7ec2e80c04b6495156c633de5237d063ca9729eda54b5f073fc96c9c8326af1340000393062d05e582430699cc9990231682b69e4109ba7e2b10ac2c58278ea9017989c51dc00e62311df2eeee404b7f63dbd3f8763046e690cf148d79f7a00158828847599124e6cde4853bcb0b2284cf4619d8cc3d4615fb24cf31018b8e29261e378d2eb7275fe31dcd3583153451ade11d37f5085ac1321584ac51fd7e829e67d667fb196edf4b5fdd0fbff5e61af747c4636cdfc41536e2da7bcefd202c8623f7c05b1794db47e845d121120f304677c3c3f582c67925fc09365762ffd9542ffc7dba02cfab8a8f96c6ba34d27a15468a86bc62514fcccd98d987724e48dc826d75288303dc19090fd66ef644e3aab218ea87743a2de96e6fd43d5b299ec49f0f475760a502faa454f49bf4e9e02a2ae4017046e904933b1eb86d61e55213f5f529c8f4c7c1008ebd81d36db065d655e6baec2bb93bdd294cb3232de5b90791d86129cc183b8022f0aa8c1be0a1807e58638dd21d6fc82e29b0b076d0b52825c16334b9a05debc375b053990d63d514c4af2d1da9b02c4f0d88a6189235ea98ae05fd0f3e4cd6064a31a2b3b644115317bb32eba5a6582973333befc37f0f7b08509cd6bd33183ecdb98fa45f39b57ea01082f38b0d4643d96a9dde4ed743a25455dac83e07f20b05a5f40ea5d48da2cc3b2ad0b7bbc5d6a76ac5588a4729c4b8b9bb18a2bb63fa03aecd1c50634721ecb3a222cb821fe17fbd085cd791b476a745c88aa99e4fb54c19f29941b8766a04bd14c3584ae429b126cee7f27ae3a54808dfc647d1c46be4b4d570df68f25e16febff1923bb5f5d2f374b72a2f27be61eb70357c100110089febf491b050317e7ead89d45704edbe73d13b2f21a283125f9193b79fb3cec7f64a4099e638dec4036cee38cb6e98f0cdd8e2420edc5fd9e1703c80dace1f3dfbc9f198f610bd91243544f6ce1ceb93c32943b40fc6999a714d56d2728bde653f3e5d7392c62954d58de2ebb958e86fce441ecd8558ec0ccec8aa526e2a14795c80d130fcb961da495e3589711c76b756a27290443b6309c75598af021aa3e6675fac72828fed2825987f2dd99d3e76d1abed48d7863ee147cb36fd136a65b3a0d0178d1e0878399cc78f04ce9b58eba47bf27296e772e8bebfe46fe3d97af06c5ba06108c06e2b046a3015149f5c446c2723b8bbeb5fd33f82c2ceac45c5cc41e9b99bd5e240a8e95faa63667e70e546fb1493564f5f78d6de538ccffc58e15a68ba1c594b878482a57b974bdad18635572f92addc2d088cf734b0385a2b19c33b89471864c319c60c29775e041bd36129aeaa9f87e91fbaf14d7f77f00c9620df09e4358e1ffc"}) 26m53.349961043s ago: executing program 2 (id=1164): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ppoll(&(0x7f0000000380)=[{r4, 0x90}], 0x1, &(0x7f0000000400), 0x0, 0x0) 26m52.310847571s ago: executing program 2 (id=1166): epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x80000, &(0x7f0000000080)={[0x76]}, 0x7) 26m51.401517758s ago: executing program 2 (id=1168): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x2, {{0x2, 0x202, @multicast2}}, 0x0, 0x4, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @empty}}]}, 0x290) 26m50.422638866s ago: executing program 2 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x17d) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x80, 0x24) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) 26m4.808121582s ago: executing program 33 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x17d) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x80, 0x24) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) 15m20.317985266s ago: executing program 0 (id=1872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6", 0x18) r1 = gettid() timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = accept$alg(r0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1) sendmsg$alg(r2, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="f3592e65cd7a8f", 0x7}, {&(0x7f0000000540)="7799c432", 0x4}], 0x2, 0x0, 0x0, 0x4000800}, 0x800) 15m16.497994999s ago: executing program 0 (id=1875): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x26}, 0x28) 15m15.711370536s ago: executing program 0 (id=1877): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, r0, 0x4}) 15m12.298017226s ago: executing program 0 (id=1878): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x800) 15m11.676600681s ago: executing program 0 (id=1879): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000200)=0x3ffe, 0x4) 15m11.238558275s ago: executing program 0 (id=1880): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048055}, 0x8010) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) 14m33.095786745s ago: executing program 3 (id=1930): r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x3b000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) 14m32.902965397s ago: executing program 3 (id=1931): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIOCLEX(r0, 0x5451) 14m32.6188363s ago: executing program 3 (id=1932): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000003c0)={@id}) 14m32.060542135s ago: executing program 3 (id=1933): r0 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) 14m31.686765968s ago: executing program 3 (id=1934): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='0\n', 0x2) close(r2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) 14m31.212689502s ago: executing program 3 (id=1935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 14m22.285087129s ago: executing program 34 (id=1880): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048055}, 0x8010) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) 13m41.325776544s ago: executing program 35 (id=1935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 8.230646179s ago: executing program 5 (id=2434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x1b, 0x0) 7.213461767s ago: executing program 5 (id=2435): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffd, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x2008001, 0x400055}]}}}}}}}, 0x0) 6.984998619s ago: executing program 4 (id=2436): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfffd, 0x2}, {0xc, 0xfff3}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 6.555845773s ago: executing program 5 (id=2437): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=""/93, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, &(0x7f0000002dc0)=""/4096, 0xf000}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 6.067758317s ago: executing program 4 (id=2438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g_uac2\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001540)="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"/697, 0x2b9) 5.74502112s ago: executing program 4 (id=2439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1, 0x1e) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) 4.844490438s ago: executing program 4 (id=2440): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000000, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40806685, &(0x7f0000000000)) 3.639226428s ago: executing program 5 (id=2441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) 2.844850265s ago: executing program 5 (id=2442): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000000c0)='7', 0x1) fsopen(&(0x7f0000000140)='ntfs3\x00', 0x1) 1.384751548s ago: executing program 4 (id=2443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g_uac2\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001540)="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"/697, 0x2b9) 1.285971899s ago: executing program 5 (id=2444): sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 0s ago: executing program 4 (id=2445): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x3a2, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): :323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1062.278607][ T29] audit: type=1326 audit(1061.920:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1062.279328][ T29] audit: type=1326 audit(1061.920:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1062.777566][ T29] audit: type=1326 audit(1062.430:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1062.807228][ T29] audit: type=1326 audit(1062.430:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb7577fe0 code=0x7ffc0000 [ 1070.305910][ T5902] FAULT_INJECTION: forcing a failure. [ 1070.305910][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.309366][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.0.943 Tainted: G W syzkaller #0 PREEMPT [ 1070.309522][ T5902] Tainted: [W]=WARN [ 1070.309577][ T5902] Hardware name: linux,dummy-virt (DT) [ 1070.309645][ T5902] Call trace: [ 1070.309708][ T5902] show_stack+0x18/0x24 (C) [ 1070.309889][ T5902] dump_stack_lvl+0x7c/0xb0 [ 1070.310042][ T5902] dump_stack+0x1c/0x28 [ 1070.310173][ T5902] should_fail_ex+0x6b4/0x6c4 [ 1070.310367][ T5902] should_failslab+0xbc/0x120 [ 1070.310499][ T5902] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1070.310629][ T5902] prepare_creds+0x24/0x6bc [ 1070.310754][ T5902] cap_task_prctl+0x490/0x78c [ 1070.310882][ T5902] security_task_prctl+0xac/0x11c [ 1070.310999][ T5902] __arm64_sys_prctl+0x11c/0x1b64 [ 1070.311126][ T5902] invoke_syscall+0x74/0x240 [ 1070.311250][ T5902] el0_svc_common.constprop.0+0xac/0x230 [ 1070.311433][ T5902] do_el0_svc+0x40/0x58 [ 1070.311549][ T5902] el0_svc+0x58/0x2a4 [ 1070.311676][ T5902] el0t_64_sync_handler+0xa0/0xe4 [ 1070.311808][ T5902] el0t_64_sync+0x198/0x19c [ 1071.930596][ T29] audit: type=1326 audit(1071.580:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffb757804c code=0x7ffc0000 [ 1071.934743][ T29] audit: type=1326 audit(1071.580:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1071.938726][ T29] audit: type=1326 audit(1071.590:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1071.968275][ T29] audit: type=1326 audit(1071.620:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffb7556ff8 code=0x7ffc0000 [ 1071.988696][ T29] audit: type=1326 audit(1071.620:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffb75792e8 code=0x7ffc0000 [ 1072.014778][ T29] audit: type=1326 audit(1071.660:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffb7557050 code=0x7ffc0000 [ 1072.015338][ T29] audit: type=1326 audit(1071.660:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1072.015573][ T29] audit: type=1326 audit(1071.660:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb75782e8 code=0x7ffc0000 [ 1072.025257][ T29] audit: type=1326 audit(1071.660:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffffb7556750 code=0x7ffc0000 [ 1072.030856][ T29] audit: type=1326 audit(1071.680:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.935" exe="/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffb75567b0 code=0x7ffc0000 [ 1092.300997][ T5978] FAULT_INJECTION: forcing a failure. [ 1092.300997][ T5978] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1092.326743][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.2.974 Tainted: G W syzkaller #0 PREEMPT [ 1092.327016][ T5978] Tainted: [W]=WARN [ 1092.327077][ T5978] Hardware name: linux,dummy-virt (DT) [ 1092.327148][ T5978] Call trace: [ 1092.327214][ T5978] show_stack+0x18/0x24 (C) [ 1092.327414][ T5978] dump_stack_lvl+0x7c/0xb0 [ 1092.327543][ T5978] dump_stack+0x1c/0x28 [ 1092.327701][ T5978] should_fail_ex+0x6b4/0x6c4 [ 1092.327864][ T5978] should_fail+0x14/0x34 [ 1092.328016][ T5978] get_futex_key+0x198/0xf84 [ 1092.328143][ T5978] futex_wait_setup+0x64/0x55c [ 1092.328269][ T5978] __futex_wait+0x138/0x218 [ 1092.328389][ T5978] futex_wait+0xe4/0x2ac [ 1092.328505][ T5978] do_futex+0x1e8/0x280 [ 1092.328620][ T5978] __arm64_sys_futex+0x1e8/0x310 [ 1092.328749][ T5978] invoke_syscall+0x74/0x240 [ 1092.328874][ T5978] el0_svc_common.constprop.0+0xac/0x230 [ 1092.328996][ T5978] do_el0_svc+0x40/0x58 [ 1092.329115][ T5978] el0_svc+0x58/0x2a4 [ 1092.329256][ T5978] el0t_64_sync_handler+0xa0/0xe4 [ 1092.329379][ T5978] el0t_64_sync+0x198/0x19c [ 1096.024886][ T5993] FAULT_INJECTION: forcing a failure. [ 1096.024886][ T5993] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.025436][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.2.980 Tainted: G W syzkaller #0 PREEMPT [ 1096.025534][ T5993] Tainted: [W]=WARN [ 1096.025561][ T5993] Hardware name: linux,dummy-virt (DT) [ 1096.025594][ T5993] Call trace: [ 1096.025622][ T5993] show_stack+0x18/0x24 (C) [ 1096.025726][ T5993] dump_stack_lvl+0x7c/0xb0 [ 1096.025784][ T5993] dump_stack+0x1c/0x28 [ 1096.025836][ T5993] should_fail_ex+0x6b4/0x6c4 [ 1096.025896][ T5993] should_failslab+0xbc/0x120 [ 1096.025954][ T5993] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1096.026010][ T5993] taskstats_exit+0x294/0x9a0 [ 1096.026064][ T5993] do_exit+0x45c/0x2158 [ 1096.026118][ T5993] do_group_exit+0xa4/0x208 [ 1096.026171][ T5993] get_signal+0x1b20/0x1f00 [ 1096.026273][ T5993] arch_do_signal_or_restart+0x168/0x700 [ 1096.026362][ T5993] exit_to_user_mode_loop+0x13c/0x1c8 [ 1096.026426][ T5993] el0_svc+0x244/0x2a4 [ 1096.026489][ T5993] el0t_64_sync_handler+0xa0/0xe4 [ 1096.026545][ T5993] el0t_64_sync+0x198/0x19c [ 1100.099577][ T6008] FAULT_INJECTION: forcing a failure. [ 1100.099577][ T6008] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1100.105185][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz.2.985 Tainted: G W syzkaller #0 PREEMPT [ 1100.105339][ T6008] Tainted: [W]=WARN [ 1100.105367][ T6008] Hardware name: linux,dummy-virt (DT) [ 1100.105399][ T6008] Call trace: [ 1100.105448][ T6008] show_stack+0x18/0x24 (C) [ 1100.105589][ T6008] dump_stack_lvl+0x7c/0xb0 [ 1100.105646][ T6008] dump_stack+0x1c/0x28 [ 1100.105698][ T6008] should_fail_ex+0x6b4/0x6c4 [ 1100.105763][ T6008] should_fail+0x14/0x34 [ 1100.105818][ T6008] get_futex_key+0x198/0xf84 [ 1100.105891][ T6008] futex_wait_setup+0x64/0x55c [ 1100.106006][ T6008] __futex_wait+0x138/0x218 [ 1100.106060][ T6008] futex_wait+0xe4/0x2ac [ 1100.106110][ T6008] do_futex+0x1e8/0x280 [ 1100.106160][ T6008] __arm64_sys_futex+0x1e8/0x310 [ 1100.106211][ T6008] invoke_syscall+0x74/0x240 [ 1100.106318][ T6008] el0_svc_common.constprop.0+0xac/0x230 [ 1100.106373][ T6008] do_el0_svc+0x40/0x58 [ 1100.106425][ T6008] el0_svc+0x58/0x2a4 [ 1100.106484][ T6008] el0t_64_sync_handler+0xa0/0xe4 [ 1100.106535][ T6008] el0t_64_sync+0x198/0x19c [ 1118.392922][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1118.398461][ T29] audit: type=1400 audit(1118.030:343): avc: denied { map } for pid=6072 comm="syz.0.1011" path="socket:[12747]" dev="sockfs" ino=12747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1118.412738][ T29] audit: type=1400 audit(1118.060:344): avc: denied { read } for pid=6072 comm="syz.0.1011" path="socket:[12747]" dev="sockfs" ino=12747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1133.576321][ T29] audit: type=1400 audit(1133.230:345): avc: denied { write } for pid=6133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.715312][ T29] audit: type=1400 audit(1134.360:346): avc: denied { write } for pid=6136 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1158.231518][ T1619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.371655][ T1619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.417278][ T1619] bond0 (unregistering): Released all slaves [ 1158.772439][ T1619] bond1 (unregistering): Released all slaves [ 1160.016090][ T1619] hsr_slave_0: left promiscuous mode [ 1160.049129][ T1619] hsr_slave_1: left promiscuous mode [ 1167.380839][ T29] audit: type=1400 audit(1167.030:347): avc: denied { write } for pid=6258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1168.281498][ T29] audit: type=1400 audit(1167.920:348): avc: denied { write } for pid=6271 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1169.119279][ T3227] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1171.876765][ T29] audit: type=1400 audit(1171.520:349): avc: denied { setattr } for pid=6287 comm="syz.2.1083" name="mnt" dev="proc" ino=13660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 1172.316937][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.379366][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.757660][ T29] audit: type=1400 audit(1172.400:350): avc: denied { write } for pid=6294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1174.401214][ T29] audit: type=1400 audit(1174.050:351): avc: denied { write } for pid=6302 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1175.919109][ T3227] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1178.459607][ T6219] hsr_slave_0: entered promiscuous mode [ 1178.523344][ T6219] hsr_slave_1: entered promiscuous mode [ 1178.568622][ T6219] debugfs: 'hsr0' already exists in 'hsr' [ 1178.574772][ T6219] Cannot create hsr debugfs directory [ 1180.459203][ T29] audit: type=1400 audit(1180.110:352): avc: denied { write } for pid=6322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1181.671222][ T29] audit: type=1400 audit(1181.320:353): avc: denied { write } for pid=6334 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1182.152445][ T3227] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1186.443126][ T29] audit: type=1400 audit(1186.080:354): avc: denied { write } for pid=6343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1186.626031][ T6219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1186.747611][ T6219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1186.793171][ T6219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1186.932785][ T6219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1186.967441][ T6219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1187.078960][ T6219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1187.116969][ T6219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1187.190800][ T6219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.963413][ T29] audit: type=1400 audit(1188.600:355): avc: denied { write } for pid=6356 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.183592][ T29] audit: type=1400 audit(1190.830:356): avc: denied { write } for pid=6365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.214959][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.849831][ T29] audit: type=1400 audit(1192.500:357): avc: denied { write } for pid=6370 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.655258][ T29] audit: type=1400 audit(1195.260:358): avc: denied { write } for pid=6382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1197.445813][ T29] audit: type=1400 audit(1197.100:359): avc: denied { write } for pid=6394 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1201.005156][ T29] audit: type=1400 audit(1200.650:360): avc: denied { write } for pid=6400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1203.102617][ T29] audit: type=1400 audit(1202.750:361): avc: denied { write } for pid=6414 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1207.093051][ T29] audit: type=1400 audit(1206.730:362): avc: denied { write } for pid=6424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.837456][ T29] audit: type=1400 audit(1208.480:363): avc: denied { write } for pid=6435 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1211.768609][ T29] audit: type=1400 audit(1211.420:364): avc: denied { ioctl } for pid=6447 comm="syz.2.1110" path="/dev/fuse" dev="devtmpfs" ino=92 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1213.616144][ T6219] veth0_vlan: entered promiscuous mode [ 1213.701896][ T6219] veth1_vlan: entered promiscuous mode [ 1214.272495][ T6219] veth0_macvtap: entered promiscuous mode [ 1214.393367][ T6219] veth1_macvtap: entered promiscuous mode [ 1215.028546][ T5317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.095808][ T5317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.217088][ T130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.352303][ T5317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.531838][ T29] audit: type=1400 audit(1242.180:365): avc: denied { listen } for pid=6562 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1245.581456][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.662073][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.301949][ T29] audit: type=1400 audit(1245.950:366): avc: denied { getopt } for pid=6580 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1250.978513][ T5931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1251.250824][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 1251.271360][ T5931] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1251.416699][ T5931] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1251.417425][ T5931] usb 1-1: config 0 has no interface number 0 [ 1251.418538][ T5931] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1251.419050][ T5931] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1251.701527][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.702225][ T5931] usb 1-1: Product: syz [ 1251.708687][ T5931] usb 1-1: Manufacturer: syz [ 1251.709083][ T5931] usb 1-1: SerialNumber: syz [ 1251.873303][ T5931] usb 1-1: config 0 descriptor?? [ 1252.019156][ T6603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1252.059455][ T6603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1252.345477][ T6603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1252.356922][ T6603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1252.626519][ T5931] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1252.638884][ T5931] asix 1-1:0.34: probe with driver asix failed with error -61 [ 1263.278657][ T5931] usb 1-1: USB disconnect, device number 2 [ 1294.044912][ T5931] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1294.474650][ T5931] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1294.486841][ T5931] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1294.487256][ T5931] usb 1-1: can't read configurations, error -71 [ 1295.654908][ T29] audit: type=1400 audit(1295.300:367): avc: denied { create } for pid=6660 comm="syz.0.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1299.766211][ T6062] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1300.020839][ T6062] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1300.058604][ T6062] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1300.061117][ T6062] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1300.063509][ T6062] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1300.069853][ T6062] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1300.072222][ T6062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.175768][ T6674] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1300.187915][ T6674] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1300.232690][ T6062] pl2303 1-1:1.0: pl2303 converter detected [ 1300.389020][ T6062] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 1300.600092][ T6062] usb 1-1: USB disconnect, device number 5 [ 1301.082274][ T6062] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1301.123653][ T6062] pl2303 1-1:1.0: device disconnected [ 1315.163655][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.290087][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.686182][ T5931] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1321.926602][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1322.116541][ T5931] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1322.117442][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1322.118205][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.269258][ T5931] usb 1-1: config 0 descriptor?? [ 1323.122116][ T5931] hid-generic 0003:045E:00F9.0001: ignoring exceeding usage max [ 1323.139022][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.140113][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.141115][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.141520][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.141884][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.142227][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.142609][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.142969][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.143310][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.143659][ T5931] hid-generic 0003:045E:00F9.0001: unknown main item tag 0x0 [ 1323.431258][ T5931] hid-generic 0003:045E:00F9.0001: hidraw0: USB HID v0.01 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 1323.680656][ T5931] usb 1-1: USB disconnect, device number 6 [ 1327.332404][ T6665] hsr_slave_0: entered promiscuous mode [ 1327.361008][ T6665] hsr_slave_1: entered promiscuous mode [ 1327.419581][ T6665] debugfs: 'hsr0' already exists in 'hsr' [ 1327.423013][ T6665] Cannot create hsr debugfs directory [ 1327.939979][ T6727] fido_id[6727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1333.931904][ T6665] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1334.019678][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1334.041028][ T6665] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1334.086976][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1334.101145][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 1334.103516][ T6665] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1334.156992][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1334.175593][ T6665] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1334.197871][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1338.597701][ T6770] syz_tun: entered allmulticast mode [ 1340.016225][ T29] audit: type=1400 audit(1339.660:368): avc: denied { create } for pid=6771 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1340.697362][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.376324][ T5931] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1355.605427][ T5931] usb 1-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1355.639548][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.639953][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.643117][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.700649][ T5931] usb 1-1: config 0 descriptor?? [ 1356.488228][ T5931] hid-generic 0003:05AC:024F.0002: unbalanced collection at end of report description [ 1356.499626][ T5931] hid-generic 0003:05AC:024F.0002: probe with driver hid-generic failed with error -22 [ 1360.429555][ T6665] veth0_vlan: entered promiscuous mode [ 1360.516115][ T6665] veth1_vlan: entered promiscuous mode [ 1360.742854][ T6665] veth0_macvtap: entered promiscuous mode [ 1360.820687][ T6665] veth1_macvtap: entered promiscuous mode [ 1361.733290][ T5317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.906429][ T130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.930082][ T130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.931353][ T130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.050968][ T6835] usb 1-1: USB disconnect, device number 7 [ 1371.292000][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.382991][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.295899][ T6879] support for the xor transformation has been removed. [ 1382.785799][ T6464] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1383.402014][ T6464] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 6.00 [ 1383.520972][ T6464] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.521810][ T6464] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1383.901660][ T6464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.902471][ T6464] usb 1-1: Product: syz [ 1383.906575][ T6464] usb 1-1: Manufacturer: syz [ 1383.906764][ T6464] usb 1-1: SerialNumber: syz [ 1384.395775][ T6464] usb 1-1: USB disconnect, device number 8 [ 1386.589289][ T29] audit: type=1400 audit(1386.230:369): avc: denied { write } for pid=6901 comm="syz.3.1259" name="001" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1387.491657][ T29] audit: type=1400 audit(1387.140:370): avc: denied { create } for pid=6903 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1387.577498][ T29] audit: type=1400 audit(1387.200:371): avc: denied { connect } for pid=6903 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1390.043037][ T29] audit: type=1400 audit(1389.660:372): avc: denied { create } for pid=6910 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1395.416871][ T6926] FAULT_INJECTION: forcing a failure. [ 1395.416871][ T6926] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1395.420916][ T6926] CPU: 1 UID: 0 PID: 6926 Comm: syz.0.1268 Tainted: G W L syzkaller #0 PREEMPT [ 1395.421139][ T6926] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1395.421194][ T6926] Hardware name: linux,dummy-virt (DT) [ 1395.421273][ T6926] Call trace: [ 1395.421332][ T6926] show_stack+0x18/0x24 (C) [ 1395.421526][ T6926] dump_stack_lvl+0x7c/0xb0 [ 1395.421652][ T6926] dump_stack+0x1c/0x28 [ 1395.421770][ T6926] should_fail_ex+0x6b4/0x6c4 [ 1395.421904][ T6926] should_fail+0x14/0x34 [ 1395.422024][ T6926] get_futex_key+0x198/0xf84 [ 1395.422144][ T6926] futex_wait_setup+0x64/0x55c [ 1395.422308][ T6926] __futex_wait+0x138/0x218 [ 1395.422475][ T6926] futex_wait+0xe4/0x2ac [ 1395.422598][ T6926] do_futex+0x1e8/0x280 [ 1395.422706][ T6926] __arm64_sys_futex+0x1e8/0x310 [ 1395.422823][ T6926] invoke_syscall+0x74/0x240 [ 1395.422950][ T6926] el0_svc_common.constprop.0+0xac/0x230 [ 1395.423063][ T6926] do_el0_svc+0x40/0x58 [ 1395.423169][ T6926] el0_svc+0x58/0x2a4 [ 1395.423341][ T6926] el0t_64_sync_handler+0xa0/0xe4 [ 1395.423452][ T6926] el0t_64_sync+0x198/0x19c [ 1395.466571][ T29] audit: type=1400 audit(1395.090:373): avc: denied { ioctl } for pid=6924 comm="syz.0.1268" path="socket:[15716]" dev="sockfs" ino=15716 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1397.535385][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 1402.110005][ T29] audit: type=1400 audit(1401.760:374): avc: denied { map } for pid=6933 comm="syz.0.1272" path="socket:[15730]" dev="sockfs" ino=15730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1402.132551][ T29] audit: type=1400 audit(1401.760:375): avc: denied { accept } for pid=6933 comm="syz.0.1272" path="socket:[15730]" dev="sockfs" ino=15730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1404.548439][ T29] audit: type=1400 audit(1404.170:376): avc: denied { mount } for pid=6937 comm="syz.0.1273" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1405.202305][ T6943] futex_wake_op: syz.3.1270 tries to shift op by 32; fix this program [ 1427.000581][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 1427.011789][ T6978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1287'. [ 1429.687699][ T6985] input: syz0 as /devices/virtual/input/input1 [ 1438.355998][ T29] audit: type=1400 audit(1438.000:377): avc: denied { create } for pid=7005 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1439.847815][ T29] audit: type=1400 audit(1439.480:378): avc: denied { write } for pid=7009 comm="syz.3.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1439.848709][ T29] audit: type=1400 audit(1439.480:379): avc: denied { nlmsg_write } for pid=7009 comm="syz.3.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1443.152765][ T29] audit: type=1400 audit(1442.800:380): avc: denied { setopt } for pid=7020 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1443.865873][ T29] audit: type=1400 audit(1443.510:381): avc: denied { append } for pid=7024 comm="syz.3.1302" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1460.817780][ T29] audit: type=1400 audit(1460.470:382): avc: denied { watch watch_reads } for pid=7061 comm="syz.0.1319" path="/138" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1462.886039][ T4986] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1463.947994][ T4986] usb 1-1: not running at top speed; connect to a high speed hub [ 1463.948627][ T4986] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1464.059381][ T4986] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.060177][ T4986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.067218][ T4963] usb 1-1: USB disconnect, device number 9 [ 1468.977300][ T7072] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 1470.352455][ T7074] lo: Caught tx_queue_len zero misconfig [ 1470.389994][ T7074] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1473.608597][ T29] audit: type=1326 audit(1473.230:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.0.1324" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b782e8 code=0x0 [ 1479.775594][ T29] audit: type=1400 audit(1479.420:384): avc: denied { load_policy } for pid=7096 comm="syz.0.1334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1479.900523][ T7097] SELinux: failed to load policy [ 1481.087003][ T29] audit: type=1400 audit(1480.730:385): avc: denied { watch watch_reads } for pid=7100 comm="syz.0.1336" path="/148/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1487.787916][ T29] audit: type=1400 audit(1487.440:386): avc: denied { ioctl } for pid=7132 comm="syz.0.1350" path="socket:[16924]" dev="sockfs" ino=16924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1492.459570][ T7157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1357'. [ 1496.847000][ T6464] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1497.190761][ T6464] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1497.303455][ T6464] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1497.307926][ T6464] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1497.310627][ T6464] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1497.495135][ T6464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.498548][ T6464] usb 1-1: Product: syz [ 1497.513194][ T6464] usb 1-1: Manufacturer: syz [ 1497.515857][ T6464] usb 1-1: SerialNumber: syz [ 1497.703437][ T7170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1498.167715][ T7170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1498.209879][ T7170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1499.248526][ T7170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1499.290327][ T7170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1499.726344][ T6464] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1500.695959][ T6464] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1500.847622][ T6464] usb 1-1: USB disconnect, device number 10 [ 1501.008312][ T6464] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1502.510708][ T7187] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1506.990287][ T6464] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1507.191388][ T6464] usb 1-1: Using ep0 maxpacket: 8 [ 1507.267611][ T6464] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1507.270163][ T6464] usb 1-1: New USB device found, idVendor=32a7, idProduct=0000, bcdDevice=4c.9b [ 1507.312139][ T6464] usb 1-1: config 173 has an invalid interface number: 169 but max is 0 [ 1507.324721][ T6464] usb 1-1: config 173 has no interface number 0 [ 1507.329295][ T6464] usb 1-1: config 173 interface 169 has no altsetting 0 [ 1507.435533][ T6464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.437745][ T6464] usb 1-1: Product: syz [ 1507.445717][ T6464] usb 1-1: Manufacturer: syz [ 1507.455337][ T6464] usb 1-1: SerialNumber: syz [ 1508.283221][ T6464] usb 1-1: USB disconnect, device number 11 [ 1520.520778][ T29] audit: type=1400 audit(1520.170:387): avc: denied { read } for pid=7220 comm="syz.3.1382" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1520.536899][ T29] audit: type=1400 audit(1520.180:388): avc: denied { open } for pid=7220 comm="syz.3.1382" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1520.561721][ T29] audit: type=1400 audit(1520.210:389): avc: denied { ioctl } for pid=7220 comm="syz.3.1382" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1520.577055][ T7221] binder: 7220:7221 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1520.593520][ T7221] binder: 7220:7221 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1525.725131][ T29] audit: type=1400 audit(1525.370:390): avc: denied { create } for pid=7234 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1525.780612][ T29] audit: type=1400 audit(1525.430:391): avc: denied { write } for pid=7234 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1527.581913][ T7241] FAULT_INJECTION: forcing a failure. [ 1527.581913][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.582923][ T7241] CPU: 0 UID: 0 PID: 7241 Comm: syz.0.1389 Tainted: G W L syzkaller #0 PREEMPT [ 1527.583092][ T7241] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1527.583154][ T7241] Hardware name: linux,dummy-virt (DT) [ 1527.583225][ T7241] Call trace: [ 1527.583286][ T7241] show_stack+0x18/0x24 (C) [ 1527.583612][ T7241] dump_stack_lvl+0x7c/0xb0 [ 1527.583826][ T7241] dump_stack+0x1c/0x28 [ 1527.583975][ T7241] should_fail_ex+0x6b4/0x6c4 [ 1527.584119][ T7241] should_failslab+0xbc/0x120 [ 1527.584279][ T7241] __kvmalloc_node_noprof+0x61c/0x8b8 [ 1527.584476][ T7241] alloc_fdtable+0xdc/0x280 [ 1527.584620][ T7241] dup_fd+0x67c/0x8d8 [ 1527.584735][ T7241] copy_process+0x1984/0x5950 [ 1527.584871][ T7241] kernel_clone+0x15c/0x93c [ 1527.584990][ T7241] __do_sys_clone+0xd4/0x124 [ 1527.585099][ T7241] __arm64_sys_clone+0xa8/0x100 [ 1527.585239][ T7241] invoke_syscall+0x74/0x240 [ 1527.585378][ T7241] el0_svc_common.constprop.0+0xac/0x230 [ 1527.585489][ T7241] do_el0_svc+0x40/0x58 [ 1527.585594][ T7241] el0_svc+0x58/0x2a4 [ 1527.585728][ T7241] el0t_64_sync_handler+0xa0/0xe4 [ 1527.585850][ T7241] el0t_64_sync+0x198/0x19c [ 1530.233098][ T29] audit: type=1400 audit(1529.880:392): avc: denied { read write } for pid=7250 comm="syz.3.1395" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1530.249747][ T29] audit: type=1400 audit(1529.880:393): avc: denied { open } for pid=7250 comm="syz.3.1395" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1530.281530][ T29] audit: type=1400 audit(1529.920:394): avc: denied { ioctl } for pid=7250 comm="syz.3.1395" path="/dev/uinput" dev="devtmpfs" ino=709 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1532.980832][ T29] audit: type=1400 audit(1531.780:395): avc: denied { bind } for pid=7260 comm="syz.0.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1532.985158][ T29] audit: type=1400 audit(1532.050:396): avc: denied { listen } for pid=7260 comm="syz.0.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1532.997825][ T29] audit: type=1400 audit(1532.200:397): avc: denied { write } for pid=7260 comm="syz.0.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1546.032450][ T7292] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 1547.646157][ T29] audit: type=1400 audit(1547.280:398): avc: denied { mount } for pid=7299 comm="syz.0.1415" name="/" dev="configfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1547.661855][ T29] audit: type=1400 audit(1547.310:399): avc: denied { search } for pid=7299 comm="syz.0.1415" name="/" dev="configfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1547.680045][ T29] audit: type=1400 audit(1547.330:400): avc: denied { search } for pid=7299 comm="syz.0.1415" name="usb_gadget" dev="configfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1547.925899][ T29] audit: type=1400 audit(1547.570:401): avc: denied { unmount } for pid=6219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1549.617724][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1419'. [ 1556.323588][ T7325] FAULT_INJECTION: forcing a failure. [ 1556.323588][ T7325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.330449][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.3.1427 Tainted: G W L syzkaller #0 PREEMPT [ 1556.330705][ T7325] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1556.330761][ T7325] Hardware name: linux,dummy-virt (DT) [ 1556.330840][ T7325] Call trace: [ 1556.330898][ T7325] show_stack+0x18/0x24 (C) [ 1556.331080][ T7325] dump_stack_lvl+0x7c/0xb0 [ 1556.331198][ T7325] dump_stack+0x1c/0x28 [ 1556.331311][ T7325] should_fail_ex+0x6b4/0x6c4 [ 1556.331436][ T7325] should_fail+0x14/0x34 [ 1556.331548][ T7325] should_fail_usercopy+0x1c/0x40 [ 1556.331662][ T7325] bpf_verifier_vlog+0x21c/0x7bc [ 1556.331789][ T7325] __btf_verifier_log+0xa8/0xe4 [ 1556.331904][ T7325] __btf_verifier_log_type+0x34c/0x61c [ 1556.332015][ T7325] btf_ref_type_check_meta+0xec/0x3f0 [ 1556.332128][ T7325] btf_new_fd+0x1220/0x4720 [ 1556.332241][ T7325] __sys_bpf+0x11e4/0x2c70 [ 1556.332361][ T7325] __arm64_sys_bpf+0xb0/0x10c [ 1556.332474][ T7325] invoke_syscall+0x74/0x240 [ 1556.332587][ T7325] el0_svc_common.constprop.0+0xac/0x230 [ 1556.332699][ T7325] do_el0_svc+0x40/0x58 [ 1556.332818][ T7325] el0_svc+0x58/0x2a4 [ 1556.332935][ T7325] el0t_64_sync_handler+0xa0/0xe4 [ 1556.333039][ T7325] el0t_64_sync+0x198/0x19c [ 1559.536873][ T29] audit: type=1400 audit(1559.180:402): avc: granted { setsecparam } for pid=7337 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1560.855255][ T29] audit: type=1400 audit(1560.490:403): avc: denied { getopt } for pid=7342 comm="syz.0.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1586.330744][ T29] audit: type=1400 audit(1585.970:404): avc: denied { write } for pid=7368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1587.938074][ T29] audit: type=1400 audit(1587.590:405): avc: denied { read } for pid=7371 comm="syz.3.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1588.665843][ T29] audit: type=1400 audit(1588.300:406): avc: denied { write } for pid=7372 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1592.002324][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1450'. [ 1593.338684][ T29] audit: type=1400 audit(1592.980:407): avc: denied { set_context_mgr } for pid=7387 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1593.379303][ T7388] binder: 7387:7388 ioctl c018620c 200000c0 returned -22 [ 1594.437934][ T11] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1594.681481][ T11] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1594.731728][ T11] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1594.732488][ T11] usb 1-1: config 0 has no interface number 0 [ 1594.733330][ T11] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1594.923032][ T11] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1594.924753][ T11] usb 1-1: Manufacturer: syz [ 1594.925188][ T11] usb 1-1: SerialNumber: syz [ 1595.003434][ T11] usb 1-1: config 0 descriptor?? [ 1595.631985][ T29] audit: type=1400 audit(1595.270:408): avc: denied { wake_alarm } for pid=7390 comm="syz.3.1454" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1600.431492][ T29] audit: type=1400 audit(1600.080:409): avc: denied { remount } for pid=7409 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1601.491753][ T29] audit: type=1400 audit(1601.130:410): avc: denied { create } for pid=7413 comm="syz.3.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1601.576762][ T29] audit: type=1400 audit(1601.220:411): avc: denied { sys_admin } for pid=7413 comm="syz.3.1462" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1605.558011][ T6464] usb 1-1: USB disconnect, device number 12 [ 1614.256227][ T7458] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 1623.408720][ T7501] binder: 7500:7501 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1623.412536][ T7501] binder: 7501 RLIMIT_NICE not set [ 1628.662735][ T7525] udc dummy_udc.0: soft-connect without a gadget driver [ 1633.522221][ T29] audit: type=1400 audit(1633.170:412): avc: denied { create } for pid=7539 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1633.587259][ T29] audit: type=1400 audit(1633.240:413): avc: denied { write } for pid=7539 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1635.807079][ T29] audit: type=1400 audit(1635.450:414): avc: denied { write } for pid=7549 comm="syz.0.1519" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1635.847497][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.887670][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.036374][ T4872] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1643.312281][ T4872] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1643.495271][ T4872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.662640][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.688534][ T4872] usb 1-1: config 0 descriptor?? [ 1643.697526][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.068520][ T4872] usb 1-1: Cannot set autoneg [ 1645.070698][ T4872] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1645.168495][ T4872] usb 1-1: USB disconnect, device number 13 [ 1646.067494][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.136251][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.260409][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.347071][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.082111][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.102912][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.402437][ T29] audit: type=1400 audit(1652.050:415): avc: denied { ioctl } for pid=7613 comm="syz.3.1544" path="mnt:[4026532777]" dev="nsfs" ino=4026532777 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1653.103139][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.122436][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.436210][ T4872] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1659.715880][ T4872] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1659.748168][ T4872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.871388][ T4872] usb 1-1: config 0 descriptor?? [ 1660.735479][ T4872] usb 1-1: Cannot set autoneg [ 1660.737522][ T4872] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1660.999315][ T4872] usb 1-1: USB disconnect, device number 14 [ 1662.162837][ T7658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1663.260759][ T7665] FAULT_INJECTION: forcing a failure. [ 1663.260759][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.270286][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.3.1563 Tainted: G W L syzkaller #0 PREEMPT [ 1663.270553][ T7665] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1663.270609][ T7665] Hardware name: linux,dummy-virt (DT) [ 1663.270691][ T7665] Call trace: [ 1663.270760][ T7665] show_stack+0x18/0x24 (C) [ 1663.270943][ T7665] dump_stack_lvl+0x7c/0xb0 [ 1663.271072][ T7665] dump_stack+0x1c/0x28 [ 1663.271186][ T7665] should_fail_ex+0x6b4/0x6c4 [ 1663.271316][ T7665] should_failslab+0xbc/0x120 [ 1663.271449][ T7665] __kmalloc_cache_node_noprof+0x360/0x634 [ 1663.271567][ T7665] alloc_cpumask_var_node+0x88/0x14c [ 1663.271721][ T7665] group_cpus_evenly+0xa0/0x660 [ 1663.271853][ T7665] blk_mq_map_queues+0xa8/0x384 [ 1663.271971][ T7665] blk_mq_update_queue_map+0x214/0x2c8 [ 1663.272088][ T7665] blk_mq_alloc_tag_set+0x460/0xf80 [ 1663.272222][ T7665] loop_add+0x2f0/0x96c [ 1663.272361][ T7665] loop_control_ioctl+0xa8/0x4dc [ 1663.272485][ T7665] __arm64_sys_ioctl+0x128/0x1a8 [ 1663.272608][ T7665] invoke_syscall+0x74/0x240 [ 1663.272743][ T7665] el0_svc_common.constprop.0+0xac/0x230 [ 1663.272865][ T7665] do_el0_svc+0x40/0x58 [ 1663.272981][ T7665] el0_svc+0x58/0x2a4 [ 1663.273096][ T7665] el0t_64_sync_handler+0xa0/0xe4 [ 1663.273221][ T7665] el0t_64_sync+0x198/0x19c [ 1663.295552][ T7665] => alloc_cpumask_var: failed! [ 1663.297580][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.3.1563 Tainted: G W L syzkaller #0 PREEMPT [ 1663.297763][ T7665] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1663.297821][ T7665] Hardware name: linux,dummy-virt (DT) [ 1663.297892][ T7665] Call trace: [ 1663.297951][ T7665] show_stack+0x18/0x24 (C) [ 1663.298136][ T7665] dump_stack_lvl+0x7c/0xb0 [ 1663.298321][ T7665] dump_stack+0x1c/0x28 [ 1663.298443][ T7665] alloc_cpumask_var_node+0x124/0x14c [ 1663.298583][ T7665] group_cpus_evenly+0xa0/0x660 [ 1663.298731][ T7665] blk_mq_map_queues+0xa8/0x384 [ 1663.298848][ T7665] blk_mq_update_queue_map+0x214/0x2c8 [ 1663.298970][ T7665] blk_mq_alloc_tag_set+0x460/0xf80 [ 1663.299088][ T7665] loop_add+0x2f0/0x96c [ 1663.299235][ T7665] loop_control_ioctl+0xa8/0x4dc [ 1663.299351][ T7665] __arm64_sys_ioctl+0x128/0x1a8 [ 1663.299467][ T7665] invoke_syscall+0x74/0x240 [ 1663.299586][ T7665] el0_svc_common.constprop.0+0xac/0x230 [ 1663.299714][ T7665] do_el0_svc+0x40/0x58 [ 1663.299834][ T7665] el0_svc+0x58/0x2a4 [ 1663.299957][ T7665] el0t_64_sync_handler+0xa0/0xe4 [ 1663.300076][ T7665] el0t_64_sync+0x198/0x19c [ 1667.320959][ T29] audit: type=1400 audit(1666.960:416): avc: denied { bind } for pid=7681 comm="syz.0.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1668.572237][ T29] audit: type=1400 audit(1668.220:417): avc: denied { watch } for pid=7680 comm="syz.3.1572" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1668.608088][ T29] audit: type=1400 audit(1668.240:418): avc: denied { watch_sb } for pid=7680 comm="syz.3.1572" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1668.633218][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 1670.796925][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1671.022620][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1671.140177][ T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1671.142359][ T23] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1671.145183][ T23] usb 1-1: config 220 descriptor has 1 excess byte, ignoring [ 1671.155653][ T23] usb 1-1: config 220 has no interface number 2 [ 1671.156598][ T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1671.156875][ T23] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1671.157102][ T23] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1671.157343][ T23] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1671.199316][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.201405][ T23] usb 1-1: Product: syz [ 1671.202962][ T23] usb 1-1: Manufacturer: syz [ 1671.205198][ T23] usb 1-1: SerialNumber: syz [ 1671.766695][ T23] usb 1-1: USB disconnect, device number 15 [ 1673.037025][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1673.305819][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1673.372351][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1673.425719][ T23] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1673.427745][ T23] usb 1-1: config 0 has no interface number 0 [ 1673.526631][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.528695][ T23] usb 1-1: Product: syz [ 1673.546598][ T23] usb 1-1: Manufacturer: syz [ 1673.547332][ T23] usb 1-1: SerialNumber: syz [ 1673.627486][ T23] usb 1-1: config 0 descriptor?? [ 1673.915005][ T4872] usb 1-1: USB disconnect, device number 16 [ 1675.905567][ T29] audit: type=1400 audit(1675.550:419): avc: denied { bind } for pid=7726 comm="syz.0.1587" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1675.909790][ T29] audit: type=1400 audit(1675.560:420): avc: denied { name_bind } for pid=7726 comm="syz.0.1587" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1675.917449][ T29] audit: type=1400 audit(1675.570:421): avc: denied { node_bind } for pid=7726 comm="syz.0.1587" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1680.082374][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.092466][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.178991][ T29] audit: type=1400 audit(1680.830:422): avc: denied { ioctl } for pid=7751 comm="syz.3.1596" path="socket:[17982]" dev="sockfs" ino=17982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1688.733086][ T7782] syzkaller0: entered promiscuous mode [ 1690.416724][ T29] audit: type=1400 audit(1690.060:423): avc: denied { write } for pid=7786 comm="syz.0.1610" name="anycast6" dev="proc" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1692.366680][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1692.655907][ T23] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1692.667509][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1692.668144][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1692.668400][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.842441][ T23] usb 1-1: config 0 descriptor?? [ 1693.729432][ T23] hid_parser_main: 3 callbacks suppressed [ 1693.737521][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x2 [ 1693.740039][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.749503][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.750630][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.750915][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.751157][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.751442][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.751706][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.751965][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.752208][ T23] hid-generic 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 1693.965539][ T23] hid-generic 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 1695.576963][ T7706] usb 1-1: USB disconnect, device number 17 [ 1700.012565][ T7802] fido_id[7802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1701.200753][ T29] audit: type=1400 audit(1700.850:424): avc: denied { audit_write } for pid=7811 comm="syz.0.1619" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1702.378418][ T7818] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1707.530080][ T7832] binder: 7831:7832 BC_ACQUIRE_DONE u0000000000000002 no match [ 1708.484553][ T7834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1629'. [ 1709.606311][ T7706] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1709.910756][ T7706] usb 1-1: Using ep0 maxpacket: 8 [ 1710.046702][ T7706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1710.047820][ T7706] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1710.138032][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1710.138862][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1710.139174][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1710.139429][ T7706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1710.139654][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1710.139892][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1710.140121][ T7706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1710.308066][ T7706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.308789][ T7706] usb 1-1: Product: syz [ 1710.309024][ T7706] usb 1-1: Manufacturer: syz [ 1710.309230][ T7706] usb 1-1: SerialNumber: syz [ 1710.546441][ T7706] usb 1-1: config 0 descriptor?? [ 1710.758267][ T7836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1710.906194][ T7706] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1713.325340][ T7706] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1713.599479][ T7706] usb 1-1: USB disconnect, device number 18 [ 1714.310811][ T7843] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1632'. [ 1714.311662][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1632'. [ 1714.369963][ T7843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1632'. [ 1716.529872][ T7846] udevd[7846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1720.732722][ T29] audit: type=1400 audit(1720.380:425): avc: denied { mount } for pid=7871 comm="syz.3.1644" name="/" dev="ramfs" ino=19296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1720.879440][ T29] audit: type=1400 audit(1720.530:426): avc: denied { remount } for pid=7871 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1722.361431][ T7875] fuse: Bad value for 'fd' [ 1724.855986][ T7887] cgroup: Invalid name [ 1732.758446][ T7918] input: syz0 as /devices/virtual/input/input4 [ 1737.335438][ T29] audit: type=1326 audit(1736.970:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.0.1671" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84b782e8 code=0x0 [ 1738.817119][ T4986] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1739.032743][ T4986] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1739.081433][ T4986] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1739.085455][ T4986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.088556][ T4986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.090513][ T4986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1739.168625][ T4986] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1739.169325][ T4986] usb 1-1: Manufacturer: syz [ 1739.241127][ T4986] usb 1-1: config 0 descriptor?? [ 1740.029210][ T4986] hid-generic 0003:05AC:8243.0004: item fetching failed at offset 0/1 [ 1740.047872][ T4986] hid-generic 0003:05AC:8243.0004: probe with driver hid-generic failed with error -22 [ 1740.317172][ T4872] usb 1-1: USB disconnect, device number 19 [ 1750.825997][ T7971] SELinux: syz.0.1687 (7971) wrote to checkreqprot. This is no longer supported. [ 1778.050445][ T8034] xt_TCPMSS: Only works on TCP SYN packets [ 1783.480274][ T29] audit: type=1400 audit(1783.062:428): avc: denied { bind } for pid=8040 comm="syz.0.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1787.068855][ T8048] tap0: tun_chr_ioctl cmd 2147767517 [ 1789.138892][ T6834] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1789.643949][ T6834] usb 1-1: Using ep0 maxpacket: 32 [ 1790.142231][ T6834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1790.143440][ T6834] usb 1-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=d2.e5 [ 1790.221680][ T6834] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1790.222651][ T6834] usb 1-1: can't read configurations, error -71 [ 1794.098367][ T29] audit: type=1400 audit(1792.972:429): avc: denied { watch watch_reads } for pid=8073 comm="syz.3.1727" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 1797.395265][ T8096] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 1800.910699][ T29] audit: type=1400 audit(1799.270:430): avc: denied { map } for pid=8106 comm="syz.0.1738" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1800.934915][ T8107] binder: 8106:8107 tried to acquire reference to desc 0, got 1 instead [ 1800.981436][ T29] audit: type=1400 audit(1799.316:431): avc: denied { call } for pid=8106 comm="syz.0.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1801.000938][ T29] audit: type=1400 audit(1799.343:432): avc: denied { transfer } for pid=8106 comm="syz.0.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1801.063896][ T8107] binder: 8106:8107 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1801.065016][ T8107] binder: 8107 RLIMIT_NICE not set [ 1801.133192][ T8107] binder: 8107 RLIMIT_NICE not set [ 1801.138919][ T8107] binder: send failed reply for transaction 8 to 8106:8107 [ 1801.188143][ T8107] binder: 8106:8107 ioctl c0306201 20000680 returned -14 [ 1801.203521][ T6464] binder: undelivered TRANSACTION_COMPLETE [ 1801.204436][ T6464] binder: undelivered TRANSACTION_ERROR: 29201 [ 1829.902675][ T8158] input: syz1 as /devices/virtual/input/input5 [ 1831.049581][ T29] audit: type=1400 audit(1827.071:433): avc: denied { append } for pid=8163 comm="syz.0.1760" name="001" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1831.453027][ T29] audit: type=1400 audit(1827.449:434): avc: denied { watch_mount } for pid=8164 comm="syz.3.1761" path="/273/file5" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1832.215873][ T8170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8170 comm=syz.3.1763 [ 1832.218822][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 1832.226159][ T4986] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1832.529315][ T4986] usb 1-1: Using ep0 maxpacket: 16 [ 1832.576437][ T4986] usb 1-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=99.48 [ 1832.606676][ T4986] usb 1-1: config 5 has an invalid interface number: 211 but max is 0 [ 1832.609000][ T4986] usb 1-1: config 5 has no interface number 0 [ 1832.611180][ T4986] usb 1-1: config 5 interface 211 has no altsetting 0 [ 1832.648587][ T4986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.650733][ T4986] usb 1-1: Product: syz [ 1832.652739][ T4986] usb 1-1: Manufacturer: syz [ 1832.654310][ T4986] usb 1-1: SerialNumber: syz [ 1833.239470][ T4986] usb 1-1: USB disconnect, device number 22 [ 1835.662602][ T4986] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1836.151816][ T4986] usb 1-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 1836.367410][ T4986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1836.370935][ T4986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.373065][ T4986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1836.377146][ T4986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.416792][ T4986] usb 1-1: config 0 descriptor?? [ 1837.344226][ T4986] hid-generic 0003:093A:8002.0005: item 0 1 0 9 parsing failed [ 1837.365860][ T4986] hid-generic 0003:093A:8002.0005: probe with driver hid-generic failed with error -22 [ 1837.573311][ T6834] usb 1-1: USB disconnect, device number 23 [ 1840.802193][ T6834] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1840.999977][ T6834] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 1841.022298][ T6834] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.022963][ T6834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.807770][ T6834] usb 1-1: cannot find UAC_HEADER [ 1842.658310][ T6834] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1842.857837][ T6834] usb 1-1: USB disconnect, device number 24 [ 1843.808349][ T8187] udevd[8187]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1844.743706][ T7706] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1845.028492][ T7706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1845.068563][ T7706] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.069489][ T7706] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1845.192027][ T7706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.193896][ T7706] usb 1-1: Product: syz [ 1845.195429][ T7706] usb 1-1: Manufacturer: syz [ 1845.197637][ T7706] usb 1-1: SerialNumber: syz [ 1845.404077][ T7706] cdc_ncm 1-1:1.0: skipping garbage [ 1845.406112][ T7706] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1845.408362][ T7706] cdc_ncm 1-1:1.0: bind() failure [ 1845.549631][ T7706] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1845.556000][ T7706] cdc_ncm 1-1:1.1: bind() failure [ 1845.693532][ T7706] usb 1-1: USB disconnect, device number 25 [ 1863.804664][ T8255] fuse: Bad value for 'fd' [ 1868.662537][ T6464] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1869.022060][ T6464] usb 1-1: Using ep0 maxpacket: 16 [ 1869.063471][ T6464] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1869.093753][ T6464] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.108638][ T6464] usb 1-1: config 0 has no interfaces? [ 1869.110986][ T6464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.217833][ T6464] usb 1-1: config 0 descriptor?? [ 1869.650495][ T4872] usb 1-1: USB disconnect, device number 26 [ 1871.672061][ T29] audit: type=1400 audit(1864.551:435): avc: denied { watch watch_reads } for pid=8278 comm="syz.0.1807" path="/syzcgroup/cpu/syz0/syz0" dev="cgroup" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1881.510997][ T29] audit: type=1400 audit(1873.631:436): avc: denied { read } for pid=8302 comm="syz.0.1818" dev="nsfs" ino=4026532620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1881.529529][ T29] audit: type=1400 audit(1873.658:437): avc: denied { open } for pid=8302 comm="syz.0.1818" path="pid:[4026532620]" dev="nsfs" ino=4026532620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1881.553877][ T29] audit: type=1400 audit(1873.677:438): avc: denied { ioctl } for pid=8302 comm="syz.0.1818" path="pid:[4026532620]" dev="nsfs" ino=4026532620 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1892.653449][ T8337] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1833'. [ 1893.502425][ T29] audit: type=1400 audit(1884.694:439): avc: denied { read } for pid=8341 comm="syz.0.1835" name="trace" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1893.529005][ T29] audit: type=1400 audit(1884.703:440): avc: denied { open } for pid=8341 comm="syz.0.1835" path="/380/trace/trace" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1896.566956][ T29] audit: type=1400 audit(1887.526:441): avc: denied { compute_member } for pid=8354 comm="syz.0.1840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1897.567061][ T4872] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1897.804954][ T4872] usb 1-1: Using ep0 maxpacket: 16 [ 1897.809982][ T4872] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1897.840599][ T4872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.841227][ T4872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.841366][ T4872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1897.841563][ T4872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.925203][ T4872] usb 1-1: config 0 descriptor?? [ 1898.761781][ T4872] hid_parser_main: 1 callbacks suppressed [ 1898.771822][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.772680][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.773052][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.773267][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.773497][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.773640][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.773839][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.774093][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.774361][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.774555][ T4872] hid-generic 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1898.820180][ T4872] hid-generic 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1898.989659][ T7706] usb 1-1: USB disconnect, device number 27 [ 1900.867891][ T8363] fido_id[8363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1900.889161][ T29] audit: type=1400 audit(1891.503:442): avc: denied { ioctl } for pid=8369 comm="syz.0.1845" path="socket:[20969]" dev="sockfs" ino=20969 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1901.924994][ T7706] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1902.253283][ T7706] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1902.284480][ T7706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.365816][ T7706] usb 1-1: config 0 descriptor?? [ 1902.439062][ T7706] cp210x 1-1:0.0: cp210x converter detected [ 1903.022441][ T7706] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1903.527775][ T7706] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1903.613677][ T7706] usb 1-1: USB disconnect, device number 28 [ 1903.861497][ T7706] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1904.175392][ T7706] cp210x 1-1:0.0: device disconnected [ 1908.875157][ T7706] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1909.188259][ T7706] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1909.251450][ T7706] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1909.253975][ T7706] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1909.261251][ T7706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1909.261917][ T7706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.370859][ T7706] usb 1-1: config 0 descriptor?? [ 1909.460690][ T8392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1915.135069][ T7706] usbhid 1-1:0.0: can't add hid device: -32 [ 1915.136854][ T7706] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1923.010229][ T7706] usb 1-1: USB disconnect, device number 29 [ 1938.776982][ T4872] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1939.076852][ T4872] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1939.195808][ T4872] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1939.196638][ T4872] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.197141][ T4872] usb 1-1: config 220 has no interface number 2 [ 1939.197527][ T4872] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1939.197659][ T4872] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1939.197768][ T4872] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1939.197886][ T4872] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1939.430810][ T4872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.432400][ T4872] usb 1-1: Product: syz [ 1939.432939][ T4872] usb 1-1: Manufacturer: syz [ 1939.433175][ T4872] usb 1-1: SerialNumber: syz [ 1940.809465][ T4872] usb 1-1: USB disconnect, device number 30 [ 1942.452761][ T29] audit: type=1400 audit(1929.869:443): avc: denied { setattr } for pid=8439 comm="syz.0.1872" path="socket:[21068]" dev="sockfs" ino=21068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1962.165709][ T8494] bridge_slave_1: entered allmulticast mode [ 1962.658486][ T8496] netlink: 'syz.3.1892': attribute type 8 has an invalid length. [ 1977.186964][ T29] audit: type=1400 audit(1961.915:444): avc: denied { name_bind 0x1000000 } for pid=8531 comm="syz.3.1909" path="socket:[20133]" dev="sockfs" ino=20133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1988.081715][ T29] audit: type=1400 audit(1971.963:445): avc: denied { ioctl } for pid=8578 comm="syz.3.1931" path="socket:[20154]" dev="sockfs" ino=20154 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2007.801569][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2007.823705][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.833885][ T8590] hsr_slave_0: entered promiscuous mode [ 2011.855498][ T8590] hsr_slave_1: entered promiscuous mode [ 2011.868772][ T8590] debugfs: 'hsr0' already exists in 'hsr' [ 2011.869501][ T8590] Cannot create hsr debugfs directory [ 2014.400355][ T8590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2014.501904][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2014.528474][ T8590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2014.587425][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2014.617131][ T8590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2014.665125][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2014.698229][ T8590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2014.781046][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2018.567250][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2033.912681][ T8590] veth0_vlan: entered promiscuous mode [ 2033.990144][ T8590] veth1_vlan: entered promiscuous mode [ 2034.280106][ T8590] veth0_macvtap: entered promiscuous mode [ 2034.320457][ T8590] veth1_macvtap: entered promiscuous mode [ 2034.633654][ T8024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.640397][ T8024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.660161][ T8024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.671900][ T8024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.418139][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.423427][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2051.317279][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1941'. [ 2054.822586][ T29] audit: type=1400 audit(2033.535:446): avc: denied { execute } for pid=8702 comm="syz.4.1943" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 2056.246627][ T29] audit: type=1400 audit(2034.863:447): avc: denied { read } for pid=8709 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2058.204844][ T8716] SELinux: ebitmap: map size 436207680 does not match my size 64 (high bit was 16780288) [ 2058.209397][ T8716] SELinux: invalid class [ 2058.450541][ T8716] SELinux: failed to load policy [ 2059.630333][ T8720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=8720 comm=syz.4.1948 [ 2060.236446][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2060.398138][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.079009][ T8681] hsr_slave_0: entered promiscuous mode [ 2069.098378][ T8681] hsr_slave_1: entered promiscuous mode [ 2069.119402][ T8681] debugfs: 'hsr0' already exists in 'hsr' [ 2069.121364][ T8681] Cannot create hsr debugfs directory [ 2069.281591][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2069.308073][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2070.489295][ T29] audit: type=1400 audit(2048.002:448): avc: denied { watch } for pid=8749 comm="syz.4.1957" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 2074.734968][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2074.862288][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.373702][ T8681] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2075.483093][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2075.497727][ T8681] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2075.612357][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2075.635491][ T8681] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2075.763051][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2075.837804][ T8681] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2076.012374][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2084.070361][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2091.686950][ T8812] binder: 8811:8812 tried to acquire reference to desc 0, got 1 instead [ 2091.749095][ T8812] binder: 8811:8812 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2091.749755][ T8812] binder: 8812 RLIMIT_NICE not set [ 2091.759408][ T8812] binder: 8812 RLIMIT_NICE not set [ 2091.761003][ T8812] binder: send failed reply for transaction 13 to 8811:8812 [ 2091.763643][ T8812] binder: 8811:8812 transaction 13 fd fixups failed 29201/-12, line 5098 [ 2091.791894][ T6834] binder: undelivered TRANSACTION_COMPLETE [ 2091.792631][ T6834] binder: undelivered TRANSACTION_ERROR: 29201 [ 2094.619179][ T29] audit: type=1400 audit(2070.276:449): avc: denied { execute } for pid=8821 comm="syz.4.1975" name="file1" dev="ramfs" ino=21932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 2094.623791][ T8823] process 'syz.4.1975' launched './file1' with NULL argv: empty string added [ 2094.638203][ T29] audit: type=1400 audit(2070.286:450): avc: denied { execute_no_trans } for pid=8821 comm="syz.4.1975" path="/file1" dev="ramfs" ino=21932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 2097.015030][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.118797][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.073409][ T29] audit: type=1400 audit(2076.228:451): avc: denied { mmap_zero } for pid=8838 comm="syz.4.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 2115.356024][ T8681] veth0_vlan: entered promiscuous mode [ 2115.706054][ T8681] veth1_vlan: entered promiscuous mode [ 2116.713926][ T8681] veth0_macvtap: entered promiscuous mode [ 2116.908539][ T8681] veth1_macvtap: entered promiscuous mode [ 2118.082471][ T1619] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.083883][ T8792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.084225][ T8792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.089494][ T8792] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.049291][ T29] audit: type=1400 audit(2095.577:452): avc: denied { getopt } for pid=8892 comm="syz.5.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2124.506921][ T8903] netlink: 'syz.5.1997': attribute type 2 has an invalid length. [ 2126.451191][ T8907] ip6t_REJECT: ECHOREPLY is not supported [ 2141.636205][ T29] audit: type=1400 audit(2113.653:453): avc: denied { write } for pid=8918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2145.269709][ T29] audit: type=1400 audit(2116.956:454): avc: denied { write } for pid=8926 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2152.733448][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2152.748070][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.496262][ T29] audit: type=1400 audit(2234.397:455): avc: denied { create } for pid=9150 comm="syz.4.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2273.437116][ T29] audit: type=1400 audit(2235.264:456): avc: denied { create } for pid=9152 comm="syz.5.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2273.521164][ T29] audit: type=1400 audit(2235.347:457): avc: denied { setopt } for pid=9152 comm="syz.5.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2277.930688][ T9155] netlink: 'syz.4.2083': attribute type 10 has an invalid length. [ 2292.934435][ T29] audit: type=1400 audit(2253.239:458): avc: denied { cmd } for pid=9163 comm="iou-wrk-9164" path="socket:[23255]" dev="sockfs" ino=23255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2299.997276][ T9175] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.2090'. [ 2300.006196][ T9175] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.2090'. [ 2301.096438][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2301.384482][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.199404][ T9197] gadgetfs: bound to dummy_udc driver [ 2312.418119][ T9195] syzkaller0: entered promiscuous mode [ 2312.418976][ T9195] syzkaller0: entered allmulticast mode [ 2312.516547][ T9196] gadgetfs: suspended from state 2 [ 2312.566161][ T8885] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 2313.264934][ T29] audit: type=1400 audit(2272.006:459): avc: denied { unmount } for pid=8681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2315.058972][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2315.062613][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2317.254148][ T29] audit: type=1400 audit(2275.697:460): avc: denied { mount } for pid=9203 comm="syz.5.2100" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2317.424025][ T29] audit: type=1400 audit(2275.836:461): avc: denied { unmount } for pid=8681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2318.432481][ T9207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2318.436247][ T9207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.882466][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 2385.106268][ T29] audit: type=1400 audit(2338.293:462): avc: denied { write } for pid=9248 comm="syz.4.2114" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2401.169926][ T9279] FAULT_INJECTION: forcing a failure. [ 2401.169926][ T9279] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.278786][ T9279] CPU: 1 UID: 0 PID: 9279 Comm: syz.5.2125 Tainted: G W L syzkaller #0 PREEMPT [ 2401.279067][ T9279] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2401.279126][ T9279] Hardware name: linux,dummy-virt (DT) [ 2401.279198][ T9279] Call trace: [ 2401.279260][ T9279] show_stack+0x18/0x24 (C) [ 2401.279454][ T9279] dump_stack_lvl+0x7c/0xb0 [ 2401.279581][ T9279] dump_stack+0x1c/0x28 [ 2401.279695][ T9279] should_fail_ex+0x6b4/0x6c4 [ 2401.279835][ T9279] should_failslab+0xbc/0x120 [ 2401.279966][ T9279] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 2401.280101][ T9279] alloc_inode+0x128/0x1c0 [ 2401.280220][ T9279] new_inode+0x14/0x160 [ 2401.280340][ T9279] devpts_fill_super+0x318/0x54c [ 2401.280471][ T9279] get_tree_nodev+0xac/0x148 [ 2401.280583][ T9279] devpts_get_tree+0x18/0x24 [ 2401.280698][ T9279] vfs_get_tree+0x74/0x280 [ 2401.280827][ T9279] fc_mount+0x18/0x19c [ 2401.280948][ T9279] path_mount+0x6d8/0x1830 [ 2401.281065][ T9279] __arm64_sys_mount+0x318/0x3dc [ 2401.281183][ T9279] invoke_syscall+0x74/0x240 [ 2401.281305][ T9279] el0_svc_common.constprop.0+0xac/0x230 [ 2401.281431][ T9279] do_el0_svc+0x40/0x58 [ 2401.281552][ T9279] el0_svc+0x58/0x2a4 [ 2401.281683][ T9279] el0t_64_sync_handler+0xa0/0xe4 [ 2401.281845][ T9279] el0t_64_sync+0x198/0x19c [ 2401.451899][ T9279] devpts: Unable to alloc inode for ptmx node [ 2403.670892][ T8959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2404.485027][ T8959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2404.693499][ T8959] bond0 (unregistering): Released all slaves [ 2410.476079][ T8959] hsr_slave_0: left promiscuous mode [ 2410.692948][ T8959] hsr_slave_1: left promiscuous mode [ 2419.456972][ T9340] FAULT_INJECTION: forcing a failure. [ 2419.456972][ T9340] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.460167][ T9340] CPU: 1 UID: 0 PID: 9340 Comm: syz.4.2128 Tainted: G W L syzkaller #0 PREEMPT [ 2419.460321][ T9340] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2419.460352][ T9340] Hardware name: linux,dummy-virt (DT) [ 2419.460384][ T9340] Call trace: [ 2419.460412][ T9340] show_stack+0x18/0x24 (C) [ 2419.460507][ T9340] dump_stack_lvl+0x7c/0xb0 [ 2419.460564][ T9340] dump_stack+0x1c/0x28 [ 2419.460616][ T9340] should_fail_ex+0x6b4/0x6c4 [ 2419.460687][ T9340] should_failslab+0xbc/0x120 [ 2419.460747][ T9340] __kmalloc_node_track_caller_noprof+0x44c/0x754 [ 2419.460804][ T9340] kmemdup_noprof+0x34/0x60 [ 2419.460860][ T9340] key_alloc+0x380/0xf44 [ 2419.460915][ T9340] keyring_alloc+0x58/0xc0 [ 2419.460966][ T9340] install_process_keyring_to_cred+0xc4/0x120 [ 2419.461021][ T9340] keyctl_set_reqkey_keyring+0xe8/0x148 [ 2419.461075][ T9340] __arm64_sys_keyctl+0x338/0x43c [ 2419.461129][ T9340] invoke_syscall+0x74/0x240 [ 2419.461264][ T9340] el0_svc_common.constprop.0+0xac/0x230 [ 2419.461350][ T9340] do_el0_svc+0x40/0x58 [ 2419.461406][ T9340] el0_svc+0x58/0x2a4 [ 2419.461464][ T9340] el0t_64_sync_handler+0xa0/0xe4 [ 2419.461515][ T9340] el0t_64_sync+0x198/0x19c [ 2435.139197][ T29] audit: type=1400 audit(2384.465:463): avc: denied { read } for pid=9367 comm="syz.5.2136" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2435.251969][ T29] audit: type=1400 audit(2384.493:464): avc: denied { open } for pid=9367 comm="syz.5.2136" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2435.296878][ T29] audit: type=1400 audit(2384.603:465): avc: denied { write } for pid=9366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2436.513900][ T9373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2137'. [ 2437.423476][ T29] audit: type=1400 audit(2386.578:466): avc: denied { read append } for pid=9371 comm="syz.4.2137" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2437.451491][ T29] audit: type=1400 audit(2386.606:467): avc: denied { open } for pid=9371 comm="syz.4.2137" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2437.700125][ T29] audit: type=1400 audit(2386.809:468): avc: denied { ioctl } for pid=9371 comm="syz.4.2137" path="/dev/dri/card1" dev="devtmpfs" ino=619 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2437.858986][ T29] audit: type=1400 audit(2386.975:469): avc: denied { write } for pid=9374 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2439.774565][ T3227] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2445.284968][ T29] audit: type=1400 audit(2393.821:470): avc: denied { write } for pid=9389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2445.534745][ T29] audit: type=1326 audit(2394.043:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.5.2143" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7fc00000 [ 2446.828347][ T29] audit: type=1326 audit(2395.251:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.5.2143" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb5d782e8 code=0x7fc00000 [ 2446.832273][ T29] audit: type=1326 audit(2395.251:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.5.2143" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7fc00000 [ 2446.844039][ T29] audit: type=1326 audit(2395.251:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.5.2143" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7fc00000 [ 2447.638741][ T29] audit: type=1400 audit(2395.999:475): avc: denied { write } for pid=9399 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2449.204105][ T3227] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2453.914936][ T29] audit: type=1400 audit(2401.793:476): avc: denied { create } for pid=9414 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2455.640229][ T9415] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2150'. [ 2455.885769][ T9415] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 2457.240721][ T29] audit: type=1400 audit(2404.857:477): avc: denied { write } for pid=9419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2459.505085][ T29] audit: type=1400 audit(2406.933:478): avc: denied { write } for pid=9426 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2460.376880][ T9424] FAULT_INJECTION: forcing a failure. [ 2460.376880][ T9424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2460.386138][ T9424] CPU: 1 UID: 0 PID: 9424 Comm: syz.5.2151 Tainted: G W L syzkaller #0 PREEMPT [ 2460.386439][ T9424] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2460.386493][ T9424] Hardware name: linux,dummy-virt (DT) [ 2460.386551][ T9424] Call trace: [ 2460.386606][ T9424] show_stack+0x18/0x24 (C) [ 2460.386796][ T9424] dump_stack_lvl+0x7c/0xb0 [ 2460.386909][ T9424] dump_stack+0x1c/0x28 [ 2460.387012][ T9424] should_fail_ex+0x6b4/0x6c4 [ 2460.387129][ T9424] should_fail+0x14/0x34 [ 2460.387242][ T9424] should_fail_usercopy+0x1c/0x40 [ 2460.387356][ T9424] preserve_fpsimd_context+0x44/0x3d8 [ 2460.387466][ T9424] setup_rt_frame+0xe54/0x267c [ 2460.387572][ T9424] arch_do_signal_or_restart+0x3e0/0x700 [ 2460.387682][ T9424] exit_to_user_mode_loop+0x13c/0x1c8 [ 2460.387845][ T9424] el0_svc+0x244/0x2a4 [ 2460.387978][ T9424] el0t_64_sync_handler+0xa0/0xe4 [ 2460.388084][ T9424] el0t_64_sync+0x198/0x19c [ 2461.373958][ T29] audit: type=1400 audit(2408.667:479): avc: denied { create } for pid=9429 comm="syz.4.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2461.577244][ T3227] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2468.570918][ T29] audit: type=1400 audit(2415.311:480): avc: denied { write } for pid=9442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2471.469337][ T29] audit: type=1400 audit(2417.968:481): avc: denied { write } for pid=9456 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2473.880651][ T3227] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2477.947171][ T29] audit: type=1326 audit(2423.966:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.015430][ T29] audit: type=1326 audit(2424.021:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.096325][ T29] audit: type=1326 audit(2424.095:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.129379][ T29] audit: type=1326 audit(2424.132:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.227533][ T29] audit: type=1326 audit(2424.215:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.228111][ T29] audit: type=1326 audit(2424.224:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.228474][ T29] audit: type=1326 audit(2424.224:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.319326][ T29] audit: type=1326 audit(2424.307:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.319847][ T29] audit: type=1326 audit(2424.307:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2478.367437][ T29] audit: type=1326 audit(2424.344:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.438692][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2485.453014][ T29] audit: type=1400 audit(2430.877:494): avc: denied { write } for pid=9491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2485.641598][ T29] audit: type=1326 audit(2431.052:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.785723][ T29] audit: type=1326 audit(2431.181:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.789451][ T29] audit: type=1326 audit(2431.181:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.810614][ T29] audit: type=1326 audit(2431.218:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.879162][ T29] audit: type=1326 audit(2431.283:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.901085][ T29] audit: type=1326 audit(2431.301:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.911177][ T29] audit: type=1326 audit(2431.320:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.952385][ T29] audit: type=1326 audit(2431.347:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2485.971303][ T29] audit: type=1326 audit(2431.366:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.5.2170" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2490.972371][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 2490.981961][ T29] audit: type=1400 audit(2435.989:523): avc: denied { accept } for pid=9508 comm="syz.4.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2491.157996][ T29] audit: type=1400 audit(2436.145:524): avc: denied { read } for pid=9508 comm="syz.4.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2491.399938][ T29] audit: type=1400 audit(2436.376:525): avc: denied { read write } for pid=9508 comm="syz.4.2175" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2491.404612][ T29] audit: type=1400 audit(2436.385:526): avc: denied { open } for pid=9508 comm="syz.4.2175" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2498.540150][ T29] audit: type=1400 audit(2442.964:527): avc: denied { write } for pid=9523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2500.806949][ T29] audit: type=1400 audit(2445.059:528): avc: denied { write } for pid=9530 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2504.773586][ T29] audit: type=1400 audit(2448.713:529): avc: denied { write } for pid=9536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2506.673037][ T29] audit: type=1400 audit(2450.475:530): avc: denied { write } for pid=9541 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2511.502000][ T29] audit: type=1400 audit(2454.922:531): avc: denied { append } for pid=9555 comm="syz.4.2188" name="trace" dev="tracefs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2514.277462][ T29] audit: type=1400 audit(2457.487:532): avc: denied { write } for pid=9559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2516.261658][ T29] audit: type=1400 audit(2459.305:533): avc: denied { write } for pid=9566 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2518.956453][ T29] audit: type=1400 audit(2461.806:534): avc: denied { create } for pid=9575 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2519.026871][ T29] audit: type=1400 audit(2461.880:535): avc: denied { bind } for pid=9575 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2520.584296][ T29] audit: type=1400 audit(2463.310:536): avc: denied { create } for pid=9579 comm="syz.4.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2524.608047][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2201'. [ 2526.246874][ T29] audit: type=1400 audit(2468.532:537): avc: denied { connect } for pid=9594 comm="syz.5.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2557.037079][ T29] audit: type=1400 audit(2496.942:538): avc: denied { execute } for pid=9615 comm="syz.4.2212" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2559.549340][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.660341][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2561.858416][ T9626] binder: 9625:9626 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2561.859779][ T9626] binder: 9625:9626 unknown command 0 [ 2561.859976][ T9626] binder: 9625:9626 ioctl c0306201 200004c0 returned -22 [ 2563.139201][ T9631] veth0_to_bridge: entered promiscuous mode [ 2563.202852][ T9630] veth0_to_bridge: left promiscuous mode [ 2567.257656][ T9640] binder: 9639:9640 unknown command 0 [ 2567.258601][ T9640] binder: 9639:9640 ioctl c0306201 200004c0 returned -22 [ 2567.406096][ T9640] binder: 9639:9640 got reply transaction with no transaction stack [ 2567.422011][ T9640] binder: 9639:9640 transaction reply to 0:0 failed 16/29201/-71, code 0 size 0-0 line 3155 [ 2567.552473][ T4986] binder: undelivered TRANSACTION_ERROR: 29201 [ 2572.938972][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2572.989671][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2589.394773][ T29] audit: type=1400 audit(2526.773:539): avc: denied { write } for pid=9674 comm="syz.4.2232" name="usb_gadget" dev="configfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2589.442522][ T29] audit: type=1400 audit(2526.838:540): avc: denied { add_name } for pid=9674 comm="syz.4.2232" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2589.443399][ T29] audit: type=1400 audit(2526.838:541): avc: denied { create } for pid=9674 comm="syz.4.2232" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 2589.587620][ T29] audit: type=1400 audit(2526.976:542): avc: denied { write } for pid=9674 comm="syz.4.2232" name="functions" dev="configfs" ino=25086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2596.530789][ T29] audit: type=1400 audit(2533.389:543): avc: denied { create } for pid=9685 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2602.436653][ T29] audit: type=1400 audit(2538.833:544): avc: denied { create } for pid=9694 comm="syz.4.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2602.524890][ T29] audit: type=1400 audit(2538.916:545): avc: denied { setopt } for pid=9694 comm="syz.4.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2602.557412][ T29] audit: type=1400 audit(2538.943:546): avc: denied { connect } for pid=9694 comm="syz.4.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2604.429546][ T29] audit: type=1400 audit(2540.669:547): avc: denied { read } for pid=9698 comm="syz.4.2240" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2604.438011][ T29] audit: type=1400 audit(2540.678:548): avc: denied { open } for pid=9698 comm="syz.4.2240" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2604.443797][ T29] audit: type=1400 audit(2540.687:549): avc: denied { ioctl } for pid=9698 comm="syz.4.2240" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2605.740068][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 2609.780136][ T29] audit: type=1326 audit(2545.605:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.808399][ T29] audit: type=1326 audit(2545.633:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.816386][ T29] audit: type=1326 audit(2545.642:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.850534][ T29] audit: type=1326 audit(2545.679:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.861316][ T29] audit: type=1326 audit(2545.688:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.896842][ T29] audit: type=1326 audit(2545.698:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.928306][ T29] audit: type=1326 audit(2545.744:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.930496][ T29] audit: type=1326 audit(2545.744:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.969061][ T29] audit: type=1326 audit(2545.781:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2609.976521][ T29] audit: type=1326 audit(2545.781:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d782e8 code=0x7ffc0000 [ 2617.438368][ T29] audit: type=1400 audit(2552.673:560): avc: denied { create } for pid=9729 comm="syz.5.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2618.629435][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2255'. [ 2628.730106][ T9752] netlink: 'syz.5.2262': attribute type 3 has an invalid length. [ 2628.730986][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2262'. [ 2632.046272][ T29] audit: type=1400 audit(2566.154:561): avc: denied { ioctl } for pid=9757 comm="syz.5.2265" path="socket:[24362]" dev="sockfs" ino=24362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2632.231910][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2265'. [ 2633.636080][ T9760] FAULT_INJECTION: forcing a failure. [ 2633.636080][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.637725][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.5.2266 Tainted: G W L syzkaller #0 PREEMPT [ 2633.637818][ T9760] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2633.637847][ T9760] Hardware name: linux,dummy-virt (DT) [ 2633.637884][ T9760] Call trace: [ 2633.637935][ T9760] show_stack+0x18/0x24 (C) [ 2633.638097][ T9760] dump_stack_lvl+0x7c/0xb0 [ 2633.638164][ T9760] dump_stack+0x1c/0x28 [ 2633.638228][ T9760] should_fail_ex+0x6b4/0x6c4 [ 2633.638380][ T9760] should_failslab+0xbc/0x120 [ 2633.638448][ T9760] __kmalloc_cache_noprof+0x3ec/0x628 [ 2633.638507][ T9760] call_usermodehelper_setup+0xa4/0x2c0 [ 2633.638582][ T9760] __request_module+0x30c/0x720 [ 2633.638674][ T9760] inet6_create+0xa18/0xf74 [ 2633.638755][ T9760] __sock_create+0x23c/0x5fc [ 2633.638815][ T9760] __sys_socket+0x124/0x1f0 [ 2633.638906][ T9760] __arm64_sys_socket+0x70/0xa4 [ 2633.638992][ T9760] invoke_syscall+0x74/0x240 [ 2633.639101][ T9760] el0_svc_common.constprop.0+0xac/0x230 [ 2633.639199][ T9760] do_el0_svc+0x40/0x58 [ 2633.639283][ T9760] el0_svc+0x58/0x2a4 [ 2633.639384][ T9760] el0t_64_sync_handler+0xa0/0xe4 [ 2633.639480][ T9760] el0t_64_sync+0x198/0x19c [ 2645.914301][ T9795] FAULT_INJECTION: forcing a failure. [ 2645.914301][ T9795] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.914788][ T9795] CPU: 1 UID: 0 PID: 9795 Comm: syz.5.2276 Tainted: G W L syzkaller #0 PREEMPT [ 2645.914873][ T9795] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2645.914901][ T9795] Hardware name: linux,dummy-virt (DT) [ 2645.914935][ T9795] Call trace: [ 2645.914962][ T9795] show_stack+0x18/0x24 (C) [ 2645.915095][ T9795] dump_stack_lvl+0x7c/0xb0 [ 2645.915219][ T9795] dump_stack+0x1c/0x28 [ 2645.915356][ T9795] should_fail_ex+0x6b4/0x6c4 [ 2645.915522][ T9795] should_failslab+0xbc/0x120 [ 2645.915720][ T9795] __kmalloc_cache_node_noprof+0x360/0x634 [ 2645.915847][ T9795] alloc_cpumask_var_node+0x88/0x14c [ 2645.915952][ T9795] kvm_arch_init_vm+0xdc/0x2c0 [ 2645.916014][ T9795] kvm_dev_ioctl+0x8a0/0x1320 [ 2645.916085][ T9795] __arm64_sys_ioctl+0x128/0x1a8 [ 2645.916143][ T9795] invoke_syscall+0x74/0x240 [ 2645.916206][ T9795] el0_svc_common.constprop.0+0xac/0x230 [ 2645.916288][ T9795] do_el0_svc+0x40/0x58 [ 2645.916340][ T9795] el0_svc+0x58/0x2a4 [ 2645.916406][ T9795] el0t_64_sync_handler+0xa0/0xe4 [ 2645.916477][ T9795] el0t_64_sync+0x198/0x19c [ 2645.916875][ T9795] => alloc_cpumask_var: failed! [ 2645.916926][ T9795] CPU: 1 UID: 0 PID: 9795 Comm: syz.5.2276 Tainted: G W L syzkaller #0 PREEMPT [ 2645.916990][ T9795] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2645.917018][ T9795] Hardware name: linux,dummy-virt (DT) [ 2645.917046][ T9795] Call trace: [ 2645.917069][ T9795] show_stack+0x18/0x24 (C) [ 2645.917132][ T9795] dump_stack_lvl+0x7c/0xb0 [ 2645.917192][ T9795] dump_stack+0x1c/0x28 [ 2645.917247][ T9795] alloc_cpumask_var_node+0x124/0x14c [ 2645.917304][ T9795] kvm_arch_init_vm+0xdc/0x2c0 [ 2645.917352][ T9795] kvm_dev_ioctl+0x8a0/0x1320 [ 2645.917400][ T9795] __arm64_sys_ioctl+0x128/0x1a8 [ 2645.917453][ T9795] invoke_syscall+0x74/0x240 [ 2645.917503][ T9795] el0_svc_common.constprop.0+0xac/0x230 [ 2645.917555][ T9795] do_el0_svc+0x40/0x58 [ 2645.917603][ T9795] el0_svc+0x58/0x2a4 [ 2645.917653][ T9795] el0t_64_sync_handler+0xa0/0xe4 [ 2645.917714][ T9795] el0t_64_sync+0x198/0x19c [ 2692.607858][ T9903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2692.715148][ T9903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2698.708085][ T9900] fuse: Bad value for 'fd' [ 2720.906342][ T6834] hid-generic 0005:046E:0007.0007: unknown main item tag 0x1 [ 2721.130503][ T6834] hid-generic 0005:046E:0007.0007: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 2722.334962][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 2722.929442][ T29] audit: type=1400 audit(2650.000:562): avc: denied { mounton } for pid=9938 comm="syz.4.2310" path="/216/file0" dev="tmpfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2723.211659][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'. [ 2733.512279][ T29] audit: type=1400 audit(2659.771:563): avc: denied { write } for pid=9951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2735.931993][ T29] audit: type=1400 audit(2662.004:564): avc: denied { write } for pid=9956 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2758.185124][T10019] syzkaller0: entered promiscuous mode [ 2758.194638][T10019] syzkaller0: entered allmulticast mode [ 2758.543029][T10019] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 2759.822792][T10023] FAULT_INJECTION: forcing a failure. [ 2759.822792][T10023] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.823341][T10023] CPU: 1 UID: 0 PID: 10023 Comm: syz.5.2339 Tainted: G W L syzkaller #0 PREEMPT [ 2759.823439][T10023] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2759.823471][T10023] Hardware name: linux,dummy-virt (DT) [ 2759.823506][T10023] Call trace: [ 2759.823537][T10023] show_stack+0x18/0x24 (C) [ 2759.823633][T10023] dump_stack_lvl+0x7c/0xb0 [ 2759.823746][T10023] dump_stack+0x1c/0x28 [ 2759.823837][T10023] should_fail_ex+0x6b4/0x6c4 [ 2759.823961][T10023] should_failslab+0xbc/0x120 [ 2759.824051][T10023] kmem_cache_alloc_node_noprof+0x34c/0x620 [ 2759.824138][T10023] copy_process+0x454/0x5950 [ 2759.824213][T10023] kernel_clone+0x15c/0x93c [ 2759.824291][T10023] __do_sys_clone+0xd4/0x124 [ 2759.824390][T10023] __arm64_sys_clone+0xa8/0x100 [ 2759.824542][T10023] invoke_syscall+0x74/0x240 [ 2759.824627][T10023] el0_svc_common.constprop.0+0xac/0x230 [ 2759.824715][T10023] do_el0_svc+0x40/0x58 [ 2759.824809][T10023] el0_svc+0x58/0x2a4 [ 2759.824903][T10023] el0t_64_sync_handler+0xa0/0xe4 [ 2759.824964][T10023] el0t_64_sync+0x198/0x19c [ 2766.731208][ T29] audit: type=1400 audit(2690.423:565): avc: denied { create } for pid=10047 comm="syz.5.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2766.928305][T10049] netlink: 'syz.4.2347': attribute type 14 has an invalid length. [ 2773.890121][ T29] audit: type=1400 audit(2697.030:566): avc: denied { read write } for pid=10069 comm="syz.5.2354" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2773.930951][ T29] audit: type=1400 audit(2697.048:567): avc: denied { open } for pid=10069 comm="syz.5.2354" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2776.003825][ T29] audit: type=1400 audit(2698.977:568): avc: denied { write } for pid=10073 comm="syz.5.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2776.754685][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2356'. [ 2779.135127][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2779.139212][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2780.157870][T10085] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2361'. [ 2780.797450][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2780.845705][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2781.055913][ T6834] input: syz0 as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input7 [ 2781.418232][ T6834] hid-generic 0005:057E:0306.0008: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 2783.864840][T10091] fido_id[10091]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2787.207069][ T29] audit: type=1400 audit(2709.329:569): avc: denied { create } for pid=10106 comm="syz.4.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2787.242838][ T29] audit: type=1400 audit(2709.357:570): avc: denied { connect } for pid=10106 comm="syz.4.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2787.268205][ T29] audit: type=1400 audit(2709.375:571): avc: denied { write } for pid=10106 comm="syz.4.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2817.914581][T10175] binder: 10173:10175 ioctl 4018620d 0 returned -22 [ 2820.469253][T10184] FAULT_INJECTION: forcing a failure. [ 2820.469253][T10184] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.469863][T10184] CPU: 1 UID: 0 PID: 10184 Comm: syz.4.2397 Tainted: G W L syzkaller #0 PREEMPT [ 2820.469982][T10184] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2820.470015][T10184] Hardware name: linux,dummy-virt (DT) [ 2820.470054][T10184] Call trace: [ 2820.470082][T10184] show_stack+0x18/0x24 (C) [ 2820.470198][T10184] dump_stack_lvl+0x7c/0xb0 [ 2820.470323][T10184] dump_stack+0x1c/0x28 [ 2820.470385][T10184] should_fail_ex+0x6b4/0x6c4 [ 2820.470456][T10184] should_failslab+0xbc/0x120 [ 2820.470522][T10184] __kmalloc_noprof+0xe4/0x74c [ 2820.470582][T10184] metadata_dst_alloc+0x2c/0x60 [ 2820.470652][T10184] ip_tun_rx_dst.isra.0+0xe4/0x400 [ 2820.470730][T10184] __ipgre_rcv+0x3a8/0x5a8 [ 2820.470833][T10184] gre_rcv+0x1d0/0xe1c [ 2820.470936][T10184] gre_rcv+0x1a8/0x3d8 [ 2820.471138][T10184] ip_protocol_deliver_rcu+0xc4/0x400 [ 2820.471356][T10184] ip_local_deliver_finish+0x280/0x5b0 [ 2820.471601][T10184] ip_local_deliver+0x158/0x3a0 [ 2820.471705][T10184] ip_rcv_finish+0x140/0x224 [ 2820.471847][T10184] ip_rcv+0xc4/0x2c4 [ 2820.471948][T10184] __netif_receive_skb_one_core+0xf8/0x170 [ 2820.472092][T10184] __netif_receive_skb+0x24/0x14c [ 2820.472250][T10184] netif_receive_skb+0x134/0x794 [ 2820.472333][T10184] tun_rx_batched.isra.0+0x34c/0x560 [ 2820.472428][T10184] tun_get_user+0x18b8/0x2b20 [ 2820.472515][T10184] tun_chr_write_iter+0xac/0x1f0 [ 2820.472579][T10184] vfs_write+0x4c0/0xbac [ 2820.472734][T10184] ksys_write+0xf0/0x1e0 [ 2820.472901][T10184] __arm64_sys_write+0x70/0xa0 [ 2820.472994][T10184] invoke_syscall+0x74/0x240 [ 2820.473130][T10184] el0_svc_common.constprop.0+0xac/0x230 [ 2820.473357][T10184] do_el0_svc+0x40/0x58 [ 2820.473473][T10184] el0_svc+0x58/0x2a4 [ 2820.473632][T10184] el0t_64_sync_handler+0xa0/0xe4 [ 2820.473790][T10184] el0t_64_sync+0x198/0x19c [ 2823.515538][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2823.637485][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2826.874205][T10204] serio: Serial port ptm0 [ 2832.143491][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2409'. [ 2836.206071][ T29] audit: type=1400 audit(2754.532:572): avc: denied { write } for pid=10228 comm="syz.5.2414" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2836.213511][T10229] random: crng reseeded on system resumption [ 2836.364013][ T29] audit: type=1400 audit(2754.671:573): avc: denied { ioctl } for pid=10228 comm="syz.5.2414" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2841.769085][T10244] syzkaller0: entered promiscuous mode [ 2841.770589][T10244] syzkaller0: entered allmulticast mode [ 2844.727803][T10257] FAULT_INJECTION: forcing a failure. [ 2844.727803][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.735479][T10257] CPU: 0 UID: 0 PID: 10257 Comm: syz.4.2424 Tainted: G W L syzkaller #0 PREEMPT [ 2844.735741][T10257] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2844.735797][T10257] Hardware name: linux,dummy-virt (DT) [ 2844.735867][T10257] Call trace: [ 2844.735927][T10257] show_stack+0x18/0x24 (C) [ 2844.736103][T10257] dump_stack_lvl+0x7c/0xb0 [ 2844.736225][T10257] dump_stack+0x1c/0x28 [ 2844.736342][T10257] should_fail_ex+0x6b4/0x6c4 [ 2844.736461][T10257] should_failslab+0xbc/0x120 [ 2844.736581][T10257] __kmalloc_cache_noprof+0x3ec/0x628 [ 2844.736699][T10257] copy_time_ns+0xbc/0x470 [ 2844.736821][T10257] create_new_namespaces+0x33c/0x7f4 [ 2844.736944][T10257] unshare_nsproxy_namespaces+0x88/0x184 [ 2844.737061][T10257] ksys_unshare+0x2ac/0x6e0 [ 2844.737197][T10257] __arm64_sys_unshare+0x34/0x50 [ 2844.737329][T10257] invoke_syscall+0x74/0x240 [ 2844.737458][T10257] el0_svc_common.constprop.0+0xac/0x230 [ 2844.737572][T10257] do_el0_svc+0x40/0x58 [ 2844.737683][T10257] el0_svc+0x58/0x2a4 [ 2844.737805][T10257] el0t_64_sync_handler+0xa0/0xe4 [ 2844.737913][T10257] el0t_64_sync+0x198/0x19c [ 2844.761369][ T29] audit: type=1400 audit(2762.421:574): avc: denied { setopt } for pid=10256 comm="syz.4.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2846.680115][ T29] audit: type=1400 audit(2764.184:575): avc: denied { write } for pid=10262 comm="syz.4.2427" name="usb_gadget" dev="configfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2846.766092][ T29] audit: type=1400 audit(2764.276:576): avc: denied { write } for pid=10262 comm="syz.4.2427" name="UDC" dev="configfs" ino=26160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 2846.784257][ T29] audit: type=1400 audit(2764.294:577): avc: denied { open } for pid=10262 comm="syz.4.2427" path="/273/config/usb_gadget/g_uac2/UDC" dev="configfs" ino=26160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 2853.475619][ T29] audit: type=1400 audit(2770.467:578): avc: denied { ioctl } for pid=10283 comm="syz.5.2434" path="/221/tracefs/available_tracers" dev="tracefs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2859.032014][T10302] FAULT_INJECTION: forcing a failure. [ 2859.032014][T10302] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2859.032747][T10302] CPU: 0 UID: 0 PID: 10302 Comm: syz.5.2442 Tainted: G W L syzkaller #0 PREEMPT [ 2859.032926][T10302] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2859.032990][T10302] Hardware name: linux,dummy-virt (DT) [ 2859.033118][T10302] Call trace: [ 2859.033199][T10302] show_stack+0x18/0x24 (C) [ 2859.033433][T10302] dump_stack_lvl+0x7c/0xb0 [ 2859.033654][T10302] dump_stack+0x1c/0x28 [ 2859.033790][T10302] should_fail_ex+0x6b4/0x6c4 [ 2859.033927][T10302] should_fail+0x14/0x34 [ 2859.034083][T10302] get_futex_key+0x198/0xf84 [ 2859.034206][T10302] futex_wake+0xc0/0x49c [ 2859.034392][T10302] do_futex+0x258/0x280 [ 2859.034520][T10302] __arm64_sys_futex+0x1e8/0x310 [ 2859.034638][T10302] invoke_syscall+0x74/0x240 [ 2859.034789][T10302] el0_svc_common.constprop.0+0xac/0x230 [ 2859.034946][T10302] do_el0_svc+0x40/0x58 [ 2859.035078][T10302] el0_svc+0x58/0x2a4 [ 2859.035202][T10302] el0t_64_sync_handler+0xa0/0xe4 [ 2859.035326][T10302] el0t_64_sync+0x198/0x19c [ 2861.044860][ T31] INFO: task syz.0.1880:8466 blocked for more than 430 seconds. [ 2861.045959][ T31] Tainted: G W L syzkaller #0 [ 2861.046788][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2861.047429][ T31] task:syz.0.1880 state:D stack:0 pid:8466 tgid:8460 ppid:6219 task_flags:0x400040 flags:0x00000011 [ 2861.098900][ T31] Call trace: [ 2861.099442][ T31] __switch_to+0x20c/0x520 (T) [ 2861.099782][ T31] __schedule+0xf98/0x34f4 [ 2861.100068][ T31] schedule+0xcc/0x288 [ 2861.100325][ T31] cgroup_lock_and_drain_offline+0x2b4/0x440 [ 2861.100605][ T31] cgroup_kn_lock_live+0x10c/0x424 [ 2861.100880][ T31] cgroup_subtree_control_write+0x29c/0xa7c [ 2861.101031][ T31] cgroup_file_write+0x210/0x5d8 [ 2861.101189][ T31] kernfs_fop_write_iter+0x2a4/0x460 [ 2861.101346][ T31] vfs_write+0x4c0/0xbac [ 2861.101483][ T31] ksys_write+0xf0/0x1e0 [ 2861.101607][ T31] __arm64_sys_write+0x70/0xa0 [ 2861.101751][ T31] invoke_syscall+0x74/0x240 [ 2861.101890][ T31] el0_svc_common.constprop.0+0xac/0x230 [ 2861.102012][ T31] do_el0_svc+0x40/0x58 [ 2861.102132][ T31] el0_svc+0x58/0x2a4 [ 2861.102303][ T31] el0t_64_sync_handler+0xa0/0xe4 [ 2861.102435][ T31] el0t_64_sync+0x198/0x19c [ 2861.102741][ T31] INFO: task syz.3.1935:8588 blocked for more than 430 seconds. [ 2861.102865][ T31] Tainted: G W L syzkaller #0 [ 2861.102949][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2861.103037][ T31] task:syz.3.1935 state:D stack:0 pid:8588 tgid:8586 ppid:6665 task_flags:0x400040 flags:0x00000011 [ 2861.103251][ T31] Call trace: [ 2861.103317][ T31] __switch_to+0x20c/0x520 (T) [ 2861.103461][ T31] __schedule+0xf98/0x34f4 [ 2861.103587][ T31] schedule+0xcc/0x288 [ 2861.103722][ T31] cgroup_lock_and_drain_offline+0x2b4/0x440 [ 2861.103855][ T31] cgroup_kn_lock_live+0x10c/0x424 [ 2861.103981][ T31] cgroup_subtree_control_write+0x29c/0xa7c [ 2861.104114][ T31] cgroup_file_write+0x210/0x5d8 [ 2861.104246][ T31] kernfs_fop_write_iter+0x2a4/0x460 [ 2861.104372][ T31] vfs_write+0x4c0/0xbac [ 2861.104510][ T31] ksys_write+0xf0/0x1e0 [ 2861.104641][ T31] __arm64_sys_write+0x70/0xa0 [ 2861.104779][ T31] invoke_syscall+0x74/0x240 [ 2861.104910][ T31] el0_svc_common.constprop.0+0xac/0x230 [ 2861.105089][ T31] do_el0_svc+0x40/0x58 [ 2861.105252][ T31] el0_svc+0x58/0x2a4 [ 2861.105386][ T31] el0t_64_sync_handler+0xa0/0xe4 [ 2861.105533][ T31] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2861.183523][ T31] [ 2861.183523][ T31] Showing all locks held in the system: [ 2861.184426][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 2861.184587][ T31] #0: ffff8000879d1660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x40/0x190 [ 2861.199659][ T31] locks held by kworker/u8:7/1619: 3, last CPU#0: [ 2861.199906][ T31] #0: ffff00000e04c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 2861.201063][ T31] #1: ffff80008f987c70 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x780/0x1c00 [ 2861.202132][ T31] #2: ffff0000149c2258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devl_trylock+0x18/0x30 [ 2861.295952][ T31] locks held by getty/3322: 2, on CPU#0: [ 2861.296596][ T31] #0: ffff0000195820a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 2861.297407][ T31] #1: ffff80008dcab2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x420/0xec0 [ 2861.297919][ T31] locks held by syz-executor/3377: 2, last CPU#0: [ 2861.298037][ T31] #0: ffff00001d028378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x108/0xa84 [ 2861.298590][ T31] #1: ffff8000879d1660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x28/0x208 [ 2861.299115][ T31] locks held by syz.0.1880/8466: 3, on CPU#0: [ 2861.299209][ T31] #0: ffff00001abee470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1e4/0x294 [ 2861.299707][ T31] #1: ffff000017bf2460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x680/0xbac [ 2861.300257][ T31] #2: ffff00002157ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e4/0x460 [ 2861.300726][ T31] locks held by syz.3.1935/8588: 3, on CPU#1: [ 2861.300854][ T31] #0: ffff000017987270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1e4/0x294 [ 2861.301686][ T31] #1: ffff000017bf2460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x680/0xbac [ 2861.373978][ T31] #2: ffff000055a39c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e4/0x460 [ 2861.376196][ T31] locks held by kworker/u8:4/8774: 2, on CPU#0: [ 2861.376338][ T31] #0: ffff00000e04c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 2861.376785][ T31] #1: ffff80008f317c70 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x780/0x1c00 [ 2861.429140][ T31] locks held by kworker/1:1/8888: 3, last CPU#1: [ 2861.429379][ T31] #0: ffff00000e02b540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 2861.429915][ T31] #1: ffff80008edd7c70 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0x780/0x1c00 [ 2861.430603][ T31] #2: ffff000013885a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x84/0x37c [ 2861.449123][ T8888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2861.467749][ T31] locks held by modprobe/10310: 2, last CPU#0: [ 2861.468243][ T31] #0: ffff000013fda478 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1c0/0xa84 [ 2861.468999][ T31] #1: ffff00001cb58dd8 (&anon_vma->rwsem){++++}-{4:4}, at: __schedule+0x2f8/0x34f4 [ 2861.504575][ T31] [ 2861.504681][ T31] ============================================= [ 2861.504681][ T31] [ 2861.505576][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2861.506770][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G W L syzkaller #0 PREEMPT [ 2861.507507][ T31] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2861.507841][ T31] Hardware name: linux,dummy-virt (DT) [ 2861.508160][ T31] Call trace: [ 2861.508475][ T31] show_stack+0x18/0x24 (C) [ 2861.508866][ T31] dump_stack_lvl+0x7c/0xb0 [ 2861.509214][ T31] dump_stack+0x1c/0x28 [ 2861.509542][ T31] vpanic+0x464/0x764 [ 2861.509853][ T31] do_panic_on_target_cpu+0x0/0x40 [ 2861.510230][ T31] watchdog+0x560/0xf18 [ 2861.510620][ T31] kthread+0x2ec/0x384 [ 2861.510946][ T31] ret_from_fork+0x10/0x20 [ 2861.511949][ T31] SMP: stopping secondary CPUs [ 2861.513722][ T31] Kernel Offset: disabled [ 2861.514150][ T31] CPU features: 0x0,40400002,00340020,00100000,0800821b [ 2861.514658][ T31] Memory Limit: none [ 2861.516588][ T31] Rebooting in 86400 seconds..