last executing test programs: 4m48.267932807s ago: executing program 1 (id=2596): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, 0x0) setresgid(0x0, 0xffffffffffffffff, r1) 4m48.050596479s ago: executing program 1 (id=2597): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x70bd27, 0x20000000, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 4m47.570966323s ago: executing program 1 (id=2598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004) 4m46.419587332s ago: executing program 1 (id=2599): r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x36bbd1e6, 0x8480) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/183) 4m46.109082754s ago: executing program 1 (id=2600): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4m45.960633525s ago: executing program 1 (id=2601): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setuid(0xee01) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, 0x0, 0x8000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) 4m0.651816716s ago: executing program 32 (id=2601): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setuid(0xee01) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, 0x0, 0x8000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) 3m10.239811747s ago: executing program 2 (id=2706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x46000a}) 3m9.85234391s ago: executing program 2 (id=2707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getae={0x40, 0x1f, 0x1, 0x70bd25, 0x25dfdbfd, {{@in=@private=0xa010102, 0x4d3, 0x2, 0x3c}, @in=@multicast2, 0x1ff, 0x3506}}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2c000010) 3m9.620667792s ago: executing program 2 (id=2708): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) 3m9.451272903s ago: executing program 2 (id=2709): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3m9.079657206s ago: executing program 2 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002", @ANYRES32], 0x1c}}, 0x0) 3m8.770916388s ago: executing program 2 (id=2711): r0 = socket(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x11, 0xffffffffffffffff, 0x4b9d5000) io_submit(0x0, 0xffffff56, 0xfffffffffffffffe) setxattr$security_selinux(0x0, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 2m23.036045512s ago: executing program 33 (id=2711): r0 = socket(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x11, 0xffffffffffffffff, 0x4b9d5000) io_submit(0x0, 0xffffff56, 0xfffffffffffffffe) setxattr$security_selinux(0x0, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 2m11.819394071s ago: executing program 3 (id=2764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 2m11.558686604s ago: executing program 3 (id=2765): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}, 0x1, 0x0, 0x0, 0x1080}, 0x40041) 2m11.409317895s ago: executing program 3 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x1, 0x1, 0xacd294f27ffa9b17, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x48804) 2m11.110816127s ago: executing program 3 (id=2767): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 2m10.79906896s ago: executing program 3 (id=2768): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x16a, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xffffffd9, 0x4) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 2m9.739697508s ago: executing program 3 (id=2769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prlimit64(r0, 0x3, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfeffffff}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m59.639341678s ago: executing program 0 (id=2779): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x3}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x542a, 0x0, 0x6, 0xedfd, 0x6}) 1m59.359926831s ago: executing program 0 (id=2780): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x40080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) tgkill(r0, r0, 0x11) 1m54.489924359s ago: executing program 0 (id=2781): syz_emit_ethernet(0x2a, &(0x7f0000000780)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @local, @link_local, @dev={0xac, 0x14, 0x14, 0x2d}}}}}, 0x0) 1m54.160022692s ago: executing program 0 (id=2782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="800080040800010001"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) 1m53.839502845s ago: executing program 0 (id=2783): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x10) write$vga_arbiter(r0, 0x0, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r3) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x64) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.449936767s ago: executing program 0 (id=2784): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) fallocate(r3, 0x0, 0x8, 0x240000b4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) 1m24.350470589s ago: executing program 34 (id=2769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prlimit64(r0, 0x3, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfeffffff}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m8.211811938s ago: executing program 35 (id=2784): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) fallocate(r3, 0x0, 0x8, 0x240000b4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) 5.07972375s ago: executing program 5 (id=2957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) 3.317483334s ago: executing program 5 (id=2961): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x38, 0x30, 0x30, 0x66, 0x34, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x35, 0x66, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x65, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x61, 0x39, 0x65, 0x65, 0x30, 0x39, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x62, 0x30, 0x30, 0xf79b10eba5eb6be7, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabb223344558899aabbccddeec4474a7000", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x65, 0x30, 0x30, 0x66, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 3.100809296s ago: executing program 4 (id=2962): creat(0x0, 0x0) open(0x0, 0x0, 0x0) chdir(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000500)={0x0}) 2.720269289s ago: executing program 5 (id=2963): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.169385913s ago: executing program 4 (id=2964): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) 1.759484366s ago: executing program 5 (id=2965): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./cgroup.cpu/test/memory.limit_in_bytes\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x200) 1.584160637s ago: executing program 4 (id=2966): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 1.583883368s ago: executing program 5 (id=2967): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2364, &(0x7f0000000040)={0x0, 0x80036d, 0xc000, 0x10, 0xa0002f7}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x30}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.328154499s ago: executing program 5 (id=2968): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x4000) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c) r3 = socket$inet(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 760.988644ms ago: executing program 4 (id=2969): getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000180)=""/24, 0x26, 0x18, 0x1, 0x9}, 0x28) 327.309887ms ago: executing program 4 (id=2970): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}, 0xacf}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=2971): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'8255\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x6, 0x400, 0x0, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x7fff, 0x6, 0xe2df, 0xaa14, 0x1, 0x4, 0x27, 0x7, 0xe, 0x4]}) kernel console output (not intermixed with test programs): r4:00000000 [ 1154.897571][T11266] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1154.897621][T11266] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1154.897679][T11266] r7:847a3100 r6:00000000 r5:847a3100 r4:82b1ac48 [ 1154.897696][T11266] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1154.897749][T11266] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1154.897813][T11266] r8:00000000 r7:847a3100 r6:830016c0 r5:00000c40 r4:00001000 [ 1154.897831][T11266] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 1154.897886][T11266] [<8054778c>] (__kmalloc_noprof) from [<808385b4>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 1154.897951][T11266] r10:00000000 r9:830c2800 r8:00000000 r7:85722770 r6:8510c5a8 r5:00001000 [ 1154.897985][T11266] r4:00000000 [ 1154.898003][T11266] [<80838578>] (tomoyo_realpath_from_path) from [<8083467c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1154.898129][T11266] r10:00000000 r9:00000003 r8:8510c580 r7:80085502 r6:81cddcac r5:00000004 [ 1154.898155][T11266] r4:8510c5a8 r3:828d2500 [ 1154.898172][T11266] [<808345b0>] (tomoyo_path_number_perm) from [<80838fd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1154.898240][T11266] r10:847a3100 r9:00000003 r8:8510c580 r7:76f56e50 r6:76f56e50 r5:80085502 [ 1154.898261][T11266] r4:8510c580 [ 1154.898279][T11266] [<80838fb4>] (tomoyo_file_ioctl) from [<807e3bac>] (security_file_ioctl+0x80/0x1d4) [ 1154.898335][T11266] [<807e3b2c>] (security_file_ioctl) from [<805bdd80>] (sys_ioctl+0x4c/0xb5c) [ 1154.898399][T11266] r7:76f56e50 r6:80085502 r5:8510c581 r4:00023420 [ 1154.898417][T11266] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1154.898469][T11266] Exception stack(0xf46d1fa8 to 0xf46d1ff0) [ 1154.898514][T11266] 1fa0: 00023420 76f56e60 00000003 80085502 76f56e50 76f55e18 [ 1154.898550][T11266] 1fc0: 00023420 76f56e60 00000000 00000036 00000000 00000000 00000001 76f580dc [ 1154.898577][T11266] 1fe0: 00000000 76f55e00 00320000 0013055c [ 1154.898614][T11266] r10:00000036 r9:847a3100 r8:8020029c r7:00000036 r6:00000000 r5:76f56e60 [ 1154.898635][T11266] r4:00023420 [ 1154.933637][T11266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1158.315457][ T1810] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1158.478313][ T1810] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1158.488086][ T1810] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1158.488458][ T1810] usb 1-1: config 1 has no interface number 0 [ 1158.488551][ T1810] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 1158.488627][ T1810] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1158.558697][ T1810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.559077][ T1810] usb 1-1: Product: syz [ 1158.559358][ T1810] usb 1-1: Manufacturer: syz [ 1158.559411][ T1810] usb 1-1: SerialNumber: syz [ 1158.603492][T11308] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1158.619791][ T1810] usb 1-1: Error in usbnet_get_endpoints (-22) [ 1168.872717][ T3052] usb 1-1: USB disconnect, device number 101 [ 1172.723216][ T28] audit: type=1400 audit(1684.635:400): avc: denied { write } for pid=11356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1172.944834][ T28] audit: type=1400 audit(1684.855:401): avc: denied { write } for pid=11362 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.602197][T11351] SELinux: Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped). [ 1173.603655][ T28] audit: type=1400 audit(1685.515:402): avc: denied { relabelto } for pid=11350 comm="syz.1.2011" name="nbd1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:groupadd_exec_t:s0" [ 1173.606587][ T28] audit: type=1400 audit(1685.515:403): avc: denied { associate } for pid=11350 comm="syz.1.2011" name="nbd1" dev="devtmpfs" ino=637 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:groupadd_exec_t:s0" [ 1183.598975][T11431] FAULT_INJECTION: forcing a failure. [ 1183.598975][T11431] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.599449][T11431] CPU: 0 UID: 0 PID: 11431 Comm: syz.0.2043 Not tainted syzkaller #0 PREEMPT [ 1183.599550][T11431] Hardware name: ARM-Versatile Express [ 1183.599578][T11431] Call trace: [ 1183.599667][T11431] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1183.599774][T11431] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1183.599794][T11431] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1183.599847][T11431] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1183.599956][T11431] r7:00000000 r6:00000000 r5:8408c980 r4:82b1ac48 [ 1183.600019][T11431] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1183.600179][T11431] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1183.600291][T11431] r8:8408c980 r7:00000000 r6:83002000 r5:00400cc0 r4:00000036 [ 1183.600330][T11431] [<80568de8>] (should_failslab) from [<805482f8>] (__kvmalloc_node_noprof+0xb8/0x530) [ 1183.600483][T11431] [<80548240>] (__kvmalloc_node_noprof) from [<805dfaac>] (simple_xattr_alloc+0x40/0x6c) [ 1183.600623][T11431] r10:f4cf5e54 r9:00000016 r8:8301d270 r7:840dbdb8 r6:848a1480 r5:8507c9c0 [ 1183.600650][T11431] r4:00000016 [ 1183.600685][T11431] [<805dfa6c>] (simple_xattr_alloc) from [<805dfc68>] (simple_xattr_set+0x40/0x984) [ 1183.600800][T11431] r7:840dbdb8 r6:848a1480 r5:840dbdd8 r4:f4cf5e54 [ 1183.600823][T11431] [<805dfc28>] (simple_xattr_set) from [<804cc91c>] (shmem_xattr_handler_set+0x1a0/0x1b4) [ 1183.600901][T11431] r10:f4cf5e54 r9:00000016 r8:8301d270 r7:00000053 r6:8301d240 r5:840dbdd8 [ 1183.601010][T11431] r4:8507c9c0 [ 1183.601128][T11431] [<804cc77c>] (shmem_xattr_handler_set) from [<805ddd04>] (__vfs_setxattr+0xb4/0xc8) [ 1183.601359][T11431] r10:00000002 r9:804cc77c r8:00000016 r7:8507c9c0 r6:834d8220 r5:82b21e14 [ 1183.601391][T11431] r4:840dbdd8 [ 1183.601428][T11431] [<805ddc50>] (__vfs_setxattr) from [<805de744>] (__vfs_setxattr_noperm+0x7c/0x204) [ 1183.601576][T11431] r9:82b21e14 r8:8507c9c0 r7:840dbdd8 r6:00000001 r5:f4cf5e54 r4:834d8220 [ 1183.601621][T11431] [<805de6c8>] (__vfs_setxattr_noperm) from [<805de970>] (__vfs_setxattr_locked+0xa4/0x12c) [ 1183.601793][T11431] r10:f4cf5db8 r9:00000000 r8:840dbdd8 r7:8507c9c0 r6:f4cf5e54 r5:82b21e14 [ 1183.601943][T11431] r4:834d8220 [ 1183.601975][T11431] [<805de8cc>] (__vfs_setxattr_locked) from [<805dea98>] (vfs_setxattr+0xa0/0x180) [ 1183.602077][T11431] r8:00000016 r7:8507c9c0 r6:834d8220 r5:840dbe58 r4:f4cf5e40 [ 1183.602264][T11431] [<805de9f8>] (vfs_setxattr) from [<805dec0c>] (do_setxattr+0x94/0x9c) [ 1183.602369][T11431] r10:00000002 r9:834d8220 r8:82b21e14 r7:8507c9c0 r6:00000016 r5:f4cf5e54 [ 1183.602472][T11431] r4:f4cf5e40 [ 1183.602578][T11431] [<805deb78>] (do_setxattr) from [<805dee48>] (file_setxattr+0x58/0x78) [ 1183.602749][T11431] r9:20000000 r8:00000003 r7:8510c101 r6:f4cf5e40 r5:8510c100 r4:00000000 [ 1183.602847][T11431] [<805dedf0>] (file_setxattr) from [<805df0a8>] (path_setxattrat+0x168/0x1bc) [ 1183.602973][T11431] r7:8510c101 r6:8510c100 r5:8507c9c0 r4:00000015 [ 1183.603047][T11431] [<805def40>] (path_setxattrat) from [<805df2fc>] (sys_fsetxattr+0x30/0x38) [ 1183.603156][T11431] r10:000000e4 r9:8408c980 r8:8020029c r7:000000e4 r6:0012f454 r5:00000000 [ 1183.603224][T11431] r4:00000002 [ 1183.603263][T11431] [<805df2cc>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1183.603323][T11431] Exception stack(0xf4cf5fa8 to 0xf4cf5ff0) [ 1183.603396][T11431] 5fa0: 00000002 00000000 00000003 20000080 20000000 00000016 [ 1183.603576][T11431] 5fc0: 00000002 00000000 0012f454 000000e4 003562d8 00000000 00000001 76fd00dc [ 1183.603660][T11431] 5fe0: 76fcfe88 76fcfe78 00018fa0 00130a50 [ 1184.124897][ T41] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1184.314523][ T41] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1184.349541][ T41] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1184.349914][ T41] usb 1-1: config 1 has no interface number 0 [ 1184.350284][ T41] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 1184.350354][ T41] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1184.539125][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.539497][ T41] usb 1-1: Product: syz [ 1184.539816][ T41] usb 1-1: Manufacturer: syz [ 1184.539869][ T41] usb 1-1: SerialNumber: syz [ 1184.576786][T11440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1184.606408][ T41] usb 1-1: Error in usbnet_get_endpoints (-22) [ 1194.070714][ T28] audit: type=1400 audit(1705.985:404): avc: denied { create } for pid=11447 comm="syz.1.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1194.850944][ T41] usb 1-1: USB disconnect, device number 102 [ 1199.238930][T11462] FAULT_INJECTION: forcing a failure. [ 1199.238930][T11462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.244548][T11462] CPU: 1 UID: 0 PID: 11462 Comm: syz.0.2048 Not tainted syzkaller #0 PREEMPT [ 1199.244706][T11462] Hardware name: ARM-Versatile Express [ 1199.244733][T11462] Call trace: [ 1199.244792][T11462] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1199.244904][T11462] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 1199.244924][T11462] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1199.244973][T11462] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1199.245027][T11462] r7:b5403587 r6:00000000 r5:847aa4c0 r4:82b54788 [ 1199.245039][T11462] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1199.245067][T11462] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1199.245097][T11462] r8:003562d8 r7:b5403587 r6:00000000 r5:847aacf0 r4:76fcfb80 [ 1199.245105][T11462] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1199.245129][T11462] [<809fdf1c>] (should_fail_usercopy) from [<8022b184>] (setup_sigframe+0x124/0x1c8) [ 1199.245154][T11462] [<8022b060>] (setup_sigframe) from [<8022b7d8>] (do_work_pending+0x2cc/0x4e0) [ 1199.245186][T11462] r10:00000128 r9:b5403587 r8:00000000 r7:847aacf0 r6:76fcfb80 r5:f4e3dfb0 [ 1199.245196][T11462] r4:847aa4c0 [ 1199.245204][T11462] [<8022b50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1199.245227][T11462] Exception stack(0xf4e3dfb0 to 0xf4e3dff8) [ 1199.245246][T11462] dfa0: fffffffc 200001c0 04000000 00000000 [ 1199.245263][T11462] dfc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fd00dc [ 1199.245278][T11462] dfe0: 76fcfe88 76fcfe78 00018fa0 00130a50 60000010 00000003 [ 1199.245296][T11462] r10:00000128 r9:847aa4c0 r8:8020029c r7:00000128 r6:0012f454 r5:00000000 [ 1199.245305][T11462] r4:00000000 [ 1202.175067][ T1810] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1202.350519][ T1810] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1202.368325][ T1810] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1202.369501][ T1810] usb 1-1: config 1 has no interface number 0 [ 1202.370483][ T1810] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 1202.371377][ T1810] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1202.387162][ T1810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.388202][ T1810] usb 1-1: Product: syz [ 1202.388927][ T1810] usb 1-1: Manufacturer: syz [ 1202.389594][ T1810] usb 1-1: SerialNumber: syz [ 1202.429413][T11466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1202.446799][ T1810] usb 1-1: Error in usbnet_get_endpoints (-22) [ 1209.499887][ T1223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.581525][ T1223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.647634][ T1223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.711101][ T1223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.123440][ T1223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.131474][ T1223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.138266][ T1223] bond0 (unregistering): Released all slaves [ 1210.236006][ T1223] hsr_slave_0: left promiscuous mode [ 1210.244726][ T1223] hsr_slave_1: left promiscuous mode [ 1210.277963][ T1223] veth1_macvtap: left promiscuous mode [ 1210.278624][ T1223] veth0_macvtap: left promiscuous mode [ 1210.278879][ T1223] veth1_vlan: left promiscuous mode [ 1210.278956][ T1223] veth0_vlan: left promiscuous mode [ 1211.505519][ T28] audit: type=1400 audit(1723.425:405): avc: denied { write } for pid=11539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1211.965540][ T28] audit: type=1400 audit(1723.875:406): avc: denied { write } for pid=11564 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1212.078546][ T2960] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1212.679759][ T3052] usb 1-1: USB disconnect, device number 103 [ 1212.786558][T11484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.792995][T11484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.935109][ T28] audit: type=1400 audit(1724.845:407): avc: denied { write } for pid=11619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.209294][ T28] audit: type=1400 audit(1725.105:408): avc: denied { write } for pid=11667 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.688288][ T2960] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1214.213185][T11484] hsr_slave_0: entered promiscuous mode [ 1214.220697][T11484] hsr_slave_1: entered promiscuous mode [ 1214.925180][ T28] audit: type=1400 audit(1726.835:409): avc: denied { write } for pid=11741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.172692][T11484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1215.182511][T11484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1215.196193][T11484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1215.202466][T11484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1215.208208][T11484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1215.219702][T11484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1215.222212][T11484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1215.238129][T11484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1215.271506][ T28] audit: type=1400 audit(1727.185:410): avc: denied { write } for pid=11797 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1216.064439][ T3712] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1216.218250][ T3712] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1216.276910][ T3712] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1216.277245][ T3712] usb 1-1: config 1 has no interface number 0 [ 1216.277340][ T3712] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 1216.277415][ T3712] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1216.295949][ T3712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.296368][ T3712] usb 1-1: Product: syz [ 1216.296420][ T3712] usb 1-1: Manufacturer: syz [ 1216.296447][ T3712] usb 1-1: SerialNumber: syz [ 1216.315819][T11825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1216.323013][ T3712] usb 1-1: Error in usbnet_get_endpoints (-22) [ 1216.429552][ T28] audit: type=1400 audit(1728.345:411): avc: denied { write } for pid=11832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1216.458322][T11484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.816618][ T28] audit: type=1400 audit(1728.735:412): avc: denied { write } for pid=11841 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.209454][ T28] audit: type=1400 audit(1729.125:413): avc: denied { write } for pid=11845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.474864][ T28] audit: type=1400 audit(1729.385:414): avc: denied { write } for pid=11850 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1218.129416][ T28] audit: type=1400 audit(1730.045:415): avc: denied { write } for pid=11854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1218.481741][ T28] audit: type=1400 audit(1730.395:416): avc: denied { write } for pid=11859 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1219.039479][ T28] audit: type=1400 audit(1730.955:417): avc: denied { write } for pid=11863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1219.485748][ T28] audit: type=1400 audit(1731.395:418): avc: denied { write } for pid=11870 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1219.974828][ T28] audit: type=1400 audit(1731.865:419): avc: denied { write } for pid=11873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.402275][ T28] audit: type=1400 audit(1732.315:420): avc: denied { write } for pid=11880 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.854422][ T28] audit: type=1400 audit(1732.765:421): avc: denied { write } for pid=11885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.219983][T11484] veth0_vlan: entered promiscuous mode [ 1221.268286][T11484] veth1_vlan: entered promiscuous mode [ 1221.414765][T11484] veth0_macvtap: entered promiscuous mode [ 1221.440992][T11484] veth1_macvtap: entered promiscuous mode [ 1221.625093][ T586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.646190][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.646582][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.646668][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.260155][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1222.260638][ T28] audit: type=1400 audit(1734.175:425): avc: denied { write } for pid=11901 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.792799][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 1226.587207][ T1810] usb 1-1: USB disconnect, device number 104 [ 1226.887068][ T1223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.986856][ T1223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.040610][ T1223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.177036][ T1223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.666932][ T1223] dvmrp0: left allmulticast mode [ 1228.177030][ T1223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.190666][ T1223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.198441][ T1223] bond0 (unregistering): Released all slaves [ 1228.307081][ T1223] hsr_slave_0: left promiscuous mode [ 1228.310602][ T1223] hsr_slave_1: left promiscuous mode [ 1228.356104][ T1223] veth1_macvtap: left promiscuous mode [ 1228.357215][ T1223] veth0_macvtap: left promiscuous mode [ 1228.358388][ T1223] veth1_vlan: left promiscuous mode [ 1228.359338][ T1223] veth0_vlan: left promiscuous mode [ 1229.477931][ T28] audit: type=1400 audit(1741.395:426): avc: denied { write } for pid=11993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.750126][ T28] audit: type=1400 audit(1741.665:427): avc: denied { write } for pid=12038 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.968694][ T2960] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1230.812863][ T28] audit: type=1400 audit(1742.725:428): avc: denied { write } for pid=12098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1230.882600][T11953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.901897][T11953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.185893][ T28] audit: type=1400 audit(1743.085:429): avc: denied { write } for pid=12139 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.546708][ T2960] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1232.257190][T11953] hsr_slave_0: entered promiscuous mode [ 1232.261636][T11953] hsr_slave_1: entered promiscuous mode [ 1232.268559][T11953] debugfs: 'hsr0' already exists in 'hsr' [ 1232.271524][T11953] Cannot create hsr debugfs directory [ 1232.421169][ T28] audit: type=1400 audit(1744.335:430): avc: denied { write } for pid=12170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.845868][ T28] audit: type=1400 audit(1744.765:431): avc: denied { write } for pid=12219 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.213200][T11953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1233.218723][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1233.225374][T11953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1233.229593][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1233.243466][T11953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1233.248623][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1233.253179][T11953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1233.258778][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1234.180422][ T28] audit: type=1400 audit(1746.095:432): avc: denied { write } for pid=12302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.522300][T11953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.573484][ T28] audit: type=1400 audit(1746.485:433): avc: denied { write } for pid=12316 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1235.211398][ T28] audit: type=1400 audit(1747.125:434): avc: denied { write } for pid=12325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1235.546738][ T28] audit: type=1400 audit(1747.465:435): avc: denied { write } for pid=12339 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.146501][ T28] audit: type=1400 audit(1748.055:436): avc: denied { write } for pid=12344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.599101][ T28] audit: type=1400 audit(1748.515:437): avc: denied { write } for pid=12358 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.340619][ T28] audit: type=1400 audit(1749.255:438): avc: denied { write } for pid=12369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.768737][ T28] audit: type=1400 audit(1749.685:439): avc: denied { write } for pid=12377 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1238.335590][ T28] audit: type=1400 audit(1750.255:440): avc: denied { write } for pid=12381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1238.712647][ T28] audit: type=1400 audit(1750.625:441): avc: denied { write } for pid=12387 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.300703][ T28] audit: type=1400 audit(1751.215:442): avc: denied { write } for pid=12392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.582089][T11953] veth0_vlan: entered promiscuous mode [ 1239.603327][T11953] veth1_vlan: entered promiscuous mode [ 1239.671675][T11953] veth0_macvtap: entered promiscuous mode [ 1239.688110][T11953] veth1_macvtap: entered promiscuous mode [ 1239.796575][ T28] audit: type=1400 audit(1751.715:443): avc: denied { write } for pid=12399 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.887434][T12136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.892422][ T2362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.904997][ T2362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.905385][ T2362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.310330][ T28] audit: type=1400 audit(1752.225:444): avc: denied { write } for pid=12407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1240.728585][ T28] audit: type=1400 audit(1752.645:445): avc: denied { write } for pid=12423 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.446608][ T28] audit: type=1400 audit(1753.365:446): avc: denied { read } for pid=12443 comm="syz.0.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1245.396132][ T28] audit: type=1400 audit(1757.315:447): avc: denied { mounton } for pid=12463 comm="syz.1.2132" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1263.590478][T12662] capability: warning: `syz.1.2208' uses 32-bit capabilities (legacy support in use) [ 1273.514938][ T28] audit: type=1400 audit(1785.425:448): avc: denied { lock } for pid=12774 comm="syz.0.2261" path="socket:[24725]" dev="sockfs" ino=24725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1294.398504][T12863] process 'syz.0.2300' launched '/dev/fd/3' with NULL argv: empty string added [ 1294.426917][ T28] audit: type=1400 audit(1806.335:449): avc: denied { execute_no_trans } for pid=12862 comm="syz.0.2300" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1296.432787][ T28] audit: type=1400 audit(1808.345:450): avc: denied { map } for pid=12882 comm="syz.1.2309" path="socket:[25684]" dev="sockfs" ino=25684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1297.625971][ T28] audit: type=1400 audit(1809.545:451): avc: denied { listen } for pid=12907 comm="syz.1.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1297.898162][ T28] audit: type=1400 audit(1809.815:452): avc: denied { unmount } for pid=11484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1298.995446][ T28] audit: type=1400 audit(1810.915:453): avc: denied { block_suspend } for pid=12942 comm="syz.1.2338" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1308.267552][ T28] audit: type=1400 audit(1820.185:454): avc: denied { shutdown } for pid=13006 comm="syz.0.2360" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1313.435777][ T28] audit: type=1400 audit(1825.355:455): avc: denied { shutdown } for pid=13068 comm="syz.1.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1313.768451][ T28] audit: type=1400 audit(1825.685:456): avc: denied { getopt } for pid=13075 comm="syz.1.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1316.567554][T13129] cgroup: No subsys list or none specified [ 1323.979448][T13210] *** NOT YET: opcode 85 *** [ 1351.037322][ T28] audit: type=1400 audit(1862.955:457): avc: denied { relabelfrom } for pid=13431 comm="syz.1.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1351.041424][ T28] audit: type=1400 audit(1862.955:458): avc: denied { relabelto } for pid=13431 comm="syz.1.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1355.701795][ T28] audit: type=1400 audit(1867.615:459): avc: denied { listen } for pid=13472 comm="syz.1.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1356.411176][ T28] audit: type=1400 audit(1868.325:460): avc: denied { mounton } for pid=13481 comm="syz.1.2526" path="/247/file0" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1363.246715][T13196] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1363.416275][T13196] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1363.420617][T13196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1363.420862][T13196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.420996][T13196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1363.421142][T13196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.426541][T13196] usb 1-1: config 0 descriptor?? [ 1363.448898][T13196] usbhid 1-1:0.0: can't add hid device: -22 [ 1363.449652][T13196] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1363.675139][T13196] usb 1-1: USB disconnect, device number 105 [ 1364.527863][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1366.404877][T13455] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1366.554248][T13455] usb 1-1: Using ep0 maxpacket: 8 [ 1366.557483][T13455] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1366.615388][T13455] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.622569][T13455] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.638470][T13455] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1366.654696][T13455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.787935][T13455] usb 1-1: config 0 descriptor?? [ 1367.282813][T13455] apple 0003:05AC:0244.0003: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1367.297072][T13455] apple 0003:05AC:0244.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0244] on usb-dummy_hcd.0-1/input0 [ 1367.472000][T13466] usb 1-1: USB disconnect, device number 106 [ 1368.815855][ T28] audit: type=1400 audit(1880.735:461): avc: denied { validate_trans } for pid=13564 comm="syz.0.2543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1372.894910][T13410] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1373.050709][T13410] usb 1-1: not running at top speed; connect to a high speed hub [ 1373.054474][T13410] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1373.062181][T13410] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1373.065524][T13410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.068618][T13410] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1373.071378][T13410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.285950][ T41] usb 1-1: USB disconnect, device number 107 [ 1373.388139][ T28] audit: type=1400 audit(1885.305:462): avc: denied { mount } for pid=13572 comm="syz.1.2546" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1373.785919][ T41] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1373.802621][ T28] audit: type=1400 audit(1885.715:463): avc: denied { mounton } for pid=13600 comm="syz.1.2551" path="/proc/555/task" dev="proc" ino=26688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1373.935013][ T41] usb 1-1: Using ep0 maxpacket: 32 [ 1373.938720][ T41] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1373.949618][ T41] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1373.949930][ T41] usb 1-1: config 0 has no interface number 0 [ 1373.950262][ T41] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1373.963248][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.964935][ T41] usb 1-1: Product: syz [ 1373.965735][ T41] usb 1-1: Manufacturer: syz [ 1373.966448][ T41] usb 1-1: SerialNumber: syz [ 1373.975549][ T41] usb 1-1: config 0 descriptor?? [ 1374.615631][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1374.617050][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1374.814443][T13410] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1374.854659][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1374.855161][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1374.855608][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1374.855900][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1374.856427][ T41] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1374.866529][ T41] usb 1-1: USB disconnect, device number 108 [ 1374.978772][T13410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1375.034784][T13410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1375.036040][T13410] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1375.037205][T13410] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1375.097430][T13410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.101566][T13410] usb 2-1: Product: syz [ 1375.102601][T13410] usb 2-1: Manufacturer: syz [ 1375.103317][T13410] usb 2-1: SerialNumber: syz [ 1375.112374][T13610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1375.392626][T13610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1375.397393][T13610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1376.193509][T13610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1376.205618][T13610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1376.284367][ T28] audit: type=1400 audit(1888.195:464): avc: denied { mount } for pid=13621 comm="syz.0.2555" name="/" dev="ramfs" ino=26531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1376.448225][T13410] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1376.448944][T13410] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 1376.657184][T13410] cdc_ncm 2-1:1.0: setting tx_max = 60 [ 1376.677003][T13410] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1376.707456][T13410] usb 2-1: USB disconnect, device number 63 [ 1376.710487][T13410] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1377.654672][ T28] audit: type=1400 audit(1889.565:465): avc: denied { write } for pid=13650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.943525][ T28] audit: type=1400 audit(1889.855:466): avc: denied { write } for pid=13656 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1378.225836][T13451] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1378.455096][T13451] usb 2-1: Using ep0 maxpacket: 32 [ 1378.458341][T13451] usb 2-1: New USB device found, idVendor=17ef, idProduct=a359, bcdDevice=8a.fc [ 1378.475213][T13451] usb 2-1: config 4 has an invalid interface number: 79 but max is 2 [ 1378.475890][T13451] usb 2-1: config 4 has an invalid interface number: 79 but max is 2 [ 1378.477988][T13451] usb 2-1: config 4 has an invalid interface number: 98 but max is 2 [ 1378.479953][T13451] usb 2-1: config 4 has 2 interfaces, different from the descriptor's value: 3 [ 1378.481627][T13451] usb 2-1: config 4 has no interface number 0 [ 1378.482297][T13451] usb 2-1: config 4 has no interface number 1 [ 1378.485752][T13451] usb 2-1: config 4 interface 98 altsetting 9 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1378.486030][T13451] usb 2-1: config 4 interface 98 has no altsetting 0 [ 1378.527478][T13451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.528610][T13451] usb 2-1: Product: syz [ 1378.532844][T13451] usb 2-1: Manufacturer: syz [ 1378.534893][T13451] usb 2-1: SerialNumber: syz [ 1378.562825][ T28] audit: type=1400 audit(1890.475:467): avc: denied { write } for pid=13662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1378.563081][T13451] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1378.788194][T13451] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1378.789197][T13451] r8152-cfgselector 2-1: No union descriptors [ 1378.802375][T13451] r8152-cfgselector 2-1: USB disconnect, device number 64 [ 1378.993256][ T28] audit: type=1400 audit(1890.905:468): avc: denied { write } for pid=13676 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.854803][ T41] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1384.008629][ T41] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1384.036573][ T41] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1384.039164][ T41] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1384.042929][ T41] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1384.060009][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.061125][ T41] usb 1-1: Product: syz [ 1384.066266][ T41] usb 1-1: Manufacturer: syz [ 1384.068328][ T41] usb 1-1: SerialNumber: syz [ 1384.080383][T13685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1384.094332][T13685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1385.771830][ T41] rtl8150 1-1:1.0: couldn't reset the device [ 1385.773117][ T41] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1385.795642][ T41] usb 1-1: USB disconnect, device number 109 [ 1385.950587][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2562'. [ 1389.740339][ T28] audit: type=1400 audit(1901.655:469): avc: denied { mount } for pid=13711 comm="syz.0.2568" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1389.775886][T13712] FAULT_INJECTION: forcing a failure. [ 1389.775886][T13712] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.814808][T13712] CPU: 1 UID: 0 PID: 13712 Comm: syz.0.2568 Not tainted syzkaller #0 PREEMPT [ 1389.814958][T13712] Hardware name: ARM-Versatile Express [ 1389.814993][T13712] Call trace: [ 1389.815041][T13712] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1389.815141][T13712] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1389.815165][T13712] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1389.815218][T13712] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1389.815275][T13712] r7:840855c0 r6:00000000 r5:840855c0 r4:82b1ac48 [ 1389.815292][T13712] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1389.815346][T13712] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1389.815412][T13712] r8:00000000 r7:840855c0 r6:805c25ec r5:00000cc0 r4:830bdc00 [ 1389.815429][T13712] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1389.815508][T13712] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<805c25ec>] (__d_alloc+0x30/0x220) [ 1389.815578][T13712] r10:82cdf7bc r9:82543900 r8:83406cc0 r7:830c3800 r6:e4235e60 r5:e4235e60 [ 1389.815599][T13712] r4:83124f98 [ 1389.815616][T13712] [<805c25bc>] (__d_alloc) from [<805c5e00>] (d_alloc_parallel+0x54/0x554) [ 1389.815679][T13712] r9:83e8fe56 r8:83406cc0 r7:16a10d79 r6:e4235e60 r5:27f1ec8c r4:83124f98 [ 1389.815698][T13712] [<805c5dac>] (d_alloc_parallel) from [<805b20b8>] (__lookup_slow+0x34/0xfc) [ 1389.815758][T13712] r10:2f2f2f2f r9:83e8fe56 r8:83124f18 r7:00000401 r6:e4235e60 r5:83406cc0 [ 1389.815777][T13712] r4:83124f98 [ 1389.815794][T13712] [<805b2084>] (__lookup_slow) from [<805b21b8>] (lookup_slow+0x38/0x50) [ 1389.815851][T13712] r9:83e8fe56 r8:d0d0d0d0 r7:00000401 r6:e4235e60 r5:83406cc0 r4:83124f98 [ 1389.815869][T13712] [<805b2180>] (lookup_slow) from [<805b6834>] (link_path_walk+0x570/0x6b8) [ 1389.815922][T13712] r7:fefefeff r6:e4235e58 r5:00000000 r4:83e8fe55 [ 1389.815940][T13712] [<805b62c4>] (link_path_walk) from [<805b9820>] (path_openat+0x78/0xa3c) [ 1389.816008][T13712] r10:00000018 r9:859bd680 r8:840855c0 r7:e4235f20 r6:e4235f20 r5:83e8fe4c [ 1389.816032][T13712] r4:e4235e58 [ 1389.816048][T13712] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 1389.816111][T13712] r10:00000142 r9:840855c0 r8:00000001 r7:ffffff9c r6:e4235f20 r5:840855c0 [ 1389.816131][T13712] r4:83e8fe40 [ 1389.816147][T13712] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 1389.816211][T13712] r8:8020029c r7:76f7ba78 r6:ffffff9c r5:83e8fe40 r4:00000005 [ 1389.816229][T13712] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 1389.816289][T13712] r7:00000142 r6:76f7ba78 r5:76f7ba78 r4:ffffff9c [ 1389.816308][T13712] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1389.816357][T13712] Exception stack(0xe4235fa8 to 0xe4235ff0) [ 1389.816396][T13712] 5fa0: 00000000 00000000 ffffff9c 76f7ba78 00020002 00000000 [ 1389.816428][T13712] 5fc0: 00000000 00000000 76f7ba78 00000142 003562d8 00000000 00000001 76f7c0dc [ 1389.816457][T13712] 5fe0: 76f7b9f8 76f7b9e4 0010bc74 00112858 [ 1389.816483][T13712] r5:00000000 r4:00000000 [ 1389.881534][ T28] audit: type=1400 audit(1901.785:470): avc: denied { unmount } for pid=11953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1390.421363][T13451] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1390.608417][T13451] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.40 [ 1390.695236][T13451] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1390.695629][T13451] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1390.711153][T13451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.712212][T13451] usb 1-1: Product: syz [ 1390.714827][T13451] usb 1-1: Manufacturer: syz [ 1390.718298][T13451] usb 1-1: SerialNumber: syz [ 1391.092116][T13714] FAULT_INJECTION: forcing a failure. [ 1391.092116][T13714] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.092723][T13714] CPU: 1 UID: 0 PID: 13714 Comm: syz.0.2569 Not tainted syzkaller #0 PREEMPT [ 1391.092827][T13714] Hardware name: ARM-Versatile Express [ 1391.092882][T13714] Call trace: [ 1391.092934][T13714] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1391.093058][T13714] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1391.093080][T13714] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1391.093257][T13714] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1391.093363][T13714] r7:847b1880 r6:00000000 r5:847b1880 r4:82b1ac48 [ 1391.093495][T13714] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1391.093588][T13714] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1391.093787][T13714] r8:00000000 r7:847b1880 r6:805c25ec r5:00000cc0 r4:830bdc00 [ 1391.093857][T13714] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1391.093972][T13714] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<805c25ec>] (__d_alloc+0x30/0x220) [ 1391.094082][T13714] r10:82cdf7bc r9:82543900 r8:83406cc0 r7:830c3800 r6:e82f5e60 r5:e82f5e60 [ 1391.094108][T13714] r4:83124f98 [ 1391.094127][T13714] [<805c25bc>] (__d_alloc) from [<805c5e00>] (d_alloc_parallel+0x54/0x554) [ 1391.094196][T13714] r9:83e8fe56 r8:83406cc0 r7:16a10d79 r6:e82f5e60 r5:27f1ec8c r4:83124f98 [ 1391.094216][T13714] [<805c5dac>] (d_alloc_parallel) from [<805b20b8>] (__lookup_slow+0x34/0xfc) [ 1391.094281][T13714] r10:2f2f2f2f r9:83e8fe56 r8:83124f18 r7:00000401 r6:e82f5e60 r5:83406cc0 [ 1391.094330][T13714] r4:83124f98 [ 1391.094401][T13714] [<805b2084>] (__lookup_slow) from [<805b21b8>] (lookup_slow+0x38/0x50) [ 1391.094531][T13714] r9:83e8fe56 r8:d0d0d0d0 r7:00000401 r6:e82f5e60 r5:83406cc0 r4:83124f98 [ 1391.094559][T13714] [<805b2180>] (lookup_slow) from [<805b6834>] (link_path_walk+0x570/0x6b8) [ 1391.094726][T13714] r7:fefefeff r6:e82f5e58 r5:00000000 r4:83e8fe55 [ 1391.094779][T13714] [<805b62c4>] (link_path_walk) from [<805b9820>] (path_openat+0x78/0xa3c) [ 1391.094862][T13714] r10:00000018 r9:853f0400 r8:847b1880 r7:e82f5f20 r6:e82f5f20 r5:83e8fe4c [ 1391.094994][T13714] r4:e82f5e58 [ 1391.095132][T13714] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 1391.095219][T13714] r10:00000142 r9:847b1880 r8:00000001 r7:ffffff9c r6:e82f5f20 r5:847b1880 [ 1391.095472][T13714] r4:83e8fe40 [ 1391.095552][T13714] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 1391.095631][T13714] r8:8020029c r7:76f7ba78 r6:ffffff9c r5:83e8fe40 r4:00000006 [ 1391.095722][T13714] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 1391.095810][T13714] r7:00000142 r6:76f7ba78 r5:76f7ba78 r4:ffffff9c [ 1391.095833][T13714] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1391.096017][T13714] Exception stack(0xe82f5fa8 to 0xe82f5ff0) [ 1391.096085][T13714] 5fa0: 00000000 00000000 ffffff9c 76f7ba78 00020002 00000000 [ 1391.096122][T13714] 5fc0: 00000000 00000000 76f7ba78 00000142 003562d8 00000000 00000001 76f7c0dc [ 1391.096220][T13714] 5fe0: 76f7b9f8 76f7b9e4 0010bc74 00112858 [ 1391.096349][T13714] r5:00000000 r4:00000000 [ 1391.147538][T13451] usb 1-1: Can't get UAC3 power state for id 10 [ 1391.152726][T13451] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 1391.154930][T13451] usb 1-1: 0:3 : does not exist [ 1391.155751][T13451] usb 1-1: 0:4 : does not exist [ 1391.156635][T13451] usb 1-1: 0:5 : does not exist [ 1391.157710][T13451] usb 1-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 1391.249808][T13451] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1391.405294][T13451] usb 1-1: USB disconnect, device number 110 [ 1401.044251][ T28] audit: type=1326 audit(1912.945:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.044528][ T28] audit: type=1326 audit(1912.945:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.044726][ T28] audit: type=1326 audit(1912.945:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.044844][ T28] audit: type=1326 audit(1912.945:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=373 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.044998][ T28] audit: type=1326 audit(1912.945:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.045137][ T28] audit: type=1326 audit(1912.945:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.045249][ T28] audit: type=1326 audit(1912.945:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.070000][ T28] audit: type=1326 audit(1912.985:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.072456][ T28] audit: type=1326 audit(1912.985:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.0.2575" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1401.665670][T13767] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1404.016600][T13775] raw_sendmsg: syz.0.2580 forgot to set AF_INET. Fix it! [ 1405.104850][ T41] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1405.395561][ T41] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1405.401808][ T41] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1405.402241][ T41] usb 2-1: config 0 has no interface number 0 [ 1405.456482][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.457250][ T41] usb 2-1: Product: syz [ 1405.457754][ T41] usb 2-1: Manufacturer: syz [ 1405.458340][ T41] usb 2-1: SerialNumber: syz [ 1405.460856][ T41] usb 2-1: config 0 descriptor?? [ 1405.917152][ T41] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1405.918216][ T41] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 1405.919638][ T41] asix 2-1:0.251: probe with driver asix failed with error -5 [ 1406.133098][T13410] usb 2-1: USB disconnect, device number 65 [ 1409.934883][T13428] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1410.245310][T13428] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1410.253498][T13428] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1410.254308][T13428] usb 2-1: config 0 has no interface number 0 [ 1410.254537][T13428] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1410.327166][T13428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.327708][T13428] usb 2-1: Product: syz [ 1410.327995][T13428] usb 2-1: Manufacturer: syz [ 1410.328172][T13428] usb 2-1: SerialNumber: syz [ 1410.340309][T13428] usb 2-1: config 0 descriptor?? [ 1415.435731][T13428] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -110 [ 1419.577571][ T28] audit: type=1400 audit(1931.495:480): avc: denied { watch watch_reads } for pid=13851 comm="syz.0.2592" path="/266" dev="tmpfs" ino=1369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1421.337691][ T8592] usb 2-1: USB disconnect, device number 66 [ 1422.275746][T13869] netlink: 'syz.1.2597': attribute type 2 has an invalid length. [ 1429.904661][T13410] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1430.054765][T13410] usb 1-1: Using ep0 maxpacket: 16 [ 1430.058672][T13410] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 1430.078318][T13410] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1430.078726][T13410] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1430.078945][T13410] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1430.079302][T13410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.086983][T13410] usb 1-1: config 0 descriptor?? [ 1430.582022][T13410] lg-g15 0003:046D:C227.0004: unknown main item tag 0x5 [ 1430.582809][T13410] lg-g15 0003:046D:C227.0004: ignoring exceeding usage max [ 1430.601000][T13410] lg-g15 0003:046D:C227.0004: hidraw0: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.0-1/input0 [ 1430.805615][ T41] usb 1-1: USB disconnect, device number 111 [ 1433.927241][T13941] FAULT_INJECTION: forcing a failure. [ 1433.927241][T13941] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1433.927710][T13941] CPU: 1 UID: 0 PID: 13941 Comm: syz.0.2609 Not tainted syzkaller #0 PREEMPT [ 1433.927791][T13941] Hardware name: ARM-Versatile Express [ 1433.927820][T13941] Call trace: [ 1433.927864][T13941] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1433.929151][T13941] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1433.929189][T13941] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1433.929252][T13941] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1433.929312][T13941] r7:00000001 r6:00000000 r5:87098c40 r4:82b1ac9c [ 1433.929330][T13941] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1433.929399][T13941] [<809fdce0>] (should_fail_ex) from [<80568ee4>] (should_fail_alloc_page+0x68/0x74) [ 1433.929479][T13941] r8:e82f5c8c r7:00000001 r6:00000000 r5:00000dc0 r4:e82f5ca0 [ 1433.929520][T13941] [<80568e7c>] (should_fail_alloc_page) from [<8052d6f0>] (prepare_alloc_pages+0xf8/0x1b8) [ 1433.929581][T13941] [<8052d5f8>] (prepare_alloc_pages) from [<80536560>] (__alloc_frozen_pages_noprof+0xb0/0x1808) [ 1433.929684][T13941] r10:00000000 r9:860c5600 r8:87098c40 r7:0000004b r6:00000000 r5:00000dc0 [ 1433.929713][T13941] r4:00000013 [ 1433.929751][T13941] [<805364b0>] (__alloc_frozen_pages_noprof) from [<80537da0>] (get_free_pages_noprof+0x1c/0x74) [ 1433.929834][T13941] r10:00000000 r9:860c5600 r8:82cd4888 r7:0000004b r6:86c4f000 r5:86c4f09c [ 1433.929857][T13941] r4:00000013 [ 1433.929872][T13941] [<80537d84>] (get_free_pages_noprof) from [<80537e10>] (get_zeroed_page_noprof+0x18/0x1c) [ 1433.929920][T13941] [<80537df8>] (get_zeroed_page_noprof) from [<80fc4588>] (mon_alloc_buff+0x58/0x9c) [ 1433.929976][T13941] [<80fc4530>] (mon_alloc_buff) from [<80fc4950>] (mon_bin_open+0xc8/0x164) [ 1433.930073][T13941] r9:860c5600 r8:860c5628 r7:860c5600 r6:8254373c r5:82d2f8fc r4:86275a80 [ 1433.930110][T13941] [<80fc4888>] (mon_bin_open) from [<805a8df8>] (chrdev_open+0xbc/0x234) [ 1433.930173][T13941] r7:81db3d98 r6:860c5600 r5:840dab68 r4:82d2f954 [ 1433.930192][T13941] [<805a8d3c>] (chrdev_open) from [<8059b744>] (do_dentry_open+0x138/0x50c) [ 1433.930276][T13941] r9:860c5600 r8:860c5628 r7:805a8d3c r6:840dab68 r5:00000000 r4:860c5600 [ 1433.930298][T13941] [<8059b60c>] (do_dentry_open) from [<8059d2c4>] (vfs_open+0x2c/0xe8) [ 1433.930370][T13941] r9:860c5600 r8:87098c40 r7:e82f5f20 r6:860c5628 r5:82b21e14 r4:860c5600 [ 1433.930392][T13941] [<8059d298>] (vfs_open) from [<805b9bd8>] (path_openat+0x430/0xa3c) [ 1433.930471][T13941] r6:00000000 r5:82b21e14 r4:e82f5e58 [ 1433.930493][T13941] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 1433.930588][T13941] r10:00000142 r9:87098c40 r8:00000001 r7:ffffff9c r6:e82f5f20 r5:87098c40 [ 1433.930618][T13941] r4:83e90180 [ 1433.930636][T13941] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 1433.930698][T13941] r8:8020029c r7:76f7ba78 r6:ffffff9c r5:83e90180 r4:00000004 [ 1433.930716][T13941] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 1433.930810][T13941] r7:00000142 r6:76f7be59 r5:76f7ba78 r4:ffffff9c [ 1433.930834][T13941] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1433.930886][T13941] Exception stack(0xe82f5fa8 to 0xe82f5ff0) [ 1433.930923][T13941] 5fa0: 00000000 00000000 ffffff9c 76f7ba78 00020000 00000000 [ 1433.930961][T13941] 5fc0: 00000000 00000000 76f7be59 00000142 003562d8 00000000 00000001 76f7c0dc [ 1433.930995][T13941] 5fe0: 76f7b9f8 76f7b9e4 0010bc74 00112858 [ 1433.931024][T13941] r5:00000000 r4:00000000 [ 1434.601684][T13442] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1434.814382][T13442] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1434.819769][T13442] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1434.820133][T13442] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1434.918306][T13442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.918689][T13442] usb 1-1: Product: syz [ 1434.919562][T13442] usb 1-1: Manufacturer: syz [ 1434.919773][T13442] usb 1-1: SerialNumber: syz [ 1435.176710][T13442] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1435.650267][T13428] usb 1-1: USB disconnect, device number 112 [ 1435.665948][T13428] usblp0: removed [ 1437.754203][ T28] audit: type=1400 audit(1949.655:481): avc: denied { nlmsg_write } for pid=13972 comm="syz.0.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1445.386583][ T28] audit: type=1400 audit(1957.305:482): avc: denied { wake_alarm } for pid=13993 comm="syz.0.2624" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1455.945028][ T41] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1456.108173][ T41] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1456.113605][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.116549][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.121314][ T41] usb 1-1: config 0 descriptor?? [ 1456.620836][ T41] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 1456.639624][ T41] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input9 [ 1456.784832][ T41] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1457.032874][ T8592] usb 1-1: USB disconnect, device number 113 [ 1457.505313][ T8592] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1457.664746][ T8592] usb 1-1: Using ep0 maxpacket: 32 [ 1457.668080][ T8592] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1457.678674][ T8592] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1457.679777][ T8592] usb 1-1: config 0 has no interface number 0 [ 1457.696696][ T8592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.698300][ T8592] usb 1-1: Product: syz [ 1457.700711][ T8592] usb 1-1: Manufacturer: syz [ 1457.702506][ T8592] usb 1-1: SerialNumber: syz [ 1457.716189][ T8592] usb 1-1: config 0 descriptor?? [ 1458.161756][ T8592] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1458.164745][ T8592] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1459.017314][ T8592] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1459.021155][ T8592] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1459.040363][ T8592] usb 1-1: USB disconnect, device number 114 [ 1462.254843][ T8592] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1462.420278][ T8592] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1462.422085][ T8592] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1462.434901][ T8592] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1462.436189][ T8592] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1462.456986][ T8592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.458243][ T8592] usb 1-1: Product: syz [ 1462.461366][ T8592] usb 1-1: Manufacturer: syz [ 1462.464946][ T8592] usb 1-1: SerialNumber: syz [ 1462.690226][ T8592] usb 1-1: unit 4 not found! [ 1462.749283][ T8592] usb 1-1: USB disconnect, device number 115 [ 1472.708919][T14097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.736544][T14097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.021480][T14097] hsr_slave_0: entered promiscuous mode [ 1474.025366][T14097] hsr_slave_1: entered promiscuous mode [ 1474.035266][T14097] debugfs: 'hsr0' already exists in 'hsr' [ 1474.035489][T14097] Cannot create hsr debugfs directory [ 1474.451804][T14097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1474.467540][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1474.468967][T14097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1474.476852][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1474.497167][T14097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1474.503256][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1474.508920][T14097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1474.516910][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1475.379800][T14097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.228257][T14097] veth0_vlan: entered promiscuous mode [ 1483.250474][T14097] veth1_vlan: entered promiscuous mode [ 1483.325294][T14097] veth0_macvtap: entered promiscuous mode [ 1483.337938][T14097] veth1_macvtap: entered promiscuous mode [ 1483.524903][T13258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.525276][T13258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.525638][T13258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.525865][T13258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.093439][ T28] audit: type=1400 audit(1997.005:483): avc: denied { mount } for pid=14414 comm="syz.2.2640" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1484.108058][ T28] audit: type=1400 audit(1997.025:484): avc: denied { search } for pid=14414 comm="syz.2.2640" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1484.110982][ T28] audit: type=1400 audit(1997.025:485): avc: denied { read } for pid=14414 comm="syz.2.2640" name="set_event" dev="tracefs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1484.115990][ T28] audit: type=1400 audit(1997.035:486): avc: denied { open } for pid=14414 comm="syz.2.2640" path="/1/trace/set_event" dev="tracefs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1484.128207][ T28] audit: type=1400 audit(1997.045:487): avc: denied { unmount } for pid=14097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1491.175384][ T28] audit: type=1400 audit(2004.095:488): avc: denied { append } for pid=14448 comm="syz.0.2653" name="uprobe_events" dev="tracefs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1491.794677][ T28] audit: type=1400 audit(2004.695:489): avc: denied { read } for pid=14454 comm="syz.0.2655" name="/" dev="configfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1491.795113][ T28] audit: type=1400 audit(2004.705:490): avc: denied { read open } for pid=14454 comm="syz.0.2655" path="/" dev="configfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1493.726693][ T28] audit: type=1400 audit(2006.645:491): avc: denied { connect } for pid=14463 comm="syz.0.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1502.041735][T13259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.136886][T13259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.306541][T13259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.441308][T13259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.623597][ T28] audit: type=1400 audit(2015.535:492): avc: denied { accept } for pid=14479 comm="syz.0.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1503.200349][T13259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.221447][T13259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.248339][T13259] bond0 (unregistering): Released all slaves [ 1503.398499][T13259] hsr_slave_0: left promiscuous mode [ 1503.419467][T13259] hsr_slave_1: left promiscuous mode [ 1503.445139][T13259] veth1_macvtap: left promiscuous mode [ 1503.446629][T13259] veth0_macvtap: left promiscuous mode [ 1503.449452][T13259] veth1_vlan: left promiscuous mode [ 1503.450529][T13259] veth0_vlan: left promiscuous mode [ 1505.526412][ T28] audit: type=1400 audit(2018.445:493): avc: denied { write } for pid=14518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1505.747575][ T28] audit: type=1400 audit(2018.665:494): avc: denied { write } for pid=14522 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1505.935161][ T2960] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1507.299168][ T28] audit: type=1400 audit(2020.215:495): avc: denied { write } for pid=14532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1507.358737][T14537] FAULT_INJECTION: forcing a failure. [ 1507.358737][T14537] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.359063][T14537] CPU: 1 UID: 0 PID: 14537 Comm: syz.2.2672 Not tainted syzkaller #0 PREEMPT [ 1507.359143][T14537] Hardware name: ARM-Versatile Express [ 1507.359171][T14537] Call trace: [ 1507.359225][T14537] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1507.359331][T14537] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1507.359351][T14537] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1507.359403][T14537] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1507.359461][T14537] r7:00000054 r6:00000000 r5:833f55c0 r4:82b1ac48 [ 1507.359741][T14537] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1507.359798][T14537] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1507.359864][T14537] r8:833f55c0 r7:00000054 r6:805faefc r5:00400dc0 r4:830020c0 [ 1507.359903][T14537] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 1507.359978][T14537] [<80548874>] (__kmalloc_cache_noprof) from [<805faefc>] (alloc_fs_context+0x3c/0x50c) [ 1507.360056][T14537] r10:000001ae r9:00000000 r8:00000000 r7:00000000 r6:82afbe10 r5:00000000 [ 1507.360078][T14537] r4:82afbe10 [ 1507.360124][T14537] [<805faec0>] (alloc_fs_context) from [<805fb3f0>] (fs_context_for_mount+0x24/0x2c) [ 1507.360205][T14537] r9:833f55c0 r8:8020029c r7:000001ae r6:00000000 r5:00000000 r4:82afbe10 [ 1507.360259][T14537] [<805fb3cc>] (fs_context_for_mount) from [<805fc2e8>] (sys_fsopen+0x68/0x128) [ 1507.360327][T14537] [<805fc280>] (sys_fsopen) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1507.360362][T14537] Exception stack(0xdfaa5fa8 to 0xdfaa5ff0) [ 1507.360406][T14537] 5fa0: 00000000 00000000 20000140 00000000 00000000 00000000 [ 1507.360456][T14537] 5fc0: 00000000 00000000 0035630c 000001ae 003562d8 00000000 00000001 76f850dc [ 1507.360481][T14537] 5fe0: 76f84e88 76f84e78 00018fa0 00130a50 [ 1507.360505][T14537] r7:000001ae r6:0035630c r5:00000000 r4:00000000 [ 1508.632917][ T28] audit: type=1400 audit(2021.545:496): avc: denied { write } for pid=14541 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.004809][ T2960] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1510.250364][T14557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.252212][T14557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.356052][ T28] audit: type=1400 audit(2023.265:497): avc: denied { write } for pid=14556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.642982][ T28] audit: type=1400 audit(2023.545:498): avc: denied { write } for pid=14562 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.889933][ T2960] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1511.725760][ T28] audit: type=1400 audit(2024.645:499): avc: denied { write } for pid=14571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1511.999670][ T28] audit: type=1400 audit(2024.915:500): avc: denied { write } for pid=14574 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1512.159026][ T2960] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1514.805301][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.808113][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.924850][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1515.679877][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.682843][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.792607][T14632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.797226][T14632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.608581][T14669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.610470][T14669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.190275][ T28] audit: type=1400 audit(2033.105:501): avc: denied { nlmsg_read } for pid=14674 comm="syz.2.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1523.564438][ T28] audit: type=1400 audit(2036.475:502): avc: denied { write } for pid=14685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.776049][ T28] audit: type=1400 audit(2036.695:503): avc: denied { write } for pid=14693 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1524.311587][ T28] audit: type=1400 audit(2037.225:504): avc: denied { write } for pid=14696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1524.551580][ T28] audit: type=1400 audit(2037.465:505): avc: denied { write } for pid=14699 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1525.060930][ T28] audit: type=1400 audit(2037.975:506): avc: denied { write } for pid=14702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1525.419577][ T28] audit: type=1400 audit(2038.335:507): avc: denied { write } for pid=14705 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.257634][ T28] audit: type=1400 audit(2039.175:508): avc: denied { write } for pid=14708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.688531][ T28] audit: type=1400 audit(2039.605:509): avc: denied { write } for pid=14712 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1527.604835][T13259] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.605941][T13259] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.608565][T13259] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.611121][T13259] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.655926][T14787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1569.248489][T14795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.263296][T14795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.541391][T14936] Illegal XDP return value 4286272600 on prog (id 67) dev syz_tun, expect packet loss! [ 1572.727636][T14795] hsr_slave_0: entered promiscuous mode [ 1572.737041][T14795] hsr_slave_1: entered promiscuous mode [ 1573.056407][T14795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1573.068572][T14795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1573.072294][T14795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1573.088650][T14795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1573.091721][T14795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1573.103020][T14795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1573.110234][T14795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1573.120166][T14795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1573.879836][T14795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.272449][T14795] veth0_vlan: entered promiscuous mode [ 1576.320934][T14795] veth1_vlan: entered promiscuous mode [ 1576.428813][T14795] veth0_macvtap: entered promiscuous mode [ 1576.444566][T14795] veth1_macvtap: entered promiscuous mode [ 1576.534799][T13259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.536266][T13259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.554497][T13259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.554737][T13259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.237545][T13255] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 1596.494601][T13259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.588805][T13259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.655100][T13259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.702438][T13259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.998247][T13259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.003050][T13259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.013160][T13259] bond0 (unregistering): Released all slaves [ 1597.104721][T13259] hsr_slave_0: left promiscuous mode [ 1597.106987][T13259] hsr_slave_1: left promiscuous mode [ 1597.113400][T13259] veth1_macvtap: left promiscuous mode [ 1597.115622][T13259] veth0_macvtap: left promiscuous mode [ 1597.116226][T13259] veth1_vlan: left promiscuous mode [ 1597.118737][T13259] veth0_vlan: left promiscuous mode [ 1598.640891][ T28] audit: type=1400 audit(2111.555:510): avc: denied { write } for pid=15232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1599.057668][ T28] audit: type=1400 audit(2111.975:511): avc: denied { write } for pid=15235 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1599.314634][ T2960] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1600.182290][ T28] audit: type=1400 audit(2113.095:512): avc: denied { write } for pid=15240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1600.484226][ T28] audit: type=1400 audit(2113.395:513): avc: denied { write } for pid=15243 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1600.749063][ T2960] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1601.515829][ T28] audit: type=1400 audit(2114.435:514): avc: denied { write } for pid=15247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1602.006695][ T28] audit: type=1400 audit(2114.925:515): avc: denied { write } for pid=15250 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1602.232275][ T2960] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1602.908340][ T28] audit: type=1400 audit(2115.825:516): avc: denied { write } for pid=15254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1603.082524][ T28] audit: type=1400 audit(2115.995:517): avc: denied { write } for pid=15257 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1603.259652][ T2960] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1614.401434][ T28] audit: type=1400 audit(2127.315:518): avc: denied { write } for pid=15271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1614.727393][ T28] audit: type=1400 audit(2127.645:519): avc: denied { write } for pid=15274 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.649681][ T28] audit: type=1400 audit(2128.565:520): avc: denied { write } for pid=15277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.994424][ T28] audit: type=1400 audit(2128.905:521): avc: denied { write } for pid=15280 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.546687][ T28] audit: type=1400 audit(2129.465:522): avc: denied { write } for pid=15283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.905976][ T28] audit: type=1400 audit(2129.825:523): avc: denied { write } for pid=15286 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.424106][ T28] audit: type=1400 audit(2131.335:524): avc: denied { write } for pid=15289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.807841][ T28] audit: type=1400 audit(2131.725:525): avc: denied { write } for pid=15292 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.457329][T15296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.479584][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.951091][T15296] hsr_slave_0: entered promiscuous mode [ 1629.968574][T15296] hsr_slave_1: entered promiscuous mode [ 1629.973467][T15296] debugfs: 'hsr0' already exists in 'hsr' [ 1629.976670][T15296] Cannot create hsr debugfs directory [ 1630.560558][T15296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1630.567820][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1630.570938][T15296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1630.578476][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1630.581259][T15296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1630.597253][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1630.600404][T15296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1630.619935][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1632.001169][T15296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.837621][T15296] veth0_vlan: entered promiscuous mode [ 1636.857952][T15296] veth1_vlan: entered promiscuous mode [ 1636.967650][T15296] veth0_macvtap: entered promiscuous mode [ 1636.981248][T15296] veth1_macvtap: entered promiscuous mode [ 1637.095491][T13251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.096173][T13251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.096781][T13251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.097057][T13251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.290329][T15613] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2787'. [ 1640.367166][T13259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.461542][T13259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.536438][T13259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.598520][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 1640.628150][T13259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.081759][T13259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.106011][T13259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.109749][T13259] bond0 (unregistering): Released all slaves [ 1641.173173][T13259] hsr_slave_0: left promiscuous mode [ 1641.175493][T13259] hsr_slave_1: left promiscuous mode [ 1641.181947][T13259] veth1_macvtap: left promiscuous mode [ 1641.182721][T13259] veth0_macvtap: left promiscuous mode [ 1641.191945][T13259] veth1_vlan: left promiscuous mode [ 1641.192260][T13259] veth0_vlan: left promiscuous mode [ 1642.267226][ T28] audit: type=1400 audit(2155.185:526): avc: denied { write } for pid=15640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.715228][ T28] audit: type=1400 audit(2155.615:527): avc: denied { write } for pid=15648 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1643.092503][ T2960] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1643.776946][ T28] audit: type=1400 audit(2156.695:528): avc: denied { write } for pid=15702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1644.114527][ T28] audit: type=1400 audit(2157.025:529): avc: denied { write } for pid=15713 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1644.333245][ T2960] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1644.926878][T15638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.947489][T15638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.192066][ T28] audit: type=1400 audit(2158.105:530): avc: denied { write } for pid=15799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1645.420695][ T28] audit: type=1400 audit(2158.335:531): avc: denied { write } for pid=15811 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1645.714876][ T2960] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1646.261288][T15638] hsr_slave_0: entered promiscuous mode [ 1646.263353][T15638] hsr_slave_1: entered promiscuous mode [ 1646.696732][ T28] audit: type=1400 audit(2159.615:532): avc: denied { write } for pid=15845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1646.949091][T15638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1646.969721][T15638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1646.977704][T15638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1646.987682][T15638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1646.991602][T15638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1647.028175][T15638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1647.030259][T15638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1647.070229][T15638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1647.209336][ T28] audit: type=1400 audit(2160.125:533): avc: denied { write } for pid=15943 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1647.586282][ T2960] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1648.701453][T15638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.743454][ T28] audit: type=1400 audit(2162.655:534): avc: denied { listen } for pid=15961 comm="syz.4.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1653.577045][T13251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.582572][T13251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.590586][T13251] bond0 (unregistering): Released all slaves [ 1653.661732][T13251] hsr_slave_0: left promiscuous mode [ 1653.667947][T13251] hsr_slave_1: left promiscuous mode [ 1654.286461][T15638] veth0_vlan: entered promiscuous mode [ 1654.335874][T15638] veth1_vlan: entered promiscuous mode [ 1654.481253][T15638] veth0_macvtap: entered promiscuous mode [ 1654.521615][T15638] veth1_macvtap: entered promiscuous mode [ 1654.759394][T12136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.759985][T12136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.760453][T12136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.760710][T12136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.151448][T16035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.156715][T16035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.469221][ T28] audit: type=1400 audit(2168.385:535): avc: denied { write } for pid=16034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.653062][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.655323][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.667286][T16035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.670424][T16035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.870173][T16050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.883246][T16050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.905910][T16050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.917224][T16050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.946489][ T28] audit: type=1400 audit(2168.855:536): avc: denied { write } for pid=16043 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.209296][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.250393][T16058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.259669][ T2960] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1656.263265][T16058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.286605][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.528754][T16070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.529965][T16070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.675658][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.676740][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.843378][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.846198][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.893654][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.898801][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.133600][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.137141][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.311694][ T28] audit: type=1400 audit(2170.225:537): avc: denied { write } for pid=16084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.320650][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.323669][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.356258][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.365190][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.398547][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.407260][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.587387][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.590113][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.708154][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.718514][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.838658][ T28] audit: type=1400 audit(2170.755:538): avc: denied { write } for pid=16099 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.898928][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.900987][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.937556][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.947541][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.986947][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.988093][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.035328][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.043167][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.057717][ T2960] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1658.275154][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.276846][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.489010][T16120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.490033][T16120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.548584][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.552459][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.756125][T16120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.768707][T16120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.924428][ T28] audit: type=1400 audit(2171.835:539): avc: denied { write } for pid=16123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.009470][T16132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.026191][T16133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.030952][T16132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.045340][T16133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.077011][T16133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.085221][T16133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.125670][T16133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.127749][T16133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.166024][T16132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.183337][T16132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.192688][T16132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.195588][T16132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.217158][T16132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.220277][T16132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.291819][ T28] audit: type=1400 audit(2172.205:540): avc: denied { write } for pid=16140 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.506983][ T2960] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1659.557117][T16151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.558324][T16151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.662437][T16132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.663352][T16132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.688610][T16132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.690504][T16132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.985820][T16162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.987174][T16162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.065803][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.066837][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.146183][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.147208][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.350317][ T28] audit: type=1400 audit(2173.265:541): avc: denied { write } for pid=16161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1660.360659][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.368454][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.563775][ T28] audit: type=1400 audit(2173.475:542): avc: denied { write } for pid=16177 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1660.715689][ T2960] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1661.931975][ T28] audit: type=1400 audit(2174.845:543): avc: denied { write } for pid=16190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.354806][ T28] audit: type=1400 audit(2175.265:544): avc: denied { write } for pid=16197 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.750287][ T28] audit: type=1400 audit(2175.665:545): avc: denied { mount } for pid=16203 comm="syz.4.2826" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1662.780985][T16204] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1663.208880][ T28] audit: type=1400 audit(2176.115:546): avc: denied { write } for pid=16202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.654257][ T28] audit: type=1400 audit(2176.555:547): avc: denied { write } for pid=16210 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.708145][T16212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 1663.745103][T16212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 1663.771881][T16212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 1665.250504][T16224] netlink: 'syz.5.2831': attribute type 29 has an invalid length. [ 1666.031991][ T28] audit: type=1400 audit(2178.945:548): avc: denied { write } for pid=16222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1666.346258][ T28] audit: type=1400 audit(2179.265:549): avc: denied { write } for pid=16232 comm="syz.4.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1666.459201][ T28] audit: type=1400 audit(2179.375:550): avc: denied { write } for pid=16234 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.886088][ T28] audit: type=1400 audit(2180.805:551): avc: denied { write } for pid=16240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.872733][ T28] audit: type=1400 audit(2181.785:552): avc: denied { write } for pid=16249 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1670.456118][T16261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2840'. [ 1670.468932][T16261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2840'. [ 1670.584825][T16261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2840'. [ 1673.736001][T16272] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2844'. [ 1673.739773][T16272] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2844'. [ 1673.857523][T16272] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2844'. [ 1675.995579][T16282] netlink: 'syz.4.2847': attribute type 10 has an invalid length. [ 1676.019771][T16282] bond0: (slave bond_slave_1): Releasing backup interface [ 1676.184904][ T28] audit: type=1400 audit(2189.075:553): avc: denied { write } for pid=16279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.595120][T16285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 1676.605744][T16285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 1676.635885][T16285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 1676.929179][ T28] audit: type=1400 audit(2189.845:554): avc: denied { write } for pid=16286 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.769106][ T28] audit: type=1400 audit(2191.685:555): avc: denied { write } for pid=16293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.454732][ T28] audit: type=1400 audit(2192.365:556): avc: denied { write } for pid=16302 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1681.460871][T16312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.475307][T16312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.686684][ T28] audit: type=1400 audit(2195.605:557): avc: denied { mount } for pid=16317 comm="syz.4.2856" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1683.255239][ T28] audit: type=1400 audit(2196.165:558): avc: denied { unmount } for pid=15296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1684.533455][ T28] audit: type=1400 audit(2197.445:559): avc: denied { write } for pid=16322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1685.348681][ T28] audit: type=1400 audit(2198.265:560): avc: denied { write } for pid=16329 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.511835][ T28] audit: type=1400 audit(2201.425:561): avc: denied { write } for pid=16359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.861770][ T28] audit: type=1400 audit(2201.775:562): avc: denied { write } for pid=16379 comm="syz.4.2872" name="usb_gadget" dev="configfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1688.864904][ T28] audit: type=1400 audit(2201.775:563): avc: denied { add_name } for pid=16379 comm="syz.4.2872" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1688.870365][ T28] audit: type=1400 audit(2201.775:564): avc: denied { create } for pid=16379 comm="syz.4.2872" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1688.876390][ T28] audit: type=1400 audit(2201.795:565): avc: denied { write } for pid=16379 comm="syz.4.2872" name="functions" dev="configfs" ino=31600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1688.876596][T16381] file system registered [ 1689.003455][ T28] audit: type=1400 audit(2201.915:566): avc: denied { write } for pid=16380 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.013378][ T28] audit: type=1400 audit(2201.925:567): avc: denied { mount } for pid=16379 comm="syz.4.2872" name="/" dev="functionfs" ino=31951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 1689.055356][T16381] read descriptors [ 1689.096593][ T28] audit: type=1400 audit(2202.005:568): avc: denied { unmount } for pid=15296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 1689.192013][T15296] ffs_data_put(): freeing [ 1689.259998][ T28] audit: type=1400 audit(2202.175:569): avc: denied { map } for pid=16382 comm="syz.5.2873" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1689.345183][ T28] audit: type=1400 audit(2202.255:570): avc: denied { call } for pid=16382 comm="syz.5.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1690.273259][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 1690.297030][T16393] netlink: 'syz.5.2877': attribute type 10 has an invalid length. [ 1690.299852][T16393] syz_tun: entered promiscuous mode [ 1691.347279][T16416] syz_tun: entered allmulticast mode [ 1691.713086][T16422] lo: entered promiscuous mode [ 1691.739956][T16422] tunl0: entered promiscuous mode [ 1691.749838][T16422] gre0: entered promiscuous mode [ 1691.879491][T16422] gretap0: entered promiscuous mode [ 1691.892330][T16422] erspan0: entered promiscuous mode [ 1691.916720][T16422] ip_vti0: entered promiscuous mode [ 1691.920030][T16422] ip6_vti0: entered promiscuous mode [ 1691.937952][T16422] sit0: entered promiscuous mode [ 1691.975955][T16422] ip6tnl0: entered promiscuous mode [ 1691.979792][T16422] ip6gre0: entered promiscuous mode [ 1691.995419][T16422] ip6gretap0: entered promiscuous mode [ 1692.010120][T16422] vcan0: entered promiscuous mode [ 1692.014871][T16422] bond0: entered promiscuous mode [ 1692.016124][T16422] bond_slave_0: entered promiscuous mode [ 1692.016854][T16422] bond_slave_1: entered promiscuous mode [ 1692.027239][T16422] dummy0: entered promiscuous mode [ 1692.035867][T16422] nlmon0: entered promiscuous mode [ 1692.040926][T16422] vxcan0: entered promiscuous mode [ 1692.045062][T16422] vxcan1: entered promiscuous mode [ 1692.046871][T16422] veth0: entered promiscuous mode [ 1692.052560][T16422] veth1: entered promiscuous mode [ 1692.061073][T16422] wg0: entered promiscuous mode [ 1692.071202][T16422] wg1: entered promiscuous mode [ 1692.077650][T16422] wg2: entered promiscuous mode [ 1692.081217][T16422] veth0_to_bridge: entered promiscuous mode [ 1692.086846][T16422] bridge_slave_0: entered promiscuous mode [ 1692.090789][T16422] veth1_to_bridge: entered promiscuous mode [ 1692.101736][T16422] bridge_slave_1: entered promiscuous mode [ 1692.109527][T16422] veth0_to_bond: entered promiscuous mode [ 1692.117642][T16422] veth1_to_bond: entered promiscuous mode [ 1692.135806][T16422] veth0_to_team: entered promiscuous mode [ 1692.138444][T16422] team_slave_0: entered promiscuous mode [ 1692.141594][T16422] veth1_to_team: entered promiscuous mode [ 1692.157363][T16422] team_slave_1: entered promiscuous mode [ 1692.158451][T16422] veth0_to_batadv: entered promiscuous mode [ 1692.163344][T16422] batadv_slave_0: entered promiscuous mode [ 1692.169578][T16422] veth1_to_batadv: entered promiscuous mode [ 1692.184112][T16422] batadv_slave_1: entered promiscuous mode [ 1692.190476][T16422] xfrm0: entered promiscuous mode [ 1692.201285][T16422] veth0_to_hsr: entered promiscuous mode [ 1692.214842][T16422] veth1_to_hsr: entered promiscuous mode [ 1692.228658][T16422] hsr0: entered promiscuous mode [ 1692.237909][T16422] veth1_virt_wifi: entered promiscuous mode [ 1692.243082][T16422] veth0_virt_wifi: entered promiscuous mode [ 1692.256703][T16422] vlan0: entered promiscuous mode [ 1692.260205][T16422] vlan1: entered promiscuous mode [ 1692.284563][T16422] macvlan0: entered promiscuous mode [ 1692.291397][T16422] macvlan1: entered promiscuous mode [ 1692.305156][T16422] ipvlan0: entered promiscuous mode [ 1692.306024][T16422] ipvlan1: entered promiscuous mode [ 1692.319905][T16422] macvtap0: entered promiscuous mode [ 1692.323306][T16422] macsec0: entered promiscuous mode [ 1692.328898][T16422] geneve0: entered promiscuous mode [ 1692.332533][T16422] geneve1: entered promiscuous mode [ 1692.339613][T16422] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1692.348144][T16422] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1692.352694][T16422] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1692.360976][T16422] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 1692.384733][T13257] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.384980][T13257] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.385173][T13257] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.385315][T13257] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.572484][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.575638][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.856821][T16470] ip6gretap0: entered promiscuous mode [ 1694.658427][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1694.658767][ T28] audit: type=1400 audit(2207.575:581): avc: denied { execmem } for pid=16487 comm="syz.4.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1694.668373][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2902'. [ 1695.628790][ T28] audit: type=1400 audit(2208.545:582): avc: denied { connect } for pid=16508 comm="syz.4.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1695.641112][ T28] audit: type=1400 audit(2208.555:583): avc: denied { bind } for pid=16508 comm="syz.4.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1695.641634][ T28] audit: type=1400 audit(2208.555:584): avc: denied { write } for pid=16508 comm="syz.4.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1695.665840][ T28] audit: type=1400 audit(2208.585:585): avc: denied { getopt } for pid=16508 comm="syz.4.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1696.147986][T16518] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2913'. [ 1696.900092][ T28] audit: type=1400 audit(2209.815:586): avc: denied { write } for pid=16549 comm="syz.5.2921" name="configs" dev="configfs" ino=31601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1696.915195][ T28] audit: type=1400 audit(2209.835:587): avc: denied { write } for pid=16549 comm="syz.5.2921" name="functions" dev="configfs" ino=31600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1696.922564][ T28] audit: type=1400 audit(2209.835:588): avc: denied { write } for pid=16549 comm="syz.5.2921" name="c1.1" dev="configfs" ino=32909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1696.923208][ T28] audit: type=1400 audit(2209.835:589): avc: denied { create } for pid=16549 comm="syz.5.2921" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1696.923302][ T28] audit: type=1400 audit(2209.835:590): avc: denied { write } for pid=16549 comm="syz.5.2921" name="c1.1" dev="configfs" ino=32909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1697.185804][T16555] FAULT_INJECTION: forcing a failure. [ 1697.185804][T16555] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.186191][T16555] CPU: 1 UID: 0 PID: 16555 Comm: syz.5.2922 Not tainted syzkaller #0 PREEMPT [ 1697.186249][T16555] Hardware name: ARM-Versatile Express [ 1697.186262][T16555] Call trace: [ 1697.186285][T16555] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1697.186343][T16555] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1697.186352][T16555] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1697.186379][T16555] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1697.186409][T16555] r7:84094980 r6:00000000 r5:84094980 r4:82b1ac48 [ 1697.186416][T16555] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1697.186444][T16555] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1697.186479][T16555] r8:00000000 r7:84094980 r6:805db848 r5:00000dc0 r4:830e5240 [ 1697.186488][T16555] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1697.186516][T16555] [<80546804>] (kmem_cache_alloc_noprof) from [<805db848>] (seq_open+0x34/0x88) [ 1697.186636][T16555] r10:00000000 r9:8510c680 r8:8510c6a8 r7:82a22dc0 r6:848067c0 r5:8510c680 [ 1697.186700][T16555] r4:8510c680 [ 1697.186763][T16555] [<805db814>] (seq_open) from [<805db9f8>] (single_open+0x70/0x94) [ 1697.186846][T16555] r7:82a22dc0 r6:8037e224 r5:8510c680 r4:848067c0 [ 1697.186881][T16555] [<805db988>] (single_open) from [<80669f74>] (proc_setgroups_open+0xe8/0x224) [ 1697.187027][T16555] r7:8510c680 r6:82a22ec0 r5:83183d40 r4:82a22dc0 [ 1697.187063][T16555] [<80669e8c>] (proc_setgroups_open) from [<8059b744>] (do_dentry_open+0x138/0x50c) [ 1697.187182][T16555] r7:80669e8c r6:8550ddf8 r5:00000000 r4:8510c680 [ 1697.187243][T16555] [<8059b60c>] (do_dentry_open) from [<8059d2c4>] (vfs_open+0x2c/0xe8) [ 1697.187371][T16555] r9:8510c680 r8:84094980 r7:ea709f20 r6:8510c6a8 r5:82b21e14 r4:8510c680 [ 1697.187394][T16555] [<8059d298>] (vfs_open) from [<805b9bd8>] (path_openat+0x430/0xa3c) [ 1697.187492][T16555] r6:00000000 r5:82b21e14 r4:ea709e58 [ 1697.187568][T16555] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 1697.187692][T16555] r10:00000142 r9:84094980 r8:00000001 r7:ffffff9c r6:ea709f20 r5:84094980 [ 1697.187742][T16555] r4:83e92000 [ 1697.187836][T16555] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 1697.187918][T16555] r8:8020029c r7:76ffde00 r6:ffffff9c r5:83e92000 r4:00000004 [ 1697.187984][T16555] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 1697.188077][T16555] r7:00000142 r6:00000000 r5:76ffde00 r4:ffffff9c [ 1697.188095][T16555] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1697.188186][T16555] Exception stack(0xea709fa8 to 0xea709ff0) [ 1697.188352][T16555] 9fa0: 00000000 00000000 ffffff9c 76ffde00 00020002 00000000 [ 1697.188419][T16555] 9fc0: 00000000 00000000 00000000 00000142 003562d8 00000000 00000001 76ffe0dc [ 1697.188476][T16555] 9fe0: 76ffdd88 76ffdd74 0010bc74 00112858 [ 1697.188553][T16555] r5:00000000 r4:00000000 [ 1697.658719][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.662472][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.876039][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.879022][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.131618][T16585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.133206][T16585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.654471][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.655134][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.348743][T16604] random: crng reseeded on system resumption [ 1700.426380][T16608] FAULT_INJECTION: forcing a failure. [ 1700.426380][T16608] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.426783][T16608] CPU: 1 UID: 0 PID: 16608 Comm: syz.5.2941 Not tainted syzkaller #0 PREEMPT [ 1700.426879][T16608] Hardware name: ARM-Versatile Express [ 1700.426903][T16608] Call trace: [ 1700.426942][T16608] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1700.427091][T16608] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1700.427127][T16608] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1700.427347][T16608] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1700.427420][T16608] r7:8408a4c0 r6:00000000 r5:8408a4c0 r4:82b1ac48 [ 1700.427500][T16608] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1700.427626][T16608] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1700.427721][T16608] r8:00000000 r7:8408a4c0 r6:805db848 r5:00000dc0 r4:830e5240 [ 1700.427773][T16608] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1700.427862][T16608] [<80546804>] (kmem_cache_alloc_noprof) from [<805db848>] (seq_open+0x34/0x88) [ 1700.428020][T16608] r10:00000000 r9:859bd200 r8:859bd228 r7:82a22dc0 r6:867bee40 r5:859bd200 [ 1700.428533][T16608] r4:859bd200 [ 1700.428586][T16608] [<805db814>] (seq_open) from [<805db9f8>] (single_open+0x70/0x94) [ 1700.428762][T16608] r7:82a22dc0 r6:8037e224 r5:859bd200 r4:867bee40 [ 1700.428813][T16608] [<805db988>] (single_open) from [<80669f74>] (proc_setgroups_open+0xe8/0x224) [ 1700.428919][T16608] r7:859bd200 r6:82a22ec0 r5:8ca824c0 r4:82a22dc0 [ 1700.428975][T16608] [<80669e8c>] (proc_setgroups_open) from [<8059b744>] (do_dentry_open+0x138/0x50c) [ 1700.429067][T16608] r7:80669e8c r6:834a0a18 r5:00000000 r4:859bd200 [ 1700.429115][T16608] [<8059b60c>] (do_dentry_open) from [<8059d2c4>] (vfs_open+0x2c/0xe8) [ 1700.429198][T16608] r9:859bd200 r8:8408a4c0 r7:ea965f20 r6:859bd228 r5:82b21e14 r4:859bd200 [ 1700.429233][T16608] [<8059d298>] (vfs_open) from [<805b9bd8>] (path_openat+0x430/0xa3c) [ 1700.429352][T16608] r6:00000000 r5:82b21e14 r4:ea965e58 [ 1700.429457][T16608] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 1700.429599][T16608] r10:00000142 r9:8408a4c0 r8:00000001 r7:ffffff9c r6:ea965f20 r5:8408a4c0 [ 1700.429665][T16608] r4:83e919c0 [ 1700.429685][T16608] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 1700.429812][T16608] r8:8020029c r7:76ffde00 r6:ffffff9c r5:83e919c0 r4:00000005 [ 1700.429840][T16608] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 1700.429972][T16608] r7:00000142 r6:00000000 r5:76ffde00 r4:ffffff9c [ 1700.429992][T16608] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1700.430099][T16608] Exception stack(0xea965fa8 to 0xea965ff0) [ 1700.430166][T16608] 5fa0: 00000000 00000000 ffffff9c 76ffde00 00020002 00000000 [ 1700.430243][T16608] 5fc0: 00000000 00000000 00000000 00000142 003562d8 00000000 00000001 76ffe0dc [ 1700.430313][T16608] 5fe0: 76ffdd88 76ffdd74 0010bc74 00112858 [ 1700.430360][T16608] r5:00000000 r4:00000000 [ 1703.248889][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 1703.527022][T16629] syzkaller0: entered promiscuous mode [ 1703.527369][T16629] syzkaller0: entered allmulticast mode [ 1704.022976][T16639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.026485][T16639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.036027][T16639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.038043][T16639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.251056][T16639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.255723][T16639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.418391][T16647] zram0: detected capacity change from 0 to 8 [ 1705.780751][T16659] veth1_to_bridge: left promiscuous mode [ 1706.465027][T16662] random: crng reseeded on system resumption [ 1708.252498][ T28] audit: type=1400 audit(2221.165:591): avc: denied { mounton } for pid=16675 comm="syz.5.2965" path="/syzcgroup/cpu/syz5/test/memory.limit_in_bytes" dev="cgroup" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1709.200192][T16682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.200715][T16682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.475755][T16686] FAULT_INJECTION: forcing a failure. [ 1709.475755][T16686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1709.477556][T16686] CPU: 0 UID: 0 PID: 16686 Comm: syz.4.2969 Not tainted syzkaller #0 PREEMPT [ 1709.477663][T16686] Hardware name: ARM-Versatile Express [ 1709.477693][T16686] Call trace: [ 1709.477736][T16686] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1709.477831][T16686] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1709.477851][T16686] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1709.477898][T16686] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1709.477967][T16686] r7:0000000a r6:00000000 r5:8ca86200 r4:82b54788 [ 1709.477988][T16686] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1709.478038][T16686] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1709.478156][T16686] r8:00000009 r7:0000000a r6:00000009 r5:20000180 r4:84fd3188 [ 1709.478174][T16686] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1709.478229][T16686] [<809fdf1c>] (should_fail_usercopy) from [<8041ce94>] (bpf_vlog_reverse_ubuf+0x1a4/0x30c) [ 1709.478281][T16686] [<8041ccf0>] (bpf_vlog_reverse_ubuf) from [<8041db60>] (bpf_vlog_finalize+0xdc/0x114) [ 1709.478340][T16686] r10:863928c0 r9:00000002 r8:ea935dc4 r7:00000005 r6:ea935d30 r5:84fd3188 [ 1709.478361][T16686] r4:00000013 [ 1709.478376][T16686] [<8041da84>] (bpf_vlog_finalize) from [<8041ef08>] (bpf_log_attr_finalize+0x3c/0xf4) [ 1709.478429][T16686] r7:00000000 r6:ffffffea r5:00000000 r4:ea935e80 [ 1709.478449][T16686] [<8041eecc>] (bpf_log_attr_finalize) from [<80458bdc>] (btf_new_fd+0xb30/0x1838) [ 1709.478514][T16686] r6:ffffffea r5:00000000 r4:86708780 [ 1709.478535][T16686] [<804580ac>] (btf_new_fd) from [<803eb208>] (__sys_bpf+0x59c/0x219c) [ 1709.478600][T16686] r10:8ca86200 r9:00000028 r8:00000000 r7:00000028 r6:ea935e60 r5:00000000 [ 1709.478623][T16686] r4:00000000 [ 1709.478640][T16686] [<803eac6c>] (__sys_bpf) from [<803ed418>] (sys_bpf+0x50/0x6c) [ 1709.478699][T16686] r10:00000182 r9:8ca86200 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 1709.478744][T16686] r4:00000000 [ 1709.478766][T16686] [<803ed3c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1709.478820][T16686] Exception stack(0xea935fa8 to 0xea935ff0) [ 1709.478864][T16686] 5fa0: 00000000 00000000 00000012 200001c0 00000028 00000000 [ 1709.478902][T16686] 5fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f5f0dc [ 1709.478957][T16686] 5fe0: 76f5ee88 76f5ee78 00018fa0 00130a50 [ 1709.956729][ T28] audit: type=1400 audit(2222.875:592): avc: denied { write } for pid=16688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.998722][T16694] 8<--- cut here --- [ 1709.999154][T16694] Unable to handle kernel paging request at virtual address fee003c7 when write [ 1710.009144][ T28] audit: type=1400 audit(2222.915:593): avc: denied { read } for pid=2912 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1710.009594][ T28] audit: type=1400 audit(2222.915:594): avc: denied { search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.010572][ T28] audit: type=1400 audit(2222.925:595): avc: denied { write search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.020548][ T28] audit: type=1400 audit(2222.935:596): avc: denied { add_name } for pid=2912 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.024349][ T28] audit: type=1400 audit(2222.935:597): avc: denied { create } for pid=2912 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1710.024699][ T28] audit: type=1400 audit(2222.935:598): avc: denied { append open } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1710.033343][ T28] audit: type=1400 audit(2222.945:599): avc: denied { getattr } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1710.095147][T16694] [fee003c7] *pgd=80000080007003, *pmd=00000000 [ 1710.116151][T16694] Internal error: Oops: a06 [#1] SMP ARM [ 1710.117981][T16694] Modules linked in: [ 1710.118523][T16694] CPU: 1 UID: 0 PID: 16694 Comm: syz.4.2971 Not tainted syzkaller #0 PREEMPT [ 1710.118870][T16694] Hardware name: ARM-Versatile Express [ 1710.119108][T16694] PC is at subdev_8255_io+0x60/0x6c [ 1710.119420][T16694] LR is at subdev_8255_io+0x4c/0x6c [ 1710.119694][T16694] pc : [<814ad81c>] lr : [<814ad808>] psr: 60000013 [ 1710.119990][T16694] sp : dfbadcb8 ip : dfbadcb8 fp : dfbadcd4 [ 1710.120325][T16694] r10: 000003c4 r9 : 00000004 r8 : dfbadda4 [ 1710.120608][T16694] r7 : 00000000 r6 : 0000009b r5 : 838550c0 r4 : 000003c7 [ 1710.120931][T16694] r3 : 0000009b r2 : fee003c7 r1 : 00000001 r0 : 838550c0 [ 1710.121311][T16694] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 1710.121718][T16694] Control: 30c5387d Table: 867c9d80 DAC: 00000000 [ 1710.122100][T16694] Register r0 information: slab kmalloc-192 start 838550c0 pointer offset 0 size 192 [ 1710.123375][T16694] Register r1 information: non-paged memory [ 1710.124022][T16694] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1710.124625][T16694] Register r3 information: non-paged memory [ 1710.124891][T16694] Register r4 information: non-paged memory [ 1710.125168][T16694] Register r5 information: slab kmalloc-192 start 838550c0 pointer offset 0 size 192 [ 1710.125661][T16694] Register r6 information: non-paged memory [ 1710.125995][T16694] Register r7 information: NULL pointer [ 1710.126317][T16694] Register r8 information: 2-page vmalloc region starting at 0xdfbac000 allocated at kernel_clone+0xc4/0x43c [ 1710.126869][T16694] Register r9 information: non-paged memory [ 1710.127187][T16694] Register r10 information: non-paged memory [ 1710.127494][T16694] Register r11 information: 2-page vmalloc region starting at 0xdfbac000 allocated at kernel_clone+0xc4/0x43c [ 1710.128082][T16694] Register r12 information: 2-page vmalloc region starting at 0xdfbac000 allocated at kernel_clone+0xc4/0x43c [ 1710.128686][T16694] Process syz.4.2971 (pid: 16694, stack limit = 0xdfbac000) [ 1710.129104][T16694] Stack: (0xdfbadcb8 to 0xdfbae000) [ 1710.129341][T16694] dca0: 814ad7bc 000003c4 [ 1710.129708][T16694] dcc0: 838550c0 00000000 dfbadcf4 dfbadcd8 814ad4f8 814ad7c8 000003c4 80547798 [ 1710.130208][T16694] dce0: 86967800 86967800 dfbadd14 dfbadcf8 814ad8b0 814ad4ac 838550c0 00000000 [ 1710.130625][T16694] dd00: 86967800 00000000 dfbadd54 dfbadd18 814ada60 814ad834 ffffffff 00000004 [ 1710.131054][T16694] dd20: 82a22dc0 00000000 00000000 82bdac60 838550c0 00000000 dfbadd90 838550c0 [ 1710.131500][T16694] dd40: 00000000 82d32f9c dfbadd8c dfbadd58 8149c3e8 814ad9f8 40946400 00000000 [ 1710.131858][T16694] dd60: dfbadd7c 20000080 838550c0 b5403587 40946400 00000003 00000003 83e53100 [ 1710.132160][T16694] dd80: dfbade4c dfbadd90 81497bec 8149c2ec 35353238 00000000 00000000 00000000 [ 1710.132435][T16694] dda0: 00000000 000003c4 00000004 00000002 0000000a 00000401 00000000 fffffffc [ 1710.132733][T16694] ddc0: 00000040 00000ffd 00007ffe 00000003 00000006 00000400 00000000 00000013 [ 1710.133126][T16694] dde0: 00000100 ffffffab 00000009 0000034d 00000001 000003ff 00007fff 00000006 [ 1710.133485][T16694] de00: 0000e2df 0000aa14 00000001 00000004 00000027 00000007 0000000e 00000004 [ 1710.134140][T16694] de20: 00000000 c74a85db 00000000 838b1b80 838550c0 20000080 40946400 00000003 [ 1710.135078][T16694] de40: dfbadf14 dfbade50 81498f14 81497b2c 00000000 c74a85db 00000000 00000000 [ 1710.138031][T16694] de60: 8254e844 dfbadea4 0000005f 848ea5e0 00000064 838550f0 dfbadee4 dfbade88 [ 1710.141458][T16694] de80: 8080b76c 80801e24 00000064 00000001 00000000 dfbadea4 831e8110 834e6d48 [ 1710.144062][T16694] dea0: 00006400 0000000b dfbade98 00000000 00000000 c74a85db 00000000 838b1b80 [ 1710.144505][T16694] dec0: 40946400 20000080 20000080 838b1b80 00000003 83e53100 dfbadef4 dfbadee8 [ 1710.144900][T16694] dee0: 8080b8a0 c74a85db dfbadf14 00000000 838b1b81 40946400 20000080 838b1b80 [ 1710.145269][T16694] df00: 00000003 83e53100 dfbadfa4 dfbadf18 805bdf78 81498bcc ecac8b10 83e53100 [ 1710.145636][T16694] df20: dfbadf3c dfbadf30 81b6ec00 81b6eacc dfbadf54 dfbadf40 8025b878 8028f548 [ 1710.145987][T16694] df40: dfbadfb0 40000000 dfbadf84 dfbadf58 80221bdc 8025b834 00000000 82a1eb0c [ 1710.146372][T16694] df60: dfbadfb0 0013ebf0 ecac8b10 80221b30 00000000 c74a85db dfbadfac 00000000 [ 1710.146748][T16694] df80: 00000000 00356310 00000036 8020029c 83e53100 00000036 00000000 dfbadfa8 [ 1710.147169][T16694] dfa0: 80200060 805bdd40 00000000 00000000 00000003 40946400 20000080 00000000 [ 1710.147567][T16694] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f5f0dc [ 1710.147927][T16694] dfe0: 76f5ee88 76f5ee78 00018fa0 00130a50 60000010 00000003 00000000 00000000 [ 1710.148262][T16694] Call trace: [ 1710.148516][T16694] [<814ad7bc>] (subdev_8255_io) from [<814ad4f8>] (subdev_8255_do_config+0x58/0x60) [ 1710.149064][T16694] r7:00000000 r6:838550c0 r5:000003c4 r4:814ad7bc [ 1710.149355][T16694] [<814ad4a0>] (subdev_8255_do_config) from [<814ad8b0>] (subdev_8255_io_init+0x88/0x98) [ 1710.149785][T16694] r4:86967800 [ 1710.149957][T16694] [<814ad828>] (subdev_8255_io_init) from [<814ada60>] (dev_8255_attach+0x74/0x138) [ 1710.150392][T16694] r7:00000000 r6:86967800 r5:00000000 r4:838550c0 [ 1710.150683][T16694] [<814ad9ec>] (dev_8255_attach) from [<8149c3e8>] (comedi_device_attach+0x108/0x244) [ 1710.151298][T16694] r10:82d32f9c r9:00000000 r8:838550c0 r7:dfbadd90 r6:00000000 r5:838550c0 [ 1710.151647][T16694] r4:82bdac60 [ 1710.151860][T16694] [<8149c2e0>] (comedi_device_attach) from [<81497bec>] (do_devconfig_ioctl+0xcc/0x218) [ 1710.152224][T16694] r10:83e53100 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:838550c0 [ 1710.152581][T16694] r4:20000080 [ 1710.152724][T16694] [<81497b20>] (do_devconfig_ioctl) from [<81498f14>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 1710.153111][T16694] r8:00000003 r7:40946400 r6:20000080 r5:838550c0 r4:838b1b80 [ 1710.153414][T16694] [<81498bc0>] (comedi_unlocked_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 1710.153910][T16694] r10:83e53100 r9:00000003 r8:838b1b80 r7:20000080 r6:40946400 r5:838b1b81 [ 1710.154420][T16694] r4:00000000 [ 1710.160573][T16694] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1710.164411][T16694] Exception stack(0xdfbadfa8 to 0xdfbadff0) [ 1710.164691][T16694] dfa0: 00000000 00000000 00000003 40946400 20000080 00000000 [ 1710.165026][T16694] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f5f0dc [ 1710.165367][T16694] dfe0: 76f5ee88 76f5ee78 00018fa0 00130a50 [ 1710.165641][T16694] r10:00000036 r9:83e53100 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1710.165941][T16694] r4:00000000 [ 1710.166412][T16694] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1710.168385][T16694] ---[ end trace 0000000000000000 ]--- [ 1710.239902][T16378] syz_tun (unregistering): left allmulticast mode [ 1710.425439][T16694] Kernel panic - not syncing: Fatal exception [ 1710.427500][T16694] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:18:59 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=7e9967e0 R03=7e9967ec R04=00000000 R05=00000000 R06=00000000 R07=00000109 R08=001a8b9b R09=00000000 R10=00000000 R11=000001f4 R12=7e9967a8 R13=dff55ff8 R14=00112858 R15=00112858 PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=82386cf4 R02=00000000 R03=00000006 R04=86b65085 R05=86b65085 R06=00000007 R07=81cddae4 R08=862b7936 R09=00000001 R10=862b7800 R11=eb9e5a64 R12=eb9e5a50 R13=eb9e5a50 R14=80839e00 R15=80839e00 PSR=200f0013 --C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000