last executing test programs: 22.24930648s ago: executing program 0 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 17.070536949s ago: executing program 0 (id=1693): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfbfffffc, 0x80, 0x1, 0x46}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 10.952661795s ago: executing program 1 (id=1697): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 8.492983499s ago: executing program 1 (id=1698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.902550243s ago: executing program 1 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000880) 5.149717495s ago: executing program 0 (id=1700): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000640)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}, 0x1}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="50cf3306b7618ba7cfa5aa58e3068848", 0x10}, {0x0, 0x500}], 0x2) 4.85031771s ago: executing program 1 (id=1701): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 2.923883163s ago: executing program 0 (id=1702): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 1.811432391s ago: executing program 1 (id=1703): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.639702271s ago: executing program 0 (id=1704): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003080)="9af4b1568e", 0x5}], 0x1}, 0x0) 593.184272ms ago: executing program 1 (id=1705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x147) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x110000) close(r0) 0s ago: executing program 0 (id=1706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) kernel console output (not intermixed with test programs): -1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.365927][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.459969][ T23] usb 1-1: config 0 descriptor?? [ 864.105228][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.111455][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.115196][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.117321][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.119397][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.123011][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.127016][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.129150][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.131173][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.136190][ T23] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 864.185018][ T23] hid-generic 0003:047F:FFFF.0003: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 864.351657][ T3527] usb 1-1: USB disconnect, device number 14 [ 873.228062][ T4996] fido_id[4996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 875.038597][ T5000] fuse: Unknown parameter 'group_i00000000000000000000' [ 875.718173][ T29] audit: type=1400 audit(875.320:282): avc: denied { setopt } for pid=5001 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 876.112823][ T29] audit: type=1400 audit(875.710:283): avc: denied { listen } for pid=5004 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 876.124894][ T29] audit: type=1400 audit(875.720:284): avc: denied { accept } for pid=5004 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 876.216943][ T5006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 876.698918][ T5010] fuse: Unknown parameter 'group_i00000000000000000000' [ 876.977060][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 877.156264][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 877.180062][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 877.282782][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.283251][ T9] usb 1-1: Product: syz [ 877.286677][ T9] usb 1-1: Manufacturer: syz [ 877.287094][ T9] usb 1-1: SerialNumber: syz [ 877.340859][ T9] usb 1-1: config 0 descriptor?? [ 878.545102][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.550563][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.391888][ T29] audit: type=1400 audit(879.990:285): avc: denied { sqpoll } for pid=5020 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 886.699038][ T29] audit: type=1400 audit(886.300:286): avc: denied { block_suspend } for pid=5040 comm="syz.1.550" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 887.813264][ T23] usb 1-1: USB disconnect, device number 15 [ 909.680382][ T5082] FAULT_INJECTION: forcing a failure. [ 909.680382][ T5082] name failslab, interval 1, probability 0, space 0, times 0 [ 909.682288][ T5082] CPU: 1 UID: 0 PID: 5082 Comm: syz.1.561 Tainted: G W L syzkaller #0 PREEMPT [ 909.682453][ T5082] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 909.682487][ T5082] Hardware name: linux,dummy-virt (DT) [ 909.682532][ T5082] Call trace: [ 909.682566][ T5082] show_stack+0x18/0x24 (C) [ 909.682674][ T5082] dump_stack_lvl+0x7c/0xb0 [ 909.682772][ T5082] dump_stack+0x1c/0x28 [ 909.682839][ T5082] should_fail_ex+0x6b4/0x6c4 [ 909.682911][ T5082] should_failslab+0xbc/0x120 [ 909.682979][ T5082] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 909.683094][ T5082] __d_alloc+0x38/0x98c [ 909.683164][ T5082] d_alloc_pseudo+0x14/0xb8 [ 909.683225][ T5082] alloc_file_pseudo+0xf4/0x23c [ 909.683327][ T5082] anon_inode_getfile_fmode+0x8c/0x1d8 [ 909.683525][ T5082] do_signalfd4+0x15c/0x380 [ 909.683674][ T5082] __arm64_compat_sys_signalfd4+0x108/0x190 [ 909.683809][ T5082] invoke_syscall+0x74/0x240 [ 909.683941][ T5082] el0_svc_common.constprop.0+0xac/0x230 [ 909.684072][ T5082] do_el0_svc_compat+0x40/0x58 [ 909.684231][ T5082] el0_svc_compat+0x54/0x264 [ 909.684415][ T5082] el0t_32_sync_handler+0x88/0xac [ 909.684543][ T5082] el0t_32_sync+0x19c/0x1a0 [ 929.135185][ T29] audit: type=1400 audit(928.730:287): avc: denied { write } for pid=5116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 930.486884][ T29] audit: type=1400 audit(930.080:288): avc: denied { write } for pid=5119 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 933.976254][ T4627] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 934.255541][ T4627] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 934.256626][ T4627] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 934.333059][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.335779][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.336004][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.359818][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.360938][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.361101][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.481614][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.482694][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.482891][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.577286][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.578116][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.578261][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.593227][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.596200][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.596402][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.858045][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.859018][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.859188][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.911932][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.913296][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.914709][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 935.097062][ T4627] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 935.097971][ T4627] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 935.098141][ T4627] usb 1-1: config 0 interface 0 has no altsetting 0 [ 935.350089][ T4627] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 935.350894][ T4627] usb 1-1: Product: syz [ 935.351408][ T4627] usb 1-1: Manufacturer: syz [ 935.351526][ T4627] usb 1-1: SerialNumber: syz [ 935.424667][ T4627] usb 1-1: config 0 descriptor?? [ 935.997714][ T4627] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 936.124920][ T4627] usb 1-1: USB disconnect, device number 16 [ 936.390091][ T4627] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 937.398260][ T4627] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 937.827334][ T4627] usb 1-1: Using ep0 maxpacket: 32 [ 937.858500][ T4627] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 937.904400][ T4627] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.905147][ T4627] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 937.905609][ T4627] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 937.905857][ T4627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 937.906061][ T4627] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 937.906140][ T4627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 937.906200][ T4627] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 938.098179][ T4627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.099207][ T4627] usb 1-1: Product: syz [ 938.099340][ T4627] usb 1-1: Manufacturer: syz [ 938.099455][ T4627] usb 1-1: SerialNumber: syz [ 938.266807][ T4627] usb 1-1: config 0 descriptor?? [ 938.275263][ T5132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 938.339853][ T4627] usb 1-1: NFC: Reader power on cmd error -90 [ 938.340943][ T4627] pn533_usb 1-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 938.342824][ T4627] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 938.559153][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.586737][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.615103][ T804] usb 1-1: USB disconnect, device number 17 [ 940.486453][ T5137] support for the xor transformation has been removed. [ 945.846757][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 946.082945][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 946.101784][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.105877][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.196124][ T23] usb 1-1: config 0 descriptor?? [ 950.129403][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 951.848428][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.862835][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.646657][ T3527] usb 1-1: USB disconnect, device number 18 [ 959.835972][ T3527] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 960.041345][ T3527] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 960.064746][ T3527] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.067055][ T3527] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 960.069269][ T3527] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 960.071312][ T3527] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 960.074352][ T3527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.377924][ T3527] gud 1-1:1.0: USB-1: Failed to add properties (ret=-71) [ 961.380147][ T3527] gud 1-1:1.0: Failed to get connectors (error=-71) [ 961.382335][ T3527] gud 1-1:1.0: probe with driver gud failed with error -71 [ 961.502816][ T3527] usb 1-1: USB disconnect, device number 19 [ 962.565725][ T3527] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 962.894584][ T3527] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 962.951173][ T3527] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 962.954476][ T3527] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.963032][ T3527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.028677][ T3527] usb 1-1: config 0 descriptor?? [ 963.052044][ T5195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 963.659221][ T3527] hid_parser_main: 5 callbacks suppressed [ 963.660779][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.662841][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.665848][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.667213][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.669377][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.670536][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.672073][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.673164][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.674632][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.676272][ T3527] hid-generic 0003:04B4:ED81.0004: unknown main item tag 0x0 [ 963.735290][ T3527] hid-generic 0003:04B4:ED81.0004: hidraw0: USB HID v0.08 Device [HID 04b4:ed81] on usb-dummy_hcd.0-1/input0 [ 963.836960][ T805] usb 1-1: USB disconnect, device number 20 [ 966.562657][ T5203] fido_id[5203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 983.319287][ T5229] netlink: 'syz.0.612': attribute type 39 has an invalid length. [ 986.148186][ T5237] syzkaller0: entered promiscuous mode [ 986.149116][ T5237] syzkaller0: entered allmulticast mode [ 987.668291][ T5239] FAULT_INJECTION: forcing a failure. [ 987.668291][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 987.669195][ T5239] CPU: 0 UID: 0 PID: 5239 Comm: syz.0.616 Tainted: G W L syzkaller #0 PREEMPT [ 987.669362][ T5239] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 987.669416][ T5239] Hardware name: linux,dummy-virt (DT) [ 987.669483][ T5239] Call trace: [ 987.669541][ T5239] show_stack+0x18/0x24 (C) [ 987.669797][ T5239] dump_stack_lvl+0x7c/0xb0 [ 987.669932][ T5239] dump_stack+0x1c/0x28 [ 987.670114][ T5239] should_fail_ex+0x6b4/0x6c4 [ 987.670272][ T5239] should_failslab+0xbc/0x120 [ 987.670511][ T5239] __kmalloc_cache_node_noprof+0x360/0x634 [ 987.670715][ T5239] __get_vm_area_node+0x118/0x2ec [ 987.670905][ T5239] __vmalloc_node_range_noprof+0x198/0x1024 [ 987.671030][ T5239] __vmalloc_node_noprof+0xe4/0x14c [ 987.671182][ T5239] __vmalloc_noprof+0x48/0x70 [ 987.671307][ T5239] bpf_prog_alloc_no_stats+0x48/0x540 [ 987.671481][ T5239] bpf_prog_alloc+0x24/0x18c [ 987.671962][ T5239] bpf_prog_create_from_user+0x94/0x240 [ 987.672394][ T5239] do_seccomp+0x4e0/0x1b64 [ 987.672663][ T5239] __arm64_sys_seccomp+0x70/0xa0 [ 987.672924][ T5239] invoke_syscall+0x74/0x240 [ 987.673177][ T5239] el0_svc_common.constprop.0+0xac/0x230 [ 987.673492][ T5239] do_el0_svc_compat+0x40/0x58 [ 987.673855][ T5239] el0_svc_compat+0x54/0x264 [ 987.674003][ T5239] el0t_32_sync_handler+0x88/0xac [ 987.674121][ T5239] el0t_32_sync+0x19c/0x1a0 [ 987.708817][ T5239] syz.0.616: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 987.720627][ T5239] CPU: 1 UID: 0 PID: 5239 Comm: syz.0.616 Tainted: G W L syzkaller #0 PREEMPT [ 987.720863][ T5239] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 987.720919][ T5239] Hardware name: linux,dummy-virt (DT) [ 987.720985][ T5239] Call trace: [ 987.721050][ T5239] show_stack+0x18/0x24 (C) [ 987.721242][ T5239] dump_stack_lvl+0x7c/0xb0 [ 987.721368][ T5239] dump_stack+0x1c/0x28 [ 987.721497][ T5239] warn_alloc+0x1d0/0x210 [ 987.721634][ T5239] __vmalloc_node_range_noprof+0xb08/0x1024 [ 987.721778][ T5239] __vmalloc_node_noprof+0xe4/0x14c [ 987.721902][ T5239] __vmalloc_noprof+0x48/0x70 [ 987.722021][ T5239] bpf_prog_alloc_no_stats+0x48/0x540 [ 987.722161][ T5239] bpf_prog_alloc+0x24/0x18c [ 987.722283][ T5239] bpf_prog_create_from_user+0x94/0x240 [ 987.722451][ T5239] do_seccomp+0x4e0/0x1b64 [ 987.722579][ T5239] __arm64_sys_seccomp+0x70/0xa0 [ 987.722710][ T5239] invoke_syscall+0x74/0x240 [ 987.722829][ T5239] el0_svc_common.constprop.0+0xac/0x230 [ 987.722951][ T5239] do_el0_svc_compat+0x40/0x58 [ 987.723092][ T5239] el0_svc_compat+0x54/0x264 [ 987.723229][ T5239] el0t_32_sync_handler+0x88/0xac [ 987.723353][ T5239] el0t_32_sync+0x19c/0x1a0 [ 987.742818][ T5239] Mem-Info: [ 987.746652][ T5239] active_anon:6065 inactive_anon:0 isolated_anon:0 [ 987.746652][ T5239] active_file:0 inactive_file:14464 isolated_file:0 [ 987.746652][ T5239] unevictable:768 dirty:15 writeback:0 [ 987.746652][ T5239] slab_reclaimable:7173 slab_unreclaimable:30648 [ 987.746652][ T5239] mapped:5643 shmem:3696 pagetables:452 [ 987.746652][ T5239] sec_pagetables:0 bounce:0 [ 987.746652][ T5239] kernel_misc_reclaimable:0 [ 987.746652][ T5239] free:290216 free_pcp:4953 free_cma:8128 [ 987.755836][ T5239] Node 0 active_anon:24260kB inactive_anon:0kB active_file:0kB inactive_file:57856kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:22572kB dirty:60kB writeback:0kB shmem:14784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6072kB pagetables:1808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 987.829372][ T5239] Node 0 DMA free:1160864kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24260kB inactive_anon:0kB active_file:0kB inactive_file:57856kB unevictable:3072kB writepending:60kB zspages:0kB present:2097152kB managed:1524544kB mlocked:0kB bounce:0kB free_pcp:19812kB local_pcp:5788kB free_cma:32512kB [ 987.831755][ T5239] lowmem_reserve[]: 0 0 0 0 0 [ 987.833274][ T5239] Node 0 DMA: 249*4kB (UM) 106*8kB (UM) 144*16kB (ME) 181*32kB (UM) 40*64kB (UM) 10*128kB (UME) 5*256kB (UMC) 14*512kB (MEC) 6*1024kB (UMC) 7*2048kB (UMEC) 273*4096kB (UMC) = 1160916kB [ 987.861062][ T5239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.863118][ T5239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 987.866152][ T5239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 987.868241][ T5239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 987.870195][ T5239] 18156 total pagecache pages [ 987.871670][ T5239] 0 pages in swap cache [ 987.873040][ T5239] Free swap = 124996kB [ 987.875299][ T5239] Total swap = 124996kB [ 987.876846][ T5239] 524288 pages RAM [ 987.878219][ T5239] 0 pages HighMem/MovableOnly [ 987.879615][ T5239] 143152 pages reserved [ 987.880906][ T5239] 8192 pages cma reserved [ 987.882283][ T5239] 0 pages hwpoisoned [ 997.496406][ T29] audit: type=1400 audit(997.090:289): avc: denied { nlmsg_read } for pid=5244 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 998.468122][ T29] audit: type=1400 audit(998.070:290): avc: denied { read } for pid=5249 comm="syz.1.620" name="usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 998.478983][ T29] audit: type=1400 audit(998.070:291): avc: denied { open } for pid=5249 comm="syz.1.620" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 998.571577][ T29] audit: type=1400 audit(998.170:292): avc: denied { map } for pid=5249 comm="syz.1.620" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1009.465251][ T29] audit: type=1400 audit(1009.050:293): avc: denied { prog_load } for pid=5262 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.862459][ T29] audit: type=1400 audit(1019.460:294): avc: denied { connect } for pid=5292 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1022.002425][ T29] audit: type=1400 audit(1021.600:295): avc: denied { write } for pid=5276 comm="syz.0.627" name="igmp6" dev="proc" ino=4026532678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1025.725896][ T4627] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1025.917881][ T4627] usb 1-1: Using ep0 maxpacket: 8 [ 1025.956527][ T4627] usb 1-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1025.970863][ T4627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.986329][ T4627] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.993153][ T4627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.121606][ T4627] usb 1-1: config 0 descriptor?? [ 1026.767003][ T4627] hid-generic 0003:054C:1000.0005: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.0-1/input0 [ 1026.907512][ T29] audit: type=1400 audit(1026.510:296): avc: denied { read } for pid=5292 comm="syz.1.634" path="socket:[9971]" dev="sockfs" ino=9971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1026.947079][ T23] usb 1-1: USB disconnect, device number 21 [ 1028.510649][ T5308] fido_id[5308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1028.636758][ T4627] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1028.911534][ T4627] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1028.945346][ T4627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.946714][ T4627] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.948205][ T4627] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1029.078993][ T4627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.085135][ T4627] usb 1-1: Product: syz [ 1029.087087][ T4627] usb 1-1: Manufacturer: syz [ 1029.088465][ T4627] usb 1-1: SerialNumber: syz [ 1029.431701][ T4627] usb 1-1: Limiting number of CPorts to U8_MAX [ 1029.476926][ T4627] usb 1-1: Unknown endpoint type found, address 0x81 [ 1029.479129][ T4627] usb 1-1: Not enough endpoints found in device, aborting! [ 1029.697645][ T4627] usb 1-1: USB disconnect, device number 22 [ 1032.468449][ T29] audit: type=1400 audit(1032.070:297): avc: denied { create } for pid=5314 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1040.822541][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.852650][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.777714][ T29] audit: type=1400 audit(1042.380:298): avc: denied { create } for pid=5328 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1042.799804][ T29] audit: type=1400 audit(1042.390:299): avc: denied { write } for pid=5328 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1042.880338][ T29] audit: type=1400 audit(1042.480:300): avc: denied { ioctl } for pid=5328 comm="syz.0.642" path="socket:[10049]" dev="sockfs" ino=10049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1048.769340][ T805] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1048.996002][ T805] usb 1-1: Using ep0 maxpacket: 16 [ 1049.021800][ T805] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1049.057629][ T805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1049.059872][ T805] usb 1-1: config 0 has no interface number 0 [ 1049.061868][ T805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.065101][ T805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.067214][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.178970][ T805] usb 1-1: config 0 descriptor?? [ 1049.752093][ T805] hid_parser_main: 30 callbacks suppressed [ 1049.761605][ T805] hid-generic 0003:28BD:0071.0006: unknown main item tag 0x0 [ 1049.764862][ T805] hid-generic 0003:28BD:0071.0006: unknown main item tag 0x0 [ 1049.775354][ T805] hid-generic 0003:28BD:0071.0006: unknown main item tag 0x0 [ 1049.777533][ T805] hid-generic 0003:28BD:0071.0006: unknown main item tag 0x0 [ 1049.779323][ T805] hid-generic 0003:28BD:0071.0006: unknown main item tag 0x0 [ 1049.798695][ T805] hid-generic 0003:28BD:0071.0006: hidraw0: USB HID v0.02 Device [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 1056.148646][ T29] audit: type=1400 audit(1055.750:301): avc: denied { map_create } for pid=5367 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1057.576463][ T29] audit: type=1400 audit(1057.180:302): avc: denied { create } for pid=5373 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1057.619046][ T29] audit: type=1400 audit(1057.220:303): avc: denied { bind } for pid=5373 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1057.663161][ T29] audit: type=1400 audit(1057.260:304): avc: denied { setopt } for pid=5373 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1057.768047][ T29] audit: type=1400 audit(1057.340:305): avc: denied { map } for pid=5373 comm="syz.1.658" path="socket:[10098]" dev="sockfs" ino=10098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1057.770814][ T29] audit: type=1400 audit(1057.360:306): avc: denied { read write } for pid=5373 comm="syz.1.658" path="socket:[10098]" dev="sockfs" ino=10098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1059.486101][ T29] audit: type=1400 audit(1059.080:307): avc: denied { create } for pid=5377 comm="syz.1.660" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1059.496203][ T29] audit: type=1400 audit(1059.090:308): avc: denied { map } for pid=5377 comm="syz.1.660" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1059.506696][ T29] audit: type=1400 audit(1059.100:309): avc: denied { read write } for pid=5377 comm="syz.1.660" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1060.172503][ T804] usb 1-1: USB disconnect, device number 23 [ 1061.847646][ T29] audit: type=1400 audit(1061.450:310): avc: denied { setopt } for pid=5386 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1061.872828][ T29] audit: type=1400 audit(1061.470:311): avc: denied { read } for pid=5386 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1065.526292][ T4627] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1065.689500][ T4627] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1065.700285][ T4627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.701076][ T4627] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1065.701838][ T4627] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.732493][ T4627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.733104][ T4627] usb 1-1: Product: syz [ 1065.734651][ T4627] usb 1-1: Manufacturer: syz [ 1065.734762][ T4627] usb 1-1: SerialNumber: syz [ 1066.080163][ T4627] usb 1-1: Limiting number of CPorts to U8_MAX [ 1066.085938][ T4627] usb 1-1: Not enough endpoints found in device, aborting! [ 1072.864345][ T29] audit: type=1400 audit(1072.440:312): avc: denied { ioctl } for pid=5404 comm="syz.1.669" path="socket:[10169]" dev="sockfs" ino=10169 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1074.481040][ T5411] netlink: 64 bytes leftover after parsing attributes in process `syz.1.672'. [ 1074.531439][ T5411] syzkaller1: entered promiscuous mode [ 1074.531956][ T5411] syzkaller1: entered allmulticast mode [ 1080.008515][ T804] usb 1-1: USB disconnect, device number 24 [ 1084.447482][ T29] audit: type=1400 audit(1084.050:313): avc: denied { prog_run } for pid=5415 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1094.606112][ T5430] fuse: Invalid rootmode [ 1096.500256][ T5436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.507510][ T5436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.769602][ T5441] fuse: Invalid rootmode [ 1101.316475][ T5446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.331940][ T5446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.489990][ T29] audit: type=1400 audit(1103.090:314): avc: denied { map_read map_write } for pid=5448 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1105.707610][ T29] audit: type=1400 audit(1105.310:315): avc: denied { write } for pid=5453 comm="syz.0.686" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1105.727578][ T29] audit: type=1400 audit(1105.320:316): avc: denied { open } for pid=5453 comm="syz.0.686" path="/dev/rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1105.745915][ T29] audit: type=1400 audit(1105.340:317): avc: denied { ioctl } for pid=5453 comm="syz.0.686" path="/dev/rtc0" dev="devtmpfs" ino=710 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1106.193281][ T5456] fuse: Invalid rootmode [ 1109.967187][ T5462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.689'. [ 1121.685536][ T5474] fuse: Bad value for 'rootmode' [ 1130.260458][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 1130.466340][ T5490] syz_tun (unregistering): left allmulticast mode [ 1131.684899][ T5492] fuse: Bad value for 'rootmode' [ 1133.349012][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 1136.208048][ T5509] fuse: Bad value for 'rootmode' [ 1141.119674][ T5525] fuse: Unknown parameter 'use00000000000000000000' [ 1152.929338][ T5544] fuse: Unknown parameter 'use00000000000000000000' [ 1155.556473][ T805] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1155.741531][ T805] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1155.779273][ T805] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1155.783361][ T805] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1155.831535][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.836517][ T805] usb 1-1: Product: syz [ 1155.838278][ T805] usb 1-1: Manufacturer: syz [ 1155.839639][ T805] usb 1-1: SerialNumber: syz [ 1157.075437][ T805] usb 1-1: failed to send ARPC request 1: -71 [ 1157.081044][ T805] usb 1-1: failed to execute ARPC: -71 [ 1157.106352][ T805] usb 1-1: failed to set connected state for cport 0: -71 [ 1157.117427][ T805] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 1157.154434][ T805] usb 1-1: failed to send ARPC request 3: -71 [ 1157.157201][ T805] usb 1-1: failed to execute ARPC: -71 [ 1157.182255][ T805] usb 1-1: failed to clear cport 0: -71 [ 1157.224426][ T805] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1157.277237][ T805] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1157.396308][ T805] usb 1-1: USB disconnect, device number 25 [ 1164.062086][ T5558] fuse: Unknown parameter 'use00000000000000000000' [ 1167.779547][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 1168.729365][ T5570] fuse: Unknown parameter 'user_i00000000000000000000' [ 1170.551648][ T5562] syzkaller1: entered promiscuous mode [ 1170.565043][ T5562] syzkaller1: entered allmulticast mode [ 1171.962299][ T5574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.003155][ T5574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.826897][ T805] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1178.035896][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 1178.076888][ T805] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1178.131428][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.217558][ T805] usb 1-1: config 0 descriptor?? [ 1180.526558][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 1188.847360][ T804] usb 1-1: USB disconnect, device number 26 [ 1190.397877][ T29] audit: type=1400 audit(1189.990:318): avc: denied { view } for pid=5605 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1191.776173][ T5608] syzkaller1: entered promiscuous mode [ 1191.776983][ T5608] syzkaller1: entered allmulticast mode [ 1193.605287][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.613283][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.288965][ T29] audit: type=1400 audit(1219.880:319): avc: denied { read write } for pid=5657 comm="syz.1.748" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1220.310400][ T29] audit: type=1400 audit(1219.880:320): avc: denied { open } for pid=5657 comm="syz.1.748" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1224.497815][ T29] audit: type=1400 audit(1224.100:321): avc: denied { wake_alarm } for pid=5668 comm="syz.1.751" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1238.111546][ T5693] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1238.442039][ T29] audit: type=1400 audit(1238.040:322): avc: denied { create } for pid=5688 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1238.558765][ T29] audit: type=1400 audit(1238.140:323): avc: denied { setopt } for pid=5688 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1246.204224][ T29] audit: type=1400 audit(1245.800:324): avc: denied { write } for pid=5708 comm="syz.0.764" name="mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1246.205030][ T29] audit: type=1400 audit(1245.800:325): avc: denied { open } for pid=5708 comm="syz.0.764" path="/dev/input/mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1276.444767][ T29] audit: type=1400 audit(1276.040:326): avc: denied { bind } for pid=5739 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1277.095746][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 1318.617816][ T29] audit: type=1400 audit(1318.220:327): avc: denied { append } for pid=5837 comm="syz.1.787" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1319.461159][ T29] audit: type=1400 audit(1319.060:328): avc: denied { bind } for pid=5840 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1319.473229][ T29] audit: type=1400 audit(1319.070:329): avc: denied { listen } for pid=5840 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1319.497998][ T29] audit: type=1400 audit(1319.100:330): avc: denied { accept } for pid=5840 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1322.997000][ T5844] fuse: Unknown parameter '0x0000000000000003' [ 1334.093462][ T5862] fuse: Unknown parameter '0x0000000000000003' [ 1336.646131][ T29] audit: type=1400 audit(1336.240:331): avc: denied { read append } for pid=5864 comm="syz.1.795" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1348.628743][ T5872] binder: 5871:5872 tried to acquire reference to desc 0, got 1 instead [ 1350.337039][ T4627] binder: undelivered TRANSACTION_COMPLETE [ 1350.340870][ T4627] binder: undelivered transaction 15, process died. [ 1351.468600][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.800'. [ 1352.469518][ T5883] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 1353.480691][ T5883] bond1: entered promiscuous mode [ 1353.500213][ T5883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1353.878403][ T5886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1353.880305][ T5886] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1353.906074][ T5886] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1353.978162][ T5887] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 1354.140457][ T5886] bond1: (slave ip6gre1): making interface the new active one [ 1354.141552][ T5886] ip6gre1: entered promiscuous mode [ 1354.239623][ T5886] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1357.821296][ T5893] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1357.860267][ T5893] syzkaller0: entered promiscuous mode [ 1357.872661][ T5893] syzkaller0: entered allmulticast mode [ 1403.086493][ T29] audit: type=1400 audit(1402.660:332): avc: denied { mount } for pid=5939 comm="syz.1.818" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1403.178127][ T5940] FAULT_INJECTION: forcing a failure. [ 1403.178127][ T5940] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1403.179164][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.1.818 Tainted: G W L syzkaller #0 PREEMPT [ 1403.179331][ T5940] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1403.179387][ T5940] Hardware name: linux,dummy-virt (DT) [ 1403.179453][ T5940] Call trace: [ 1403.179509][ T5940] show_stack+0x18/0x24 (C) [ 1403.179687][ T5940] dump_stack_lvl+0x7c/0xb0 [ 1403.179804][ T5940] dump_stack+0x1c/0x28 [ 1403.179915][ T5940] should_fail_ex+0x6b4/0x6c4 [ 1403.180096][ T5940] should_fail_alloc_page+0x70/0xc0 [ 1403.180259][ T5940] prepare_alloc_pages+0x1cc/0x578 [ 1403.180418][ T5940] __alloc_frozen_pages_noprof+0x1a4/0x3498 [ 1403.180589][ T5940] alloc_pages_mpol+0xf8/0x41c [ 1403.180791][ T5940] alloc_frozen_pages_noprof+0xb8/0x200 [ 1403.180979][ T5940] alloc_pages_noprof+0x14/0x120 [ 1403.181158][ T5940] get_free_pages_noprof+0x14/0xe0 [ 1403.181280][ T5940] __kasan_populate_vmalloc+0x84/0x204 [ 1403.181437][ T5940] alloc_vmap_area+0x61c/0x2ebc [ 1403.181645][ T5940] __get_vm_area_node+0x1a8/0x2ec [ 1403.181850][ T5940] __vmalloc_node_range_noprof+0x198/0x1024 [ 1403.182003][ T5940] __vmalloc_node_noprof+0xe4/0x14c [ 1403.182150][ T5940] copy_process+0x504/0x5950 [ 1403.182326][ T5940] kernel_clone+0x15c/0x93c [ 1403.182515][ T5940] __do_sys_clone+0xd4/0x124 [ 1403.182725][ T5940] __arm64_sys_clone+0xa8/0x100 [ 1403.182924][ T5940] invoke_syscall+0x74/0x240 [ 1403.183062][ T5940] el0_svc_common.constprop.0+0xac/0x230 [ 1403.183209][ T5940] do_el0_svc_compat+0x40/0x58 [ 1403.183445][ T5940] el0_svc_compat+0x54/0x264 [ 1403.183594][ T5940] el0t_32_sync_handler+0x88/0xac [ 1403.183739][ T5940] el0t_32_sync+0x19c/0x1a0 [ 1403.216834][ T5940] syz.1.818: vmalloc error: size 32768, align 0x10000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1403.218511][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.1.818 Tainted: G W L syzkaller #0 PREEMPT [ 1403.218647][ T5940] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1403.218701][ T5940] Hardware name: linux,dummy-virt (DT) [ 1403.218788][ T5940] Call trace: [ 1403.218847][ T5940] show_stack+0x18/0x24 (C) [ 1403.219050][ T5940] dump_stack_lvl+0x7c/0xb0 [ 1403.219198][ T5940] dump_stack+0x1c/0x28 [ 1403.219317][ T5940] warn_alloc+0x1d0/0x210 [ 1403.219438][ T5940] __vmalloc_node_range_noprof+0xb08/0x1024 [ 1403.219572][ T5940] __vmalloc_node_noprof+0xe4/0x14c [ 1403.219695][ T5940] copy_process+0x504/0x5950 [ 1403.219820][ T5940] kernel_clone+0x15c/0x93c [ 1403.219930][ T5940] __do_sys_clone+0xd4/0x124 [ 1403.220040][ T5940] __arm64_sys_clone+0xa8/0x100 [ 1403.220176][ T5940] invoke_syscall+0x74/0x240 [ 1403.220300][ T5940] el0_svc_common.constprop.0+0xac/0x230 [ 1403.220408][ T5940] do_el0_svc_compat+0x40/0x58 [ 1403.220540][ T5940] el0_svc_compat+0x54/0x264 [ 1403.220675][ T5940] el0t_32_sync_handler+0x88/0xac [ 1403.220834][ T5940] el0t_32_sync+0x19c/0x1a0 [ 1403.295223][ T5940] Mem-Info: [ 1403.295973][ T5940] active_anon:6195 inactive_anon:0 isolated_anon:0 [ 1403.295973][ T5940] active_file:0 inactive_file:14580 isolated_file:0 [ 1403.295973][ T5940] unevictable:768 dirty:12 writeback:0 [ 1403.295973][ T5940] slab_reclaimable:7171 slab_unreclaimable:31094 [ 1403.295973][ T5940] mapped:5606 shmem:3696 pagetables:481 [ 1403.295973][ T5940] sec_pagetables:0 bounce:0 [ 1403.295973][ T5940] kernel_misc_reclaimable:0 [ 1403.295973][ T5940] free:290999 free_pcp:2980 free_cma:8128 [ 1403.296287][ T5940] Node 0 active_anon:24780kB inactive_anon:0kB active_file:0kB inactive_file:58320kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:22424kB dirty:48kB writeback:0kB shmem:14784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6696kB pagetables:1924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1403.296470][ T5940] Node 0 DMA free:1163996kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24780kB inactive_anon:0kB active_file:0kB inactive_file:58320kB unevictable:3072kB writepending:48kB zspages:0kB present:2097152kB managed:1524544kB mlocked:0kB bounce:0kB free_pcp:11920kB local_pcp:5936kB free_cma:32512kB [ 1403.296731][ T5940] lowmem_reserve[]: 0 0 0 0 0 [ 1403.297199][ T5940] Node 0 DMA: 237*4kB (UME) 141*8kB (UE) 2*16kB (UE) 27*32kB (UE) 85*64kB (UME) 46*128kB (UME) 13*256kB (UMC) 13*512kB (UMEC) 5*1024kB (UMC) 6*2048kB (UMEC) 274*4096kB (UMC) = 1163996kB [ 1403.298880][ T5940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1403.298973][ T5940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 1403.299055][ T5940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1403.299145][ T5940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 1403.299250][ T5940] 18272 total pagecache pages [ 1403.299322][ T5940] 0 pages in swap cache [ 1403.299391][ T5940] Free swap = 124996kB [ 1403.299459][ T5940] Total swap = 124996kB [ 1403.299546][ T5940] 524288 pages RAM [ 1403.299636][ T5940] 0 pages HighMem/MovableOnly [ 1403.299744][ T5940] 143152 pages reserved [ 1403.299817][ T5940] 8192 pages cma reserved [ 1403.299879][ T5940] 0 pages hwpoisoned [ 1403.711016][ T29] audit: type=1400 audit(1403.310:333): avc: denied { unmount } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1415.946696][ T805] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1416.169657][ T805] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1416.209581][ T805] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1416.210420][ T805] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1416.211121][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1416.239704][ T805] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1416.240047][ T805] usb 1-1: Product: syz [ 1416.244702][ T805] usb 1-1: Manufacturer: syz [ 1416.245657][ T805] usb 1-1: SerialNumber: syz [ 1416.299508][ T805] usb 1-1: config 0 descriptor?? [ 1416.418041][ T5967] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1416.521308][ T805] usb 1-1: selecting invalid altsetting 0 [ 1416.955423][ T805] usb 1-1: USB disconnect, device number 27 [ 1418.653198][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1429.527598][ T6000] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 1429.820896][ T29] audit: type=1400 audit(1429.380:334): avc: denied { mount } for pid=5993 comm="syz.0.835" name="/" dev="autofs" ino=12175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1430.273256][ T6000] bond2: entered promiscuous mode [ 1430.310241][ T6000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1430.651789][ T6002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1430.703021][ T6002] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1430.721596][ T6002] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1430.791861][ T6002] bond2: (slave vti0): making interface the new active one [ 1430.868071][ T6002] vti0: entered promiscuous mode [ 1430.925342][ T6002] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1431.891030][ T29] audit: type=1400 audit(1431.490:335): avc: denied { setopt } for pid=6003 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1432.071084][ T29] audit: type=1400 audit(1431.660:336): avc: denied { read } for pid=6003 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1433.305158][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.402061][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.378768][ T6024] fuse: Bad value for 'fd' [ 1444.808204][ T29] audit: type=1400 audit(1444.410:337): avc: denied { execute } for pid=6036 comm="syz.1.849" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1445.251687][ T6039] fuse: Bad value for 'fd' [ 1449.909435][ T6050] fuse: Bad value for 'fd' [ 1458.080444][ T29] audit: type=1400 audit(1457.680:338): avc: denied { allowed } for pid=6077 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1458.617230][ T29] audit: type=1400 audit(1458.210:339): avc: denied { bind } for pid=6079 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1480.530761][ T6175] netlink: 68 bytes leftover after parsing attributes in process `syz.1.882'. [ 1480.562294][ T29] audit: type=1400 audit(1480.160:340): avc: denied { open } for pid=6173 comm="syz.1.882" path="/dev/ptyq6" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1480.648830][ T29] audit: type=1400 audit(1480.240:341): avc: denied { ioctl } for pid=6173 comm="syz.1.882" path="/dev/ptyq6" dev="devtmpfs" ino=118 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1480.718956][ T6176] FAULT_INJECTION: forcing a failure. [ 1480.718956][ T6176] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1480.721567][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.0.883 Tainted: G W L syzkaller #0 PREEMPT [ 1480.721728][ T6176] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1480.721790][ T6176] Hardware name: linux,dummy-virt (DT) [ 1480.721858][ T6176] Call trace: [ 1480.721929][ T6176] show_stack+0x18/0x24 (C) [ 1480.722099][ T6176] dump_stack_lvl+0x7c/0xb0 [ 1480.722214][ T6176] dump_stack+0x1c/0x28 [ 1480.722331][ T6176] should_fail_ex+0x6b4/0x6c4 [ 1480.722490][ T6176] should_fail+0x14/0x34 [ 1480.722613][ T6176] get_futex_key+0x198/0xf84 [ 1480.722758][ T6176] futex_wake+0xc0/0x49c [ 1480.722884][ T6176] do_futex+0x258/0x280 [ 1480.723002][ T6176] __arm64_sys_futex_time32+0x1d4/0x300 [ 1480.723127][ T6176] invoke_syscall+0x74/0x240 [ 1480.723256][ T6176] el0_svc_common.constprop.0+0xac/0x230 [ 1480.723468][ T6176] do_el0_svc_compat+0x40/0x58 [ 1480.723597][ T6176] el0_svc_compat+0x54/0x264 [ 1480.723722][ T6176] el0t_32_sync_handler+0x88/0xac [ 1480.723891][ T6176] el0t_32_sync+0x19c/0x1a0 [ 1480.766476][ T29] audit: type=1400 audit(1480.360:342): avc: denied { sqpoll } for pid=6174 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1490.135265][ T6199] netlink: 120 bytes leftover after parsing attributes in process `syz.1.893'. [ 1490.136948][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 1494.625836][ T29] audit: type=1400 audit(1494.200:343): avc: denied { search } for pid=6208 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.626926][ T29] audit: type=1400 audit(1494.200:344): avc: denied { search } for pid=6208 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=928 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.648128][ T29] audit: type=1400 audit(1494.200:345): avc: denied { search } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.698284][ T29] audit: type=1400 audit(1494.250:346): avc: denied { search } for pid=6208 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1495.178957][ T29] audit: type=1400 audit(1494.780:347): avc: denied { read } for pid=6210 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1495.205040][ T29] audit: type=1400 audit(1494.790:348): avc: denied { read open } for pid=6210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1495.205855][ T29] audit: type=1400 audit(1494.790:349): avc: denied { getattr } for pid=6210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1495.362305][ T29] audit: type=1400 audit(1494.960:350): avc: denied { create } for pid=6209 comm="syz.1.897" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1495.407945][ T29] audit: type=1400 audit(1495.000:351): avc: denied { read } for pid=6209 comm="syz.1.897" name="file0" dev="tmpfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1495.408866][ T29] audit: type=1400 audit(1495.000:352): avc: denied { open } for pid=6209 comm="syz.1.897" path="/457/file0" dev="tmpfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1501.413105][ T6230] netlink: 80 bytes leftover after parsing attributes in process `syz.0.905'. [ 1503.947881][ T6243] fuse: Bad value for 'fd' [ 1509.102352][ T6260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.120697][ T6260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.861972][ T922] block nbd0: Receive control failed (result -32) [ 1509.861984][ T50] block nbd0: Receive control failed (result -32) [ 1510.141618][ T6260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.144707][ T6260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.158972][ T6260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1511.166161][ T6260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.802589][ T6260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1511.812460][ T6260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.215269][ T5802] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.217231][ T5802] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.767167][ T5795] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.767975][ T5795] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.296124][ T5814] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.296961][ T5814] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.868187][ T5814] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.869008][ T5814] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.566536][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1515.568684][ T29] audit: type=1400 audit(1515.150:358): avc: denied { create } for pid=6271 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1515.698899][ T29] audit: type=1400 audit(1515.300:359): avc: denied { bind } for pid=6271 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1515.751902][ T29] audit: type=1400 audit(1515.340:360): avc: denied { listen } for pid=6271 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1515.883284][ T29] audit: type=1400 audit(1515.480:361): avc: denied { connect } for pid=6271 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1516.228098][ T29] audit: type=1400 audit(1515.830:362): avc: denied { shutdown } for pid=6271 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1527.749867][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.782835][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.555478][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 1544.897444][ T6355] fuse: Bad value for 'fd' [ 1547.916900][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 1548.987110][ T6375] fuse: Bad value for 'fd' [ 1552.991376][ T6386] fuse: Bad value for 'fd' [ 1553.789140][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.843456][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.669063][ T6396] FAULT_INJECTION: forcing a failure. [ 1555.669063][ T6396] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1555.669975][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.0.965 Tainted: G W L syzkaller #0 PREEMPT [ 1555.670141][ T6396] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1555.670199][ T6396] Hardware name: linux,dummy-virt (DT) [ 1555.670269][ T6396] Call trace: [ 1555.670332][ T6396] show_stack+0x18/0x24 (C) [ 1555.670550][ T6396] dump_stack_lvl+0x7c/0xb0 [ 1555.670687][ T6396] dump_stack+0x1c/0x28 [ 1555.670806][ T6396] should_fail_ex+0x6b4/0x6c4 [ 1555.670942][ T6396] should_fail+0x14/0x34 [ 1555.671084][ T6396] get_futex_key+0x198/0xf84 [ 1555.671215][ T6396] futex_wait_setup+0x64/0x55c [ 1555.671354][ T6396] __futex_wait+0x138/0x218 [ 1555.671477][ T6396] futex_wait+0xe4/0x2ac [ 1555.671603][ T6396] do_futex+0x1e8/0x280 [ 1555.671756][ T6396] __arm64_sys_futex_time32+0x1d4/0x300 [ 1555.671881][ T6396] invoke_syscall+0x74/0x240 [ 1555.672003][ T6396] el0_svc_common.constprop.0+0xac/0x230 [ 1555.672129][ T6396] do_el0_svc_compat+0x40/0x58 [ 1555.672244][ T6396] el0_svc_compat+0x54/0x264 [ 1555.672375][ T6396] el0t_32_sync_handler+0x88/0xac [ 1555.672480][ T6396] el0t_32_sync+0x19c/0x1a0 [ 1575.595200][ T6432] FAULT_INJECTION: forcing a failure. [ 1575.595200][ T6432] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1575.595616][ T6432] CPU: 0 UID: 0 PID: 6432 Comm: syz.0.977 Tainted: G W L syzkaller #0 PREEMPT [ 1575.595703][ T6432] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1575.595732][ T6432] Hardware name: linux,dummy-virt (DT) [ 1575.595764][ T6432] Call trace: [ 1575.595792][ T6432] show_stack+0x18/0x24 (C) [ 1575.595883][ T6432] dump_stack_lvl+0x7c/0xb0 [ 1575.595949][ T6432] dump_stack+0x1c/0x28 [ 1575.596063][ T6432] should_fail_ex+0x6b4/0x6c4 [ 1575.596195][ T6432] should_fail+0x14/0x34 [ 1575.596301][ T6432] get_futex_key+0x198/0xf84 [ 1575.596409][ T6432] futex_wait_setup+0x64/0x55c [ 1575.596521][ T6432] __futex_wait+0x138/0x218 [ 1575.596634][ T6432] futex_wait+0xe4/0x2ac [ 1575.596745][ T6432] do_futex+0x1e8/0x280 [ 1575.596857][ T6432] __arm64_sys_futex_time32+0x1d4/0x300 [ 1575.596964][ T6432] invoke_syscall+0x74/0x240 [ 1575.597066][ T6432] el0_svc_common.constprop.0+0xac/0x230 [ 1575.597131][ T6432] do_el0_svc_compat+0x40/0x58 [ 1575.597185][ T6432] el0_svc_compat+0x54/0x264 [ 1575.597246][ T6432] el0t_32_sync_handler+0x88/0xac [ 1575.597299][ T6432] el0t_32_sync+0x19c/0x1a0 [ 1587.817043][ T6477] FAULT_INJECTION: forcing a failure. [ 1587.817043][ T6477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1587.820923][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz.1.992 Tainted: G W L syzkaller #0 PREEMPT [ 1587.821128][ T6477] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1587.821193][ T6477] Hardware name: linux,dummy-virt (DT) [ 1587.821265][ T6477] Call trace: [ 1587.821328][ T6477] show_stack+0x18/0x24 (C) [ 1587.821516][ T6477] dump_stack_lvl+0x7c/0xb0 [ 1587.821652][ T6477] dump_stack+0x1c/0x28 [ 1587.821772][ T6477] should_fail_ex+0x6b4/0x6c4 [ 1587.821909][ T6477] should_fail+0x14/0x34 [ 1587.822033][ T6477] get_futex_key+0x198/0xf84 [ 1587.822164][ T6477] futex_wait_setup+0x64/0x55c [ 1587.822288][ T6477] __futex_wait+0x138/0x218 [ 1587.822439][ T6477] futex_wait+0xe4/0x2ac [ 1587.822559][ T6477] do_futex+0x1e8/0x280 [ 1587.822687][ T6477] __arm64_sys_futex_time32+0x1d4/0x300 [ 1587.822809][ T6477] invoke_syscall+0x74/0x240 [ 1587.822932][ T6477] el0_svc_common.constprop.0+0xac/0x230 [ 1587.823054][ T6477] do_el0_svc_compat+0x40/0x58 [ 1587.823178][ T6477] el0_svc_compat+0x54/0x264 [ 1587.823312][ T6477] el0t_32_sync_handler+0x88/0xac [ 1587.823468][ T6477] el0t_32_sync+0x19c/0x1a0 [ 1588.625336][ T29] audit: type=1400 audit(1588.220:363): avc: denied { mounton } for pid=6481 comm="syz.0.996" path="/489/file0" dev="tmpfs" ino=2614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1597.710966][ T29] audit: type=1400 audit(1597.310:364): avc: denied { read } for pid=6517 comm="syz.0.1007" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1597.781411][ T29] audit: type=1400 audit(1597.380:365): avc: denied { open } for pid=6517 comm="syz.0.1007" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1597.869930][ T29] audit: type=1400 audit(1597.470:366): avc: denied { ioctl } for pid=6517 comm="syz.0.1007" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1602.413334][ T29] audit: type=1400 audit(1602.010:367): avc: denied { unmount } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1603.948413][ T29] audit: type=1400 audit(1603.550:368): avc: denied { ioctl } for pid=6531 comm="syz.1.1013" path="/dev/fuse" dev="devtmpfs" ino=92 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1604.082084][ T29] audit: type=1400 audit(1603.640:369): avc: denied { ioctl } for pid=6531 comm="syz.1.1013" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13170 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1605.625559][ T6535] binder: 6534:6535 tried to acquire reference to desc 0, got 1 instead [ 1605.655292][ T29] audit: type=1400 audit(1605.250:370): avc: denied { transfer } for pid=6534 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1605.697333][ T6535] binder: 6534:6535 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1605.698426][ T6535] binder: 6535 RLIMIT_NICE not set [ 1605.727816][ T6535] binder: 6535 RLIMIT_NICE not set [ 1605.755708][ T6535] binder: release 6534:6535 transaction 27 out, still active [ 1605.756370][ T6535] binder: release 6534:6535 transaction 20 in, still active [ 1605.756693][ T6535] binder: undelivered TRANSACTION_COMPLETE [ 1606.337087][ T5932] binder: release 6534:6535 transaction 20 out, still active [ 1606.341733][ T5932] binder: undelivered TRANSACTION_COMPLETE [ 1606.343923][ T5932] binder: send failed reply for transaction 27, target dead [ 1606.348817][ T5932] binder: send failed reply for transaction 20, target dead [ 1607.829750][ T6543] loop8: detected capacity change from 0 to 8 [ 1608.849553][ T6545] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.184246][ T29] audit: type=1326 audit(1608.780:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.1020" exe="/syz-executor" sig=31 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x0 [ 1609.885711][ T29] audit: type=1400 audit(1609.470:372): avc: denied { read } for pid=3229 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1612.971598][ T29] audit: type=1400 audit(1612.560:373): avc: denied { cmd } for pid=6556 comm="syz.0.1023" path="/dev/ublk-control" dev="devtmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1613.206489][ T29] audit: type=1400 audit(1612.770:374): avc: denied { map } for pid=6556 comm="syz.0.1023" path="/dev/ublkc0" dev="devtmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1615.231980][ T29] audit: type=1400 audit(1614.830:375): avc: denied { write } for pid=6560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.287638][ T29] audit: type=1400 audit(1617.870:376): avc: denied { write } for pid=6572 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1620.052771][ T3229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1625.447378][ T6593] syzkaller0: entered promiscuous mode [ 1625.448186][ T6593] syzkaller0: entered allmulticast mode [ 1627.419333][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.452423][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1627.796724][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.802648][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.828035][ T6633] syzkaller0: entered promiscuous mode [ 1637.846318][ T6633] syzkaller0: entered allmulticast mode [ 1637.970437][ T6633] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1641.381195][ T6646] nbd: must specify at least one socket [ 1641.935046][ T29] audit: type=1400 audit(1641.520:377): avc: denied { ioctl } for pid=6648 comm="syz.0.1062" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1643.336178][ T6656] lo speed is unknown, defaulting to 1000 [ 1643.338552][ T6656] lo speed is unknown, defaulting to 1000 [ 1643.358621][ T6656] lo speed is unknown, defaulting to 1000 [ 1643.431629][ T6656] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1643.734685][ T6656] lo speed is unknown, defaulting to 1000 [ 1643.807002][ T6656] lo speed is unknown, defaulting to 1000 [ 1644.429776][ T6658] fuse: Unknown parameter 'grou00000000000000000000' [ 1646.513042][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 1646.688907][ T6664] macvlan0: entered allmulticast mode [ 1646.690050][ T6664] virtio_net virtio1 eth0: entered allmulticast mode [ 1646.783075][ T6664] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1653.243154][ T29] audit: type=1400 audit(1652.840:378): avc: denied { write } for pid=6679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1653.501967][ T29] audit: type=1400 audit(1653.100:379): avc: denied { write } for pid=6680 comm="syz.1.1074" name="usb_gadget" dev="configfs" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1653.548306][ T29] audit: type=1400 audit(1653.150:380): avc: denied { add_name } for pid=6680 comm="syz.1.1074" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1653.637003][ T29] audit: type=1400 audit(1653.150:381): avc: denied { create } for pid=6680 comm="syz.1.1074" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1653.766145][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 1653.795715][ T29] audit: type=1400 audit(1653.380:382): avc: denied { write } for pid=6680 comm="syz.1.1074" name="functions" dev="configfs" ino=14476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1653.857197][ T29] audit: type=1400 audit(1653.460:383): avc: denied { write } for pid=6680 comm="syz.1.1074" name="in_ports" dev="configfs" ino=14482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1653.897549][ T29] audit: type=1400 audit(1653.490:384): avc: denied { open } for pid=6680 comm="syz.1.1074" path="/537/config/usb_gadget/g1/functions/midi.usb0/in_ports" dev="configfs" ino=14482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1654.058894][ T29] audit: type=1400 audit(1653.650:385): avc: denied { write } for pid=6680 comm="syz.1.1074" name="configs" dev="configfs" ino=14477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1654.127299][ T29] audit: type=1400 audit(1653.710:386): avc: denied { write } for pid=6680 comm="syz.1.1074" name="c.1" dev="configfs" ino=14483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1654.189604][ T29] audit: type=1400 audit(1653.790:387): avc: denied { create } for pid=6680 comm="syz.1.1074" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1656.047077][ T5932] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1656.246235][ T5932] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1656.277470][ T5932] usb 1-1: Dual-Role OTG device on HNP port [ 1656.281948][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.926168][ T5932] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1658.939757][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1658.941916][ T29] audit: type=1400 audit(1658.540:391): avc: denied { write } for pid=6701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.100927][ T6706] capability: warning: `syz.0.1079' uses 32-bit capabilities (legacy support in use) [ 1661.406038][ T6714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6714 comm=syz.1.1082 [ 1661.421802][ T29] audit: type=1400 audit(1661.020:392): avc: denied { write } for pid=6712 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1665.368684][ T29] audit: type=1400 audit(1664.970:393): avc: denied { read } for pid=6717 comm="syz.0.1083" name="ublkb1" dev="devtmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1665.382082][ T29] audit: type=1400 audit(1664.970:394): avc: denied { open } for pid=6717 comm="syz.0.1083" path="/dev/ublkb1" dev="devtmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1665.610674][ T29] audit: type=1400 audit(1665.180:395): avc: denied { write } for pid=6723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.866601][ T6728] block device autoloading is deprecated and will be removed. [ 1668.765875][ T29] audit: type=1400 audit(1668.360:396): avc: denied { write } for pid=6734 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1674.176742][ T29] audit: type=1400 audit(1673.770:397): avc: denied { write } for pid=6749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.126656][ T29] audit: type=1400 audit(1676.710:398): avc: denied { write } for pid=6759 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1687.038900][ T50] block nbd1: Receive control failed (result -32) [ 1687.416690][ T29] audit: type=1400 audit(1687.000:399): avc: denied { write } for pid=6768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.898565][ T29] audit: type=1400 audit(1689.480:400): avc: denied { write } for pid=6780 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.858903][ T29] audit: type=1400 audit(1692.450:401): avc: denied { write } for pid=6787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1695.856666][ T29] audit: type=1400 audit(1695.450:402): avc: denied { write } for pid=6793 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.843834][ T29] audit: type=1400 audit(1698.440:403): avc: denied { write } for pid=6802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.934489][ T29] audit: type=1400 audit(1700.530:404): avc: denied { write } for pid=6806 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.360980][ T6833] syzkaller0: entered promiscuous mode [ 1707.361595][ T6833] syzkaller0: entered allmulticast mode [ 1707.401422][ T6833] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1721.430992][ T6846] binder: 6845:6846 tried to acquire reference to desc 0, got 1 instead [ 1721.460162][ T6846] binder: 6845:6846 got transaction with invalid data ptr [ 1721.461829][ T6846] binder: 6845:6846 transaction call to 6845:0 failed 32/29201/-14, code 0 size 240-0 line 3742 [ 1721.469190][ T6413] binder: undelivered TRANSACTION_ERROR: 29201 [ 1722.039398][ T6848] fuse: Bad value for 'fd' [ 1722.069951][ T29] audit: type=1400 audit(1721.670:405): avc: denied { setattr } for pid=6847 comm="syz.1.1110" name="file0" dev="tmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1722.651659][ T29] audit: type=1400 audit(1722.240:406): avc: denied { write } for pid=6849 comm="syz.1.1111" name="subsystems" dev="configfs" ino=2221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1722.675716][ T29] audit: type=1400 audit(1722.280:407): avc: denied { write } for pid=6849 comm="syz.1.1111" name="ports" dev="configfs" ino=2222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1722.702376][ T29] audit: type=1400 audit(1722.300:408): avc: denied { read } for pid=6849 comm="syz.1.1111" name="addr_trtype" dev="configfs" ino=15551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1722.772240][ T29] audit: type=1400 audit(1722.370:409): avc: denied { write } for pid=6849 comm="syz.1.1111" name="subsystems" dev="configfs" ino=15547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1722.773213][ T29] audit: type=1400 audit(1722.370:410): avc: denied { write } for pid=6849 comm="syz.1.1111" name="subsystems" dev="configfs" ino=15547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1722.801738][ T6850] nvmet_tcp: failed to bind port socket -99 [ 1723.422021][ T6850] nvme_fabrics: missing parameter 'nqn=%s' [ 1724.874903][ T6855] binder: 6854:6855 tried to acquire reference to desc 0, got 1 instead [ 1724.886316][ T6855] binder_alloc: 6854: binder_alloc_buf, no vma [ 1724.886872][ T6855] binder: cannot allocate buffer: vma cleared, target dead or dying [ 1724.887266][ T6855] binder: 6854:6855 transaction call to 6854:0 failed 37/29189/-3, code 0 size 0-0 line 3408 [ 1724.897228][ T6413] binder: undelivered TRANSACTION_ERROR: 29189 [ 1726.299380][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.338712][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.971796][ T6864] FAULT_INJECTION: forcing a failure. [ 1726.971796][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.001374][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.1.1117 Tainted: G W L syzkaller #0 PREEMPT [ 1727.001657][ T6864] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1727.001713][ T6864] Hardware name: linux,dummy-virt (DT) [ 1727.001778][ T6864] Call trace: [ 1727.001837][ T6864] show_stack+0x18/0x24 (C) [ 1727.002022][ T6864] dump_stack_lvl+0x7c/0xb0 [ 1727.002143][ T6864] dump_stack+0x1c/0x28 [ 1727.002260][ T6864] should_fail_ex+0x6b4/0x6c4 [ 1727.002432][ T6864] should_failslab+0xbc/0x120 [ 1727.002571][ T6864] kmem_cache_alloc_node_noprof+0x34c/0x620 [ 1727.002694][ T6864] alloc_vmap_area+0x688/0x2ebc [ 1727.002855][ T6864] __get_vm_area_node+0x1a8/0x2ec [ 1727.002974][ T6864] __vmalloc_node_range_noprof+0x198/0x1024 [ 1727.003099][ T6864] __vmalloc_node_noprof+0xe4/0x14c [ 1727.003216][ T6864] copy_process+0x504/0x5950 [ 1727.003331][ T6864] kernel_clone+0x15c/0x93c [ 1727.003507][ T6864] __do_sys_clone+0xd4/0x124 [ 1727.003666][ T6864] __arm64_sys_clone+0xa8/0x100 [ 1727.003787][ T6864] invoke_syscall+0x74/0x240 [ 1727.003906][ T6864] el0_svc_common.constprop.0+0xac/0x230 [ 1727.004025][ T6864] do_el0_svc_compat+0x40/0x58 [ 1727.004148][ T6864] el0_svc_compat+0x54/0x264 [ 1727.004275][ T6864] el0t_32_sync_handler+0x88/0xac [ 1727.004456][ T6864] el0t_32_sync+0x19c/0x1a0 [ 1727.046496][ T6864] syz.1.1117: vmalloc error: size 32768, align 0x10000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1727.048906][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.1.1117 Tainted: G W L syzkaller #0 PREEMPT [ 1727.049056][ T6864] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1727.049110][ T6864] Hardware name: linux,dummy-virt (DT) [ 1727.049175][ T6864] Call trace: [ 1727.049231][ T6864] show_stack+0x18/0x24 (C) [ 1727.049401][ T6864] dump_stack_lvl+0x7c/0xb0 [ 1727.049521][ T6864] dump_stack+0x1c/0x28 [ 1727.049645][ T6864] warn_alloc+0x1d0/0x210 [ 1727.049767][ T6864] __vmalloc_node_range_noprof+0xb08/0x1024 [ 1727.049888][ T6864] __vmalloc_node_noprof+0xe4/0x14c [ 1727.050006][ T6864] copy_process+0x504/0x5950 [ 1727.050127][ T6864] kernel_clone+0x15c/0x93c [ 1727.050240][ T6864] __do_sys_clone+0xd4/0x124 [ 1727.050392][ T6864] __arm64_sys_clone+0xa8/0x100 [ 1727.050515][ T6864] invoke_syscall+0x74/0x240 [ 1727.050647][ T6864] el0_svc_common.constprop.0+0xac/0x230 [ 1727.050769][ T6864] do_el0_svc_compat+0x40/0x58 [ 1727.050887][ T6864] el0_svc_compat+0x54/0x264 [ 1727.051013][ T6864] el0t_32_sync_handler+0x88/0xac [ 1727.051137][ T6864] el0t_32_sync+0x19c/0x1a0 [ 1727.051414][ T6864] Mem-Info: [ 1727.051634][ T6864] active_anon:3311 inactive_anon:0 isolated_anon:0 [ 1727.051634][ T6864] active_file:0 inactive_file:14697 isolated_file:0 [ 1727.051634][ T6864] unevictable:768 dirty:18 writeback:0 [ 1727.051634][ T6864] slab_reclaimable:7360 slab_unreclaimable:31046 [ 1727.051634][ T6864] mapped:2713 shmem:831 pagetables:491 [ 1727.051634][ T6864] sec_pagetables:0 bounce:0 [ 1727.051634][ T6864] kernel_misc_reclaimable:0 [ 1727.051634][ T6864] free:289870 free_pcp:6315 free_cma:8128 [ 1727.051916][ T6864] Node 0 active_anon:13244kB inactive_anon:0kB active_file:0kB inactive_file:58788kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:10852kB dirty:72kB writeback:0kB shmem:3324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6928kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1727.052193][ T6864] Node 0 DMA free:1159480kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13244kB inactive_anon:0kB active_file:0kB inactive_file:58788kB unevictable:3072kB writepending:72kB zspages:0kB present:2097152kB managed:1524544kB mlocked:0kB bounce:0kB free_pcp:25260kB local_pcp:13032kB free_cma:32512kB [ 1727.052705][ T6864] lowmem_reserve[]: 0 0 0 0 0 [ 1727.150591][ T6864] Node 0 DMA: 460*4kB (M) 357*8kB (UM) 150*16kB (UME) 54*32kB (UM) 47*64kB (UM) 32*128kB (UME) 13*256kB (UMC) 9*512kB (UMC) 5*1024kB (UMC) 6*2048kB (UMEC) 273*4096kB (UMC) = 1159480kB [ 1727.227864][ T6864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1727.228097][ T6864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 1727.228183][ T6864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1727.228339][ T6864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 1727.228428][ T6864] 15524 total pagecache pages [ 1727.228498][ T6864] 0 pages in swap cache [ 1727.229526][ T6864] Free swap = 124996kB [ 1727.229617][ T6864] Total swap = 124996kB [ 1727.230397][ T6864] 524288 pages RAM [ 1727.230871][ T6864] 0 pages HighMem/MovableOnly [ 1727.230954][ T6864] 143152 pages reserved [ 1727.231018][ T6864] 8192 pages cma reserved [ 1727.231525][ T6864] 0 pages hwpoisoned [ 1733.298548][ T6882] fuse: Unknown parameter 'group_i00000000000000000000' [ 1745.340202][ T6896] fuse: Unknown parameter 'group_i00000000000000000000' [ 1745.757285][ T6898] random: crng reseeded on system resumption [ 1745.765322][ T29] audit: type=1400 audit(1745.330:411): avc: denied { write } for pid=6897 comm="syz.1.1129" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1745.768074][ T29] audit: type=1400 audit(1745.360:412): avc: denied { open } for pid=6897 comm="syz.1.1129" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1745.898957][ T29] audit: type=1400 audit(1745.500:413): avc: denied { ioctl } for pid=6897 comm="syz.1.1129" path="/dev/snapshot" dev="devtmpfs" ino=85 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1747.307631][ T6903] fuse: Unknown parameter 'fd0x0000000000000003' [ 1748.757071][ T6907] fuse: Unknown parameter 'group_i00000000000000000000' [ 1749.119148][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.141740][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.520392][ T6922] FAULT_INJECTION: forcing a failure. [ 1752.520392][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.523233][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.1.1139 Tainted: G W L syzkaller #0 PREEMPT [ 1752.523401][ T6922] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1752.523442][ T6922] Hardware name: linux,dummy-virt (DT) [ 1752.523475][ T6922] Call trace: [ 1752.523504][ T6922] show_stack+0x18/0x24 (C) [ 1752.523613][ T6922] dump_stack_lvl+0x7c/0xb0 [ 1752.523673][ T6922] dump_stack+0x1c/0x28 [ 1752.523725][ T6922] should_fail_ex+0x6b4/0x6c4 [ 1752.523786][ T6922] should_failslab+0xbc/0x120 [ 1752.523844][ T6922] __kmalloc_cache_noprof+0x3ec/0x628 [ 1752.523898][ T6922] __arm64_sys_mount+0x174/0x3dc [ 1752.523952][ T6922] invoke_syscall+0x74/0x240 [ 1752.524006][ T6922] el0_svc_common.constprop.0+0xac/0x230 [ 1752.524058][ T6922] do_el0_svc_compat+0x40/0x58 [ 1752.524116][ T6922] el0_svc_compat+0x54/0x264 [ 1752.524177][ T6922] el0t_32_sync_handler+0x88/0xac [ 1752.524229][ T6922] el0t_32_sync+0x19c/0x1a0 [ 1753.000169][ T6924] fuse: Unknown parameter 'use00000000000000000000' [ 1756.150003][ T29] audit: type=1400 audit(1755.750:414): avc: denied { mounton } for pid=6934 comm="syz.1.1145" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1757.111798][ T6937] fuse: Unknown parameter 'user_i00000000000000000000' [ 1759.756218][ T29] audit: type=1400 audit(1759.350:415): avc: denied { checkpoint_restore } for pid=6944 comm="syz.1.1150" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1760.863115][ T6949] fuse: Unknown parameter 'user_i00000000000000000000' [ 1767.122274][ T29] audit: type=1400 audit(1766.720:416): avc: denied { name_bind } for pid=6974 comm="syz.1.1165" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1767.937357][ T6980] fuse: Unknown parameter 'user_id00000000000000000000' [ 1770.391281][ T6992] fuse: Unknown parameter 'user_id00000000000000000000' [ 1774.452390][ T7004] fuse: Unknown parameter 'user_id00000000000000000000' [ 1776.634718][ T29] audit: type=1400 audit(1776.230:417): avc: denied { execute } for pid=7011 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1776.642683][ T29] audit: type=1400 audit(1776.240:418): avc: denied { execute_no_trans } for pid=7011 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1777.847802][ T7015] fuse: Bad value for 'fd' [ 1779.578772][ T29] audit: type=1400 audit(1779.170:419): avc: denied { write } for pid=7021 comm="syz.0.1185" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1779.619850][ T29] audit: type=1400 audit(1779.220:420): avc: denied { map } for pid=7021 comm="syz.0.1185" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1781.442964][ T7029] fuse: Bad value for 'fd' [ 1782.546876][ T7032] binder: 7031:7032 got transaction to invalid handle, 1 [ 1782.551499][ T7032] binder: 7031:7032 cannot find target node [ 1782.562611][ T7032] binder: 7031:7032 transaction call to 0:0 failed 38/29201/-22, code 0 size 0-24 line 3252 [ 1782.572529][ T804] binder: undelivered TRANSACTION_ERROR: 29201 [ 1782.942982][ T7012] wg0 speed is unknown, defaulting to 1000 [ 1782.969370][ T7012] lo speed is unknown, defaulting to 1000 [ 1789.026726][ T7045] FAULT_INJECTION: forcing a failure. [ 1789.026726][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.036657][ T7045] CPU: 1 UID: 0 PID: 7045 Comm: syz.0.1190 Tainted: G W L syzkaller #0 PREEMPT [ 1789.036927][ T7045] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1789.036983][ T7045] Hardware name: linux,dummy-virt (DT) [ 1789.037049][ T7045] Call trace: [ 1789.037110][ T7045] show_stack+0x18/0x24 (C) [ 1789.037296][ T7045] dump_stack_lvl+0x7c/0xb0 [ 1789.037416][ T7045] dump_stack+0x1c/0x28 [ 1789.037528][ T7045] should_fail_ex+0x6b4/0x6c4 [ 1789.037675][ T7045] should_failslab+0xbc/0x120 [ 1789.037801][ T7045] __kmalloc_cache_noprof+0x3ec/0x628 [ 1789.037924][ T7045] __arm64_sys_mount+0x174/0x3dc [ 1789.038046][ T7045] invoke_syscall+0x74/0x240 [ 1789.038169][ T7045] el0_svc_common.constprop.0+0xac/0x230 [ 1789.038285][ T7045] do_el0_svc_compat+0x40/0x58 [ 1789.038440][ T7045] el0_svc_compat+0x54/0x264 [ 1789.038587][ T7045] el0t_32_sync_handler+0x88/0xac [ 1789.038702][ T7045] el0t_32_sync+0x19c/0x1a0 [ 1790.507013][ T29] audit: type=1400 audit(1790.100:421): avc: denied { write } for pid=7051 comm="syz.0.1192" name="trace_marker" dev="tracefs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1790.547493][ T29] audit: type=1400 audit(1790.130:422): avc: denied { open } for pid=7051 comm="syz.0.1192" path="/590/tracefs_dir/trace_marker" dev="tracefs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1792.348044][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.399737][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.520070][ T29] audit: type=1400 audit(1795.120:423): avc: denied { create } for pid=7063 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1797.323251][ T7077] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1197'. [ 1798.301506][ T7080] fuse: Bad value for 'fd' [ 1798.765548][ T7012] hsr_slave_0: entered promiscuous mode [ 1798.771009][ T7012] hsr_slave_1: entered promiscuous mode [ 1798.781490][ T7012] debugfs: 'hsr0' already exists in 'hsr' [ 1798.786291][ T7012] Cannot create hsr debugfs directory [ 1799.504759][ T7086] ublk_ctrl_add_dev: dev id not match 4294967295 3 [ 1801.879971][ T7012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.352317][ T7012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.687663][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.802232][ T7012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1804.906103][ T7012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1804.929994][ T7012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1804.986988][ T7012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1804.992491][ T7012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1805.042434][ T7012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1805.050821][ T7012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1805.078240][ T29] audit: type=1400 audit(1804.670:424): avc: denied { write } for pid=7090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1805.197077][ T7012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1806.591705][ T29] audit: type=1400 audit(1806.190:425): avc: denied { write } for pid=7099 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1807.502488][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1201'. [ 1810.648399][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.066842][ T7112] fuse: Bad value for 'fd' [ 1818.497606][ T7137] syz.0.1204 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1821.831073][ T7147] fuse: Bad value for 'fd' [ 1833.392531][ T7012] veth0_vlan: entered promiscuous mode [ 1833.587879][ T7012] veth1_vlan: entered promiscuous mode [ 1834.432512][ T7012] veth0_macvtap: entered promiscuous mode [ 1834.576252][ T7012] veth1_macvtap: entered promiscuous mode [ 1835.653113][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.673036][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.726158][ T5802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.729194][ T5802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.377721][ T29] audit: type=1400 audit(1835.970:426): avc: denied { mounton } for pid=7012 comm="syz-executor" path="/syzkaller.Ef6zNx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1837.818241][ T7177] fuse: Bad value for 'fd' [ 1839.132819][ T5804] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.145274][ T5804] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.437192][ T5804] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.439527][ T5804] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.707363][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.731593][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.002523][ T5804] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.003355][ T5804] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.556233][ T5804] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.559147][ T5804] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.776186][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.791713][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.830798][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1848.922278][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1849.020984][ T5804] bond0 (unregistering): Released all slaves [ 1850.161700][ T5804] hsr_slave_0: left promiscuous mode [ 1850.196355][ T5804] hsr_slave_1: left promiscuous mode [ 1850.375314][ T5804] veth1_macvtap: left promiscuous mode [ 1850.377166][ T5804] veth0_macvtap: left promiscuous mode [ 1850.404087][ T5804] veth0_vlan: left promiscuous mode [ 1857.281485][ T7206] syz_tun: entered allmulticast mode [ 1859.415911][ T7180] wg0 speed is unknown, defaulting to 1000 [ 1859.446212][ T7180] lo speed is unknown, defaulting to 1000 [ 1860.365319][ T29] audit: type=1400 audit(1859.960:427): avc: denied { write } for pid=7214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1862.500941][ T29] audit: type=1400 audit(1862.100:428): avc: denied { write } for pid=7223 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1864.239329][ T3229] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1868.969886][ T29] audit: type=1400 audit(1868.570:429): avc: denied { write } for pid=7239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1870.995363][ T29] audit: type=1400 audit(1870.590:430): avc: denied { write } for pid=7250 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1871.051594][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.153216][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1872.459119][ T3229] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1876.184797][ T29] audit: type=1400 audit(1875.780:431): avc: denied { read write } for pid=7268 comm="syz.1.1224" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1876.191512][ T29] audit: type=1400 audit(1875.790:432): avc: denied { open } for pid=7268 comm="syz.1.1224" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1876.485907][ T804] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0306.0007/input/input5 [ 1876.775781][ T804] hid-generic 0005:0009:0306.0007: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1876.792746][ T29] audit: type=1400 audit(1876.390:433): avc: denied { write } for pid=7266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.512137][ T7180] hsr_slave_0: entered promiscuous mode [ 1878.630073][ T7180] hsr_slave_1: entered promiscuous mode [ 1879.272933][ T29] audit: type=1400 audit(1878.870:434): avc: denied { write } for pid=7277 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1879.957339][ T7275] fido_id[7275]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1881.292020][ T3229] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1887.437580][ T29] audit: type=1400 audit(1887.030:435): avc: denied { write } for pid=7300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1889.458700][ T29] audit: type=1400 audit(1889.050:436): avc: denied { write } for pid=7308 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1890.102909][ T7180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1890.211163][ T7180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1890.267313][ T7180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1890.390389][ T7180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1890.434732][ T7180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1890.569306][ T7180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1890.658242][ T7180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1890.749968][ T7180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1891.728337][ T29] audit: type=1400 audit(1891.330:437): avc: denied { write } for pid=7312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1893.060120][ T7323] zswap: compressor h not available [ 1893.575254][ T29] audit: type=1400 audit(1893.170:438): avc: denied { write } for pid=7330 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1894.552567][ T7335] FAULT_INJECTION: forcing a failure. [ 1894.552567][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.553430][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.1.1237 Tainted: G W L syzkaller #0 PREEMPT [ 1894.553614][ T7335] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1894.553671][ T7335] Hardware name: linux,dummy-virt (DT) [ 1894.553730][ T7335] Call trace: [ 1894.553770][ T7335] show_stack+0x18/0x24 (C) [ 1894.553942][ T7335] dump_stack_lvl+0x7c/0xb0 [ 1894.554056][ T7335] dump_stack+0x1c/0x28 [ 1894.554167][ T7335] should_fail_ex+0x6b4/0x6c4 [ 1894.554316][ T7335] should_failslab+0xbc/0x120 [ 1894.554492][ T7335] __kmalloc_noprof+0x4dc/0x74c [ 1894.554626][ T7335] sk_prot_alloc+0x17c/0x204 [ 1894.554771][ T7335] sk_alloc+0x3c/0x8c8 [ 1894.554912][ T7335] packet_create+0xe0/0x760 [ 1894.555074][ T7335] __sock_create+0x23c/0x5fc [ 1894.555211][ T7335] __sys_socket+0x124/0x1f0 [ 1894.555397][ T7335] __arm64_sys_socket+0x70/0xa4 [ 1894.555581][ T7335] invoke_syscall+0x74/0x240 [ 1894.555695][ T7335] el0_svc_common.constprop.0+0xac/0x230 [ 1894.555807][ T7335] do_el0_svc_compat+0x40/0x58 [ 1894.555934][ T7335] el0_svc_compat+0x54/0x264 [ 1894.556121][ T7335] el0t_32_sync_handler+0x88/0xac [ 1894.556251][ T7335] el0t_32_sync+0x19c/0x1a0 [ 1895.941578][ T29] audit: type=1400 audit(1895.530:439): avc: denied { write } for pid=7337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1897.381276][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1898.187463][ T29] audit: type=1400 audit(1897.790:440): avc: denied { write } for pid=7347 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1899.187029][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 1900.575626][ T29] audit: type=1400 audit(1900.170:441): avc: denied { write } for pid=7358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1902.213347][ T29] audit: type=1400 audit(1901.810:442): avc: denied { write } for pid=7365 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1905.620114][ T29] audit: type=1400 audit(1905.220:443): avc: denied { write } for pid=7374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1906.905574][ T7385] FAULT_INJECTION: forcing a failure. [ 1906.905574][ T7385] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.910555][ T7385] CPU: 0 UID: 0 PID: 7385 Comm: syz.1.1248 Tainted: G W L syzkaller #0 PREEMPT [ 1906.910771][ T7385] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1906.910828][ T7385] Hardware name: linux,dummy-virt (DT) [ 1906.910896][ T7385] Call trace: [ 1906.910955][ T7385] show_stack+0x18/0x24 (C) [ 1906.911154][ T7385] dump_stack_lvl+0x7c/0xb0 [ 1906.911277][ T7385] dump_stack+0x1c/0x28 [ 1906.911391][ T7385] should_fail_ex+0x6b4/0x6c4 [ 1906.911518][ T7385] should_failslab+0xbc/0x120 [ 1906.911638][ T7385] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1906.911761][ T7385] anon_vma_clone+0x2d8/0x998 [ 1906.911877][ T7385] __split_vma+0x390/0x12f0 [ 1906.912004][ T7385] vms_gather_munmap_vmas+0x1fc/0x1010 [ 1906.912137][ T7385] do_vmi_align_munmap+0x198/0x294 [ 1906.912253][ T7385] do_vmi_munmap+0xd4/0x2a0 [ 1906.912366][ T7385] do_munmap+0xc4/0x108 [ 1906.912489][ T7385] mremap_to+0x220/0x3bc [ 1906.912607][ T7385] __do_sys_mremap+0x684/0xec0 [ 1906.912748][ T7385] __arm64_sys_mremap+0xa8/0x160 [ 1906.912864][ T7385] invoke_syscall+0x74/0x240 [ 1906.912986][ T7385] el0_svc_common.constprop.0+0xac/0x230 [ 1906.913112][ T7385] do_el0_svc_compat+0x40/0x58 [ 1906.913231][ T7385] el0_svc_compat+0x54/0x264 [ 1906.913369][ T7385] el0t_32_sync_handler+0x88/0xac [ 1906.913552][ T7385] el0t_32_sync+0x19c/0x1a0 [ 1908.189518][ T29] audit: type=1400 audit(1907.790:444): avc: denied { write } for pid=7386 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1910.169870][ T29] audit: type=1400 audit(1909.770:445): avc: denied { write } for pid=7395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1911.234696][ T29] audit: type=1400 audit(1910.830:446): avc: denied { write } for pid=7402 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1912.738667][ T7404] zswap: compressor h not available [ 1915.027264][ T29] audit: type=1400 audit(1914.620:447): avc: denied { write } for pid=7411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1916.747672][ T29] audit: type=1400 audit(1916.340:448): avc: denied { write } for pid=7422 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1921.279220][ T7180] veth0_vlan: entered promiscuous mode [ 1921.539424][ T7180] veth1_vlan: entered promiscuous mode [ 1922.196627][ T7180] veth0_macvtap: entered promiscuous mode [ 1922.262698][ T7180] veth1_macvtap: entered promiscuous mode [ 1923.121668][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.123210][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.123466][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.151713][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.537129][ T29] audit: type=1400 audit(1930.120:449): avc: denied { write } for pid=7444 comm="syz.1.1259" lport=25686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1968.297650][ T7475] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1268'. [ 1968.357382][ T7473] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1268'. [ 1989.565390][ T29] audit: type=1400 audit(1989.160:450): avc: denied { setopt } for pid=7495 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2000.607874][ T29] audit: type=1400 audit(2000.210:451): avc: denied { mmap_zero } for pid=7501 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 2016.626461][ T7533] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1291'. [ 2020.502279][ T29] audit: type=1400 audit(2020.100:452): avc: denied { bind } for pid=7546 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2020.535417][ T29] audit: type=1400 audit(2020.130:453): avc: denied { setopt } for pid=7546 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2020.916240][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 2031.707892][ T29] audit: type=1400 audit(2031.280:454): avc: denied { read } for pid=7566 comm="syz.1.1304" name="kcore" dev="proc" ino=4026532008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 2031.747422][ T29] audit: type=1400 audit(2031.340:455): avc: denied { open } for pid=7566 comm="syz.1.1304" path="/80/proc_mnt/kcore" dev="proc" ino=4026532008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 2034.915385][ T7573] fuse: Unknown parameter 'use00000000000000000000' [ 2036.572154][ T7577] syzkaller0: entered promiscuous mode [ 2036.586655][ T7577] syzkaller0: entered allmulticast mode [ 2039.576182][ T7588] fuse: Unknown parameter 'user_i00000000000000000000' [ 2045.801200][ T29] audit: type=1400 audit(2045.380:456): avc: denied { map } for pid=7595 comm="syz.1.1318" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 2050.488376][ T7605] fuse: Unknown parameter 'user_i00000000000000000000' [ 2059.846562][ T7619] fuse: Unknown parameter 'user_i00000000000000000000' [ 2063.602709][ T29] audit: type=1400 audit(2063.200:457): avc: denied { create } for pid=7622 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2063.637405][ T29] audit: type=1400 audit(2063.240:458): avc: denied { write } for pid=7622 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2066.917697][ T7630] fuse: Unknown parameter 'user_id00000000000000000000' [ 2067.965338][ T29] audit: type=1400 audit(2067.520:459): avc: denied { bind } for pid=7632 comm="syz.0.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2069.200733][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 2069.282004][ T7638] netlink: 75 bytes leftover after parsing attributes in process `syz.1.1332'. [ 2075.855912][ T7650] fuse: Unknown parameter 'user_id00000000000000000000' [ 2102.166666][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 2104.375344][ T7670] fuse: Unknown parameter 'user_id00000000000000000000' [ 2110.033153][ T7683] fuse: Bad value for 'fd' [ 2110.895211][ T29] audit: type=1400 audit(2110.490:460): avc: denied { read } for pid=7684 comm="syz.1.1347" dev="nsfs" ino=4026532625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2110.915314][ T29] audit: type=1400 audit(2110.510:461): avc: denied { open } for pid=7684 comm="syz.1.1347" path="net:[4026532625]" dev="nsfs" ino=4026532625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2115.550838][ T7696] fuse: Bad value for 'fd' [ 2131.731965][ T7707] fuse: Bad value for 'fd' [ 2136.067153][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 2141.155439][ T7719] fuse: Unknown parameter '0x0000000000000004' [ 2143.869980][ T29] audit: type=1400 audit(2143.470:462): avc: denied { map } for pid=7722 comm="syz.0.1364" path="/dev/loop4" dev="devtmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2146.181073][ T7729] fuse: Unknown parameter '0x0000000000000004' [ 2147.948523][ T7734] syzkaller1: entered promiscuous mode [ 2147.958856][ T7734] syzkaller1: entered allmulticast mode [ 2151.806619][ T7742] binder: 7741:7742 tried to acquire reference to desc 0, got 1 instead [ 2151.876188][ T7742] binder: 7741:7742 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2151.877260][ T7742] binder: 7742 RLIMIT_NICE not set [ 2151.879408][ T7742] binder: 7742 RLIMIT_NICE not set [ 2151.926484][ T805] binder: release 7741:7742 transaction 43 out, still active [ 2151.927275][ T805] binder: undelivered TRANSACTION_COMPLETE [ 2152.086261][ T805] binder: release 7741:7742 transaction 43 in, still active [ 2152.086889][ T805] binder: send failed reply for transaction 43, target dead [ 2152.864640][ T7745] fuse: Unknown parameter '0x0000000000000004' [ 2152.947098][ T7746] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 2153.395583][ T7746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2154.018818][ T7746] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2154.300167][ T7749] bond1: (slave dummy0): making interface the new active one [ 2154.331954][ T7749] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2154.408207][ T7746] netlink: 'syz.0.1374': attribute type 10 has an invalid length. [ 2154.424914][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1374'. [ 2154.476132][ T7746] vxcan0: entered promiscuous mode [ 2160.550001][ T29] audit: type=1400 audit(2160.140:463): avc: denied { write } for pid=7758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2162.797046][ T7764] fuse: Unknown parameter '0x0000000000000004' [ 2164.140528][ T29] audit: type=1400 audit(2163.740:464): avc: denied { write } for pid=7765 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2168.140963][ T7774] syzkaller0: entered promiscuous mode [ 2168.142917][ T7774] syzkaller0: entered allmulticast mode [ 2173.002055][ T29] audit: type=1400 audit(2172.590:465): avc: denied { read } for pid=7785 comm="syz.0.1387" name="trace" dev="tracefs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2186.853086][ T7814] netlink: 'syz.0.1397': attribute type 12 has an invalid length. [ 2209.817064][ T7853] fuse: Unknown parameter 'fd0x0000000000000004' [ 2216.068718][ T29] audit: type=1400 audit(2215.670:466): avc: denied { create } for pid=7861 comm="syz.0.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2216.694575][ T29] audit: type=1400 audit(2216.280:467): avc: denied { mount } for pid=7861 comm="syz.0.1411" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2216.878783][ T29] audit: type=1400 audit(2216.480:468): avc: denied { unmount } for pid=7180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2219.380164][ T7870] fuse: Unknown parameter 'fd0x0000000000000004' [ 2226.907010][ T7884] fuse: Unknown parameter 'fd0x0000000000000004' [ 2230.505567][ T29] audit: type=1400 audit(2230.080:469): avc: denied { write } for pid=7892 comm="syz.0.1422" path="socket:[18966]" dev="sockfs" ino=18966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2235.435702][ T7904] eql: remember to turn off Van-Jacobson compression on your slave devices [ 2235.561959][ T7904] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 2235.654981][ T6891] lo speed is unknown, defaulting to 1000 [ 2240.069306][ T29] audit: type=1400 audit(2239.660:470): avc: denied { read write } for pid=7915 comm="syz.0.1432" name="control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2240.073338][ T29] audit: type=1400 audit(2239.670:471): avc: denied { open } for pid=7915 comm="syz.0.1432" path="/83/dev/mapper/control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2240.149571][ T29] audit: type=1400 audit(2239.750:472): avc: denied { ioctl } for pid=7915 comm="syz.0.1432" path="/83/dev/mapper/control" dev="devtmpfs" ino=712 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2240.466605][ T7916] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 2244.866932][ T29] audit: type=1326 audit(2244.450:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.1.1434" exe="/syz-executor" sig=9 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x0 [ 2257.348544][ T29] audit: type=1326 audit(2256.900:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2257.349073][ T29] audit: type=1326 audit(2256.930:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2257.349548][ T29] audit: type=1326 audit(2256.930:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2257.349883][ T29] audit: type=1326 audit(2256.950:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2257.359408][ T29] audit: type=1326 audit(2256.950:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=309 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2257.365914][ T29] audit: type=1326 audit(2256.970:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2257.366438][ T29] audit: type=1326 audit(2256.970:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2257.370040][ T29] audit: type=1326 audit(2256.970:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.1.1442" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2284.172911][ T29] audit: type=1400 audit(2283.770:482): avc: denied { setattr } for pid=8001 comm="syz.1.1459" name="PACKET" dev="sockfs" ino=19175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2292.675243][ T8022] zswap: compressor ( not available [ 2300.706423][ T8042] zswap: compressor not available [ 2306.689034][ T8062] zswap: compressor not available [ 2311.178038][ T8083] wg0 speed is unknown, defaulting to 1000 [ 2311.266461][ T8083] lo speed is unknown, defaulting to 1000 [ 2316.962507][ T29] audit: type=1400 audit(2316.550:483): avc: denied { associate } for pid=8095 comm="syz.1.1490" name="memory.numa_stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2327.589131][ T8141] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 2382.187743][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 2383.698000][ T8304] TC_ACT_REPEAT abuse ? [ 2402.912457][ T29] audit: type=1400 audit(2402.510:484): avc: denied { unmount } for pid=7012 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2409.907734][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.955991][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2418.133101][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 2419.086466][ T8362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2419.382769][ T8368] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 2430.519936][ T8393] syz_tun (unregistering): left allmulticast mode [ 2444.045384][ T29] audit: type=1400 audit(2443.640:485): avc: denied { write } for pid=8424 comm="syz.1.1597" name="subsystems" dev="configfs" ino=15547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2444.075307][ T29] audit: type=1400 audit(2443.650:486): avc: denied { write } for pid=8424 comm="syz.1.1597" name="subsystems" dev="configfs" ino=15547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2444.139862][ T8425] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 2445.807360][ T24] nvmet: connect request for invalid subsystem t! [ 2445.919140][ T8425] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 2446.056604][ T8425] nvme nvme0: failed to connect queue: 0 ret=16770 [ 2448.656413][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.679220][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2450.645918][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1601'. [ 2450.729079][ T29] audit: type=1400 audit(2450.330:487): avc: denied { execute } for pid=8433 comm="syz.1.1601" name="file2" dev="tmpfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2450.751044][ T29] audit: type=1400 audit(2450.340:488): avc: denied { execute_no_trans } for pid=8433 comm="syz.1.1601" path="/224/file2" dev="tmpfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2455.745837][ T8445] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 2457.422927][ T29] audit: type=1400 audit(2457.020:489): avc: denied { map } for pid=8449 comm="syz.1.1606" path="socket:[21089]" dev="sockfs" ino=21089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2466.542671][ T29] audit: type=1400 audit(2466.140:490): avc: denied { write } for pid=8469 comm="syz.0.1612" name="ip_tables_matches" dev="proc" ino=4026532671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2473.918106][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2473.952748][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2474.266791][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2474.289341][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2483.946135][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2483.961376][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2501.509563][ T29] audit: type=1400 audit(2501.110:491): avc: denied { read } for pid=8515 comm="syz.1.1628" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2530.676285][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2530.719360][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2535.879480][ T8559] psci: CPU1 killed (polled 0 ms) [ 2553.691641][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2553.808757][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.893242][ T29] audit: type=1326 audit(2582.480:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2582.920009][ T29] audit: type=1326 audit(2582.510:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2582.920924][ T29] audit: type=1326 audit(2582.510:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2582.921384][ T29] audit: type=1326 audit(2582.510:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2582.921760][ T29] audit: type=1326 audit(2582.510:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2582.922077][ T29] audit: type=1326 audit(2582.510:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2582.966643][ T29] audit: type=1326 audit(2582.550:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2582.978281][ T29] audit: type=1326 audit(2582.580:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2583.025864][ T29] audit: type=1326 audit(2582.610:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2583.028834][ T29] audit: type=1326 audit(2582.620:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.0.1653" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2595.327783][ T8612] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1659'. [ 2595.356680][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'. [ 2604.500257][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 2604.504602][ T29] audit: type=1400 audit(2604.100:538): avc: denied { read write } for pid=8625 comm="syz.0.1663" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2604.509607][ T29] audit: type=1400 audit(2604.110:539): avc: denied { open } for pid=8625 comm="syz.0.1663" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2612.230700][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2612.362999][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2612.609696][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2612.711729][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2683.567800][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1685'. [ 2691.314701][ T29] audit: type=1326 audit(2690.880:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2691.315257][ T29] audit: type=1326 audit(2690.900:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2691.315780][ T29] audit: type=1326 audit(2690.900:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2691.316063][ T29] audit: type=1326 audit(2690.900:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2691.316284][ T29] audit: type=1326 audit(2690.900:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2691.316510][ T29] audit: type=1326 audit(2690.900:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2691.422125][ T29] audit: type=1326 audit(2690.990:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2691.479854][ T29] audit: type=1326 audit(2690.900:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=403 compat=1 ip=0x128688 code=0x7ffc0000 [ 2691.480547][ T29] audit: type=1326 audit(2691.060:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2691.480946][ T29] audit: type=1326 audit(2691.060:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8694 comm="syz.1.1688" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=1 ip=0x130a50 code=0x7ffc0000 [ 2693.735236][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2693.740275][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2728.063050][ T8736] binder: 8734:8736 tried to acquire reference to desc 0, got 1 instead [ 2728.127380][ T8736] binder: 8734:8736 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2728.131922][ T8736] binder: 8736 RLIMIT_NICE not set [ 2728.738390][ T11] [ 2728.738912][ T11] ====================================================== [ 2728.739246][ T11] WARNING: possible circular locking dependency detected [ 2728.739640][ T11] syzkaller #0 Tainted: G W L [ 2728.740106][ T11] ------------------------------------------------------ [ 2728.740437][ T11] kworker/0:0H/11 is trying to acquire lock: [ 2728.740811][ T11] ffff800087b74020 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_node_noprof+0x6c/0x634 [ 2728.742160][ T11] [ 2728.742160][ T11] but task is already holding lock: [ 2728.742546][ T11] ffff000014f95080 (&new->lock){+.+.}-{4:4}, at: mtd_queue_rq+0x2a4/0x1694 [ 2728.743214][ T11] [ 2728.743214][ T11] which lock already depends on the new lock. [ 2728.743214][ T11] [ 2728.743698][ T11] [ 2728.743698][ T11] the existing dependency chain (in reverse order) is: [ 2728.744120][ T11] [ 2728.744120][ T11] -> #4 (&new->lock){+.+.}-{4:4}: [ 2728.744836][ T11] lock_acquire+0x3d0/0x44c [ 2728.745210][ T11] __mutex_lock+0x150/0x1530 [ 2728.745552][ T11] mutex_lock_nested+0x24/0x30 [ 2728.745885][ T11] mtd_queue_rq+0x2a4/0x1694 [ 2728.746209][ T11] blk_mq_dispatch_rq_list+0x2e0/0x177c [ 2728.746629][ T11] __blk_mq_sched_dispatch_requests+0x830/0xe60 [ 2728.746929][ T11] blk_mq_sched_dispatch_requests+0x7c/0x114 [ 2728.747260][ T11] blk_mq_run_work_fn+0xf0/0x278 [ 2728.747601][ T11] process_one_work+0x830/0x1c00 [ 2728.747934][ T11] worker_thread+0x42c/0xc90 [ 2728.748243][ T11] kthread+0x2ec/0x384 [ 2728.748521][ T11] ret_from_fork+0x10/0x20 [ 2728.748914][ T11] [ 2728.748914][ T11] -> #3 (set->srcu){.+.+}-{0:0}: [ 2728.749616][ T11] lock_sync+0xf0/0x16c [ 2728.749929][ T11] __synchronize_srcu+0xa8/0x280 [ 2728.750258][ T11] synchronize_srcu+0x168/0x7d0 [ 2728.750620][ T11] blk_mq_quiesce_queue+0xf4/0x160 [ 2728.750927][ T11] elevator_switch+0x118/0x430 [ 2728.751228][ T11] elevator_change+0x294/0x420 [ 2728.751557][ T11] elevator_set_default+0x210/0x2b8 [ 2728.751881][ T11] blk_register_queue+0x36c/0x500 [ 2728.752198][ T11] __add_disk+0x510/0xb48 [ 2728.752518][ T11] add_disk_fwnode+0x110/0x3e0 [ 2728.752846][ T11] device_add_disk+0x14/0x20 [ 2728.753120][ T11] nbd_dev_add+0x5f8/0x9b4 [ 2728.753408][ T11] nbd_init+0x190/0x1b0 [ 2728.753719][ T11] do_one_initcall+0x134/0xb20 [ 2728.754033][ T11] kernel_init_freeable+0x5ec/0x670 [ 2728.754991][ T11] kernel_init+0x2c/0x14c [ 2728.755314][ T11] ret_from_fork+0x10/0x20 [ 2728.755648][ T11] [ 2728.755648][ T11] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 2728.756238][ T11] lock_acquire+0x3d0/0x44c [ 2728.756549][ T11] __mutex_lock+0x150/0x1530 [ 2728.756866][ T11] mutex_lock_nested+0x24/0x30 [ 2728.757191][ T11] elevator_change+0x188/0x420 [ 2728.757513][ T11] elevator_set_none+0x90/0xec [ 2728.757815][ T11] blk_mq_update_nr_hw_queues+0x3c0/0x1020 [ 2728.758172][ T11] nbd_start_device+0x128/0xa28 [ 2728.758529][ T11] nbd_genl_connect+0xb50/0x1394 [ 2728.758820][ T11] genl_family_rcv_msg_doit+0x1c0/0x28c [ 2728.759209][ T11] genl_rcv_msg+0x3f8/0x60c [ 2728.759579][ T11] netlink_rcv_skb+0x1ac/0x360 [ 2728.759904][ T11] genl_rcv+0x38/0x54 [ 2728.760197][ T11] netlink_unicast+0x418/0x6e0 [ 2728.760440][ T11] netlink_sendmsg+0x638/0xa4c [ 2728.760771][ T11] __sock_sendmsg+0xc8/0x1a4 [ 2728.761081][ T11] ____sys_sendmsg+0x52c/0x76c [ 2728.761399][ T11] ___sys_sendmsg+0x124/0x1a4 [ 2728.761720][ T11] __sys_sendmsg+0x10c/0x198 [ 2728.762011][ T11] __arm64_compat_sys_sendmsg+0x74/0xa4 [ 2728.762334][ T11] invoke_syscall+0x74/0x240 [ 2728.762689][ T11] el0_svc_common.constprop.0+0xac/0x230 [ 2728.763007][ T11] do_el0_svc_compat+0x40/0x58 [ 2728.763293][ T11] el0_svc_compat+0x54/0x264 [ 2728.763579][ T11] el0t_32_sync_handler+0x88/0xac [ 2728.763876][ T11] el0t_32_sync+0x19c/0x1a0 [ 2728.764180][ T11] [ 2728.764180][ T11] -> #1 (&q->q_usage_counter(io)#33){++++}-{0:0}: [ 2728.764932][ T11] lock_acquire+0x3d0/0x44c [ 2728.765233][ T11] blk_alloc_queue+0x4e0/0x640 [ 2728.765537][ T11] blk_mq_alloc_queue+0x148/0x224 [ 2728.765833][ T11] __blk_mq_alloc_disk+0x20/0x120 [ 2728.766118][ T11] nbd_dev_add+0x3d0/0x9b4 [ 2728.766431][ T11] nbd_init+0x190/0x1b0 [ 2728.766724][ T11] do_one_initcall+0x134/0xb20 [ 2728.767026][ T11] kernel_init_freeable+0x5ec/0x670 [ 2728.767328][ T11] kernel_init+0x2c/0x14c [ 2728.767624][ T11] ret_from_fork+0x10/0x20 [ 2728.767903][ T11] [ 2728.767903][ T11] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 2728.768475][ T11] check_prev_add+0x114/0xca0 [ 2728.768771][ T11] __lock_acquire+0x13f4/0x1a5c [ 2728.769056][ T11] lock_acquire+0x3d0/0x44c [ 2728.769349][ T11] fs_reclaim_acquire+0x130/0x158 [ 2728.769661][ T11] __kmalloc_cache_node_noprof+0x6c/0x634 [ 2728.769969][ T11] __get_vm_area_node+0x118/0x2ec [ 2728.770265][ T11] __vmalloc_node_range_noprof+0x198/0x1024 [ 2728.770621][ T11] __vmalloc_node_noprof+0xe4/0x14c [ 2728.770932][ T11] vmalloc_noprof+0x24/0x30 [ 2728.771235][ T11] mtdblock_writesect+0x41c/0x5b8 [ 2728.771549][ T11] mtd_queue_rq+0x744/0x1694 [ 2728.771829][ T11] blk_mq_dispatch_rq_list+0x2e0/0x177c [ 2728.772142][ T11] __blk_mq_sched_dispatch_requests+0x830/0xe60 [ 2728.772511][ T11] blk_mq_sched_dispatch_requests+0x7c/0x114 [ 2728.772903][ T11] blk_mq_run_work_fn+0xf0/0x278 [ 2728.773248][ T11] process_one_work+0x830/0x1c00 [ 2728.773548][ T11] worker_thread+0x42c/0xc90 [ 2728.773851][ T11] kthread+0x2ec/0x384 [ 2728.774140][ T11] ret_from_fork+0x10/0x20 [ 2728.774553][ T11] [ 2728.774553][ T11] other info that might help us debug this: [ 2728.774553][ T11] [ 2728.775067][ T11] Chain exists of: [ 2728.775067][ T11] fs_reclaim --> set->srcu --> &new->lock [ 2728.775067][ T11] [ 2728.775987][ T11] Possible unsafe locking scenario: [ 2728.775987][ T11] [ 2728.776325][ T11] CPU0 CPU1 [ 2728.776608][ T11] ---- ---- [ 2728.776886][ T11] lock(&new->lock); [ 2728.777277][ T11] lock(set->srcu); [ 2728.777701][ T11] lock(&new->lock); [ 2728.778142][ T11] lock(fs_reclaim); [ 2728.778549][ T11] [ 2728.778549][ T11] *** DEADLOCK *** [ 2728.778549][ T11] [ 2728.778926][ T11] locks held by kworker/0:0H/11: 4, last CPU#0: [ 2728.779286][ T11] #0: ffff00000ed7c140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 2728.780165][ T11] #1: ffff80008dc97c70 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_one_work+0x780/0x1c00 [ 2728.781023][ T11] #2: ffff000014cce818 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0xc8/0x278 [ 2728.781757][ T11] #3: ffff000014f95080 (&new->lock){+.+.}-{4:4}, at: mtd_queue_rq+0x2a4/0x1694 [ 2728.782563][ T11] [ 2728.782563][ T11] stack backtrace: [ 2728.782918][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:0H Tainted: G W L syzkaller #0 PREEMPT [ 2728.783403][ T11] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2728.783692][ T11] Hardware name: linux,dummy-virt (DT) [ 2728.784253][ T11] Workqueue: kblockd blk_mq_run_work_fn [ 2728.784802][ T11] Call trace: [ 2728.785038][ T11] show_stack+0x18/0x24 (C) [ 2728.785368][ T11] dump_stack_lvl+0x7c/0xb0 [ 2728.785676][ T11] dump_stack+0x1c/0x28 [ 2728.785979][ T11] print_circular_bug+0x23c/0x284 [ 2728.786308][ T11] check_noncircular+0x174/0x194 [ 2728.786644][ T11] check_prev_add+0x114/0xca0 [ 2728.786961][ T11] __lock_acquire+0x13f4/0x1a5c [ 2728.787262][ T11] lock_acquire+0x3d0/0x44c [ 2728.787562][ T11] fs_reclaim_acquire+0x130/0x158 [ 2728.787873][ T11] __kmalloc_cache_node_noprof+0x6c/0x634 [ 2728.788224][ T11] __get_vm_area_node+0x118/0x2ec [ 2728.788540][ T11] __vmalloc_node_range_noprof+0x198/0x1024 [ 2728.788864][ T11] __vmalloc_node_noprof+0xe4/0x14c [ 2728.789182][ T11] vmalloc_noprof+0x24/0x30 [ 2728.789518][ T11] mtdblock_writesect+0x41c/0x5b8 [ 2728.789840][ T11] mtd_queue_rq+0x744/0x1694 [ 2728.790127][ T11] blk_mq_dispatch_rq_list+0x2e0/0x177c [ 2728.790473][ T11] __blk_mq_sched_dispatch_requests+0x830/0xe60 [ 2728.790778][ T11] blk_mq_sched_dispatch_requests+0x7c/0x114 [ 2728.791082][ T11] blk_mq_run_work_fn+0xf0/0x278 [ 2728.791380][ T11] process_one_work+0x830/0x1c00 [ 2728.791685][ T11] worker_thread+0x42c/0xc90 [ 2728.791959][ T11] kthread+0x2ec/0x384 [ 2728.792220][ T11] ret_from_fork+0x10/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2729.073046][ T6413] binder: undelivered TRANSACTION_COMPLETE [ 2729.950333][ T8075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.336437][ T8075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.540575][ T8075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.813350][ T8075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.122050][ T8075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2734.162902][ T8075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2734.191608][ T8075] bond0 (unregistering): Released all slaves [ 2734.327537][ T8075] bond1 (unregistering): (slave veth3): Releasing active interface [ 2734.357372][ T8075] bond1 (unregistering): (slave dummy0): Releasing active interface [ 2734.381648][ T8075] bond1 (unregistering): Released all slaves [ 2734.910762][ T8075] hsr_slave_0: left promiscuous mode [ 2734.921399][ T8075] hsr_slave_1: left promiscuous mode [ 2734.989912][ T8075] veth1_macvtap: left promiscuous mode [ 2735.006457][ T8075] veth0_macvtap: left promiscuous mode [ 2735.008851][ T8075] veth1_vlan: left promiscuous mode [ 2735.023094][ T8075] veth0_vlan: left promiscuous mode [ 2742.323165][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 2742.328015][ T29] audit: type=1400 audit(2741.910:596): avc: denied { write } for pid=8744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2742.960211][ T29] audit: type=1400 audit(2742.560:597): avc: denied { write } for pid=8747 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2743.463215][ T3229] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2745.390037][ T29] audit: type=1400 audit(2744.990:598): avc: denied { write } for pid=8752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2746.117783][ T29] audit: type=1400 audit(2745.720:599): avc: denied { write } for pid=8755 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2746.679293][ T3229] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2748.091716][ T29] audit: type=1400 audit(2747.690:600): avc: denied { write } for pid=8760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2748.753027][ T29] audit: type=1400 audit(2748.350:601): avc: denied { write } for pid=8763 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2749.362105][ T3229] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2750.687355][ T29] audit: type=1400 audit(2750.280:602): avc: denied { write } for pid=8767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2751.335330][ T29] audit: type=1400 audit(2750.930:603): avc: denied { write } for pid=8770 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2751.936403][ T3229] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2752.600871][ T29] audit: type=1400 audit(2752.200:604): avc: denied { write } for pid=8773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2753.007571][ T29] audit: type=1400 audit(2752.610:605): avc: denied { write } for pid=8776 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2757.470758][ T29] audit: type=1400 audit(2757.070:606): avc: denied { write } for pid=8784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2757.900884][ T29] audit: type=1400 audit(2757.500:607): avc: denied { write } for pid=8787 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1