last executing test programs: 7.34208918s ago: executing program 1 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/stat\x00', 0x0, 0x0) openat(r0, &(0x7f0000001140)='arp_cache\x00', 0x0, 0x0) read(r0, &(0x7f0000001180)=""/4096, 0x1000) 7.212167771s ago: executing program 1 (id=341): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f0000000340)=""/100, 0x64) write$nci(r0, &(0x7f00000003c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0x0, 0x0, 0x1, "03"}}}, 0x15) read$nci(r0, &(0x7f0000000400)=""/100, 0x64) write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000580)=""/100, 0x64) write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000640)=""/100, 0x64) write$nci(r0, &(0x7f00000006c0)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000700)=""/100, 0x64) write$nci(r0, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_RSP, 0x4) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.83368777s ago: executing program 1 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001002}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000340)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36) write(r0, &(0x7f0000000380)="ffffffffffff11223344556688ca4f400038200000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r0, &(0x7f00000003c0)="ffffffffffff11223344556688ca4f400038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r0, &(0x7f0000000400)="ffffffffffff11223344556688ca4fc00038200000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r0, &(0x7f0000000440)="ffffffffffff11223344556688ca4fc00038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r0, &(0x7f0000000480)="ffffffffffff11223344556688ca4f400038200100000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r0, &(0x7f00000004c0)="ffffffffffff11223344556688ca4f400038400100000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000500)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36) write(r2, &(0x7f0000000540)="ffffffffffff11223344556688ca4f400038200000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000580)="ffffffffffff11223344556688ca4f400038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f00000005c0)="ffffffffffff11223344556688ca4fc00038200000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000600)="ffffffffffff11223344556688ca4fc00038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000640)="ffffffffffff11223344556688ca4f400038200100000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000680)="ffffffffffff11223344556688ca4f400038400100000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) 1.240679324s ago: executing program 1 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00112233", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1f90, @loopback}, 0x10) 1.158857754s ago: executing program 1 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net\x00', 0x0, 0x0) close(r0) 1.030339765s ago: executing program 1 (id=349): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x2c}}, 0x0) 860.837536ms ago: executing program 0 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 750.664316ms ago: executing program 0 (id=352): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="aaaaaaaaaa3caaaaaaaaaa304305450f320000112233445500"/34, 0x22, 0x0, &(0x7f0000000200)={0x11, 0x0, r1}, 0x14) 638.488847ms ago: executing program 0 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x140}}, 0x0) 428.829538ms ago: executing program 0 (id=354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x500, {0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x6c, 0x0, @remote, @local}, "000004d200000000"}}}}}, 0x0) 304.319439ms ago: executing program 0 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/100, 0x64) close(r1) 0s ago: executing program 0 (id=356): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001000000010902200001010080320904000002ff0000000705810240000007050202400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000140)="0000ffffff0a00f6d7290000000000000003fd00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000180)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f00000001c0)="0000ffffff0300fdd72b00fe00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000240)="0000ffffff0400fcd72101070000") nanosleep(&(0x7f0000000280)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): [ 45.149200][ T28] audit: type=1400 audit(45.070:91): avc: denied { read write } for pid=3102 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.150019][ T28] audit: type=1400 audit(45.070:92): avc: denied { open } for pid=3102 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:13524' (ED25519) to the list of known hosts. [ 63.502141][ T28] audit: type=1400 audit(63.420:93): avc: denied { name_bind } for pid=3105 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.922075][ T28] audit: type=1400 audit(64.840:94): avc: denied { execute } for pid=3106 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.926303][ T28] audit: type=1400 audit(64.850:95): avc: denied { execute_no_trans } for pid=3106 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.807393][ T28] audit: type=1400 audit(67.730:96): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.810570][ T28] audit: type=1400 audit(67.730:97): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.829505][ T3106] cgroup: Unknown subsys name 'net' [ 67.838971][ T28] audit: type=1400 audit(67.760:98): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.159533][ T3106] cgroup: Unknown subsys name 'cpuset' [ 68.166643][ T3106] cgroup: Unknown subsys name 'hugetlb' [ 68.167420][ T3106] cgroup: Unknown subsys name 'rlimit' [ 68.374780][ T28] audit: type=1400 audit(68.290:99): avc: denied { setattr } for pid=3106 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.377187][ T28] audit: type=1400 audit(68.300:100): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.378375][ T28] audit: type=1400 audit(68.300:101): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.600325][ T3108] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.602491][ T28] audit: type=1400 audit(68.520:102): avc: denied { relabelto } for pid=3108 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.610321][ T28] audit: type=1400 audit(68.530:103): avc: denied { write } for pid=3108 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 68.649133][ T28] audit: type=1400 audit(68.570:104): avc: denied { read } for pid=3106 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.649736][ T28] audit: type=1400 audit(68.570:105): avc: denied { open } for pid=3106 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.534654][ T3106] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.565763][ T28] audit: type=1400 audit(77.490:106): avc: denied { execmem } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.606392][ T28] audit: type=1400 audit(77.530:107): avc: denied { read } for pid=3112 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.614201][ T28] audit: type=1400 audit(77.530:108): avc: denied { open } for pid=3112 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.614282][ T28] audit: type=1400 audit(77.530:109): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.627425][ T28] audit: type=1400 audit(77.550:110): avc: denied { module_request } for pid=3112 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.673147][ T28] audit: type=1400 audit(77.590:111): avc: denied { sys_module } for pid=3112 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.059071][ T28] audit: type=1400 audit(77.980:112): avc: denied { ioctl } for pid=3112 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.823168][ T3112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.831492][ T3112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.509856][ T3111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.524785][ T3111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.772187][ T3112] hsr_slave_0: entered promiscuous mode [ 79.782118][ T3112] hsr_slave_1: entered promiscuous mode [ 80.149354][ T3111] hsr_slave_0: entered promiscuous mode [ 80.150926][ T3111] hsr_slave_1: entered promiscuous mode [ 80.151844][ T3111] debugfs: 'hsr0' already exists in 'hsr' [ 80.152225][ T3111] Cannot create hsr debugfs directory [ 80.230893][ T28] audit: type=1400 audit(80.150:113): avc: denied { create } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.232089][ T28] audit: type=1400 audit(80.150:114): avc: denied { write } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.233113][ T28] audit: type=1400 audit(80.150:115): avc: denied { read } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.250873][ T3112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.263050][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.268236][ T3112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.273028][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.290991][ T3112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.297621][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.312240][ T3112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.317708][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.627667][ T3111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.632511][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.639328][ T3111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.646885][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.650318][ T3111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.662639][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.666228][ T3111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.671131][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.290285][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.466349][ T3111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.832355][ T3111] veth0_vlan: entered promiscuous mode [ 83.843231][ T3111] veth1_vlan: entered promiscuous mode [ 83.887615][ T3111] veth0_macvtap: entered promiscuous mode [ 83.895666][ T3111] veth1_macvtap: entered promiscuous mode [ 83.995157][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.996211][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.996911][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.997130][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.031079][ T28] audit: type=1400 audit(83.950:116): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.042929][ T28] audit: type=1400 audit(83.960:117): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/syzkaller.UHKnvk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.048973][ T28] audit: type=1400 audit(83.970:118): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.055366][ T28] audit: type=1400 audit(83.970:119): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/syzkaller.UHKnvk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.059237][ T28] audit: type=1400 audit(83.980:120): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/syzkaller.UHKnvk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.070219][ T28] audit: type=1400 audit(83.990:121): avc: denied { unmount } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.076109][ T28] audit: type=1400 audit(84.000:122): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.076179][ T28] audit: type=1400 audit(84.000:123): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="gadgetfs" ino=2215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.080899][ T28] audit: type=1400 audit(84.000:124): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.082293][ T28] audit: type=1400 audit(84.000:125): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.128042][ T3111] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.268077][ T3112] veth0_vlan: entered promiscuous mode [ 84.292212][ T3112] veth1_vlan: entered promiscuous mode [ 84.388934][ T3112] veth0_macvtap: entered promiscuous mode [ 84.412032][ T3112] veth1_macvtap: entered promiscuous mode [ 84.554730][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.556455][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.557024][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.557108][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.054431][ T3727] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 85.056810][ T3727] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 85.770411][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.938292][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 85.938524][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 85.941944][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.034827][ T3717] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.188995][ T3717] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 86.197277][ T3717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.197521][ T3717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 86.197642][ T3717] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 86.197760][ T3717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.878910][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 86.879174][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 86.879962][ T23] port100 1-1:1.0: NFC: Could not get supported command types [ 86.897788][ T23] usb 1-1: USB disconnect, device number 2 [ 91.986904][ T3784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.989663][ T3778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.443249][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 92.443347][ T28] audit: type=1400 audit(92.360:151): avc: denied { unmount } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.660600][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 96.111931][ T28] audit: type=1400 audit(96.030:152): avc: denied { mounton } for pid=3811 comm="syz.0.24" path="/19/file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.616732][ T28] audit: type=1400 audit(98.540:153): avc: denied { unmount } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.942869][ T3820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 98.955743][ T3820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 99.387733][ T28] audit: type=1400 audit(99.310:154): avc: denied { name_bind } for pid=3821 comm="syz.0.27" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 99.389183][ T28] audit: type=1400 audit(99.310:155): avc: denied { node_bind } for pid=3821 comm="syz.0.27" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 99.654637][ T28] audit: type=1400 audit(99.570:156): avc: denied { name_bind } for pid=3826 comm="syz.0.29" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 100.835290][ T23] usb 2-1: USB disconnect, device number 2 [ 102.517087][ T28] audit: type=1400 audit(102.440:157): avc: denied { create } for pid=3843 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.521307][ T28] audit: type=1400 audit(102.440:158): avc: denied { write } for pid=3843 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.074296][ T28] audit: type=1400 audit(102.990:159): avc: denied { read } for pid=3843 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.326714][ T28] audit: type=1400 audit(103.250:160): avc: denied { create } for pid=3850 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.345070][ T28] audit: type=1400 audit(103.270:161): avc: denied { write } for pid=3850 comm="syz.0.35" path="socket:[3401]" dev="sockfs" ino=3401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.890072][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 106.568749][ T28] audit: type=1400 audit(106.490:162): avc: denied { create } for pid=3903 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.577166][ T28] audit: type=1400 audit(106.500:163): avc: denied { write } for pid=3903 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.356267][ T28] audit: type=1400 audit(109.280:164): avc: denied { mount } for pid=3914 comm="syz.1.48" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.398259][ T3915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.457123][ T3915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.516361][ T3915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.589058][ T3915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.683259][ T28] audit: type=1400 audit(109.600:165): avc: denied { unmount } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 110.154716][ T3872] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 110.154893][ T3872] nci: nci_start_poll: failed to set local general bytes [ 113.329769][ T28] audit: type=1400 audit(113.250:166): avc: denied { create } for pid=3941 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.337089][ T28] audit: type=1400 audit(113.260:167): avc: denied { ioctl } for pid=3941 comm="syz.1.53" path="socket:[2447]" dev="sockfs" ino=2447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.348424][ T28] audit: type=1400 audit(113.270:168): avc: denied { setopt } for pid=3941 comm="syz.1.53" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.352046][ T3942] syz_tun: entered allmulticast mode [ 113.375052][ T3941] syz_tun: left allmulticast mode [ 113.714188][ T28] audit: type=1400 audit(113.630:169): avc: denied { create } for pid=3945 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.717169][ T28] audit: type=1400 audit(113.640:170): avc: denied { setopt } for pid=3945 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.194544][ T3864] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 115.567453][ T3960] syz_tun: entered allmulticast mode [ 115.589884][ T3960] pimreg: entered allmulticast mode [ 115.866349][ T28] audit: type=1400 audit(115.790:171): avc: denied { bind } for pid=3959 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.869011][ T28] audit: type=1400 audit(115.790:172): avc: denied { write } for pid=3959 comm="syz.0.60" path="socket:[2484]" dev="sockfs" ino=2484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.872264][ T3959] syz_tun: left allmulticast mode [ 115.872777][ T3959] pimreg: left allmulticast mode [ 116.460348][ T28] audit: type=1400 audit(116.380:173): avc: denied { getopt } for pid=3975 comm="syz.1.64" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.286530][ T3996] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 117.289730][ T3996] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 117.316724][ T3996] netlink: 33 bytes leftover after parsing attributes in process `syz.0.72'. [ 117.318321][ T3996] ksmbd: Unknown IPC event: 10, ignore. [ 118.089719][ T28] audit: type=1400 audit(118.010:174): avc: denied { create } for pid=4002 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.108911][ T28] audit: type=1400 audit(118.030:175): avc: denied { connect } for pid=4002 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.477954][ T4017] FAULT_INJECTION: forcing a failure. [ 118.477954][ T4017] name failslab, interval 1, probability 100, space 0, times 1 [ 118.478861][ T4017] CPU: 1 UID: 0 PID: 4017 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT [ 118.479102][ T4017] Hardware name: ARM-Versatile Express [ 118.479368][ T4017] Call trace: [ 118.479709][ T4017] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 118.480711][ T4017] r7:60000013 r6:60000013 r5:8230866c r4:00000000 [ 118.480803][ T4017] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 118.480864][ T4017] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 118.480928][ T4017] r7:00000ad0 r6:00000000 r5:847a3200 r4:82b1601c [ 118.480945][ T4017] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 118.481013][ T4017] [<80a21aec>] (should_fail_ex) from [<80579f00>] (should_failslab+0x6c/0x94) [ 118.481108][ T4017] r8:847a3200 r7:00000ad0 r6:818fb068 r5:00400dc0 r4:83002480 [ 118.481128][ T4017] [<80579e94>] (should_failslab) from [<8055994c>] (__kmalloc_cache_noprof+0x58/0x338) [ 118.481190][ T4017] [<805598f4>] (__kmalloc_cache_noprof) from [<818fb068>] (mr_table_alloc+0x3c/0x124) [ 118.481290][ T4017] r10:00000000 r9:85b9c080 r8:000000fe r7:819cc83c r6:85b9c000 r5:82bf8840 [ 118.481326][ T4017] r4:85b9c7f8 [ 118.481344][ T4017] [<818fb02c>] (mr_table_alloc) from [<819ce250>] (ip6mr_net_init+0xd4/0x208) [ 118.481417][ T4017] r8:e0479e30 r7:e0479e28 r6:86171a00 r5:85b9c000 r4:85b9c7f8 [ 118.481433][ T4017] [<819ce17c>] (ip6mr_net_init) from [<8168b2a0>] (ops_init+0xb0/0x100) [ 118.481502][ T4017] r9:85b9c080 r8:e0479e90 r7:82be53f0 r6:85b9c000 r5:00000000 r4:82bf8848 [ 118.481521][ T4017] [<8168b1f0>] (ops_init) from [<8168b380>] (setup_net+0x90/0x170) [ 118.481587][ T4017] r9:85b9c080 r8:e0479e90 r7:82be53f0 r6:82be541c r5:85b9c000 r4:82bf8848 [ 118.481603][ T4017] [<8168b2f0>] (setup_net) from [<8168d0b4>] (copy_net_ns+0x140/0x3a8) [ 118.481664][ T4017] r10:82c84734 r9:82a1e300 r8:85b9c080 r7:82a1f620 r6:00000000 r5:82a1e300 [ 118.481682][ T4017] r4:85b9c000 [ 118.481697][ T4017] [<8168cf74>] (copy_net_ns) from [<80283854>] (create_new_namespaces+0x12c/0x2f0) [ 118.481765][ T4017] r9:82a1e300 r8:40000000 r7:00000000 r6:847a3200 r5:86185668 r4:84019a00 [ 118.481782][ T4017] [<80283728>] (create_new_namespaces) from [<80283dd0>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 118.481844][ T4017] r10:00000151 r9:847a3200 r8:00000000 r7:82a1e300 r6:e0479f60 r5:861777c0 [ 118.481862][ T4017] r4:40000000 [ 118.481874][ T4017] [<80283d4c>] (unshare_nsproxy_namespaces) from [<80250bf4>] (ksys_unshare+0x17c/0x434) [ 118.481936][ T4017] r7:00000000 r6:00000000 r5:847a3200 r4:40000000 [ 118.481952][ T4017] [<80250a78>] (ksys_unshare) from [<80250ebc>] (sys_unshare+0x10/0x14) [ 118.482108][ T4017] r10:00000151 r9:847a3200 r8:8020029c r7:00000151 r6:00356308 r5:00000000 [ 118.482131][ T4017] r4:00000000 [ 118.482150][ T4017] [<80250eac>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 118.482280][ T4017] Exception stack(0xe0479fa8 to 0xe0479ff0) [ 118.482472][ T4017] 9fa0: 00000000 00000000 40000000 00000000 00000000 00000000 [ 118.482696][ T4017] 9fc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76f390dc [ 118.482800][ T4017] 9fe0: 76f38e88 76f38e78 00018fb8 00130a70 [ 118.754407][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 118.754551][ T28] audit: type=1400 audit(118.660:177): avc: denied { map_create } for pid=4018 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.759983][ T28] audit: type=1400 audit(118.680:178): avc: denied { map_read map_write } for pid=4018 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.895869][ T28] audit: type=1400 audit(118.820:179): avc: denied { create } for pid=4020 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 119.634288][ T1291] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.170762][ T28] audit: type=1400 audit(120.090:180): avc: denied { ioctl } for pid=4045 comm="syz.0.88" path="socket:[3727]" dev="sockfs" ino=3727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.371911][ T4046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 120.485214][ T28] audit: type=1400 audit(120.410:181): avc: denied { nlmsg_write } for pid=4055 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.590762][ T28] audit: type=1400 audit(120.510:182): avc: denied { write } for pid=4055 comm="syz.1.92" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.990623][ T28] audit: type=1400 audit(120.910:183): avc: denied { create } for pid=4066 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 121.746051][ T4084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.100'. [ 122.110288][ T4091] Zero length message leads to an empty skb [ 128.874792][ T4106] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 129.488335][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 130.090919][ T4139] RDS: rds_bind could not find a transport for ::ffff:172.30.0.0, load rds_tcp or rds_rdma? [ 130.091694][ T28] audit: type=1400 audit(130.010:184): avc: denied { bind } for pid=4138 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.106629][ T28] audit: type=1400 audit(130.030:185): avc: denied { write } for pid=4138 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.749225][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 130.751250][ T4146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.122'. [ 131.585114][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 133.766278][ T4167] netlink: 56 bytes leftover after parsing attributes in process `syz.0.128'. [ 134.934382][ T3579] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 135.614198][ T3579] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 135.624749][ T3579] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 135.624885][ T3579] usb 1-1: can't read configurations, error -71 [ 135.705916][ T4188] netlink: 72 bytes leftover after parsing attributes in process `syz.0.131'. [ 135.720975][ T4188] netlink: 72 bytes leftover after parsing attributes in process `syz.0.131'. [ 137.474625][ T4201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 139.924594][ T4178] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 140.057702][ T28] audit: type=1400 audit(139.980:186): avc: denied { read } for pid=4212 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.629524][ T28] audit: type=1400 audit(143.550:187): avc: denied { create } for pid=4243 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.680373][ T28] audit: type=1400 audit(143.570:188): avc: denied { setopt } for pid=4243 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.029340][ T28] audit: type=1400 audit(143.950:189): avc: denied { bind } for pid=4243 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.993987][ T4222] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 147.768164][ T28] audit: type=1400 audit(147.690:190): avc: denied { write } for pid=4272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.850196][ T62] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.062341][ T28] audit: type=1400 audit(147.960:191): avc: denied { write } for pid=4291 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.008415][ T4314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.314163][ T4296] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 154.314248][ T4296] nci: nci_start_poll: failed to set local general bytes [ 158.321238][ T28] audit: type=1400 audit(158.240:192): avc: denied { ioctl } for pid=4360 comm="syz.1.174" path="socket:[2935]" dev="sockfs" ino=2935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.324190][ T28] audit: type=1400 audit(158.240:193): avc: denied { bind } for pid=4360 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.772381][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 159.074363][ T62] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.354590][ T4292] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 164.554791][ T4389] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 167.425230][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 169.178618][ T4469] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.430041][ T28] audit: type=1400 audit(171.350:194): avc: denied { bind } for pid=4498 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.594382][ T4459] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 174.838426][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 178.080780][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 182.554451][ T4544] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 183.219761][ T28] audit: type=1400 audit(183.140:195): avc: denied { connect } for pid=4644 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.964736][ T4651] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 189.563981][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 194.634412][ T4697] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 198.021940][ T4731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.022074][ T4731] nci: nci_start_poll: failed to set local general bytes [ 198.023115][ T4739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.675723][ T28] audit: type=1400 audit(199.600:196): avc: denied { append } for pid=4773 comm="syz.0.272" name="tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.736099][ T28] audit: type=1400 audit(199.660:197): avc: denied { setopt } for pid=4773 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.454743][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 200.648424][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 200.667575][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 200.667755][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 200.667825][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.682063][ T4783] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.683252][ T4783] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.716172][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 200.716381][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 200.725751][ T23] port100 1-1:1.0: NFC: Could not get supported command types [ 200.931430][ T23] usb 1-1: USB disconnect, device number 5 [ 201.434822][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 201.626980][ T42] usb 1-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 201.638177][ T42] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 201.638293][ T42] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.638550][ T42] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 201.638647][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.162959][ T42] usb 1-1: USB disconnect, device number 6 [ 202.285215][ T4818] syz_tun: entered allmulticast mode [ 202.300062][ T4817] syz_tun: left allmulticast mode [ 202.428841][ T28] audit: type=1400 audit(202.350:198): avc: denied { read } for pid=4819 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.195862][ T4748] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 206.252587][ T4828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.358814][ T4864] netlink: 'syz.0.286': attribute type 2 has an invalid length. [ 208.387478][ T3058] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.557626][ T3058] usb 2-1: New USB device found, idVendor=1110, idProduct=9041, bcdDevice= 0.00 [ 208.564426][ T3058] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 208.564573][ T3058] usb 2-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 208.564668][ T3058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.820218][ T23] usb 2-1: USB disconnect, device number 3 [ 212.550740][ T4881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.430760][ T4934] FAULT_INJECTION: forcing a failure. [ 213.430760][ T4934] name failslab, interval 1, probability 100, space 0, times 100 [ 213.430867][ T4934] CPU: 1 UID: 0 PID: 4934 Comm: syz.0.297 Not tainted syzkaller #0 PREEMPT [ 213.430898][ T4934] Hardware name: ARM-Versatile Express [ 213.430909][ T4934] Call trace: [ 213.430931][ T4934] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 213.430990][ T4934] r7:60000013 r6:60000013 r5:8230866c r4:00000000 [ 213.430999][ T4934] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 213.431025][ T4934] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 213.431055][ T4934] r7:00000064 r6:00000000 r5:847fbe80 r4:82b1601c [ 213.431062][ T4934] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 213.431093][ T4934] [<80a21aec>] (should_fail_ex) from [<80579f00>] (should_failslab+0x6c/0x94) [ 213.431146][ T4934] r8:00000000 r7:847fbe80 r6:80399260 r5:00000dc0 r4:830ff6c0 [ 213.431162][ T4934] [<80579e94>] (should_failslab) from [<805578e0>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 213.431215][ T4934] [<80557884>] (kmem_cache_alloc_noprof) from [<80399260>] (taskstats_exit+0x260/0x398) [ 213.431271][ T4934] r10:00000000 r9:00000001 r8:00000000 r7:85f9da40 r6:831cd200 r5:82ccb110 [ 213.431281][ T4934] r4:847fbe80 [ 213.431288][ T4934] [<80399000>] (taskstats_exit) from [<80258974>] (do_exit+0x1cc/0xae4) [ 213.431321][ T4934] r10:000000f8 r9:00000001 r8:ea96df50 r7:85f9da40 r6:00000000 r5:847fbe80 [ 213.431329][ T4934] r4:00000000 [ 213.431336][ T4934] [<802587a8>] (do_exit) from [<80259460>] (do_group_exit+0x40/0x8c) [ 213.431359][ T4934] r7:85f9da40 [ 213.431366][ T4934] [<80259420>] (do_group_exit) from [<802594c4>] (pid_child_should_wake+0x0/0x6c) [ 213.431394][ T4934] r7:000000f8 r4:00000000 [ 213.431401][ T4934] [<802594ac>] (sys_exit_group) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 213.431423][ T4934] Exception stack(0xea96dfa8 to 0xea96dff0) [ 213.431444][ T4934] dfa0: 00000000 7eb4ead8 00000000 00000000 00000000 00000000 [ 213.431462][ T4934] dfc0: 00000000 7eb4ead8 0002a6dc 000000f8 000000a7 00000000 00000000 7eb4ead8 [ 213.431475][ T4934] dfe0: 7eb4ea30 7eb4ea20 00014988 00130a70 [ 217.228336][ T4923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.990202][ T4971] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 224.966775][ T4978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.844867][ T5025] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 233.274212][ T3579] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 233.424450][ T3579] usb 1-1: Invalid ep0 maxpacket: 64 [ 233.555085][ T3579] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 233.704738][ T3579] usb 1-1: Invalid ep0 maxpacket: 64 [ 233.705620][ T3579] usb usb1-port1: attempt power cycle [ 234.054097][ T3579] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 234.076939][ T3579] usb 1-1: Invalid ep0 maxpacket: 64 [ 234.214821][ T3579] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 234.236243][ T3579] usb 1-1: Invalid ep0 maxpacket: 64 [ 234.236957][ T3579] usb usb1-port1: unable to enumerate USB device [ 237.034849][ T5047] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 237.644355][ T3058] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 237.796246][ T3058] usb 2-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 237.799847][ T3058] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 237.799935][ T3058] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 237.800273][ T3058] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 237.800384][ T3058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.239964][ T42] usb 2-1: USB disconnect, device number 4 [ 244.098761][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 244.314741][ T2212] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.554512][ T5107] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 244.735437][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 250.165840][ T5161] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 250.229687][ T5162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.940607][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 252.444412][ T23] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 252.622136][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 252.622213][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 252.626676][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.068700][ T23] ------------[ cut here ]------------ [ 253.069738][ T23] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x62c/0x63c, CPU#1: kworker/1:0/23 [ 253.074560][ T23] URB 8601fc00 submitted while active [ 253.075788][ T23] Modules linked in: [ 253.077826][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 253.078409][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT [ 253.078768][ T23] Hardware name: ARM-Versatile Express [ 253.079222][ T23] Workqueue: usb_hub_wq hub_event [ 253.079539][ T23] Call trace: [ 253.079718][ T23] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 253.080137][ T23] r7:82a1c4bc r6:00000000 r5:8230866c r4:00000001 [ 253.080406][ T23] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 253.080824][ T23] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 253.081207][ T23] r7:82a1c4bc r6:00000000 r5:8318a580 r4:82c83d7c [ 253.081493][ T23] [<8021e84c>] (dump_stack) from [<802026b8>] (vpanic+0x114/0x320) [ 253.081850][ T23] [<802025a4>] (vpanic) from [<802028f8>] (trace_suspend_resume+0x0/0x100) [ 253.082248][ T23] r7:80f83b18 [ 253.082432][ T23] [<802028c4>] (panic) from [<80251b90>] (get_taint+0x0/0x1c) [ 253.082788][ T23] r3:82a0b188 r2:00000001 r1:822ee1dc r0:822f5b60 [ 253.083082][ T23] [<80251b18>] (check_panic_on_warn) from [<80251d0c>] (__warn+0x98/0x1a4) [ 253.083560][ T23] [<80251c74>] (__warn) from [<80252000>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 253.083927][ T23] r8:00000009 r7:824038b0 r6:df879864 r5:8318a580 r4:00000000 [ 253.084326][ T23] [<80251e1c>] (warn_slowpath_fmt) from [<80f83b18>] (usb_submit_urb+0x62c/0x63c) [ 253.084769][ T23] r10:00000001 r9:8601fddc r8:833210c0 r7:862a5b40 r6:83806cc0 r5:8601fdc0 [ 253.085118][ T23] r4:8601fc00 [ 253.085266][ T23] [<80f834ec>] (usb_submit_urb) from [<80c6c784>] (port100_send_cmd_async+0x18c/0x2a4) [ 253.085669][ T23] r10:00000001 r9:8601fddc r8:833210c0 r7:862a5b40 r6:83806cc0 r5:8601fdc0 [ 253.086041][ T23] r4:00000000 [ 253.086191][ T23] [<80c6c5f8>] (port100_send_cmd_async) from [<80c6d404>] (port100_probe+0x33c/0x580) [ 253.086554][ T23] r10:00000001 r9:85e17000 r8:83806cc0 r7:df879940 r6:86327830 r5:00000001 [ 253.086872][ T23] r4:8601fdc0 [ 253.087042][ T23] [<80c6d0c8>] (port100_probe) from [<80f88a28>] (usb_probe_interface+0x110/0x364) [ 253.087393][ T23] r8:81d68b44 r7:86327800 r6:82b6561c r5:85e17088 r4:86327830 [ 253.087649][ T23] [<80f88918>] (usb_probe_interface) from [<80c08b7c>] (really_probe+0xd8/0x40c) [ 253.088098][ T23] r10:82403d88 r9:82b60e6c r8:00000029 r7:00000000 r6:82b6561c r5:00000000 [ 253.088379][ T23] r4:86327830 [ 253.088558][ T23] [<80c08aa4>] (really_probe) from [<80c08f50>] (__driver_probe_device+0xa0/0x22c) [ 253.088922][ T23] r8:00000029 r7:86327830 r6:82b6561c r5:82d25904 r4:86327830 [ 253.089177][ T23] [<80c08eb0>] (__driver_probe_device) from [<80c091bc>] (driver_probe_device+0x3c/0xc0) [ 253.089542][ T23] r9:82b60e6c r8:00000029 r7:86327830 r6:df879ab4 r5:82d25904 r4:82d258f4 [ 253.089965][ T23] [<80c09180>] (driver_probe_device) from [<80c092e0>] (__device_attach_driver+0xa0/0x138) [ 253.090463][ T23] r9:82b60e6c r8:83800240 r7:86327830 r6:df879ab4 r5:82b6561c r4:00000001 [ 253.090843][ T23] [<80c09240>] (__device_attach_driver) from [<80c06788>] (bus_for_each_drv+0x98/0xec) [ 253.091499][ T23] r7:83800200 r6:80c09240 r5:df879ab4 r4:00000000 [ 253.091804][ T23] [<80c066f0>] (bus_for_each_drv) from [<80c096fc>] (__device_attach+0xb0/0x1e4) [ 253.092265][ T23] r7:83800200 r6:8632787c r5:00000001 r4:86327830 [ 253.092534][ T23] [<80c0964c>] (__device_attach) from [<80c099f4>] (device_initial_probe+0x44/0x48) [ 253.092922][ T23] r6:83800200 r5:86327830 r4:83800200 [ 253.093147][ T23] [<80c099b0>] (device_initial_probe) from [<80c07850>] (bus_probe_device+0x30/0x84) [ 253.093683][ T23] r5:86327830 r4:86327830 [ 253.093847][ T23] [<80c07820>] (bus_probe_device) from [<80c04a7c>] (device_add+0x610/0x834) [ 253.094362][ T23] r9:82b60e6c r8:81dac734 r7:85e17088 r6:8632787c r5:00000000 r4:86327830 [ 253.094678][ T23] [<80c0446c>] (device_add) from [<80f86a88>] (usb_set_configuration+0x5d8/0x938) [ 253.095056][ T23] r10:82403d88 r9:82c35d80 r8:85e17088 r7:860b4e50 r6:00000001 r5:860b4e50 [ 253.095344][ T23] r4:86327800 [ 253.095490][ T23] [<80f864b0>] (usb_set_configuration) from [<80f93d8c>] (usb_generic_driver_probe+0x48/0x84) [ 253.095887][ T23] r10:84294728 r9:82b60e6c r8:00000029 r7:85e17000 r6:82b880c0 r5:00000001 [ 253.096266][ T23] r4:85e17000 [ 253.096442][ T23] [<80f93d44>] (usb_generic_driver_probe) from [<80f87e30>] (usb_probe_device+0x44/0x14c) [ 253.096893][ T23] r5:00000001 r4:85e17088 [ 253.097068][ T23] [<80f87dec>] (usb_probe_device) from [<80c08b7c>] (really_probe+0xd8/0x40c) [ 253.097421][ T23] r7:00000000 r6:82b880c0 r5:00000000 r4:85e17088 [ 253.097678][ T23] [<80c08aa4>] (really_probe) from [<80c08f50>] (__driver_probe_device+0xa0/0x22c) [ 253.098024][ T23] r8:00000029 r7:85e17088 r6:82b880c0 r5:82d25904 r4:85e17088 [ 253.098269][ T23] [<80c08eb0>] (__driver_probe_device) from [<80c091bc>] (driver_probe_device+0x3c/0xc0) [ 253.098698][ T23] r9:82b60e6c r8:00000029 r7:85e17088 r6:df879d1c r5:82d25904 r4:82d258f4 [ 253.099006][ T23] [<80c09180>] (driver_probe_device) from [<80c092e0>] (__device_attach_driver+0xa0/0x138) [ 253.099414][ T23] r9:82b60e6c r8:83800240 r7:85e17088 r6:df879d1c r5:82b880c0 r4:00000001 [ 253.099701][ T23] [<80c09240>] (__device_attach_driver) from [<80c06788>] (bus_for_each_drv+0x98/0xec) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.100047][ T23] r7:83800200 r6:80c09240 r5:df879d1c r4:00000000 [ 253.100765][ T23] [<80c066f0>] (bus_for_each_drv) from [<80c096fc>] (__device_attach+0xb0/0x1e4) [ 253.101138][ T23] r7:83800200 r6:85e170d4 r5:00000001 r4:85e17088 [ 253.101352][ T23] [<80c0964c>] (__device_attach) from [<80c099f4>] (device_initial_probe+0x44/0x48) [ 253.101782][ T23] r6:83800200 r5:85e17088 r4:83800200 [ 253.102060][ T23] [<80c099b0>] (device_initial_probe) from [<80c07850>] (bus_probe_device+0x30/0x84) [ 253.102422][ T23] r5:85e17088 r4:85e17088 [ 253.102581][ T23] [<80c07820>] (bus_probe_device) from [<80c04a7c>] (device_add+0x610/0x834) [ 253.102955][ T23] r9:82b60e6c r8:00000000 r7:83e1b088 r6:85e170d4 r5:00000000 r4:85e17088 [ 253.103229][ T23] [<80c0446c>] (device_add) from [<80214514>] (usb_new_device.part.0+0x420/0x65c) [ 253.103773][ T23] r10:84294728 r9:00000001 r8:8425ea00 r7:ffffffff r6:00000000 r5:85e17088 [ 253.104080][ T23] r4:85e17000 [ 253.104240][ T23] [<802140f4>] (usb_new_device.part.0) from [<80f7d310>] (hub_event+0x1254/0x1bac) [ 253.104675][ T23] r10:84294728 r9:85e17000 r8:00000000 r7:00000000 r6:00000001 r5:83e1b000 [ 253.105046][ T23] r4:85e17088 [ 253.105238][ T23] [<80f7c0bc>] (hub_event) from [<80277154>] (process_one_work+0x1f8/0x5cc) [ 253.105606][ T23] r10:83368c05 r9:01800000 r8:8318a580 r7:ddde5180 r6:83368c00 r5:84294728 [ 253.105945][ T23] r4:83126480 [ 253.106138][ T23] [<80276f5c>] (process_one_work) from [<80277e7c>] (worker_thread+0x16c/0x318) [ 253.106566][ T23] r10:ddde5180 r9:831264b0 r8:8318a580 r7:82a03d80 r6:ddde51a0 r5:ddde5180 [ 253.106937][ T23] r4:83126480 [ 253.107153][ T23] [<80277d10>] (worker_thread) from [<802828c4>] (kthread+0x11c/0x154) [ 253.107571][ T23] r10:00000000 r9:df819d10 r8:83126400 r7:83126480 r6:80277d10 r5:8318a580 [ 253.107885][ T23] r4:831221c0 [ 253.108062][ T23] [<802827a8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 253.108450][ T23] Exception stack(0xdf879fb0 to 0xdf879ff8) [ 253.108785][ T23] 9fa0: 00000000 00000000 00000000 00000000 [ 253.109198][ T23] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 253.109546][ T23] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 253.109938][ T23] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802827a8 r4:831221c0 [ 253.112331][ T23] Rebooting in 86400 seconds..