last executing test programs: 30.252331661s ago: executing program 0 (id=3392): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0x18, &(0x7f0000000000)="0e", 0x1) 29.99959488s ago: executing program 0 (id=3393): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 28.761067544s ago: executing program 0 (id=3394): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0x3, "aa3d39"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) 28.542375829s ago: executing program 0 (id=3395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x200) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00', 0x8000}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 28.3641159s ago: executing program 0 (id=3396): r0 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(r1) r4 = dup(r0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 9.027477972s ago: executing program 0 (id=3401): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x20, 0x14}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, 0x0, &(0x7f00000004c0)={0x20, 0x82, 0x1, '\v'}, &(0x7f0000000500)={0x20, 0x83, 0x2, "ba2a"}, &(0x7f0000000540)={0x20, 0x84, 0x1, "d6"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "8d7cba"}}) 2.921655381s ago: executing program 1 (id=3411): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800e2"], &(0x7f0000001b00)=""/3, 0x3b, 0x3, 0x1, 0x5}, 0x28) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) fanotify_init(0x20, 0x1) 2.790882226s ago: executing program 1 (id=3412): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, 0x0) 2.67230062s ago: executing program 1 (id=3413): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 272.305278ms ago: executing program 1 (id=3414): r0 = memfd_create(&(0x7f0000000240)='\x00\x00\x00\x00\x00\xf7z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x00\x00\x00\x00\x00\n\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a4\x01\x00\x00\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\x9d\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95\xa7o*\xd5\xbf*\xfd\xc7\x14\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)\x82\xdf\xa4\xbcv\x9ca\xe4H,\x9aN\x8e{V\xf2\xb7\x96<\xc2\xe1d\x1c\\y~)\x91KI\xa23\x16\x85F\xd9e\x1a\x92gWh\xd5u\xca\x1di\x1e\xe4\x90D\xf3\xf8\xc4\xf5U@\xa6\xb8\xf1\xa0\x8b\xf8\xaa\xe5\xcf\x99tI\x89\x12r\f\xb55\x00\x00\x00\x0f\x95W\xa1\xd7\xf1F\x8f*\xad\xef\xb6#\xea\xc5\x13j\x03\xeb\xbf7\x95WO\x13\x93q\nwY\x12/N\xaay_\xfcXH\xfb\xd0\x83h~b:\x05\x9al0\xd5\x01\xdc\x8f\xfc\x84P\x01\x87\x05\xae\xc0\x06`\x87\x8f\x9cq', 0x7) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x201, 0x48001002, r2, 0x0) 128.903015ms ago: executing program 1 (id=3415): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0x3, "aa3d39"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=3416): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) kernel console output (not intermixed with test programs): 0 r4:ea459fb0 [ 1103.848217][T11390] [<8022b428>] (sys_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1103.848268][T11390] Exception stack(0xea459fa8 to 0xea459ff0) [ 1103.848311][T11390] 9fa0: 00000000 00000000 00000011 20000000 00000000 00000000 [ 1103.848350][T11390] 9fc0: 00000000 00000000 0012f474 00000077 003562d8 00000000 00000001 76fe60dc [ 1103.848380][T11390] 9fe0: 76fe5e88 76fe5b80 000f3be0 000f3be8 [ 1103.848409][T11390] r5:00000000 r4:00000000 [ 1106.690835][T11404] binfmt_misc: register: failed to install interpreter ./file0 [ 1111.900970][T11424] binfmt_misc: register: failed to install interpreter ./file0 [ 1113.707495][T11433] FAULT_INJECTION: forcing a failure. [ 1113.707495][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.707676][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.0.2301 Tainted: G L syzkaller #0 PREEMPT [ 1113.707736][T11433] Tainted: [L]=SOFTLOCKUP [ 1113.707753][T11433] Hardware name: ARM-Versatile Express [ 1113.707775][T11433] Call trace: [ 1113.707816][T11433] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1113.707923][T11433] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1113.707943][T11433] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1113.708000][T11433] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1113.708065][T11433] r7:00000088 r6:00000000 r5:8332cb00 r4:82b1601c [ 1113.708082][T11433] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1113.708145][T11433] [<80a20d6c>] (should_fail_ex) from [<8057a488>] (should_failslab+0x6c/0x94) [ 1113.708221][T11433] r8:8332cb00 r7:00000088 r6:805c2c48 r5:00400dc0 r4:83001f00 [ 1113.708238][T11433] [<8057a41c>] (should_failslab) from [<80559eec>] (__kmalloc_cache_noprof+0x58/0x338) [ 1113.708295][T11433] [<80559e94>] (__kmalloc_cache_noprof) from [<805c2c48>] (alloc_pipe_info+0x6c/0x22c) [ 1113.708371][T11433] r10:85828601 r9:82b19430 r8:85828600 r7:00100000 r6:8332cb00 r5:82a1e280 [ 1113.708393][T11433] r4:00000000 [ 1113.708409][T11433] [<805c2bdc>] (alloc_pipe_info) from [<80606bc8>] (splice_direct_to_actor+0x250/0x2dc) [ 1113.708522][T11433] r9:00000000 r8:85828600 r7:00000000 r6:8332cb00 r5:ea705e90 r4:00000000 [ 1113.708546][T11433] [<80606978>] (splice_direct_to_actor) from [<80606dbc>] (do_splice_direct+0x88/0xcc) [ 1113.708628][T11433] r10:85828601 r9:00000000 r8:860b7780 r7:00000000 r6:00000000 r5:00000000 [ 1113.708654][T11433] r4:ea705f10 [ 1113.708673][T11433] [<80606d34>] (do_splice_direct) from [<805b316c>] (do_sendfile+0x3a8/0x448) [ 1113.708798][T11433] r7:00000006 r6:85828600 r5:8332cb00 r4:00000000 [ 1113.708821][T11433] [<805b2dc4>] (do_sendfile) from [<805b5224>] (sys_sendfile64+0x110/0x144) [ 1113.708900][T11433] r10:000000ef r9:00000006 r8:00000003 r7:00000000 r6:00000000 r5:00000004 [ 1113.708923][T11433] r4:00000000 [ 1113.708940][T11433] [<805b5114>] (sys_sendfile64) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1113.708994][T11433] Exception stack(0xea705fa8 to 0xea705ff0) [ 1113.709034][T11433] 5fa0: 00000000 00000000 00000004 00000003 00000000 00000006 [ 1113.709068][T11433] 5fc0: 00000000 00000000 0012f474 000000ef 003562d8 00000000 00000001 76f180dc [ 1113.709094][T11433] 5fe0: 76f17e88 76f17e78 00018fb8 00130a70 [ 1113.709133][T11433] r10:000000ef r9:8332cb00 r8:8020029c r7:000000ef r6:0012f474 r5:00000000 [ 1113.709153][T11433] r4:00000000 [ 1113.832765][ T28] audit: type=1400 audit(1113.770:398): avc: denied { create } for pid=11434 comm="syz.0.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1133.828000][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.892892][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.000027][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.065309][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.544970][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.567117][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.584146][ T52] bond0 (unregistering): Released all slaves [ 1134.653129][ T52] hsr_slave_0: left promiscuous mode [ 1134.658166][ T52] hsr_slave_1: left promiscuous mode [ 1134.674344][ T52] veth1_macvtap: left promiscuous mode [ 1134.674528][ T52] veth0_macvtap: left promiscuous mode [ 1134.674698][ T52] veth1_vlan: left promiscuous mode [ 1134.674831][ T52] veth0_vlan: left promiscuous mode [ 1135.413818][ T28] audit: type=1400 audit(1135.350:399): avc: denied { write } for pid=11531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.084032][ T28] audit: type=1400 audit(1136.020:400): avc: denied { write } for pid=11563 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.305952][ T2966] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1137.013705][ T28] audit: type=1400 audit(1136.950:401): avc: denied { write } for pid=11591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.455582][ T28] audit: type=1400 audit(1137.390:402): avc: denied { write } for pid=11644 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.722668][ T2966] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1137.881848][T11496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.887671][T11496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.954992][ T28] audit: type=1400 audit(1138.890:403): avc: denied { write } for pid=11688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.409969][ T28] audit: type=1400 audit(1139.340:404): avc: denied { write } for pid=11717 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.460849][T11496] hsr_slave_0: entered promiscuous mode [ 1139.461652][T11496] hsr_slave_1: entered promiscuous mode [ 1139.462015][T11496] debugfs: 'hsr0' already exists in 'hsr' [ 1139.462044][T11496] Cannot create hsr debugfs directory [ 1139.673545][ T2966] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1140.292433][T11496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1140.310773][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1140.313878][T11496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1140.327228][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1140.331088][T11496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1140.342652][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1140.351104][T11496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1140.357266][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1140.366429][ T28] audit: type=1400 audit(1140.300:405): avc: denied { write } for pid=11826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.822913][ T28] audit: type=1400 audit(1140.760:406): avc: denied { write } for pid=11848 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.682177][T11496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.221199][ T28] audit: type=1400 audit(1142.160:407): avc: denied { write } for pid=11868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1142.680084][ T28] audit: type=1400 audit(1142.620:408): avc: denied { write } for pid=11878 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.161673][ T28] audit: type=1400 audit(1143.100:409): avc: denied { write } for pid=11884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.522882][ T28] audit: type=1400 audit(1143.460:410): avc: denied { write } for pid=11891 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.123972][ T28] audit: type=1400 audit(1144.060:411): avc: denied { write } for pid=11897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.322171][ T28] audit: type=1400 audit(1144.260:412): avc: denied { write } for pid=11903 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.002553][ T28] audit: type=1400 audit(1144.940:413): avc: denied { write } for pid=11912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.586094][ T28] audit: type=1400 audit(1145.520:414): avc: denied { write } for pid=11926 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.104360][T11496] veth0_vlan: entered promiscuous mode [ 1146.136345][T11496] veth1_vlan: entered promiscuous mode [ 1146.237758][T11496] veth0_macvtap: entered promiscuous mode [ 1146.248230][T11496] veth1_macvtap: entered promiscuous mode [ 1146.304320][ T28] audit: type=1400 audit(1146.240:415): avc: denied { write } for pid=11934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.434367][ T7037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.434552][ T7037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.434629][ T7037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.434698][ T7037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.674822][ T28] audit: type=1400 audit(1146.610:416): avc: denied { write } for pid=11942 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.507181][ T28] audit: type=1400 audit(1147.440:417): avc: denied { write } for pid=11950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.852409][ T28] audit: type=1400 audit(1147.790:418): avc: denied { write } for pid=11959 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.134819][T11964] FAULT_INJECTION: forcing a failure. [ 1148.134819][T11964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.134990][T11964] CPU: 1 UID: 0 PID: 11964 Comm: syz.0.2357 Tainted: G L syzkaller #0 PREEMPT [ 1148.135055][T11964] Tainted: [L]=SOFTLOCKUP [ 1148.135073][T11964] Hardware name: ARM-Versatile Express [ 1148.135094][T11964] Call trace: [ 1148.135136][T11964] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1148.135237][T11964] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1148.135257][T11964] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1148.135311][T11964] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1148.135375][T11964] r7:20002b00 r6:00000000 r5:84fd7080 r4:82b51fb8 [ 1148.135392][T11964] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1148.135461][T11964] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1148.135531][T11964] r8:0004c000 r7:20002b00 r6:ebb6de30 r5:00000000 r4:ebb6df28 [ 1148.135548][T11964] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1148.135612][T11964] [<80a20fa0>] (should_fail_usercopy) from [<81668714>] (copy_msghdr_from_user+0x50/0x1e0) [ 1148.135678][T11964] [<816686c4>] (copy_msghdr_from_user) from [<8166891c>] (___sys_sendmsg+0x78/0xd0) [ 1148.135752][T11964] r8:0004c000 r7:00000000 r6:836f9bc0 r5:ebb6df28 r4:ebb6de74 [ 1148.135776][T11964] [<816688a4>] (___sys_sendmsg) from [<8166ab60>] (__sys_sendmsg+0x8c/0xe0) [ 1148.135854][T11964] r9:84fd7080 r8:86041800 r7:0004c000 r6:20002b00 r5:86041801 r4:00000003 [ 1148.135875][T11964] [<8166aad4>] (__sys_sendmsg) from [<8166abc8>] (sys_sendmsg+0x14/0x18) [ 1148.135948][T11964] r8:8020029c r7:00000128 r6:0012f474 r5:00000000 r4:00000000 [ 1148.135967][T11964] [<8166abb4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1148.136018][T11964] Exception stack(0xebb6dfa8 to 0xebb6dff0) [ 1148.136064][T11964] dfa0: 00000000 00000000 00000003 20002b00 0004c000 00000000 [ 1148.136109][T11964] dfc0: 00000000 00000000 0012f474 00000128 003562d8 00000000 00000001 76f180dc [ 1148.136141][T11964] dfe0: 76f17e88 76f17e78 00018fb8 00130a70 [ 1148.295636][ T28] audit: type=1400 audit(1148.230:419): avc: denied { write } for pid=11963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.683102][ T28] audit: type=1400 audit(1148.620:420): avc: denied { write } for pid=11969 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.203556][ T28] audit: type=1400 audit(1149.140:421): avc: denied { write } for pid=11973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.474480][ T28] audit: type=1400 audit(1149.410:422): avc: denied { write } for pid=11977 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.899626][T11982] binfmt_misc: register: failed to install interpreter ./file0 [ 1150.329616][ T28] audit: type=1400 audit(1150.260:423): avc: denied { write } for pid=11981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1150.608257][ T28] audit: type=1400 audit(1150.540:424): avc: denied { write } for pid=11989 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.521863][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1151.521982][ T28] audit: type=1400 audit(1151.460:426): avc: denied { write } for pid=11997 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1156.679750][T12020] binfmt_misc: register: failed to install interpreter ./file0 [ 1161.095117][T12044] binfmt_misc: register: failed to install interpreter ./file0 [ 1163.648941][ T5393] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1163.809477][ T5393] usb 1-1: Using ep0 maxpacket: 8 [ 1163.815980][ T5393] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1163.837580][ T5393] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 1163.850878][ T5393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.850928][ T5393] usb 1-1: Product: 菹铜 [ 1163.850947][ T5393] usb 1-1: Manufacturer: 됬邒갵笆뜱㴑曄㈅滲毇骛눯๔㊏燱塽뀑⇊㒸嵾늇︃䒈绛㐐壗襱ᠯ姱벽袢ꄶ쪷ꎯ䌋璇移۝ྡᢲጆ [ 1163.850973][ T5393] usb 1-1: SerialNumber: 骇玜䃤눎熏庹蕬ѯ돕쫇②䩀容相猕ó鶪팜叒成託遲틈Ꟛ볽湪댡⌝韟 [ 1163.879994][T12048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1164.321994][ T5393] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1164.434155][ T5393] usb 1-1: USB disconnect, device number 23 [ 1164.596250][T12092] binfmt_misc: register: failed to install interpreter ./file0 [ 1165.897418][T12105] FAULT_INJECTION: forcing a failure. [ 1165.897418][T12105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.897592][T12105] CPU: 1 UID: 0 PID: 12105 Comm: syz.0.2390 Tainted: G L syzkaller #0 PREEMPT [ 1165.897659][T12105] Tainted: [L]=SOFTLOCKUP [ 1165.897679][T12105] Hardware name: ARM-Versatile Express [ 1165.897703][T12105] Call trace: [ 1165.897746][T12105] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1165.897854][T12105] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1165.897875][T12105] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1165.897932][T12105] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1165.897996][T12105] r7:200030c0 r6:00000000 r5:84848000 r4:82b51fb8 [ 1165.898016][T12105] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1165.898092][T12105] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1165.898163][T12105] r8:2bf41ad1 r7:200030c0 r6:ec175e30 r5:00000000 r4:ec175f28 [ 1165.898181][T12105] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1165.898237][T12105] [<80a20fa0>] (should_fail_usercopy) from [<81668714>] (copy_msghdr_from_user+0x50/0x1e0) [ 1165.898299][T12105] [<816686c4>] (copy_msghdr_from_user) from [<8166891c>] (___sys_sendmsg+0x78/0xd0) [ 1165.898364][T12105] r8:2bf41ad1 r7:00000000 r6:8530cf40 r5:ec175f28 r4:ec175e74 [ 1165.898379][T12105] [<816688a4>] (___sys_sendmsg) from [<8166ab60>] (__sys_sendmsg+0x8c/0xe0) [ 1165.898447][T12105] r9:84848000 r8:86041800 r7:2bf41ad1 r6:200030c0 r5:86041801 r4:00000003 [ 1165.898463][T12105] [<8166aad4>] (__sys_sendmsg) from [<8166abc8>] (sys_sendmsg+0x14/0x18) [ 1165.898580][T12105] r8:8020029c r7:00000128 r6:0012f474 r5:00000000 r4:00000000 [ 1165.898598][T12105] [<8166abb4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1165.898649][T12105] Exception stack(0xec175fa8 to 0xec175ff0) [ 1165.898697][T12105] 5fa0: 00000000 00000000 00000003 200030c0 2bf41ad1 00000000 [ 1165.898738][T12105] 5fc0: 00000000 00000000 0012f474 00000128 003562d8 00000000 00000001 76f180dc [ 1165.898770][T12105] 5fe0: 76f17e88 76f17e78 00018fb8 00130a70 [ 1168.153087][T12124] binfmt_misc: register: failed to install interpreter ./file0 [ 1171.912534][ T28] audit: type=1400 audit(1171.850:427): avc: denied { bind } for pid=12159 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1171.914826][ T28] audit: type=1400 audit(1171.850:428): avc: denied { connect } for pid=12159 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1181.742744][T11941] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.830374][T11941] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.909456][T11941] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.975377][T11941] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.341838][T11941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.346048][T11941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.348364][T11941] bond0 (unregistering): Released all slaves [ 1182.393851][T11941] hsr_slave_0: left promiscuous mode [ 1182.403172][T11941] hsr_slave_1: left promiscuous mode [ 1182.411735][T11941] veth1_macvtap: left promiscuous mode [ 1182.411872][T11941] veth0_macvtap: left promiscuous mode [ 1182.412036][T11941] veth1_vlan: left promiscuous mode [ 1182.412125][T11941] veth0_vlan: left promiscuous mode [ 1183.279510][ T28] audit: type=1400 audit(1183.210:429): avc: denied { write } for pid=12307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.539231][ T28] audit: type=1400 audit(1183.470:430): avc: denied { write } for pid=12331 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.734694][ T2966] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1184.097369][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.114818][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.667386][ T28] audit: type=1400 audit(1184.600:431): avc: denied { write } for pid=12423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1184.957940][ T28] audit: type=1400 audit(1184.890:432): avc: denied { write } for pid=12447 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1185.139340][ T2966] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1185.266234][T12253] hsr_slave_0: entered promiscuous mode [ 1185.274471][T12253] hsr_slave_1: entered promiscuous mode [ 1185.797676][ T28] audit: type=1400 audit(1185.730:433): avc: denied { write } for pid=12531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1185.933612][T12253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1185.938406][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1185.941295][T12253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1185.950160][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1185.951869][T12253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1185.954877][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1185.956995][T12253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1185.963336][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1186.022678][ T28] audit: type=1400 audit(1185.960:434): avc: denied { write } for pid=12561 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1186.623289][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.050571][ T28] audit: type=1400 audit(1186.980:435): avc: denied { write } for pid=12586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1187.374914][ T28] audit: type=1400 audit(1187.310:436): avc: denied { write } for pid=12598 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1187.819803][ T28] audit: type=1400 audit(1187.750:437): avc: denied { write } for pid=12602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1188.187870][ T28] audit: type=1400 audit(1188.120:438): avc: denied { write } for pid=12607 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1188.593928][ T28] audit: type=1400 audit(1188.530:439): avc: denied { write } for pid=12614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1188.782374][ T28] audit: type=1400 audit(1188.720:440): avc: denied { write } for pid=12621 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.199166][ T28] audit: type=1400 audit(1189.130:441): avc: denied { write } for pid=12625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.370587][ T28] audit: type=1400 audit(1189.310:442): avc: denied { write } for pid=12634 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.824963][T12253] veth0_vlan: entered promiscuous mode [ 1189.889404][T12253] veth1_vlan: entered promiscuous mode [ 1189.962929][T12253] veth0_macvtap: entered promiscuous mode [ 1189.981064][ T28] audit: type=1400 audit(1189.920:443): avc: denied { write } for pid=12644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.983094][T12253] veth1_macvtap: entered promiscuous mode [ 1190.142281][ T7037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.143521][ T7037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.143680][ T7037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.143765][ T7037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.442623][ T28] audit: type=1400 audit(1190.380:444): avc: denied { write } for pid=12651 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1190.670392][ T3646] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1190.764336][ T28] audit: type=1400 audit(1190.700:445): avc: denied { write } for pid=12658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1190.829447][ T3646] usb 1-1: Using ep0 maxpacket: 8 [ 1190.845847][ T3646] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1190.862586][ T3646] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 1190.891973][ T3646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.892099][ T3646] usb 1-1: Product: 菹铜 [ 1190.892138][ T3646] usb 1-1: Manufacturer: 됬邒갵笆뜱㴑曄㈅滲毇骛눯๔㊏燱塽뀑⇊㒸嵾늇︃䒈绛㐐壗襱ᠯ姱벽袢ꄶ쪷ꎯ䌋璇移۝ྡᢲጆ [ 1190.892173][ T3646] usb 1-1: SerialNumber: 骇玜䃤눎熏庹蕬ѯ돕쫇②䩀容相猕ó鶪팜叒成託遲틈Ꟛ볽湪댡⌝韟 [ 1190.913162][T12653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1191.209864][ T28] audit: type=1400 audit(1191.140:446): avc: denied { write } for pid=12663 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.351131][ T3646] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1191.450769][ T3646] usb 1-1: USB disconnect, device number 24 [ 1193.079257][ T3720] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1193.239817][ T3720] usb 2-1: Using ep0 maxpacket: 8 [ 1193.270987][ T3720] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1193.286894][ T3720] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 1193.310244][ T3720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.310360][ T3720] usb 2-1: Product: 菹铜 [ 1193.310400][ T3720] usb 2-1: Manufacturer: 됬邒갵笆뜱㴑曄㈅滲毇骛눯๔㊏燱塽뀑⇊㒸嵾늇︃䒈绛㐐壗襱ᠯ姱벽袢ꄶ쪷ꎯ䌋璇移۝ྡᢲጆ [ 1193.310433][ T3720] usb 2-1: SerialNumber: 骇玜䃤눎熏庹蕬ѯ돕쫇②䩀容相猕ó鶪팜叒成託遲틈Ꟛ볽湪댡⌝韟 [ 1193.317890][T12705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1193.753721][ T3720] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1193.805454][ T3720] usb 2-1: USB disconnect, device number 16 [ 1193.964855][T12740] comedi: valid board names for 8255 driver are: [ 1193.964938][T12740] 8255 [ 1193.964970][T12740] comedi: valid board names for vmk80xx driver are: [ 1193.964990][T12740] vmk80xx [ 1193.965004][T12740] comedi: valid board names for usbduxsigma driver are: [ 1193.965018][T12740] usbduxsigma [ 1193.965030][T12740] comedi: valid board names for usbduxfast driver are: [ 1193.965047][T12740] usbduxfast [ 1193.965058][T12740] comedi: valid board names for usbdux driver are: [ 1193.965071][T12740] usbdux [ 1193.965083][T12740] comedi: valid board names for ni6501 driver are: [ 1193.965098][T12740] ni6501 [ 1193.965111][T12740] comedi: valid board names for dt9812 driver are: [ 1193.965124][T12740] dt9812 [ 1193.965146][T12740] comedi: valid board names for ni_labpc_cs driver are: [ 1193.965161][T12740] ni_labpc_cs [ 1193.965176][T12740] comedi: valid board names for ni_daq_700 driver are: [ 1193.965190][T12740] ni_daq_700 [ 1193.965204][T12740] comedi: valid board names for labpc_pci driver are: [ 1193.965218][T12740] labpc_pci [ 1193.965230][T12740] comedi: valid board names for adl_pci9118 driver are: [ 1193.965257][T12740] pci9118dg [ 1193.965295][T12740] pci9118hg [ 1193.965310][T12740] pci9118hr [ 1193.965323][T12740] comedi: valid board names for 8255_pci driver are: [ 1193.965338][T12740] 8255_pci [ 1193.965352][T12740] comedi: valid board names for comedi_parport driver are: [ 1193.965365][T12740] comedi_parport [ 1193.965379][T12740] comedi: valid board names for comedi_test driver are: [ 1193.965393][T12740] comedi_test [ 1193.965407][T12740] comedi: valid board names for comedi_bond driver are: [ 1193.965421][T12740] comedi_bond [ 1201.612009][T12799] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12799 comm=syz.1.2474 [ 1203.083113][ T28] audit: type=1400 audit(1203.020:447): avc: denied { getopt } for pid=12807 comm="syz.0.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1219.313073][T12903] FAULT_INJECTION: forcing a failure. [ 1219.313073][T12903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.313159][T12903] CPU: 0 UID: 0 PID: 12903 Comm: syz.0.2505 Tainted: G L syzkaller #0 PREEMPT [ 1219.313194][T12903] Tainted: [L]=SOFTLOCKUP [ 1219.313202][T12903] Hardware name: ARM-Versatile Express [ 1219.313213][T12903] Call trace: [ 1219.313235][T12903] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1219.313292][T12903] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1219.313301][T12903] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1219.313328][T12903] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1219.313359][T12903] r7:00000000 r6:00000000 r5:84fd1900 r4:82b51fb8 [ 1219.313366][T12903] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1219.313397][T12903] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1219.313430][T12903] r8:76fa8f08 r7:00000000 r6:00000000 r5:dfa05f68 r4:00000002 [ 1219.313438][T12903] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1219.313464][T12903] [<80a20fa0>] (should_fail_usercopy) from [<805f584c>] (simple_read_from_buffer+0x80/0x140) [ 1219.313494][T12903] [<805f57cc>] (simple_read_from_buffer) from [<8067bc60>] (proc_fail_nth_read+0xb8/0x10c) [ 1219.313540][T12903] r10:8067bba8 r9:00000001 r8:00000002 r7:dfa05f68 r6:0000000f r5:76fa8f08 [ 1219.313551][T12903] r4:84fd1900 r3:dfa05e9f [ 1219.313558][T12903] [<8067bba8>] (proc_fail_nth_read) from [<805b3e94>] (vfs_read+0xc0/0x328) [ 1219.313607][T12903] r8:84fd1900 r7:dfa05f68 r6:76fa8f08 r5:85829a00 r4:0000000f [ 1219.313618][T12903] [<805b3dd4>] (vfs_read) from [<805b4ae0>] (ksys_read+0x74/0xec) [ 1219.313653][T12903] r10:00000003 r9:84fd1900 r8:8020029c r7:00000000 r6:00000000 r5:85829a00 [ 1219.313663][T12903] r4:85829a03 [ 1219.313671][T12903] [<805b4a6c>] (ksys_read) from [<805b4b68>] (sys_read+0x10/0x14) [ 1219.313705][T12903] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1219.313712][T12903] [<805b4b58>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1219.313736][T12903] Exception stack(0xdfa05fa8 to 0xdfa05ff0) [ 1219.313757][T12903] 5fa0: 00000000 00000000 00000004 76fa8f08 0000000f 00000000 [ 1219.313775][T12903] 5fc0: 00000000 00000000 00000000 00000003 00356378 00000000 003d0f00 76fa90dc [ 1219.313789][T12903] 5fe0: 76fa8e58 76fa8e44 0010bc94 00112878 [ 1225.232460][ T28] audit: type=1400 audit(1225.170:448): avc: denied { write } for pid=12956 comm="syz.0.2528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1232.781329][ T28] audit: type=1400 audit(1232.720:449): avc: denied { mounton } for pid=13006 comm="syz.0.2544" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1232.782002][T13007] tmpfs: Unknown parameter 'Gv`J' [ 1233.340611][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=13012 comm=syz.0.2544 [ 1236.818299][T13026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13026 comm=syz.0.2551 [ 1236.829508][T13026] FAULT_INJECTION: forcing a failure. [ 1236.829508][T13026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.829654][T13026] CPU: 0 UID: 0 PID: 13026 Comm: syz.0.2551 Tainted: G L syzkaller #0 PREEMPT [ 1236.829716][T13026] Tainted: [L]=SOFTLOCKUP [ 1236.829735][T13026] Hardware name: ARM-Versatile Express [ 1236.829757][T13026] Call trace: [ 1236.829800][T13026] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1236.829901][T13026] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1236.829921][T13026] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1236.829976][T13026] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1236.830039][T13026] r7:00000000 r6:00000000 r5:83feb200 r4:82b51fb8 [ 1236.830066][T13026] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1236.830129][T13026] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1236.830199][T13026] r8:76fc9f08 r7:00000000 r6:00000000 r5:ea435f68 r4:00000002 [ 1236.830216][T13026] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1236.830271][T13026] [<80a20fa0>] (should_fail_usercopy) from [<805f584c>] (simple_read_from_buffer+0x80/0x140) [ 1236.830333][T13026] [<805f57cc>] (simple_read_from_buffer) from [<8067bc60>] (proc_fail_nth_read+0xb8/0x10c) [ 1236.830411][T13026] r10:8067bba8 r9:00000001 r8:00000002 r7:ea435f68 r6:0000000f r5:76fc9f08 [ 1236.830435][T13026] r4:83feb200 r3:ea435e9f [ 1236.830451][T13026] [<8067bba8>] (proc_fail_nth_read) from [<805b3e94>] (vfs_read+0xc0/0x328) [ 1236.830524][T13026] r8:83feb200 r7:ea435f68 r6:76fc9f08 r5:860b7580 r4:0000000f [ 1236.830542][T13026] [<805b3dd4>] (vfs_read) from [<805b4ae0>] (ksys_read+0x74/0xec) [ 1236.830612][T13026] r10:00000003 r9:83feb200 r8:8020029c r7:00000000 r6:00000000 r5:860b7580 [ 1236.830636][T13026] r4:860b7583 [ 1236.830652][T13026] [<805b4a6c>] (ksys_read) from [<805b4b68>] (sys_read+0x10/0x14) [ 1236.830719][T13026] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1236.830735][T13026] [<805b4b58>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1236.830781][T13026] Exception stack(0xea435fa8 to 0xea435ff0) [ 1236.830821][T13026] 5fa0: 00000000 00000000 00000005 76fc9f08 0000000f 00000000 [ 1236.830858][T13026] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fca0dc [ 1236.830886][T13026] 5fe0: 76fc9e58 76fc9e44 0010bc94 00112878 [ 1237.362321][ T3720] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1237.549256][ T3720] usb 1-1: Using ep0 maxpacket: 8 [ 1237.585349][ T3720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1237.585560][ T3720] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1237.629645][ T3720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.629758][ T3720] usb 1-1: Product: syz [ 1237.629795][ T3720] usb 1-1: Manufacturer: syz [ 1237.629822][ T3720] usb 1-1: SerialNumber: syz [ 1237.890392][ T3720] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1237.890635][ T3720] usb 1-1: MIDIStreaming interface descriptor not found [ 1237.993739][ T3720] usb 1-1: USB disconnect, device number 25 [ 1238.729768][ T3646] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1238.879445][ T3646] usb 1-1: Using ep0 maxpacket: 8 [ 1238.917061][ T3646] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1238.917200][ T3646] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1238.996797][ T3646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.996910][ T3646] usb 1-1: Product: syz [ 1238.996945][ T3646] usb 1-1: Manufacturer: syz [ 1238.996974][ T3646] usb 1-1: SerialNumber: syz [ 1239.266649][ T3646] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.266774][ T3646] usb 1-1: MIDIStreaming interface descriptor not found [ 1239.342247][ T3646] usb 1-1: USB disconnect, device number 26 [ 1241.499385][ T3646] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1241.649572][ T3646] usb 2-1: Using ep0 maxpacket: 8 [ 1241.693472][ T3646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1241.693636][ T3646] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1241.754399][ T3646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.754516][ T3646] usb 2-1: Product: syz [ 1241.754561][ T3646] usb 2-1: Manufacturer: syz [ 1241.754591][ T3646] usb 2-1: SerialNumber: syz [ 1241.996355][ T3646] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1241.996460][ T3646] usb 2-1: MIDIStreaming interface descriptor not found [ 1242.067006][ T3646] usb 2-1: USB disconnect, device number 17 [ 1243.967168][T13160] FAULT_INJECTION: forcing a failure. [ 1243.967168][T13160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.967329][T13160] CPU: 0 UID: 0 PID: 13160 Comm: syz.1.2571 Tainted: G L syzkaller #0 PREEMPT [ 1243.967403][T13160] Tainted: [L]=SOFTLOCKUP [ 1243.967429][T13160] Hardware name: ARM-Versatile Express [ 1243.967456][T13160] Call trace: [ 1243.967503][T13160] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1243.967613][T13160] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1243.967651][T13160] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1243.967715][T13160] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1243.967782][T13160] r7:00000000 r6:00000000 r5:84829900 r4:82b51fb8 [ 1243.967800][T13160] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1243.967871][T13160] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1243.967957][T13160] r8:76f0ff08 r7:00000000 r6:00000000 r5:ea5a9f68 r4:00000002 [ 1243.967982][T13160] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1243.968043][T13160] [<80a20fa0>] (should_fail_usercopy) from [<805f584c>] (simple_read_from_buffer+0x80/0x140) [ 1243.968108][T13160] [<805f57cc>] (simple_read_from_buffer) from [<8067bc60>] (proc_fail_nth_read+0xb8/0x10c) [ 1243.968196][T13160] r10:8067bba8 r9:00000001 r8:00000002 r7:ea5a9f68 r6:0000000f r5:76f0ff08 [ 1243.968223][T13160] r4:84829900 r3:ea5a9e9f [ 1243.968240][T13160] [<8067bba8>] (proc_fail_nth_read) from [<805b3e94>] (vfs_read+0xc0/0x328) [ 1243.968321][T13160] r8:84829900 r7:ea5a9f68 r6:76f0ff08 r5:86036b80 r4:0000000f [ 1243.968340][T13160] [<805b3dd4>] (vfs_read) from [<805b4ae0>] (ksys_read+0x74/0xec) [ 1243.968410][T13160] r10:00000003 r9:84829900 r8:8020029c r7:00000000 r6:00000000 r5:86036b80 [ 1243.968432][T13160] r4:86036b83 [ 1243.968447][T13160] [<805b4a6c>] (ksys_read) from [<805b4b68>] (sys_read+0x10/0x14) [ 1243.968567][T13160] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1243.968612][T13160] [<805b4b58>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1243.968689][T13160] Exception stack(0xea5a9fa8 to 0xea5a9ff0) [ 1243.968766][T13160] 9fa0: 00000000 00000000 00000004 76f0ff08 0000000f 00000000 [ 1243.968818][T13160] 9fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f100dc [ 1243.968916][T13160] 9fe0: 76f0fe58 76f0fe44 0010bc94 00112878 [ 1245.265616][T13177] comedi: valid board names for 8255 driver are: [ 1245.265709][T13177] 8255 [ 1245.265727][T13177] comedi: valid board names for vmk80xx driver are: [ 1245.265748][T13177] vmk80xx [ 1245.265763][T13177] comedi: valid board names for usbduxsigma driver are: [ 1245.265780][T13177] usbduxsigma [ 1245.265795][T13177] comedi: valid board names for usbduxfast driver are: [ 1245.265813][T13177] usbduxfast [ 1245.265828][T13177] comedi: valid board names for usbdux driver are: [ 1245.265845][T13177] usbdux [ 1245.265860][T13177] comedi: valid board names for ni6501 driver are: [ 1245.265876][T13177] ni6501 [ 1245.265891][T13177] comedi: valid board names for dt9812 driver are: [ 1245.265908][T13177] dt9812 [ 1245.265923][T13177] comedi: valid board names for ni_labpc_cs driver are: [ 1245.265946][T13177] ni_labpc_cs [ 1245.265962][T13177] comedi: valid board names for ni_daq_700 driver are: [ 1245.265978][T13177] ni_daq_700 [ 1245.265995][T13177] comedi: valid board names for labpc_pci driver are: [ 1245.266014][T13177] labpc_pci [ 1245.266028][T13177] comedi: valid board names for adl_pci9118 driver are: [ 1245.266044][T13177] pci9118dg [ 1245.266058][T13177] pci9118hg [ 1245.266073][T13177] pci9118hr [ 1245.266089][T13177] comedi: valid board names for 8255_pci driver are: [ 1245.266104][T13177] 8255_pci [ 1245.266119][T13177] comedi: valid board names for comedi_parport driver are: [ 1245.266135][T13177] comedi_parport [ 1245.266150][T13177] comedi: valid board names for comedi_test driver are: [ 1245.266166][T13177] comedi_test [ 1245.266180][T13177] comedi: valid board names for comedi_bond driver are: [ 1245.266198][T13177] comedi_bond [ 1246.489664][ T3646] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1246.639583][ T3646] usb 2-1: Using ep0 maxpacket: 8 [ 1246.647168][ T3646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1246.647298][ T3646] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1246.666778][ T3646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.666897][ T3646] usb 2-1: Product: syz [ 1246.666931][ T3646] usb 2-1: Manufacturer: syz [ 1246.666961][ T3646] usb 2-1: SerialNumber: syz [ 1247.118074][ T3646] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1247.118208][ T3646] usb 2-1: MIDIStreaming interface descriptor not found [ 1247.211070][ T3646] usb 2-1: USB disconnect, device number 18 [ 1248.321121][T13235] comedi: valid board names for 8255 driver are: [ 1248.321216][T13235] 8255 [ 1248.321233][T13235] comedi: valid board names for vmk80xx driver are: [ 1248.321250][T13235] vmk80xx [ 1248.321263][T13235] comedi: valid board names for usbduxsigma driver are: [ 1248.321278][T13235] usbduxsigma [ 1248.321293][T13235] comedi: valid board names for usbduxfast driver are: [ 1248.321308][T13235] usbduxfast [ 1248.321323][T13235] comedi: valid board names for usbdux driver are: [ 1248.321338][T13235] usbdux [ 1248.321352][T13235] comedi: valid board names for ni6501 driver are: [ 1248.321368][T13235] ni6501 [ 1248.321381][T13235] comedi: valid board names for dt9812 driver are: [ 1248.321396][T13235] dt9812 [ 1248.321419][T13235] comedi: valid board names for ni_labpc_cs driver are: [ 1248.321436][T13235] ni_labpc_cs [ 1248.321452][T13235] comedi: valid board names for ni_daq_700 driver are: [ 1248.321467][T13235] ni_daq_700 [ 1248.321482][T13235] comedi: valid board names for labpc_pci driver are: [ 1248.321499][T13235] labpc_pci [ 1248.321513][T13235] comedi: valid board names for adl_pci9118 driver are: [ 1248.321530][T13235] pci9118dg [ 1248.321544][T13235] pci9118hg [ 1248.321560][T13235] pci9118hr [ 1248.321574][T13235] comedi: valid board names for 8255_pci driver are: [ 1248.321590][T13235] 8255_pci [ 1248.321602][T13235] comedi: valid board names for comedi_parport driver are: [ 1248.321619][T13235] comedi_parport [ 1248.321634][T13235] comedi: valid board names for comedi_test driver are: [ 1248.321649][T13235] comedi_test [ 1248.321662][T13235] comedi: valid board names for comedi_bond driver are: [ 1248.321676][T13235] comedi_bond [ 1251.781795][T13260] comedi: valid board names for 8255 driver are: [ 1251.781889][T13260] 8255 [ 1251.781909][T13260] comedi: valid board names for vmk80xx driver are: [ 1251.781927][T13260] vmk80xx [ 1251.781942][T13260] comedi: valid board names for usbduxsigma driver are: [ 1251.781958][T13260] usbduxsigma [ 1251.781972][T13260] comedi: valid board names for usbduxfast driver are: [ 1251.781988][T13260] usbduxfast [ 1251.782004][T13260] comedi: valid board names for usbdux driver are: [ 1251.782020][T13260] usbdux [ 1251.782035][T13260] comedi: valid board names for ni6501 driver are: [ 1251.782049][T13260] ni6501 [ 1251.782063][T13260] comedi: valid board names for dt9812 driver are: [ 1251.782079][T13260] dt9812 [ 1251.782095][T13260] comedi: valid board names for ni_labpc_cs driver are: [ 1251.782112][T13260] ni_labpc_cs [ 1251.782138][T13260] comedi: valid board names for ni_daq_700 driver are: [ 1251.782156][T13260] ni_daq_700 [ 1251.782171][T13260] comedi: valid board names for labpc_pci driver are: [ 1251.782189][T13260] labpc_pci [ 1251.782204][T13260] comedi: valid board names for adl_pci9118 driver are: [ 1251.782221][T13260] pci9118dg [ 1251.782236][T13260] pci9118hg [ 1251.782251][T13260] pci9118hr [ 1251.782263][T13260] comedi: valid board names for 8255_pci driver are: [ 1251.782279][T13260] 8255_pci [ 1251.782297][T13260] comedi: valid board names for comedi_parport driver are: [ 1251.782314][T13260] comedi_parport [ 1251.782329][T13260] comedi: valid board names for comedi_test driver are: [ 1251.782347][T13260] comedi_test [ 1251.782361][T13260] comedi: valid board names for comedi_bond driver are: [ 1251.782376][T13260] comedi_bond [ 1255.840543][T13295] FAULT_INJECTION: forcing a failure. [ 1255.840543][T13295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1255.840643][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.0.2613 Tainted: G L syzkaller #0 PREEMPT [ 1255.840675][T13295] Tainted: [L]=SOFTLOCKUP [ 1255.840683][T13295] Hardware name: ARM-Versatile Express [ 1255.840694][T13295] Call trace: [ 1255.840751][T13295] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1255.840852][T13295] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1255.840862][T13295] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1255.840889][T13295] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1255.840920][T13295] r7:00000000 r6:00000000 r5:84fccb00 r4:82b16070 [ 1255.840927][T13295] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1255.840957][T13295] [<80a20d6c>] (should_fail_ex) from [<8057a518>] (should_fail_alloc_page+0x68/0x74) [ 1255.840993][T13295] r8:00500cc2 r7:00000000 r6:00500cc2 r5:00000000 r4:00000001 [ 1255.841001][T13295] [<8057a4b0>] (should_fail_alloc_page) from [<80547608>] (__alloc_frozen_pages_noprof+0x130/0x1a68) [ 1255.841029][T13295] [<805474d8>] (__alloc_frozen_pages_noprof) from [<805490a8>] (alloc_pages_node_noprof+0x64/0xf8) [ 1255.841062][T13295] r10:86032f00 r9:00500cc2 r8:00000001 r7:ea961e84 r6:00000000 r5:00500cc2 [ 1255.841072][T13295] r4:00000000 [ 1255.841079][T13295] [<80549044>] (alloc_pages_node_noprof) from [<805c2164>] (anon_pipe_write+0xa8/0x7c4) [ 1255.841135][T13295] r6:ea961e80 r5:863c3300 r4:00000000 [ 1255.841154][T13295] [<805c20bc>] (anon_pipe_write) from [<805b49f8>] (vfs_write+0x3b8/0x42c) [ 1255.841195][T13295] r10:81c27e90 r9:84fccb00 r8:805c20bc r7:00000000 r6:200000c0 r5:86032f00 [ 1255.841205][T13295] r4:00000020 [ 1255.841211][T13295] [<805b4640>] (vfs_write) from [<805b4c38>] (ksys_write+0xcc/0xec) [ 1255.841244][T13295] r10:00000004 r9:84fccb00 r8:8020029c r7:00000020 r6:200000c0 r5:86032f00 [ 1255.841253][T13295] r4:86032f01 [ 1255.841260][T13295] [<805b4b6c>] (ksys_write) from [<805b4c68>] (sys_write+0x10/0x14) [ 1255.841290][T13295] r7:00000004 r6:0012f474 r5:00000000 r4:00000000 [ 1255.841297][T13295] [<805b4c58>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1255.841321][T13295] Exception stack(0xea961fa8 to 0xea961ff0) [ 1255.841341][T13295] 1fa0: 00000000 00000000 00000005 200000c0 00000020 00000000 [ 1255.841359][T13295] 1fc0: 00000000 00000000 0012f474 00000004 00356378 00000000 003d0f00 76fa90dc [ 1255.841372][T13295] 1fe0: 76fa8e88 76fa8e78 00018fb8 00130a70 [ 1257.003750][ T28] audit: type=1400 audit(1256.940:450): avc: denied { block_suspend } for pid=13310 comm="syz.1.2621" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1257.570519][T13311] FAULT_INJECTION: forcing a failure. [ 1257.570519][T13311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.570803][T13311] CPU: 1 UID: 0 PID: 13311 Comm: syz.0.2620 Tainted: G L syzkaller #0 PREEMPT [ 1257.570888][T13311] Tainted: [L]=SOFTLOCKUP [ 1257.570908][T13311] Hardware name: ARM-Versatile Express [ 1257.570934][T13311] Call trace: [ 1257.570978][T13311] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1257.571100][T13311] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1257.571126][T13311] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1257.571185][T13311] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1257.571254][T13311] r7:b5403587 r6:00000000 r5:84fccb00 r4:82b51fb8 [ 1257.571274][T13311] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1257.571347][T13311] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1257.571426][T13311] r8:00000000 r7:b5403587 r6:76fc9c68 r5:00000000 r4:eafb9f0c [ 1257.571447][T13311] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1257.571509][T13311] [<80a20fa0>] (should_fail_usercopy) from [<8022aee4>] (restore_vfp_context+0x3c/0xe0) [ 1257.571571][T13311] [<8022aea8>] (restore_vfp_context) from [<8022b394>] (restore_sigframe+0x17c/0x210) [ 1257.571640][T13311] r6:76fc9c68 r5:00000000 r4:eafb9fb0 [ 1257.571661][T13311] [<8022b218>] (restore_sigframe) from [<8022b468>] (sys_sigreturn+0x40/0x60) [ 1257.571732][T13311] r7:00000077 r6:0012f474 r5:00000000 r4:eafb9fb0 [ 1257.571754][T13311] [<8022b428>] (sys_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1257.571808][T13311] Exception stack(0xeafb9fa8 to 0xeafb9ff0) [ 1257.571854][T13311] 9fa0: 00000000 00000000 fffffffc 20000000 00000000 00000000 [ 1257.571896][T13311] 9fc0: 00000000 00000000 0012f474 00000128 003562d8 00000000 00000001 76fca0dc [ 1257.571928][T13311] 9fe0: 76fc9e88 76fc9e78 00018fb8 00130a70 [ 1257.571958][T13311] r5:00000000 r4:00000000 [ 1265.858280][T13367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13367 comm=syz.0.2643 [ 1269.106239][T13395] FAULT_INJECTION: forcing a failure. [ 1269.106239][T13395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.106392][T13395] CPU: 1 UID: 0 PID: 13395 Comm: syz.0.2646 Tainted: G L syzkaller #0 PREEMPT [ 1269.106486][T13395] Tainted: [L]=SOFTLOCKUP [ 1269.106510][T13395] Hardware name: ARM-Versatile Express [ 1269.106533][T13395] Call trace: [ 1269.106574][T13395] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1269.106676][T13395] r7:600f0113 r6:600f0113 r5:82308710 r4:00000000 [ 1269.106695][T13395] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1269.106747][T13395] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1269.106807][T13395] r7:20000140 r6:00000000 r5:84fccb00 r4:82b51fb8 [ 1269.106824][T13395] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1269.106882][T13395] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1269.106946][T13395] r8:00000000 r7:20000140 r6:0000001c r5:00000000 r4:ebb39f38 [ 1269.106964][T13395] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1269.107016][T13395] [<80a20fa0>] (should_fail_usercopy) from [<80955660>] (_copy_from_iter+0x64/0x7c4) [ 1269.107079][T13395] [<809555fc>] (_copy_from_iter) from [<81a5fc3c>] (isotp_sendmsg+0x28c/0xa8c) [ 1269.107153][T13395] r10:868d0000 r9:ebb39f28 r8:00000000 r7:00000002 r6:868d44c8 r5:0000001c [ 1269.107173][T13395] r4:868d2000 [ 1269.107187][T13395] [<81a5f9b0>] (isotp_sendmsg) from [<816674a0>] (__sock_sendmsg+0x44/0x78) [ 1269.107261][T13395] r10:04000004 r9:00000000 r8:ebb39dd4 r7:00000000 r6:85327bc0 r5:ebb39f28 [ 1269.107283][T13395] r4:00000000 [ 1269.107301][T13395] [<8166745c>] (__sock_sendmsg) from [<81668540>] (____sys_sendmsg+0x238/0x2c4) [ 1269.107396][T13395] r7:00000000 r6:00000000 r5:85327bc0 r4:ebb39f28 [ 1269.107415][T13395] [<81668308>] (____sys_sendmsg) from [<81668940>] (___sys_sendmsg+0x9c/0xd0) [ 1269.107483][T13395] r10:00000128 r9:20000280 r8:04000004 r7:00000000 r6:85327bc0 r5:ebb39f28 [ 1269.107505][T13395] r4:00000000 [ 1269.107520][T13395] [<816688a4>] (___sys_sendmsg) from [<8166ab60>] (__sys_sendmsg+0x8c/0xe0) [ 1269.107592][T13395] r9:84fccb00 r8:85822f00 r7:04000004 r6:20000280 r5:85822f01 r4:00000003 [ 1269.107613][T13395] [<8166aad4>] (__sys_sendmsg) from [<8166abc8>] (sys_sendmsg+0x14/0x18) [ 1269.107684][T13395] r8:8020029c r7:00000128 r6:0012f474 r5:00000000 r4:00000000 [ 1269.107699][T13395] [<8166abb4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1269.107747][T13395] Exception stack(0xebb39fa8 to 0xebb39ff0) [ 1269.107784][T13395] 9fa0: 00000000 00000000 00000003 20000280 04000004 00000000 [ 1269.107820][T13395] 9fc0: 00000000 00000000 0012f474 00000128 00356378 00000000 003d0f00 76fa90dc [ 1269.107848][T13395] 9fe0: 76fa8e88 76fa8e78 00018fb8 00130a70 [ 1271.559011][T11527] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1271.709297][T11527] usb 2-1: Using ep0 maxpacket: 8 [ 1271.718022][T11527] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1271.718150][T11527] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1271.761822][T11527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.761937][T11527] usb 2-1: Product: syz [ 1271.761973][T11527] usb 2-1: Manufacturer: syz [ 1271.762004][T11527] usb 2-1: SerialNumber: syz [ 1272.235256][T11527] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1272.235391][T11527] usb 2-1: MIDIStreaming interface descriptor not found [ 1272.290116][T11527] usb 2-1: USB disconnect, device number 19 [ 1274.239332][T13465] binfmt_misc: register: failed to install interpreter ./file0 [ 1277.391597][ T28] audit: type=1400 audit(1277.330:451): avc: denied { setattr } for pid=13482 comm="syz.0.2664" name="RDS" dev="sockfs" ino=30124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1279.523361][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 1284.012499][T13529] FAULT_INJECTION: forcing a failure. [ 1284.012499][T13529] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.012646][T13529] CPU: 0 UID: 0 PID: 13529 Comm: syz.0.2681 Tainted: G L syzkaller #0 PREEMPT [ 1284.012700][T13529] Tainted: [L]=SOFTLOCKUP [ 1284.012745][T13529] Hardware name: ARM-Versatile Express [ 1284.012768][T13529] Call trace: [ 1284.012803][T13529] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1284.012892][T13529] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1284.012906][T13529] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1284.012949][T13529] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1284.013001][T13529] r7:ffffffff r6:00000000 r5:83fee400 r4:82b1601c [ 1284.013014][T13529] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1284.013071][T13529] [<80a20d6c>] (should_fail_ex) from [<8057a488>] (should_failslab+0x6c/0x94) [ 1284.013134][T13529] r8:83fee400 r7:ffffffff r6:83002000 r5:00400cc0 r4:00000017 [ 1284.013147][T13529] [<8057a41c>] (should_failslab) from [<80559220>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 1284.013193][T13529] [<80559174>] (__kmalloc_node_track_caller_noprof) from [<804e413c>] (kstrdup+0x3c/0x60) [ 1284.013255][T13529] r10:ec789e54 r9:00000002 r8:8301d270 r7:ec789e54 r6:805f316c r5:00000016 [ 1284.013271][T13529] r4:00400cc0 [ 1284.013282][T13529] [<804e4100>] (kstrdup) from [<805f316c>] (simple_xattr_set+0x68/0x984) [ 1284.013340][T13529] r7:8407ddb8 r6:848d6d80 r5:84e50200 r4:ec789e54 [ 1284.013353][T13529] [<805f3104>] (simple_xattr_set) from [<804dbb34>] (shmem_xattr_handler_set+0x1a0/0x1b4) [ 1284.013414][T13529] r10:ec789e54 r9:00000002 r8:8301d270 r7:00000040 r6:8301d240 r5:8407ddd8 [ 1284.013430][T13529] r4:85dd5200 [ 1284.013442][T13529] [<804db994>] (shmem_xattr_handler_set) from [<805f11e0>] (__vfs_setxattr+0xb4/0xc8) [ 1284.013500][T13529] r10:00000001 r9:804db994 r8:00000002 r7:85dd5200 r6:834dacc0 r5:82b1d1d4 [ 1284.013517][T13529] r4:8407ddd8 [ 1284.013530][T13529] [<805f112c>] (__vfs_setxattr) from [<805f1c20>] (__vfs_setxattr_noperm+0x7c/0x204) [ 1284.013590][T13529] r9:82b1d1d4 r8:85dd5200 r7:8407ddd8 r6:00000001 r5:ec789e54 r4:834dacc0 [ 1284.013673][T13529] [<805f1ba4>] (__vfs_setxattr_noperm) from [<805f1e4c>] (__vfs_setxattr_locked+0xa4/0x12c) [ 1284.013738][T13529] r10:ec789db8 r9:00000000 r8:8407ddd8 r7:85dd5200 r6:ec789e54 r5:82b1d1d4 [ 1284.013755][T13529] r4:834dacc0 [ 1284.013769][T13529] [<805f1da8>] (__vfs_setxattr_locked) from [<805f1f74>] (vfs_setxattr+0xa0/0x180) [ 1284.013825][T13529] r8:00000002 r7:85dd5200 r6:834dacc0 r5:8407de58 r4:ec789e40 [ 1284.013838][T13529] [<805f1ed4>] (vfs_setxattr) from [<805f20e8>] (do_setxattr+0x94/0x9c) [ 1284.013895][T13529] r10:00000001 r9:834dacc0 r8:82b1d1d4 r7:85dd5200 r6:00000002 r5:ec789e54 [ 1284.013912][T13529] r4:ec789e40 [ 1284.013925][T13529] [<805f2054>] (do_setxattr) from [<805f2324>] (file_setxattr+0x58/0x78) [ 1284.013982][T13529] r9:20000080 r8:00000003 r7:85822401 r6:ec789e40 r5:85822400 r4:00000000 [ 1284.013997][T13529] [<805f22cc>] (file_setxattr) from [<805f2584>] (path_setxattrat+0x168/0x1bc) [ 1284.014057][T13529] r7:85822401 r6:85822400 r5:85dd5200 r4:00000016 [ 1284.014071][T13529] [<805f241c>] (path_setxattrat) from [<805f27d8>] (sys_fsetxattr+0x30/0x38) [ 1284.014129][T13529] r10:000000e4 r9:83fee400 r8:8020029c r7:000000e4 r6:0012f474 r5:00000000 [ 1284.014146][T13529] r4:00000001 [ 1284.014159][T13529] [<805f27a8>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1284.014199][T13529] Exception stack(0xec789fa8 to 0xec789ff0) [ 1284.014234][T13529] 9fa0: 00000001 00000000 00000003 200000c0 20000080 00000002 [ 1284.014265][T13529] 9fc0: 00000001 00000000 0012f474 000000e4 003562d8 00000000 00000001 76fca0dc [ 1284.014289][T13529] 9fe0: 76fc9e88 76fc9e78 00018fb8 00130a70 [ 1284.570952][T13539] FAULT_INJECTION: forcing a failure. [ 1284.570952][T13539] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.571113][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.0.2686 Tainted: G L syzkaller #0 PREEMPT [ 1284.571173][T13539] Tainted: [L]=SOFTLOCKUP [ 1284.571193][T13539] Hardware name: ARM-Versatile Express [ 1284.571216][T13539] Call trace: [ 1284.571259][T13539] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1284.571364][T13539] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1284.571384][T13539] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1284.571440][T13539] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1284.571505][T13539] r7:ffffffff r6:00000000 r5:84fcf080 r4:82b1601c [ 1284.571524][T13539] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1284.571589][T13539] [<80a20d6c>] (should_fail_ex) from [<8057a488>] (should_failslab+0x6c/0x94) [ 1284.571664][T13539] r8:84fcf080 r7:ffffffff r6:83001240 r5:00000cc0 r4:00000026 [ 1284.571683][T13539] [<8057a41c>] (should_failslab) from [<80559220>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 1284.571763][T13539] [<80559174>] (__kmalloc_node_track_caller_noprof) from [<804e4088>] (kmemdup_nul+0x34/0x78) [ 1284.571850][T13539] r10:00000000 r9:00000000 r8:84fcf080 r7:00000000 r6:84146140 r5:84146140 [ 1284.571876][T13539] r4:00000025 [ 1284.571894][T13539] [<804e4054>] (kmemdup_nul) from [<8083e010>] (security_context_to_sid_core+0x5c/0x29c) [ 1284.571968][T13539] r7:842fe230 r6:840acef4 r5:84146140 r4:00000025 [ 1284.571997][T13539] [<8083dfb4>] (security_context_to_sid_core) from [<8083f724>] (security_context_to_sid+0x24/0x2c) [ 1284.572074][T13539] r10:82cf6b5c r9:0000005f r8:84fcf080 r7:842fe230 r6:840acef4 r5:8252884c [ 1284.572096][T13539] r4:00000000 [ 1284.572113][T13539] [<8083f700>] (security_context_to_sid) from [<8082b374>] (selinux_inode_setxattr+0x15c/0x32c) [ 1284.572174][T13539] [<8082b218>] (selinux_inode_setxattr) from [<8080e8fc>] (security_inode_setxattr+0x160/0x3e8) [ 1284.572254][T13539] r10:8082b218 r9:00000001 r8:00000025 r7:82b1d1d4 r6:84146140 r5:834d1f68 [ 1284.572278][T13539] r4:ec8b1e54 [ 1284.572294][T13539] [<8080e79c>] (security_inode_setxattr) from [<805f1e0c>] (__vfs_setxattr_locked+0x64/0x12c) [ 1284.572374][T13539] r10:ec8b1db8 r9:00000000 r8:842fe230 r7:84146140 r6:ec8b1e54 r5:82b1d1d4 [ 1284.572396][T13539] r4:834d1f68 [ 1284.572413][T13539] [<805f1da8>] (__vfs_setxattr_locked) from [<805f1f74>] (vfs_setxattr+0xa0/0x180) [ 1284.572481][T13539] r8:00000025 r7:84146140 r6:834d1f68 r5:842fe2b0 r4:ec8b1e40 [ 1284.572501][T13539] [<805f1ed4>] (vfs_setxattr) from [<805f20e8>] (do_setxattr+0x94/0x9c) [ 1284.572572][T13539] r10:00000001 r9:834d1f68 r8:82b1d1d4 r7:84146140 r6:00000025 r5:ec8b1e54 [ 1284.572594][T13539] r4:ec8b1e40 [ 1284.572611][T13539] [<805f2054>] (do_setxattr) from [<805f2324>] (file_setxattr+0x58/0x78) [ 1284.572682][T13539] r9:20000040 r8:00000003 r7:85829a01 r6:ec8b1e40 r5:85829a00 r4:00000000 [ 1284.572703][T13539] [<805f22cc>] (file_setxattr) from [<805f2584>] (path_setxattrat+0x168/0x1bc) [ 1284.572789][T13539] r7:85829a01 r6:85829a00 r5:84146140 r4:00000010 [ 1284.572810][T13539] [<805f241c>] (path_setxattrat) from [<805f27d8>] (sys_fsetxattr+0x30/0x38) [ 1284.572882][T13539] r10:000000e4 r9:84fcf080 r8:8020029c r7:000000e4 r6:0012f474 r5:00000000 [ 1284.572903][T13539] r4:00000001 [ 1284.572919][T13539] [<805f27a8>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1284.572970][T13539] Exception stack(0xec8b1fa8 to 0xec8b1ff0) [ 1284.573023][T13539] 1fa0: 00000001 00000000 00000003 20000000 20000040 00000025 [ 1284.573063][T13539] 1fc0: 00000001 00000000 0012f474 000000e4 003562d8 00000000 00000001 76fca0dc [ 1284.573094][T13539] 1fe0: 76fc9e88 76fc9e78 00018fb8 00130a70 [ 1290.209316][T13573] FAULT_INJECTION: forcing a failure. [ 1290.209316][T13573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.209480][T13573] CPU: 1 UID: 0 PID: 13573 Comm: syz.1.2698 Tainted: G L syzkaller #0 PREEMPT [ 1290.209550][T13573] Tainted: [L]=SOFTLOCKUP [ 1290.209569][T13573] Hardware name: ARM-Versatile Express [ 1290.209592][T13573] Call trace: [ 1290.209632][T13573] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1290.209734][T13573] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1290.209751][T13573] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1290.209803][T13573] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1290.209866][T13573] r7:00000000 r6:00000000 r5:84fccb00 r4:82b51fb8 [ 1290.209882][T13573] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1290.209943][T13573] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1290.210014][T13573] r8:003562d8 r7:00000000 r6:00000001 r5:84fcd34c r4:76f0fb80 [ 1290.210033][T13573] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1290.210094][T13573] [<80a20fa0>] (should_fail_usercopy) from [<8022b134>] (setup_sigframe+0xe4/0x1c8) [ 1290.210158][T13573] [<8022b050>] (setup_sigframe) from [<8022b7d0>] (do_work_pending+0x2d4/0x4f0) [ 1290.210231][T13573] r10:00000077 r9:b5403587 r8:00000000 r7:84fcd34c r6:76f0fb80 r5:ecc19fb0 [ 1290.210257][T13573] r4:84fccb00 [ 1290.210274][T13573] [<8022b4fc>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1290.210327][T13573] Exception stack(0xecc19fb0 to 0xecc19ff8) [ 1290.210364][T13573] 9fa0: fffffffc 20000280 00008000 00000000 [ 1290.210400][T13573] 9fc0: 00000000 00000000 0012f474 00000128 003562d8 00000000 00000001 76f100dc [ 1290.210432][T13573] 9fe0: 76f0fe88 76f0fe78 00018fb8 00130a70 60000010 00000011 [ 1290.210471][T13573] r10:00000077 r9:84fccb00 r8:00000000 r7:00000077 r6:0012f474 r5:00000000 [ 1290.210491][T13573] r4:00000000 [ 1294.683302][T13605] netlink: 'syz.0.2712': attribute type 10 has an invalid length. [ 1296.204672][ T28] audit: type=1400 audit(1296.140:452): avc: denied { write } for pid=13622 comm="syz.1.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1296.221436][ T28] audit: type=1400 audit(1296.140:453): avc: denied { nlmsg_write } for pid=13622 comm="syz.1.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1297.610232][ T28] audit: type=1400 audit(1297.550:454): avc: denied { read } for pid=13626 comm="syz.0.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1299.270624][T13648] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2732'. [ 1303.564744][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.565624][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.565867][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.566075][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.566277][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.566480][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.566683][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.566888][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.567101][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1303.567313][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1304.729184][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 1304.731505][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'. [ 1306.362842][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 1308.060632][T13716] netlink: 'syz.0.2760': attribute type 49 has an invalid length. [ 1309.589274][T13730] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 1309.601918][T13730] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 1309.603360][T13730] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 1311.067749][ T28] audit: type=1400 audit(1311.000:455): avc: denied { write } for pid=13744 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1314.410523][ T28] audit: type=1400 audit(1314.350:456): avc: denied { create } for pid=13779 comm="syz.0.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1315.383244][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 1324.601740][T13857] netlink: 'syz.0.2822': attribute type 29 has an invalid length. [ 1324.612103][T13857] netlink: 'syz.0.2822': attribute type 29 has an invalid length. [ 1324.621941][T13857] netlink: 'syz.0.2822': attribute type 29 has an invalid length. [ 1326.055815][ T28] audit: type=1400 audit(1325.990:457): avc: denied { nlmsg_read } for pid=13870 comm="syz.0.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1329.730723][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2839'. [ 1329.993978][T13908] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1336.189948][T13950] netlink: 'syz.0.2862': attribute type 3 has an invalid length. [ 1343.189842][T14017] netlink: 'syz.1.2892': attribute type 29 has an invalid length. [ 1343.203795][T14017] netlink: 'syz.1.2892': attribute type 29 has an invalid length. [ 1347.909725][T14060] netlink: 'syz.0.2909': attribute type 2 has an invalid length. [ 1347.909830][T14060] netlink: 'syz.0.2909': attribute type 2 has an invalid length. [ 1347.909853][T14060] netlink: 'syz.0.2909': attribute type 1 has an invalid length. [ 1347.909904][T14060] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1348.557395][T14066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1349.919623][T14079] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1349.932166][T14079] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1354.639951][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 1354.640246][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 1356.036696][ T28] audit: type=1400 audit(1355.970:458): avc: denied { mount } for pid=14120 comm="syz.1.2939" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1356.137015][ T28] audit: type=1400 audit(1356.070:459): avc: denied { unmount } for pid=11496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1356.816877][T14133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2943'. [ 1356.845300][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2943'. [ 1362.873978][ T28] audit: type=1400 audit(1362.810:460): avc: denied { set_context_mgr } for pid=14209 comm="syz.1.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1363.689283][ T28] audit: type=1400 audit(1363.620:461): avc: denied { map } for pid=14209 comm="syz.1.2955" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1364.072353][ T28] audit: type=1400 audit(1364.010:462): avc: denied { call } for pid=14209 comm="syz.1.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1369.628190][ T28] audit: type=1400 audit(1369.560:463): avc: denied { lock } for pid=14251 comm="syz.1.2965" path="socket:[33205]" dev="sockfs" ino=33205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1392.069461][T13706] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1392.117378][ T28] audit: type=1400 audit(1392.050:464): avc: denied { name_bind } for pid=14318 comm="syz.0.2978" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1392.117589][ T28] audit: type=1400 audit(1392.050:465): avc: denied { node_bind } for pid=14318 comm="syz.0.2978" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1392.229260][T13706] usb 2-1: Using ep0 maxpacket: 8 [ 1392.231232][T13706] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1392.234812][T13706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1392.234925][T13706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.246688][T13706] usb 2-1: config 0 descriptor?? [ 1392.491005][T13706] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1392.931980][T14009] usb 2-1: USB disconnect, device number 20 [ 1393.345570][ T28] audit: type=1400 audit(1393.280:466): avc: denied { bind } for pid=14339 comm="syz.0.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1394.270638][ T3720] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 1397.480925][ T28] audit: type=1326 audit(1397.410:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.481528][ T28] audit: type=1326 audit(1397.420:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.482126][ T28] audit: type=1326 audit(1397.420:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.482225][ T28] audit: type=1326 audit(1397.420:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.483657][ T28] audit: type=1326 audit(1397.420:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.484162][ T28] audit: type=1326 audit(1397.420:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.484583][ T28] audit: type=1326 audit(1397.420:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.485908][ T28] audit: type=1326 audit(1397.420:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=220 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.486334][ T28] audit: type=1326 audit(1397.420:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1397.486751][ T28] audit: type=1326 audit(1397.420:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14391 comm="syz.0.2997" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1405.802710][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1405.802822][ T28] audit: type=1400 audit(1405.740:482): avc: denied { name_bind } for pid=14433 comm="syz.0.3008" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1406.464205][T14437] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3009'. [ 1409.068056][T14456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1409.592504][T14461] pim6reg0: tun_chr_ioctl cmd 21731 [ 1410.709807][T13886] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1410.876183][T13886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1410.905851][T13886] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.906051][T13886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1410.970799][T13886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.970916][T13886] usb 2-1: Product: syz [ 1410.970948][T13886] usb 2-1: Manufacturer: syz [ 1410.970973][T13886] usb 2-1: SerialNumber: syz [ 1411.310176][ T28] audit: type=1400 audit(1411.240:483): avc: denied { cmd } for pid=14478 comm="iou-wrk-14479" path="socket:[33466]" dev="sockfs" ino=33466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1411.899392][T14493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.900345][T14493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.933309][T14500] veth1_to_hsr: entered allmulticast mode [ 1417.174478][T14009] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1417.342733][T14009] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1417.352934][T14009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.363639][T14009] usb 1-1: config 0 descriptor?? [ 1417.595982][T14009] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1417.821324][T14009] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 1417.821476][T14009] [drm] Initialized udl on minor 3 [ 1418.103577][T14009] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1418.104257][T14009] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1418.139693][T14009] usb 1-1: USB disconnect, device number 27 [ 1418.142559][T13886] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1421.441839][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1421.948102][T13706] usb 2-1: USB disconnect, device number 21 [ 1424.144489][ T28] audit: type=1326 audit(1424.080:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1424.156987][ T28] audit: type=1326 audit(1424.090:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1424.158029][ T28] audit: type=1326 audit(1424.090:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1424.169969][ T28] audit: type=1326 audit(1424.110:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1424.171293][ T28] audit: type=1326 audit(1424.110:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1424.183644][ T28] audit: type=1326 audit(1424.110:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=172 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1424.183760][ T28] audit: type=1326 audit(1424.120:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1424.183807][ T28] audit: type=1326 audit(1424.120:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.1.3050" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 1425.471095][T14600] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1425.809415][T13706] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1425.963533][T13706] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1425.983510][T13706] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1425.983643][T13706] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1425.983685][T13706] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1425.983730][T13706] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1425.983756][T13706] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1426.232151][T13706] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1426.232267][T13706] usb 2-1: Product: syz [ 1426.232297][T13706] usb 2-1: Manufacturer: syz [ 1426.313027][T13706] cdc_wdm 2-1:1.0: skipping garbage [ 1426.313142][T13706] cdc_wdm 2-1:1.0: skipping garbage [ 1426.325306][T13706] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1426.550924][T13706] usb 2-1: USB disconnect, device number 22 [ 1432.457151][ T28] audit: type=1400 audit(1432.390:492): avc: denied { bind } for pid=14681 comm="syz.0.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1433.636807][T14696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3085'. [ 1433.959481][ T3720] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1434.140082][ T3720] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1434.152566][ T3720] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1434.152699][ T3720] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1434.152766][ T3720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1434.152840][ T3720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1434.152893][ T3720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1434.205720][ T3720] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1434.205838][ T3720] usb 1-1: Product: syz [ 1434.205868][ T3720] usb 1-1: Manufacturer: syz [ 1434.236461][ T3720] cdc_wdm 1-1:1.0: skipping garbage [ 1434.236567][ T3720] cdc_wdm 1-1:1.0: skipping garbage [ 1434.240508][ T3720] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1434.479241][T13706] usb 1-1: USB disconnect, device number 28 [ 1436.809912][ T3720] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1436.999665][ T3720] usb 2-1: Using ep0 maxpacket: 8 [ 1437.011811][ T3720] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1437.016141][ T3720] usb 2-1: config 0 has no interfaces? [ 1437.016249][ T3720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.019974][ T3720] usb 2-1: config 0 descriptor?? [ 1437.390012][T14736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3093'. [ 1437.438066][T14009] usb 2-1: USB disconnect, device number 23 [ 1440.532685][T14770] fuse: Bad value for 'fd' [ 1441.099918][T13867] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1441.289199][T13867] usb 2-1: Using ep0 maxpacket: 8 [ 1441.294010][T13867] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1441.313853][T13867] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1441.314010][T13867] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1441.314066][T13867] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1441.314125][T13867] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1441.314279][T13867] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1441.314367][T13867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.703932][T13867] usb 2-1: GET_CAPABILITIES returned 0 [ 1441.704072][T13867] usbtmc 2-1:16.0: can't read capabilities [ 1442.043889][T14009] usb 2-1: USB disconnect, device number 24 [ 1446.254664][T14818] net_ratelimit: 3126 callbacks suppressed [ 1446.254852][T14818] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1450.039698][ T3720] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1450.189717][ T3720] usb 2-1: Using ep0 maxpacket: 8 [ 1450.193388][ T3720] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1450.199009][ T3720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.199175][ T3720] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1450.199267][ T3720] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1450.218108][ T3720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.218221][ T3720] usb 2-1: Product: syz [ 1450.218252][ T3720] usb 2-1: Manufacturer: syz [ 1450.218278][ T3720] usb 2-1: SerialNumber: syz [ 1450.399557][T13706] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1451.053242][ T3720] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1451.112988][ T3720] usb 2-1: USB disconnect, device number 25 [ 1451.372409][T13706] usb 1-1: device descriptor read/64, error -71 [ 1451.619547][T13706] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1457.841947][T14962] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1457.842189][T14962] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1458.446255][ T28] audit: type=1400 audit(1458.380:493): avc: denied { bind } for pid=14972 comm="syz.0.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1459.400177][T13706] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1459.572430][T13706] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1459.582023][T13706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.584534][T13706] usb 1-1: config 0 descriptor?? [ 1459.799569][T13706] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1460.028395][T13706] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 1460.029331][T13706] [drm] Initialized udl on minor 3 [ 1460.281537][T13706] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1460.281930][T13706] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1460.291411][T13706] usb 1-1: USB disconnect, device number 31 [ 1460.294328][ T3720] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1463.944820][T15030] dvmrp0: entered allmulticast mode [ 1465.072532][T13867] hid_parser_main: 73 callbacks suppressed [ 1465.072667][T13867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1465.082239][T13867] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1466.023038][ T28] audit: type=1400 audit(1465.960:494): avc: denied { connect } for pid=15047 comm="syz.0.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1466.554337][T15054] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1472.189957][ T28] audit: type=1400 audit(1472.120:495): avc: denied { mount } for pid=15085 comm="syz.0.3190" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1472.659643][T15093] netlink: 'syz.1.3194': attribute type 1 has an invalid length. [ 1472.780634][T15093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1472.869762][T15093] bond1: (slave geneve2): making interface the new active one [ 1472.875728][T15093] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1474.784641][ T28] audit: type=1400 audit(1474.720:496): avc: denied { bind } for pid=15162 comm="syz.1.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1474.790614][ T28] audit: type=1400 audit(1474.730:497): avc: denied { listen } for pid=15162 comm="syz.1.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1475.356635][T15133] syzkaller1: entered promiscuous mode [ 1475.356773][T15133] syzkaller1: entered allmulticast mode [ 1479.006709][ T28] audit: type=1326 audit(1478.940:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.0.3204" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x0 [ 1485.787873][T15199] [U]  [ 1485.788057][T15199] [U] K{ [ 1485.810840][T15199] [U] T 1ŠFFˊ`GJǘGO/MC [ 1485.832659][T15199] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1485.832995][T15199] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1485.834019][T15199] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1485.835211][T15199] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1485.835558][T15199] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1485.835798][T15199] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1485.836624][T15199] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1485.861978][T15199] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1485.862587][T15199] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1485.862707][T15199] [U] 22Ʃ۩X?0;3U [ 1485.863909][T15199] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1485.864318][T15199] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1485.864675][T15199] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1485.864919][T15199] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1485.865473][T15199] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1485.865526][T15199] [U] EC [ 1485.866056][T15199] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1495.966107][T15199] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1501.795187][T15251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.489964][ T28] audit: type=1400 audit(1502.430:499): avc: denied { shutdown } for pid=15262 comm="syz.1.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1502.882498][T15267] bridge_slave_0: default FDB implementation only supports local addresses [ 1503.103315][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3234'. [ 1503.496840][T15289] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 1503.571651][T15289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1503.606240][T15289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1503.606979][T15289] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1503.607485][T15289] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 1503.687122][T15289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4271 sclass=netlink_route_socket pid=15289 comm=syz.1.3235 [ 1508.199544][T13867] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1508.351868][T13867] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1508.354815][T13867] usb 2-1: config 0 has no interfaces? [ 1508.354930][T13867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.361026][T13867] usb 2-1: config 0 descriptor?? [ 1508.952128][ T3720] usb 2-1: USB disconnect, device number 26 [ 1511.045730][T15384] *** NOT YET: opcode c3 *** [ 1511.669454][T13867] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1511.829248][T13867] usb 2-1: Using ep0 maxpacket: 16 [ 1511.831401][T13867] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1511.835056][T13867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1511.848812][T13867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.848887][T13867] usb 2-1: Product: syz [ 1511.848905][T13867] usb 2-1: Manufacturer: syz [ 1511.848922][T13867] usb 2-1: SerialNumber: syz [ 1511.851571][T13867] usb 2-1: config 0 descriptor?? [ 1522.067048][T13706] usb 2-1: USB disconnect, device number 27 [ 1526.189923][T13868] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1526.379964][T13868] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1526.401734][T13868] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1526.401933][T13868] usb 2-1: config 1 has no interface number 0 [ 1526.427532][T13868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.430216][T13868] usb 2-1: Product: syz [ 1526.430288][T13868] usb 2-1: Manufacturer: syz [ 1526.430319][T13868] usb 2-1: SerialNumber: syz [ 1526.453546][T13868] usb 2-1: 3:0 : does not exist [ 1526.454954][T13868] usb 2-1: 3:0 : does not exist [ 1526.830050][ T8274] usb 2-1: USB disconnect, device number 28 [ 1527.672902][T13867] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1527.703169][T13867] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1532.334247][T13867] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1532.336121][T13867] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1542.864093][ T28] audit: type=1400 audit(1542.800:500): avc: denied { watch watch_reads } for pid=15533 comm="syz.0.3295" path="/proc/953/net/pfkey" dev="proc" ino=4026532922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1564.090289][T15586] nbd: must specify at least one socket [ 1564.450163][T13868] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1564.619923][T13868] usb 1-1: Using ep0 maxpacket: 8 [ 1564.623008][T13868] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1564.636749][T13868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.639624][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1573.780255][ T3720] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1573.934031][ T3720] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1573.963530][ T3720] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1573.963663][ T3720] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1573.963704][ T3720] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1573.963745][ T3720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1573.963782][ T3720] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1573.963848][ T3720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.987225][T15611] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1573.988247][T15611] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1573.999693][T15611] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1574.005716][ T3720] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 1574.427210][ T3720] usb 2-1: mos7720: usb_control_msg() failed: -71 [ 1574.441347][ T3720] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1574.474294][ T3720] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1574.517257][ C0] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1574.517450][ T3720] usb 2-1: USB disconnect, device number 29 [ 1574.525353][ T3720] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1574.533209][ T3720] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1574.535790][ T3720] mos7720 2-1:1.0: device disconnected [ 1579.180710][T13706] usb 1-1: USB disconnect, device number 32 [ 1579.669393][T13706] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1579.830278][T13706] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1579.833728][T13706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.833848][T13706] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1579.833894][T13706] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1579.833934][T13706] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1579.846022][T13706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.846141][T13706] usb 1-1: Product: syz [ 1579.846171][T13706] usb 1-1: Manufacturer: syz [ 1579.846198][T13706] usb 1-1: SerialNumber: syz [ 1580.295370][T13706] usb 1-1: Cannot retrieve CPort count: -71 [ 1580.295524][T13706] usb 1-1: Cannot retrieve CPort count: -71 [ 1580.295654][T13706] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1580.309002][T13706] usb 1-1: USB disconnect, device number 33 [ 1581.782602][ T28] audit: type=1400 audit(1581.720:501): avc: denied { connect } for pid=15666 comm="syz.0.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1581.789131][ T28] audit: type=1400 audit(1581.720:502): avc: denied { mount } for pid=15666 comm="syz.0.3327" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1582.091771][ T28] audit: type=1400 audit(1582.030:503): avc: denied { unmount } for pid=12253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1582.783153][T15671] FAULT_INJECTION: forcing a failure. [ 1582.783153][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.783304][T15671] CPU: 1 UID: 0 PID: 15671 Comm: syz.0.3329 Tainted: G L syzkaller #0 PREEMPT [ 1582.783361][T15671] Tainted: [L]=SOFTLOCKUP [ 1582.783379][T15671] Hardware name: ARM-Versatile Express [ 1582.783401][T15671] Call trace: [ 1582.783441][T15671] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1582.783543][T15671] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1582.783560][T15671] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1582.783621][T15671] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1582.783691][T15671] r7:84825780 r6:00000000 r5:84825780 r4:82b1601c [ 1582.783709][T15671] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1582.783773][T15671] [<80a20d6c>] (should_fail_ex) from [<8057a488>] (should_failslab+0x6c/0x94) [ 1582.783845][T15671] r8:00000000 r7:84825780 r6:805098d4 r5:00000cc0 r4:830ba300 [ 1582.783863][T15671] [<8057a41c>] (should_failslab) from [<80557e80>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1582.783915][T15671] [<80557e24>] (kmem_cache_alloc_noprof) from [<805098d4>] (vm_area_dup+0x24/0x150) [ 1582.783983][T15671] r10:dfb3dd7c r9:7f000000 r8:20003000 r7:dfb3de74 r6:20003000 r5:8580e600 [ 1582.784004][T15671] r4:dfb3de74 [ 1582.784019][T15671] [<805098b0>] (vm_area_dup) from [<80536dc4>] (__split_vma+0x8c/0x85c) [ 1582.784082][T15671] r5:8580e600 r4:dfb3de74 [ 1582.784100][T15671] [<80536d38>] (__split_vma) from [<80537608>] (vms_gather_munmap_vmas+0x74/0x4fc) [ 1582.784176][T15671] r10:dfb3dd7c r9:7f000000 r8:dfb3dd88 r7:00000000 r6:20003000 r5:dfb3ddb8 [ 1582.784200][T15671] r4:dfb3de74 [ 1582.784217][T15671] [<80537594>] (vms_gather_munmap_vmas) from [<8053a5b0>] (do_vmi_align_munmap+0xfc/0x278) [ 1582.784294][T15671] r10:dfb3dd7c r9:7f000000 r8:00002000 r7:00000000 r6:20003000 r5:20009000 [ 1582.784316][T15671] r4:dfb3de74 [ 1582.784331][T15671] [<8053a4b4>] (do_vmi_align_munmap) from [<8053a7ac>] (do_vmi_munmap+0x80/0xfc) [ 1582.784403][T15671] r10:000000a3 r9:00006000 r8:20003000 r7:00000001 r6:dfb3de74 r5:84f8e1c0 [ 1582.784426][T15671] r4:20009000 [ 1582.784442][T15671] [<8053a72c>] (do_vmi_munmap) from [<80521d3c>] (shrink_vma+0x90/0xf4) [ 1582.784511][T15671] r8:84f8e200 r7:84f8e1c0 r6:00000001 r5:20003000 r4:dfb3df38 [ 1582.784531][T15671] [<80521cac>] (shrink_vma) from [<80523558>] (sys_mremap+0x640/0x87c) [ 1582.784613][T15671] r9:20000000 r8:84f8e2d0 r7:84f8e1c0 r6:84825780 r5:00000000 r4:00000000 [ 1582.784636][T15671] [<80522f18>] (sys_mremap) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1582.784687][T15671] Exception stack(0xdfb3dfa8 to 0xdfb3dff0) [ 1582.784760][T15671] dfa0: 20a88000 00000000 20000000 00009000 00003000 00000000 [ 1582.784800][T15671] dfc0: 20a88000 00000000 00356318 000000a3 003562d8 00000000 00000001 76fca0dc [ 1582.784830][T15671] dfe0: 76fc9e88 76fc9e78 00018fb8 00130a70 [ 1582.784867][T15671] r10:000000a3 r9:84825780 r8:8020029c r7:000000a3 r6:00356318 r5:00000000 [ 1582.784886][T15671] r4:20a88000 [ 1586.877124][T15679] syzkaller0: entered promiscuous mode [ 1586.877243][T15679] syzkaller0: entered allmulticast mode [ 1587.316223][ T28] audit: type=1400 audit(1587.250:504): avc: denied { mount } for pid=15686 comm="syz.1.3334" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1587.345690][ T28] audit: type=1400 audit(1587.280:505): avc: denied { search } for pid=15686 comm="syz.1.3334" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.345876][ T28] audit: type=1400 audit(1587.280:506): avc: denied { search } for pid=15686 comm="syz.1.3334" name="usb_gadget" dev="configfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.345939][ T28] audit: type=1400 audit(1587.280:507): avc: denied { write search } for pid=15686 comm="syz.1.3334" name="usb_gadget" dev="configfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.345989][ T28] audit: type=1400 audit(1587.280:508): avc: denied { add_name } for pid=15686 comm="syz.1.3334" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.346037][ T28] audit: type=1400 audit(1587.280:509): avc: denied { create } for pid=15686 comm="syz.1.3334" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1587.462191][ T28] audit: type=1400 audit(1587.400:510): avc: denied { search } for pid=15686 comm="syz.1.3334" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.462371][ T28] audit: type=1400 audit(1587.400:511): avc: denied { search } for pid=15686 comm="syz.1.3334" name="usb_gadget" dev="configfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.462429][ T28] audit: type=1400 audit(1587.400:512): avc: denied { search } for pid=15686 comm="syz.1.3334" name="g1" dev="configfs" ino=35736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.462478][ T28] audit: type=1400 audit(1587.400:513): avc: denied { search } for pid=15686 comm="syz.1.3334" name="configs" dev="configfs" ino=35738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1587.651505][T15687] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 1587.652462][T15687] udc dummy_udc.0: failed to start g1: -19 [ 1587.661283][T15687] UDC core: g1: couldn't find an available UDC or it's busy [ 1591.829429][ T8274] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1591.979254][ T8274] usb 2-1: Using ep0 maxpacket: 16 [ 1591.982202][ T8274] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 1592.021935][ T8274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1592.022056][ T8274] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1592.022104][ T8274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1592.022138][ T8274] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1592.069232][ T8274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.069344][ T8274] usb 2-1: Product: syz [ 1592.069374][ T8274] usb 2-1: Manufacturer: syz [ 1592.069401][ T8274] usb 2-1: SerialNumber: syz [ 1592.077693][ T8274] usb 2-1: config 0 descriptor?? [ 1592.111198][ T8274] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 1592.114163][ T8274] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1592.343832][T13868] usb 2-1: USB disconnect, device number 30 [ 1592.353662][T13868] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1592.354252][T13868] omninet 2-1:0.0: device disconnected [ 1593.390109][T15731] syzkaller0: entered promiscuous mode [ 1593.390230][T15731] syzkaller0: entered allmulticast mode [ 1597.029163][T13706] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1597.182519][T13706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1597.192204][T13706] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1597.192312][T13706] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1597.192349][T13706] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.220797][T13706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1597.220908][T13706] usb 1-1: Product: syz [ 1597.220938][T13706] usb 1-1: Manufacturer: syz [ 1597.220963][T13706] usb 1-1: SerialNumber: syz [ 1597.462423][T13706] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1597.477920][T13706] usb 1-1: USB disconnect, device number 34 [ 1597.490376][T13706] usblp0: removed [ 1597.693188][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1597.693305][ T28] audit: type=1400 audit(1597.630:545): avc: denied { mount } for pid=15770 comm="syz.0.3347" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1597.756962][ T28] audit: type=1400 audit(1597.690:546): avc: denied { unmount } for pid=12253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1597.979734][T13868] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1598.169380][T13868] usb 2-1: Using ep0 maxpacket: 32 [ 1598.222138][T13868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1598.222271][T13868] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 1598.293668][T13868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.293779][T13868] usb 2-1: Product: syz [ 1598.293809][T13868] usb 2-1: Manufacturer: syz [ 1598.293835][T13868] usb 2-1: SerialNumber: syz [ 1598.585381][T13868] usb 2-1: USB disconnect, device number 31 [ 1598.681192][T15804] FAULT_INJECTION: forcing a failure. [ 1598.681192][T15804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.681364][T15804] CPU: 1 UID: 0 PID: 15804 Comm: syz.0.3354 Tainted: G L syzkaller #0 PREEMPT [ 1598.681437][T15804] Tainted: [L]=SOFTLOCKUP [ 1598.681456][T15804] Hardware name: ARM-Versatile Express [ 1598.681479][T15804] Call trace: [ 1598.681521][T15804] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1598.681629][T15804] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1598.681649][T15804] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1598.681707][T15804] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1598.681771][T15804] r7:00000000 r6:00000000 r5:847ce400 r4:82b51fb8 [ 1598.681789][T15804] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1598.681850][T15804] [<80a20d6c>] (should_fail_ex) from [<80a20f9c>] (should_fail+0x14/0x18) [ 1598.681922][T15804] r8:20000580 r7:00000000 r6:0000001a r5:00000000 r4:8689b6c0 [ 1598.681940][T15804] [<80a20f88>] (should_fail) from [<80a20fbc>] (should_fail_usercopy+0x1c/0x20) [ 1598.682002][T15804] [<80a20fa0>] (should_fail_usercopy) from [<804662a0>] (btf_new_fd+0x210/0x18bc) [ 1598.682063][T15804] [<80466090>] (btf_new_fd) from [<803ef14c>] (__sys_bpf+0x59c/0x21a0) [ 1598.682139][T15804] r10:847ce400 r9:00000028 r8:00000000 r7:00000028 r6:ea3b9e60 r5:00000000 [ 1598.682161][T15804] r4:00000000 [ 1598.682178][T15804] [<803eebb0>] (__sys_bpf) from [<803f136c>] (sys_bpf+0x50/0x6c) [ 1598.682248][T15804] r10:00000182 r9:847ce400 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 1598.682270][T15804] r4:00000000 [ 1598.682286][T15804] [<803f131c>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1598.682334][T15804] Exception stack(0xea3b9fa8 to 0xea3b9ff0) [ 1598.682377][T15804] 9fa0: 00000000 00000000 00000012 20000540 00000028 00000000 [ 1598.682424][T15804] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76fca0dc [ 1598.682458][T15804] 9fe0: 76fc9e88 76fc9e78 00018fb8 00130a70 [ 1599.042081][T13868] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1599.241044][T13868] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1599.244457][T13868] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1599.244541][T13868] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1599.244586][T13868] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1599.244654][T13868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.261927][T15812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1600.970578][T13868] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1600.972986][T13868] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input14 [ 1601.051888][T13868] usb 2-1: USB disconnect, device number 32 [ 1601.052298][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1601.499855][T13868] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1601.669289][T13868] usb 2-1: Using ep0 maxpacket: 32 [ 1601.695927][T13868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1601.696071][T13868] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 1601.729646][T13868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.729759][T13868] usb 2-1: Product: syz [ 1601.729788][T13868] usb 2-1: Manufacturer: syz [ 1601.729815][T13868] usb 2-1: SerialNumber: syz [ 1601.919392][T13885] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1602.030111][T13868] usb 2-1: USB disconnect, device number 33 [ 1602.094714][T13885] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1602.098091][T13885] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.098183][T13885] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1602.098226][T13885] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1602.098293][T13885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.109670][T15852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1602.265239][ T28] audit: type=1400 audit(1602.200:547): avc: denied { setopt } for pid=15879 comm="syz.1.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1603.209498][T13706] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1603.369356][T13706] usb 2-1: Using ep0 maxpacket: 32 [ 1603.376371][T13706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1603.376519][T13706] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 1603.401446][T13706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.401560][T13706] usb 2-1: Product: syz [ 1603.401595][T13706] usb 2-1: Manufacturer: syz [ 1603.401624][T13706] usb 2-1: SerialNumber: syz [ 1603.590017][T13885] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1603.591583][T13885] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input15 [ 1603.719822][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1603.719964][T13885] usb 1-1: USB disconnect, device number 35 [ 1603.771669][T13706] usb 2-1: USB disconnect, device number 34 [ 1604.710319][T13706] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1604.874202][T13706] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1604.896180][T13706] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1604.896307][T13706] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1604.896358][T13706] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1604.896463][T13706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.906346][T15943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1605.993399][T13706] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1605.994940][T13706] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input16 [ 1606.099727][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1606.099906][T13706] usb 1-1: USB disconnect, device number 36 [ 1607.258124][ T28] audit: type=1400 audit(1607.190:548): avc: denied { connect } for pid=15974 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1607.689890][T13706] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1607.840900][T13706] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1607.843299][T13706] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1607.843354][T13706] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1607.843378][T13706] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1607.843417][T13706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.852198][T15977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1608.701522][T13706] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1608.705061][T13706] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input17 [ 1608.758388][T13706] usb 1-1: USB disconnect, device number 37 [ 1608.758747][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1609.029323][ T28] audit: type=1400 audit(1608.960:549): avc: denied { write } for pid=16001 comm="syz.0.3381" name="functions" dev="configfs" ino=35737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1609.063702][T16003] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 1609.064009][T16003] udc dummy_udc.0: failed to start g1: -19 [ 1609.069337][T16003] UDC core: g1: couldn't find an available UDC or it's busy [ 1609.529516][T13868] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1609.703130][T13868] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1609.721050][T13868] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.721185][T13868] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1609.721232][T13868] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1609.721308][T13868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.756101][T16011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1610.195871][T13868] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1610.202334][T13868] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input18 [ 1610.365086][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1610.365264][T13868] usb 2-1: USB disconnect, device number 35 [ 1610.760033][T16041] can0: slcan on pts0. [ 1610.860035][T16039] can0 (unregistered): slcan off pts0. [ 1612.420384][T13706] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1612.589452][T13706] usb 1-1: Using ep0 maxpacket: 16 [ 1612.605518][T13706] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1612.620688][T13706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.623223][T13706] usb 1-1: config 0 descriptor?? [ 1613.072208][T13706] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1613.072376][T13706] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1613.072465][T13706] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1613.072553][T13706] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1613.072651][T13706] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1613.072766][T13706] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1613.072864][T13706] elo 0003:04E7:0009.0006: unknown main item tag 0x0 [ 1613.072980][T13706] elo 0003:04E7:0009.0006: unbalanced collection at end of report description [ 1613.073477][T13706] elo 0003:04E7:0009.0006: parse failed [ 1613.073713][T13706] elo 0003:04E7:0009.0006: probe with driver elo failed with error -22 [ 1613.279249][T13706] usb 1-1: USB disconnect, device number 38 [ 1618.964388][ T28] audit: type=1400 audit(1618.900:550): avc: denied { write } for pid=16090 comm="syz.0.3396" path="socket:[36182]" dev="sockfs" ino=36182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1625.977491][ T28] audit: type=1400 audit(1625.910:551): avc: denied { create } for pid=16096 comm="syz.1.3397" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1626.020331][ T28] audit: type=1400 audit(1625.960:552): avc: denied { unlink } for pid=11496 comm="syz-executor" name="file5" dev="tmpfs" ino=2727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1631.822166][ T28] audit: type=1400 audit(1631.660:553): avc: denied { mount } for pid=16106 comm="syz.1.3400" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1634.979580][T13885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1635.134013][T13885] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1635.154846][T13885] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.154994][T13885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.239283][ T3720] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1639.421717][ T3720] usb 2-1: Using ep0 maxpacket: 32 [ 1639.430686][ T3720] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1639.445374][ T3720] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.445484][ T3720] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1639.445523][ T3720] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1639.445574][ T3720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.454874][ T3720] usb 2-1: config 0 descriptor?? [ 1639.688370][ T3720] usbhid 2-1:0.0: can't add hid device: -71 [ 1639.689324][ T3720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1639.695902][ T3720] usb 2-1: USB disconnect, device number 36 [ 1640.741707][T16162] FAULT_INJECTION: forcing a failure. [ 1640.741707][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.741862][T16162] CPU: 0 UID: 0 PID: 16162 Comm: syz.1.3411 Tainted: G L syzkaller #0 PREEMPT [ 1640.741923][T16162] Tainted: [L]=SOFTLOCKUP [ 1640.741941][T16162] Hardware name: ARM-Versatile Express [ 1640.741962][T16162] Call trace: [ 1640.742003][T16162] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1640.742105][T16162] r7:60000013 r6:60000013 r5:82308710 r4:00000000 [ 1640.742132][T16162] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1640.742189][T16162] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1640.742251][T16162] r7:84fd6400 r6:00000000 r5:84fd6400 r4:82b1601c [ 1640.742267][T16162] [<8021e848>] (dump_stack) from [<80a20f28>] (should_fail_ex+0x1bc/0x21c) [ 1640.742328][T16162] [<80a20d6c>] (should_fail_ex) from [<8057a488>] (should_failslab+0x6c/0x94) [ 1640.742400][T16162] r8:00000000 r7:84fd6400 r6:805b6740 r5:00000cc0 r4:830bacc0 [ 1640.742418][T16162] [<8057a41c>] (should_failslab) from [<80557e80>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1640.742474][T16162] [<80557e24>] (kmem_cache_alloc_noprof) from [<805b6740>] (alloc_empty_file+0x54/0x13c) [ 1640.742545][T16162] r10:830c2000 r9:84fd6400 r8:82a04d40 r7:84e54180 r6:00000002 r5:82b193ac [ 1640.742566][T16162] r4:8251d8f0 [ 1640.742581][T16162] [<805b66ec>] (alloc_empty_file) from [<805b68d4>] (alloc_file_pseudo+0xac/0x154) [ 1640.742649][T16162] r8:81c2a124 r7:00000002 r6:830f9a10 r5:83443680 r4:823344d8 [ 1640.742666][T16162] [<805b6828>] (alloc_file_pseudo) from [<8062d928>] (anon_inode_getfile_fmode+0x74/0xcc) [ 1640.742739][T16162] r10:8251d744 r9:00000002 r8:823344d8 r7:86029f00 r6:83443680 r5:81c2a124 [ 1640.742760][T16162] r4:8251d98c [ 1640.742775][T16162] [<8062d8b4>] (anon_inode_getfile_fmode) from [<80628fe4>] (sys_fanotify_init+0x2b4/0x484) [ 1640.742846][T16162] r9:00000000 r8:00000000 r7:00000002 r6:00000001 r5:86029f00 r4:00000004 [ 1640.742864][T16162] [<80628d30>] (sys_fanotify_init) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1640.742914][T16162] Exception stack(0xdfa1dfa8 to 0xdfa1dff0) [ 1640.742954][T16162] dfa0: 00000000 00000000 00000020 00000001 00000000 00000000 [ 1640.742992][T16162] dfc0: 00000000 00000000 0035630c 0000016f 003562d8 00000000 00000001 76f100dc [ 1640.743023][T16162] dfe0: 76f0fe88 76f0fe78 00018fb8 00130a70 [ 1640.743062][T16162] r10:0000016f r9:84fd6400 r8:8020029c r7:0000016f r6:0035630c r5:00000000 [ 1640.743081][T16162] r4:00000000 [ 1640.879111][ T28] audit: type=1400 audit(1640.810:554): avc: denied { ioctl } for pid=16163 comm="syz.1.3412" path="/dev/dri/renderD128" dev="devtmpfs" ino=613 ioctlcmd=0x6441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:getty_var_run_t:s0" [ 1641.219403][ T8274] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1641.379597][ T8274] usb 2-1: Using ep0 maxpacket: 8 [ 1641.383327][ T8274] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1641.398361][ T8274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.407485][ T8274] usb 2-1: config 0 descriptor?? [ 1641.445033][ T8274] usb 2-1: probing VID:PID(0424:012C) [ 1641.452036][ T8274] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 1641.452266][ T8274] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1641.452315][ T8274] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 1641.452356][ T8274] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1641.452460][ T8274] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1641.876303][ T8274] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1642.135412][ T8274] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 1643.253291][T13850] usb 2-1: USB disconnect, device number 37 [ 1643.257552][ T8274] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1643.364235][T13850] USB vub300 remote SDIO host controller[0] now disconnected [ 1644.299420][ C0] ODEBUG: object df801d04 is NOT on stack e0068000, but annotated. [ 1644.299674][ C0] ------------[ cut here ]------------ [ 1644.299919][ C0] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0+0x180/0x1ec, CPU#0: syz.1.2542/13004 [ 1644.302263][ C0] Modules linked in: [ 1644.302943][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1644.303333][ C0] CPU: 0 UID: 0 PID: 13004 Comm: syz.1.2542 Tainted: G L syzkaller #0 PREEMPT [ 1644.303680][ C0] Tainted: [L]=SOFTLOCKUP [ 1644.303838][ C0] Hardware name: ARM-Versatile Express [ 1644.304015][ C0] Call trace: frame pointer underflow [ 1644.304259][ C0] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1644.304550][ C0] r7:82a1c4bc r6:00000000 r5:82308710 r4:00000001 [ 1644.304761][ C0] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1644.305024][ C0] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1644.305300][ C0] r7:82a1c4bc r6:00000000 r5:847cd780 r4:82c82d7c [ 1644.305479][ C0] [<8021e848>] (dump_stack) from [<802026b8>] (vpanic+0x114/0x320) [ 1644.305724][ C0] [<802025a4>] (vpanic) from [<802028f8>] (trace_suspend_resume+0x0/0x100) [ 1644.305978][ C0] r7:8098af54 [ 1644.306093][ C0] [<802028c4>] (panic) from [<80251b90>] (get_taint+0x0/0x1c) [ 1644.306337][ C0] r3:82a0b188 r2:00000001 r1:822ee280 r0:822f5c04 [ 1644.306522][ C0] [<80251b18>] (check_panic_on_warn) from [<80251d0c>] (__warn+0x98/0x1a4) [ 1644.306788][ C0] [<80251c74>] (__warn) from [<80251f90>] (warn_slowpath_fmt+0x178/0x1f4) [ 1644.307076][ C0] r8:00000009 r7:8236aed0 r6:df801c1c r5:847cd780 r4:00000000 [ 1644.307479][ C0] [<80251e1c>] (warn_slowpath_fmt) from [<8098af54>] (lookup_object_or_alloc.part.0+0x180/0x1ec) [ 1644.307848][ C0] r10:00000001 r9:81c04448 r8:df801d04 r7:00000000 r6:82d0a2fc r5:82cfb7d0 [ 1644.308215][ C0] r4:848f2e88 [ 1644.308342][ C0] [<8098add4>] (lookup_object_or_alloc.part.0) from [<8098b564>] (__debug_object_init+0x140/0x1d8) [ 1644.308837][ C0] r10:0000eaf0 r9:82cfb80c r8:00000001 r7:81c04448 r6:20000113 r5:82d0a300 [ 1644.309143][ C0] r4:df801d04 r3:00000001 [ 1644.309282][ C0] [<8098b424>] (__debug_object_init) from [<8098b650>] (debug_object_init_on_stack+0x28/0x2c) [ 1644.309638][ C0] r10:df801eb0 r9:00020d18 r8:00000100 r7:00000000 r6:dddcff80 r5:82b61178 [ 1644.309928][ C0] r4:00000000 [ 1644.310061][ C0] [<8098b628>] (debug_object_init_on_stack) from [<803019b4>] (init_rcu_head_on_stack+0x18/0x1c) [ 1644.310435][ C0] [<8030199c>] (init_rcu_head_on_stack) from [<80305998>] (__synchronize_srcu+0x7c/0xcc) [ 1644.310753][ C0] [<8030591c>] (__synchronize_srcu) from [<80305a84>] (synchronize_srcu+0x78/0x14c) [ 1644.311081][ C0] r5:60000113 r4:82b61178 [ 1644.311225][ C0] [<80305a0c>] (synchronize_srcu) from [<80c22590>] (wakeup_source_unregister.part.0+0x64/0x1b4) [ 1644.311607][ C0] r7:00000000 r6:862190c0 r5:00000113 r4:86bda980 [ 1644.311841][ C0] [<80c2252c>] (wakeup_source_unregister.part.0) from [<80c226f8>] (wakeup_source_unregister+0x18/0x1c) [ 1644.312272][ C0] r7:00000000 r6:862190c0 r5:847fc000 r4:847fc008 [ 1644.312486][ C0] [<80c226e0>] (wakeup_source_unregister) from [<8132c300>] (mmc_host_classdev_release+0x1c/0x58) [ 1644.312878][ C0] [<8132c2e4>] (mmc_host_classdev_release) from [<80bfee98>] (device_release+0x40/0xb0) [ 1644.313259][ C0] r5:858dc280 r4:847fc008 [ 1644.313476][ C0] [<80bfee58>] (device_release) from [<81b83970>] (kobject_put+0xa0/0x258) [ 1644.313850][ C0] r5:81d5df60 r4:847fc008 [ 1644.314070][ C0] [<81b838d0>] (kobject_put) from [<80bff00c>] (put_device+0x18/0x1c) [ 1644.314407][ C0] r8:00000100 r7:8134aaec r6:847fc000 r5:00000000 r4:847fc000 [ 1644.314667][ C0] [<80bfeff4>] (put_device) from [<8132ca64>] (mmc_free_host+0x30/0x34) [ 1644.314986][ C0] [<8132ca34>] (mmc_free_host) from [<8134ac4c>] (vub300_inactivity_timer_expired+0x160/0x1b8) [ 1644.315330][ C0] r5:00000000 r4:847fcaec [ 1644.315523][ C0] [<8134aaec>] (vub300_inactivity_timer_expired) from [<80331338>] (call_timer_fn+0x30/0x268) [ 1644.315894][ C0] r7:8134aaec r6:847cd780 r5:847fcaec r4:847fcaec [ 1644.316116][ C0] [<80331308>] (call_timer_fn) from [<8033180c>] (__run_timers+0x29c/0x420) [ 1644.316451][ C0] r10:df801eb0 r9:00020d18 r8:00000000 r7:8134aaec r6:82a0b194 r5:847fcaec [ 1644.316787][ C0] r4:dddc7000 [ 1644.316901][ C0] [<80331570>] (__run_timers) from [<803319f8>] (run_timer_base+0x68/0x78) [ 1644.317197][ C0] r10:847cd780 r9:00000002 r8:00000100 r7:00000004 r6:00000002 r5:00000001 [ 1644.317465][ C0] r4:dddc7000 [ 1644.317578][ C0] [<80331990>] (run_timer_base) from [<80331a24>] (run_timer_softirq+0x1c/0x34) [ 1644.317883][ C0] r4:82a03084 [ 1644.318011][ C0] [<80331a08>] (run_timer_softirq) from [<8025b2f8>] (handle_softirqs+0x160/0x4e8) [ 1644.318405][ C0] [<8025b198>] (handle_softirqs) from [<8025b81c>] (__irq_exit_rcu+0x150/0x1d4) [ 1644.318794][ C0] r10:00000001 r9:00000000 r8:00000000 r7:e0069fb0 r6:824c5988 r5:825000f4 [ 1644.319050][ C0] r4:847cd780 [ 1644.319214][ C0] [<8025b6cc>] (__irq_exit_rcu) from [<8025bb64>] (irq_exit+0x10/0x18) [ 1644.319499][ C0] r5:825000f4 r4:828d50ec [ 1644.319680][ C0] [<8025bb54>] (irq_exit) from [<81babc7c>] (generic_handle_arch_irq+0x7c/0x80) [ 1644.320014][ C0] [<81babc00>] (generic_handle_arch_irq) from [<81b78ca0>] (call_with_stack+0x1c/0x20) [ 1644.320430][ C0] r9:00000000 r8:828ca044 r7:847cd780 r6:ffffffff r5:20000010 r4:00019514 [ 1644.320812][ C0] [<81b78c84>] (call_with_stack) from [<80200f68>] (__irq_usr+0x88/0xa0) [ 1644.321093][ C0] Exception stack(0xe0069fb0 to 0xe0069ff8) [ 1644.321319][ C0] 9fa0: ffffffff 00000004 000001fc 00000000 [ 1644.321597][ C0] 9fc0: 00000000 00000000 00000000 00000000 00356378 00000000 00000001 76eef0dc [ 1644.321881][ C0] 9fe0: 20005d30 20005d30 00019514 00019514 20000010 ffffffff [ 1644.323979][ C0] Rebooting in 86400 seconds..