last executing test programs: 14.017175757s ago: executing program 0 (id=1054): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r1, 0x0, &(0x7f0000ae2000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000440)={0x28, 0x6, r1, r1, 0xb, 0x5, 0xf}) 13.774690396s ago: executing program 1 (id=1055): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, 0x0}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) 12.343511676s ago: executing program 0 (id=1056): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000380)}, 0x102) 9.011711123s ago: executing program 0 (id=1057): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe97d, 0x40000, 0x10001, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbc}}], 0x1, &(0x7f0000000340)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 8.024772617s ago: executing program 1 (id=1058): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000009c0)="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", 0x1bb) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000500)='0x40\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='MSFT100\n\x00', 0x8) 6.960117055s ago: executing program 1 (id=1059): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8", 0x6, 0x8012, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.40584392s ago: executing program 1 (id=1060): socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e24, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0x3, 0x9, 0x0, 0x2000002, 0x9, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8) r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 4.855178839s ago: executing program 0 (id=1061): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000380)}, 0x102) 2.83634095s ago: executing program 1 (id=1062): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_io_uring_setup(0x6a12, 0x0, 0x0, 0x0, 0x0) 2.379255306s ago: executing program 0 (id=1063): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='`'], 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x6, {0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 947.576657ms ago: executing program 1 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) write(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x8001, @empty, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) unshare(0x6020400) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x142, 0xfffffffc) kernel console output (not intermixed with test programs): T29] audit: type=1400 audit(417.380:219): avc: denied { read append } for pid=3837 comm="syz.0.117" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.405779][ T29] audit: type=1400 audit(417.390:220): avc: denied { open } for pid=3837 comm="syz.0.117" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 419.828681][ T3842] Zero length message leads to an empty skb [ 420.883249][ T29] audit: type=1326 audit(420.590:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 420.912617][ T29] audit: type=1326 audit(420.600:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 420.913514][ T29] audit: type=1326 audit(420.620:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=230 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 420.914211][ T29] audit: type=1326 audit(420.620:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 420.914652][ T29] audit: type=1326 audit(420.620:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 420.937961][ T29] audit: type=1326 audit(420.650:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 420.965158][ T29] audit: type=1326 audit(420.680:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 420.970526][ T29] audit: type=1326 audit(420.680:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.121" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x7ffc0000 [ 425.570559][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 425.577675][ T29] audit: type=1400 audit(425.280:233): avc: denied { bind } for pid=3867 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 425.680261][ T29] audit: type=1400 audit(425.390:234): avc: denied { write } for pid=3867 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 425.794655][ T3868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 435.825217][ T3875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.132'. [ 436.833637][ T29] audit: type=1400 audit(436.540:235): avc: denied { open } for pid=3877 comm="syz.1.133" path="/dev/ptyq7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 436.899816][ T29] audit: type=1400 audit(436.610:236): avc: denied { ioctl } for pid=3877 comm="syz.1.133" path="/dev/ptyq7" dev="devtmpfs" ino=119 ioctlcmd=0x5425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 453.789313][ T29] audit: type=1400 audit(453.500:237): avc: denied { create } for pid=3898 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 453.809770][ T29] audit: type=1400 audit(453.520:238): avc: denied { connect } for pid=3898 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 453.836132][ T29] audit: type=1400 audit(453.540:239): avc: denied { write } for pid=3898 comm="syz.0.138" laddr=fe80::a8aa:aaff:feaa:aa16 lport=19231 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 453.976093][ T29] audit: type=1400 audit(453.690:240): avc: denied { read } for pid=3898 comm="syz.0.138" laddr=fe80::a8aa:aaff:feaa:aa16 lport=19231 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.573678][ T29] audit: type=1400 audit(457.270:241): avc: denied { create } for pid=3904 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 457.628817][ T29] audit: type=1400 audit(457.330:242): avc: denied { bind } for pid=3904 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 459.396376][ T29] audit: type=1400 audit(459.110:243): avc: denied { mount } for pid=3914 comm="syz.1.145" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 459.671478][ T29] audit: type=1400 audit(459.380:244): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 460.676631][ T3921] FAULT_INJECTION: forcing a failure. [ 460.676631][ T3921] name failslab, interval 1, probability 0, space 0, times 0 [ 460.678922][ T3921] CPU: 1 UID: 0 PID: 3921 Comm: syz.1.147 Tainted: G W syzkaller #0 PREEMPT [ 460.679050][ T3921] Tainted: [W]=WARN [ 460.679105][ T3921] Hardware name: linux,dummy-virt (DT) [ 460.679139][ T3921] Call trace: [ 460.679167][ T3921] show_stack+0x18/0x24 (C) [ 460.679265][ T3921] dump_stack_lvl+0x7c/0xb0 [ 460.679322][ T3921] dump_stack+0x1c/0x28 [ 460.679374][ T3921] should_fail_ex+0x6b4/0x6c4 [ 460.679465][ T3921] should_failslab+0xbc/0x120 [ 460.679541][ T3921] __kmalloc_cache_noprof+0x3ec/0x628 [ 460.679596][ T3921] alloc_ucounts+0x154/0x4c0 [ 460.679651][ T3921] set_cred_ucounts+0xa8/0x1b0 [ 460.679700][ T3921] __sys_setresuid+0x3cc/0x1080 [ 460.679766][ T3921] __arm64_sys_setresuid+0x70/0xa0 [ 460.679896][ T3921] invoke_syscall+0x74/0x240 [ 460.679965][ T3921] el0_svc_common.constprop.0+0xac/0x230 [ 460.680019][ T3921] do_el0_svc+0x40/0x58 [ 460.680071][ T3921] el0_svc+0x58/0x2a4 [ 460.680129][ T3921] el0t_64_sync_handler+0xa0/0xe4 [ 460.680180][ T3921] el0t_64_sync+0x198/0x19c [ 461.870586][ T29] audit: type=1400 audit(461.580:245): avc: denied { mount } for pid=3928 comm="syz.1.150" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 461.890926][ T29] audit: type=1400 audit(461.600:246): avc: denied { ioctl } for pid=3928 comm="syz.1.150" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4816 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.296622][ T29] audit: type=1400 audit(462.010:247): avc: denied { search } for pid=3928 comm="syz.1.150" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 462.307249][ T29] audit: type=1400 audit(462.020:248): avc: denied { search } for pid=3928 comm="syz.1.150" name="usb_gadget" dev="configfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 462.646431][ T29] audit: type=1400 audit(462.360:249): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 463.863670][ T29] audit: type=1400 audit(463.560:250): avc: denied { create } for pid=3936 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 463.869368][ T29] audit: type=1400 audit(463.580:251): avc: denied { bind } for pid=3936 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 463.889450][ T29] audit: type=1400 audit(463.600:252): avc: denied { accept } for pid=3936 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 464.852992][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 464.853597][ T29] audit: type=1400 audit(464.530:254): avc: denied { map } for pid=3940 comm="syz.0.155" path="socket:[5532]" dev="sockfs" ino=5532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 470.826040][ T3959] syzkaller0: entered promiscuous mode [ 470.826481][ T3959] syzkaller0: entered allmulticast mode [ 471.254724][ T3961] syzkaller0: entered promiscuous mode [ 471.255125][ T3961] syzkaller0: entered allmulticast mode [ 472.617281][ T29] audit: type=1400 audit(472.330:255): avc: denied { create } for pid=3964 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 472.653207][ T29] audit: type=1400 audit(472.360:256): avc: denied { bind } for pid=3964 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 473.394762][ T29] audit: type=1400 audit(473.110:257): avc: denied { read } for pid=3968 comm="syz.0.166" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 473.398038][ T29] audit: type=1400 audit(473.110:258): avc: denied { open } for pid=3968 comm="syz.0.166" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 474.834055][ T29] audit: type=1400 audit(474.540:259): avc: denied { read } for pid=3977 comm="syz.1.170" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 474.847723][ T29] audit: type=1400 audit(474.560:260): avc: denied { open } for pid=3977 comm="syz.1.170" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 474.943383][ T29] audit: type=1400 audit(474.650:261): avc: denied { ioctl } for pid=3977 comm="syz.1.170" path="/dev/dri/card1" dev="devtmpfs" ino=619 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 474.948949][ T3979] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 477.129481][ T29] audit: type=1400 audit(476.840:262): avc: denied { bind } for pid=3989 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 477.134605][ T29] audit: type=1400 audit(476.850:263): avc: denied { name_bind } for pid=3989 comm="syz.1.176" src=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 477.145487][ T29] audit: type=1400 audit(476.850:264): avc: denied { node_bind } for pid=3989 comm="syz.1.176" src=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 478.849841][ T29] audit: type=1400 audit(478.560:265): avc: denied { mmap_zero } for pid=3998 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 479.634764][ T29] audit: type=1400 audit(479.340:266): avc: denied { read write } for pid=4006 comm="syz.1.184" name="virtual_nci" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 479.653743][ T29] audit: type=1400 audit(479.360:267): avc: denied { open } for pid=4006 comm="syz.1.184" path="/dev/virtual_nci" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 479.893853][ T29] audit: type=1400 audit(479.600:268): avc: denied { ioctl } for pid=4006 comm="syz.1.184" path="/dev/virtual_nci" dev="devtmpfs" ino=674 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.535053][ T4014] FAULT_INJECTION: forcing a failure. [ 480.535053][ T4014] name failslab, interval 1, probability 0, space 0, times 0 [ 480.537774][ T4014] CPU: 0 UID: 0 PID: 4014 Comm: syz.0.186 Tainted: G W syzkaller #0 PREEMPT [ 480.537901][ T4014] Tainted: [W]=WARN [ 480.537930][ T4014] Hardware name: linux,dummy-virt (DT) [ 480.537972][ T4014] Call trace: [ 480.538002][ T4014] show_stack+0x18/0x24 (C) [ 480.538126][ T4014] dump_stack_lvl+0x7c/0xb0 [ 480.538189][ T4014] dump_stack+0x1c/0x28 [ 480.538242][ T4014] should_fail_ex+0x6b4/0x6c4 [ 480.538305][ T4014] should_failslab+0xbc/0x120 [ 480.538363][ T4014] kmem_cache_alloc_noprof+0x3d4/0x610 [ 480.538419][ T4014] anon_vma_fork+0x154/0x5b8 [ 480.538477][ T4014] dup_mmap+0xc88/0x1810 [ 480.538572][ T4014] copy_process+0x3140/0x5950 [ 480.538637][ T4014] kernel_clone+0x15c/0x93c [ 480.538732][ T4014] __do_sys_clone+0xd4/0x124 [ 480.538788][ T4014] __arm64_sys_clone+0xa8/0x100 [ 480.538842][ T4014] invoke_syscall+0x74/0x240 [ 480.538947][ T4014] el0_svc_common.constprop.0+0xac/0x230 [ 480.539010][ T4014] do_el0_svc+0x40/0x58 [ 480.539063][ T4014] el0_svc+0x58/0x2a4 [ 480.539124][ T4014] el0t_64_sync_handler+0xa0/0xe4 [ 480.539177][ T4014] el0t_64_sync+0x198/0x19c [ 481.211434][ T4016] FAULT_INJECTION: forcing a failure. [ 481.211434][ T4016] name failslab, interval 1, probability 0, space 0, times 0 [ 481.215244][ T4016] CPU: 0 UID: 0 PID: 4016 Comm: syz.0.186 Tainted: G W syzkaller #0 PREEMPT [ 481.215408][ T4016] Tainted: [W]=WARN [ 481.215463][ T4016] Hardware name: linux,dummy-virt (DT) [ 481.215526][ T4016] Call trace: [ 481.215588][ T4016] show_stack+0x18/0x24 (C) [ 481.215775][ T4016] dump_stack_lvl+0x7c/0xb0 [ 481.215893][ T4016] dump_stack+0x1c/0x28 [ 481.216008][ T4016] should_fail_ex+0x6b4/0x6c4 [ 481.216144][ T4016] should_failslab+0xbc/0x120 [ 481.216277][ T4016] kmem_cache_alloc_noprof+0x3d4/0x610 [ 481.216401][ T4016] mempool_alloc_slab+0x40/0x68 [ 481.216554][ T4016] mempool_init_node+0x1e0/0x594 [ 481.216678][ T4016] mempool_init_noprof+0x18/0x24 [ 481.216805][ T4016] bioset_init+0x2f8/0x680 [ 481.216960][ T4016] __alloc_disk_node+0x78/0x4bc [ 481.217076][ T4016] __blk_alloc_disk+0xb8/0x160 [ 481.217184][ T4016] dm_create+0x43c/0x1054 [ 481.217308][ T4016] dev_create+0xc4/0x234 [ 481.217430][ T4016] ctl_ioctl+0x438/0xbbc [ 481.217546][ T4016] dm_ctl_ioctl+0x10/0x20 [ 481.217659][ T4016] __arm64_sys_ioctl+0x128/0x1a8 [ 481.217792][ T4016] invoke_syscall+0x74/0x240 [ 481.217914][ T4016] el0_svc_common.constprop.0+0xac/0x230 [ 481.218031][ T4016] do_el0_svc+0x40/0x58 [ 481.218138][ T4016] el0_svc+0x58/0x2a4 [ 481.218258][ T4016] el0t_64_sync_handler+0xa0/0xe4 [ 481.218381][ T4016] el0t_64_sync+0x198/0x19c [ 485.090900][ T4007] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 490.141198][ T29] audit: type=1400 audit(489.840:269): avc: denied { write } for pid=4019 comm="syz.0.187" name="dlm" dev="configfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 490.146161][ T29] audit: type=1400 audit(489.850:270): avc: denied { add_name } for pid=4019 comm="syz.0.187" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 490.167841][ T29] audit: type=1400 audit(489.860:271): avc: denied { create } for pid=4019 comm="syz.0.187" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 490.315106][ T29] audit: type=1400 audit(490.030:272): avc: denied { write } for pid=4019 comm="syz.0.187" name="comms" dev="configfs" ino=5615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 490.415157][ T29] audit: type=1400 audit(490.130:273): avc: denied { write } for pid=4019 comm="syz.0.187" name="local" dev="configfs" ino=5617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 490.428148][ T29] audit: type=1400 audit(490.140:274): avc: denied { open } for pid=4019 comm="syz.0.187" path="/91/config/dlm/cluster/comms/1/local" dev="configfs" ino=5617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 502.133877][ T29] audit: type=1400 audit(501.830:275): avc: denied { bind } for pid=4048 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 505.468591][ T4051] FAULT_INJECTION: forcing a failure. [ 505.468591][ T4051] name failslab, interval 1, probability 0, space 0, times 0 [ 505.479545][ T4051] CPU: 0 UID: 0 PID: 4051 Comm: syz.1.195 Tainted: G W syzkaller #0 PREEMPT [ 505.479792][ T4051] Tainted: [W]=WARN [ 505.479847][ T4051] Hardware name: linux,dummy-virt (DT) [ 505.479919][ T4051] Call trace: [ 505.479980][ T4051] show_stack+0x18/0x24 (C) [ 505.480162][ T4051] dump_stack_lvl+0x7c/0xb0 [ 505.480287][ T4051] dump_stack+0x1c/0x28 [ 505.480398][ T4051] should_fail_ex+0x6b4/0x6c4 [ 505.480546][ T4051] should_failslab+0xbc/0x120 [ 505.480667][ T4051] __kmalloc_cache_noprof+0x3ec/0x628 [ 505.480781][ T4051] alloc_netdev_mqs+0xa8c/0x107c [ 505.480908][ T4051] __ip_tunnel_create+0x250/0x4b4 [ 505.481023][ T4051] ip_tunnel_ctl+0x378/0x740 [ 505.481129][ T4051] vti_tunnel_ctl+0x13c/0x278 [ 505.481250][ T4051] ip_tunnel_siocdevprivate+0xdc/0x160 [ 505.481372][ T4051] dev_ifsioc+0xd8c/0x16dc [ 505.481493][ T4051] dev_ioctl+0x694/0xcbc [ 505.481605][ T4051] sock_ioctl+0x468/0x5c8 [ 505.481718][ T4051] __arm64_sys_ioctl+0x128/0x1a8 [ 505.481899][ T4051] invoke_syscall+0x74/0x240 [ 505.482017][ T4051] el0_svc_common.constprop.0+0xac/0x230 [ 505.482132][ T4051] do_el0_svc+0x40/0x58 [ 505.482309][ T4051] el0_svc+0x58/0x2a4 [ 505.482434][ T4051] el0t_64_sync_handler+0xa0/0xe4 [ 505.482549][ T4051] el0t_64_sync+0x198/0x19c [ 509.904332][ T4056] syzkaller0: entered promiscuous mode [ 509.905704][ T4056] syzkaller0: entered allmulticast mode [ 514.139622][ T29] audit: type=1400 audit(513.850:276): avc: denied { read } for pid=4064 comm="syz.1.202" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 514.151172][ T29] audit: type=1400 audit(513.850:277): avc: denied { open } for pid=4064 comm="syz.1.202" path="/dev/fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 514.160276][ T29] audit: type=1400 audit(513.850:278): avc: denied { ioctl } for pid=4064 comm="syz.1.202" path="/dev/fb0" dev="devtmpfs" ino=620 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 517.987263][ T4075] FAULT_INJECTION: forcing a failure. [ 517.987263][ T4075] name failslab, interval 1, probability 0, space 0, times 0 [ 517.993795][ T4075] CPU: 0 UID: 0 PID: 4075 Comm: syz.0.204 Tainted: G W syzkaller #0 PREEMPT [ 517.993950][ T4075] Tainted: [W]=WARN [ 517.993980][ T4075] Hardware name: linux,dummy-virt (DT) [ 517.994013][ T4075] Call trace: [ 517.994043][ T4075] show_stack+0x18/0x24 (C) [ 517.994141][ T4075] dump_stack_lvl+0x7c/0xb0 [ 517.994200][ T4075] dump_stack+0x1c/0x28 [ 517.994253][ T4075] should_fail_ex+0x6b4/0x6c4 [ 517.994315][ T4075] should_failslab+0xbc/0x120 [ 517.994374][ T4075] __kvmalloc_node_noprof+0x61c/0x8b8 [ 517.994485][ T4075] bpf_jit_binary_pack_alloc+0x9c/0x22c [ 517.994546][ T4075] bpf_int_jit_compile+0xcb0/0x1578 [ 517.994602][ T4075] __bpf_prog_select_runtime+0x610/0x938 [ 517.994654][ T4075] bpf_prog_select_runtime+0x1c/0x28 [ 517.994705][ T4075] bpf_prepare_filter+0x7c8/0x1030 [ 517.994766][ T4075] __get_filter+0x144/0x21c [ 517.994819][ T4075] sk_attach_filter+0x18/0xf8 [ 517.994874][ T4075] sk_setsockopt+0x1054/0x1fa0 [ 517.994932][ T4075] sock_setsockopt+0x34/0x64 [ 517.994992][ T4075] do_sock_setsockopt+0x2c8/0x35c [ 517.995043][ T4075] __sys_setsockopt+0xc8/0x160 [ 517.995095][ T4075] __arm64_sys_setsockopt+0xa8/0x104 [ 517.995147][ T4075] invoke_syscall+0x74/0x240 [ 517.995201][ T4075] el0_svc_common.constprop.0+0xac/0x230 [ 517.995255][ T4075] do_el0_svc+0x40/0x58 [ 517.995351][ T4075] el0_svc+0x58/0x2a4 [ 517.995410][ T4075] el0t_64_sync_handler+0xa0/0xe4 [ 517.995474][ T4075] el0t_64_sync+0x198/0x19c [ 543.368552][ T29] audit: type=1400 audit(543.070:279): avc: denied { write } for pid=4078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.375483][ T29] audit: type=1400 audit(543.090:280): avc: denied { create } for pid=4078 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.386146][ T29] audit: type=1400 audit(543.090:281): avc: denied { write open } for pid=4078 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=1544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.423980][ T29] audit: type=1400 audit(543.120:282): avc: denied { append } for pid=4078 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.445407][ T29] audit: type=1400 audit(543.160:283): avc: denied { getattr } for pid=4078 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 544.393479][ T29] audit: type=1400 audit(544.100:284): avc: denied { read } for pid=4080 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 545.713971][ T29] audit: type=1400 audit(545.390:285): avc: denied { write } for pid=4084 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.714877][ T29] audit: type=1400 audit(545.420:286): avc: denied { unlink } for pid=4084 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 548.745440][ T29] audit: type=1400 audit(548.460:287): avc: denied { name_bind } for pid=4099 comm="syz.1.213" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 548.800675][ T29] audit: type=1400 audit(548.500:288): avc: denied { node_bind } for pid=4099 comm="syz.1.213" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 552.219240][ T4111] capability: warning: `syz.1.218' uses 32-bit capabilities (legacy support in use) [ 552.285669][ T29] audit: type=1400 audit(552.000:289): avc: denied { append } for pid=4110 comm="syz.1.218" name="loop3" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 553.035254][ T29] audit: type=1400 audit(552.750:290): avc: denied { bind } for pid=4112 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 556.250083][ T4124] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 556.567416][ T4124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.713326][ T4124] bond2: (slave ip6erspan0): making interface the new active one [ 556.743237][ T4124] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 557.555778][ T29] audit: type=1400 audit(557.270:291): avc: denied { read } for pid=4128 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 559.191253][ T4135] syz.0.228 uses obsolete (PF_INET,SOCK_PACKET) [ 563.795565][ T29] audit: type=1400 audit(563.510:292): avc: denied { execute } for pid=4149 comm="syz.0.234" name="file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 563.817029][ T4150] FAULT_INJECTION: forcing a failure. [ 563.817029][ T4150] name failslab, interval 1, probability 0, space 0, times 0 [ 563.833801][ T4150] CPU: 1 UID: 0 PID: 4150 Comm: syz.0.234 Tainted: G W syzkaller #0 PREEMPT [ 563.834058][ T4150] Tainted: [W]=WARN [ 563.834115][ T4150] Hardware name: linux,dummy-virt (DT) [ 563.834180][ T4150] Call trace: [ 563.834230][ T4150] show_stack+0x18/0x24 (C) [ 563.834410][ T4150] dump_stack_lvl+0x7c/0xb0 [ 563.834515][ T4150] dump_stack+0x1c/0x28 [ 563.834613][ T4150] should_fail_ex+0x6b4/0x6c4 [ 563.834727][ T4150] should_failslab+0xbc/0x120 [ 563.834836][ T4150] kmem_cache_alloc_noprof+0x3d4/0x610 [ 563.834943][ T4150] __pte_alloc_one_noprof.constprop.0+0x78/0x208 [ 563.835043][ T4150] __pte_alloc+0x7c/0x1f8 [ 563.835140][ T4150] do_anonymous_page+0xd24/0x1928 [ 563.835237][ T4150] __handle_mm_fault+0x10e0/0x1b60 [ 563.835345][ T4150] handle_mm_fault+0x1e8/0x8ac [ 563.835455][ T4150] __get_user_pages+0x320/0x1400 [ 563.835560][ T4150] get_user_pages_remote+0x188/0x6ec [ 563.835661][ T4150] get_arg_page+0xe4/0x280 [ 563.835765][ T4150] copy_string_kernel+0xd8/0x2b4 [ 563.835867][ T4150] do_execveat_common.isra.0+0x240/0x460 [ 563.835968][ T4150] __arm64_sys_execve+0x9c/0xe0 [ 563.836068][ T4150] invoke_syscall+0x74/0x240 [ 563.836205][ T4150] el0_svc_common.constprop.0+0xac/0x230 [ 563.836311][ T4150] do_el0_svc+0x40/0x58 [ 563.836424][ T4150] el0_svc+0x58/0x2a4 [ 563.836554][ T4150] el0t_64_sync_handler+0xa0/0xe4 [ 563.836661][ T4150] el0t_64_sync+0x198/0x19c [ 568.153767][ T4158] misc userio: Invalid payload size [ 572.079551][ T4163] process 'syz.1.239' launched './file0' with NULL argv: empty string added [ 572.080589][ T4163] FAULT_INJECTION: forcing a failure. [ 572.080589][ T4163] name failslab, interval 1, probability 0, space 0, times 0 [ 572.080823][ T4163] CPU: 0 UID: 0 PID: 4163 Comm: syz.1.239 Tainted: G W syzkaller #0 PREEMPT [ 572.080959][ T4163] Tainted: [W]=WARN [ 572.081015][ T4163] Hardware name: linux,dummy-virt (DT) [ 572.081083][ T4163] Call trace: [ 572.081141][ T4163] show_stack+0x18/0x24 (C) [ 572.081320][ T4163] dump_stack_lvl+0x7c/0xb0 [ 572.081442][ T4163] dump_stack+0x1c/0x28 [ 572.081558][ T4163] should_fail_ex+0x6b4/0x6c4 [ 572.081689][ T4163] should_failslab+0xbc/0x120 [ 572.081898][ T4163] __kmalloc_noprof+0x4dc/0x74c [ 572.082109][ T4163] lsm_blob_alloc+0x60/0x80 [ 572.082280][ T4163] security_prepare_creds+0x30/0x200 [ 572.082418][ T4163] prepare_creds+0x358/0x6bc [ 572.082686][ T4163] prepare_exec_creds+0x14/0x210 [ 572.082897][ T4163] bprm_execve+0xa0/0x1220 [ 572.083029][ T4163] do_execveat_common.isra.0+0x370/0x460 [ 572.083198][ T4163] __arm64_sys_execve+0x9c/0xe0 [ 572.083331][ T4163] invoke_syscall+0x74/0x240 [ 572.083574][ T4163] el0_svc_common.constprop.0+0xac/0x230 [ 572.083778][ T4163] do_el0_svc+0x40/0x58 [ 572.084037][ T4163] el0_svc+0x58/0x2a4 [ 572.084223][ T4163] el0t_64_sync_handler+0xa0/0xe4 [ 572.084378][ T4163] el0t_64_sync+0x198/0x19c [ 575.498103][ T29] audit: type=1400 audit(575.210:293): avc: denied { execute_no_trans } for pid=4172 comm="syz.1.245" path="/132/file0" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 576.988603][ T29] audit: type=1400 audit(576.700:294): avc: denied { ioctl } for pid=4180 comm="syz.1.248" path="cgroup:[4026532626]" dev="nsfs" ino=4026532626 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 589.714033][ T4211] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 589.998607][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 591.144148][ T4216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.149070][ T4216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.469325][ T4221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.531405][ T4221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.587328][ T29] audit: type=1400 audit(604.290:295): avc: denied { write } for pid=4239 comm="syz.0.269" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 604.686062][ T4240] binder: 4239:4240 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 604.687160][ T4240] binder: 4240 RLIMIT_NICE not set [ 606.516844][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 606.784037][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 606.801003][ T41] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 606.884811][ T41] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.892691][ T41] usb 1-1: config 179 has no interface number 0 [ 606.896454][ T41] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 606.898759][ T41] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 606.901205][ T41] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.904233][ T41] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 606.907327][ T41] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 606.913232][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.198911][ T4246] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 607.370891][ T41] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 607.584699][ T41] usb 1-1: USB disconnect, device number 2 [ 609.692928][ T4263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.705213][ T4263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.594434][ T29] audit: type=1400 audit(610.300:296): avc: denied { read } for pid=3227 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 611.495405][ T4274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.499464][ T4274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.314752][ T29] audit: type=1400 audit(612.020:297): avc: denied { create } for pid=4279 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 612.327931][ T29] audit: type=1400 audit(612.040:298): avc: denied { write } for pid=4279 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 612.331299][ T29] audit: type=1400 audit(612.040:299): avc: denied { nlmsg_write } for pid=4279 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 613.869481][ T4286] syz.1.289 (4286): attempted to duplicate a private mapping with mremap. This is not supported. [ 616.625384][ T4298] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 616.627408][ T4298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 616.633305][ T4298] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 616.640854][ T4298] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 616.653445][ T4298] audit: out of memory in audit_log_start [ 630.464217][ T4335] binder: 4334:4335 tried to acquire reference to desc 0, got 1 instead [ 630.489083][ T29] audit: type=1400 audit(630.200:300): avc: denied { transfer } for pid=4334 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 630.517802][ T4335] binder: 4334:4335 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 630.520554][ T4335] binder: 4335 RLIMIT_NICE not set [ 630.521596][ T4335] binder: 4335 RLIMIT_NICE not set [ 630.545541][ T4335] binder: release 4334:4335 transaction 19 out, still active [ 630.546315][ T4335] binder: release 4334:4335 transaction 12 in, still active [ 630.549459][ T4335] binder: undelivered TRANSACTION_COMPLETE [ 630.610845][ T41] binder: release 4334:4335 transaction 12 out, still active [ 630.614988][ T41] binder: undelivered TRANSACTION_COMPLETE [ 630.616382][ T41] binder: send failed reply for transaction 19, target dead [ 630.620711][ T41] binder: send failed reply for transaction 12, target dead [ 630.798243][ T29] audit: type=1400 audit(630.510:301): avc: denied { read write } for pid=4336 comm="syz.1.310" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 630.801124][ T29] audit: type=1400 audit(630.510:302): avc: denied { open } for pid=4336 comm="syz.1.310" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 631.253543][ T29] audit: type=1400 audit(630.960:303): avc: denied { write } for pid=4338 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 632.317779][ T4342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.349250][ T4342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.465422][ T29] audit: type=1400 audit(632.170:304): avc: denied { map_create } for pid=4341 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 632.520638][ T29] audit: type=1400 audit(632.230:305): avc: denied { prog_load } for pid=4341 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 634.889188][ T29] audit: type=1400 audit(634.600:306): avc: denied { create } for pid=4348 comm="syz.0.315" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 635.890696][ T29] audit: type=1400 audit(635.600:307): avc: denied { append } for pid=4352 comm="syz.0.317" name="iommu" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 637.419073][ T29] audit: type=1400 audit(637.130:308): avc: denied { prog_run } for pid=4360 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 642.280364][ T4372] gadgetfs: bound to dummy_udc driver [ 642.551760][ T29] audit: type=1400 audit(642.250:309): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 644.921265][ T29] audit: type=1400 audit(644.630:310): avc: denied { create } for pid=4379 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.879072][ T29] audit: type=1326 audit(645.590:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.0.328" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab79368 code=0x0 [ 648.019407][ T29] audit: type=1400 audit(647.730:312): avc: denied { setopt } for pid=4389 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 648.070277][ T29] audit: type=1400 audit(647.750:313): avc: denied { write } for pid=4389 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 648.114662][ T29] audit: type=1400 audit(647.820:314): avc: denied { read } for pid=4389 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 648.878240][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.920701][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.749301][ T29] audit: type=1400 audit(649.440:315): avc: denied { read } for pid=4395 comm="syz.1.334" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 649.778432][ T29] audit: type=1400 audit(649.470:316): avc: denied { open } for pid=4395 comm="syz.1.334" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 649.809190][ T29] audit: type=1400 audit(649.520:317): avc: denied { ioctl } for pid=4395 comm="syz.1.334" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 653.476937][ T29] audit: type=1400 audit(653.180:318): avc: denied { ioctl } for pid=4405 comm="syz.1.337" path="socket:[7366]" dev="sockfs" ino=7366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 659.016077][ T4419] nvme_tcp: queue 0: bad type returned 0 [ 659.240242][ T29] audit: type=1400 audit(658.950:319): avc: denied { create } for pid=4425 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 660.501480][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.551277][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.905107][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.926073][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.323246][ T4432] FAULT_INJECTION: forcing a failure. [ 661.323246][ T4432] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 661.323835][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.0.345 Tainted: G W syzkaller #0 PREEMPT [ 661.323964][ T4432] Tainted: [W]=WARN [ 661.323996][ T4432] Hardware name: linux,dummy-virt (DT) [ 661.324031][ T4432] Call trace: [ 661.324059][ T4432] show_stack+0x18/0x24 (C) [ 661.324176][ T4432] dump_stack_lvl+0x7c/0xb0 [ 661.324233][ T4432] dump_stack+0x1c/0x28 [ 661.324297][ T4432] should_fail_ex+0x6b4/0x6c4 [ 661.324379][ T4432] should_fail_alloc_page+0x70/0xc0 [ 661.324519][ T4432] prepare_alloc_pages+0x1cc/0x578 [ 661.324598][ T4432] __alloc_frozen_pages_noprof+0x1a4/0x3498 [ 661.324661][ T4432] alloc_pages_mpol+0xf8/0x41c [ 661.324716][ T4432] alloc_frozen_pages_noprof+0xb8/0x200 [ 661.324779][ T4432] alloc_pages_noprof+0x14/0x120 [ 661.324832][ T4432] get_free_pages_noprof+0x14/0xe0 [ 661.324883][ T4432] __kasan_populate_vmalloc+0x84/0x204 [ 661.324937][ T4432] alloc_vmap_area+0x61c/0x2ebc [ 661.324992][ T4432] __get_vm_area_node+0x1a8/0x2ec [ 661.325090][ T4432] __vmalloc_node_range_noprof+0x198/0x1024 [ 661.325147][ T4432] __vmalloc_node_noprof+0xe4/0x14c [ 661.325201][ T4432] vzalloc_noprof+0x24/0x30 [ 661.325254][ T4432] n_tty_open+0x1c/0x178 [ 661.325315][ T4432] tty_ldisc_open+0x7c/0x11c [ 661.325408][ T4432] tty_ldisc_setup+0x44/0xe0 [ 661.325510][ T4432] tty_init_dev.part.0+0x108/0x500 [ 661.325564][ T4432] tty_init_dev+0x50/0x74 [ 661.325617][ T4432] ptmx_open+0x118/0x2d8 [ 661.325671][ T4432] chrdev_open+0x1a0/0x4dc [ 661.325725][ T4432] do_dentry_open+0x37c/0xfe8 [ 661.325793][ T4432] vfs_open+0x5c/0x300 [ 661.325846][ T4432] path_openat+0x12d4/0x1e40 [ 661.325899][ T4432] do_file_open+0x18c/0x380 [ 661.325949][ T4432] do_sys_openat2+0xdc/0x180 [ 661.326001][ T4432] __arm64_sys_openat+0x134/0x1e0 [ 661.326053][ T4432] invoke_syscall+0x74/0x240 [ 661.326108][ T4432] el0_svc_common.constprop.0+0xac/0x230 [ 661.326162][ T4432] do_el0_svc+0x40/0x58 [ 661.326214][ T4432] el0_svc+0x58/0x2a4 [ 661.326274][ T4432] el0t_64_sync_handler+0xa0/0xe4 [ 661.326326][ T4432] el0t_64_sync+0x198/0x19c [ 661.329225][ T4432] syz.0.345: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 661.331451][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.0.345 Tainted: G W syzkaller #0 PREEMPT [ 661.331526][ T4432] Tainted: [W]=WARN [ 661.331553][ T4432] Hardware name: linux,dummy-virt (DT) [ 661.331582][ T4432] Call trace: [ 661.331608][ T4432] show_stack+0x18/0x24 (C) [ 661.331686][ T4432] dump_stack_lvl+0x7c/0xb0 [ 661.331846][ T4432] dump_stack+0x1c/0x28 [ 661.331918][ T4432] warn_alloc+0x1d0/0x210 [ 661.331977][ T4432] __vmalloc_node_range_noprof+0xb08/0x1024 [ 661.332033][ T4432] __vmalloc_node_noprof+0xe4/0x14c [ 661.332087][ T4432] vzalloc_noprof+0x24/0x30 [ 661.332140][ T4432] n_tty_open+0x1c/0x178 [ 661.332198][ T4432] tty_ldisc_open+0x7c/0x11c [ 661.332262][ T4432] tty_ldisc_setup+0x44/0xe0 [ 661.332325][ T4432] tty_init_dev.part.0+0x108/0x500 [ 661.332378][ T4432] tty_init_dev+0x50/0x74 [ 661.332430][ T4432] ptmx_open+0x118/0x2d8 [ 661.332628][ T4432] chrdev_open+0x1a0/0x4dc [ 661.332735][ T4432] do_dentry_open+0x37c/0xfe8 [ 661.332852][ T4432] vfs_open+0x5c/0x300 [ 661.332947][ T4432] path_openat+0x12d4/0x1e40 [ 661.333001][ T4432] do_file_open+0x18c/0x380 [ 661.333051][ T4432] do_sys_openat2+0xdc/0x180 [ 661.333137][ T4432] __arm64_sys_openat+0x134/0x1e0 [ 661.333203][ T4432] invoke_syscall+0x74/0x240 [ 661.333303][ T4432] el0_svc_common.constprop.0+0xac/0x230 [ 661.333386][ T4432] do_el0_svc+0x40/0x58 [ 661.333501][ T4432] el0_svc+0x58/0x2a4 [ 661.333562][ T4432] el0t_64_sync_handler+0xa0/0xe4 [ 661.333617][ T4432] el0t_64_sync+0x198/0x19c [ 661.394990][ T4432] Mem-Info: [ 661.396685][ T4432] active_anon:5107 inactive_anon:0 isolated_anon:0 [ 661.396685][ T4432] active_file:82 inactive_file:14471 isolated_file:0 [ 661.396685][ T4432] unevictable:768 dirty:17 writeback:0 [ 661.396685][ T4432] slab_reclaimable:7190 slab_unreclaimable:30409 [ 661.396685][ T4432] mapped:2810 shmem:826 pagetables:5123 [ 661.396685][ T4432] sec_pagetables:0 bounce:0 [ 661.396685][ T4432] kernel_misc_reclaimable:0 [ 661.396685][ T4432] free:288048 free_pcp:5976 free_cma:8128 [ 661.397607][ T4432] Node 0 active_anon:20428kB inactive_anon:0kB active_file:328kB inactive_file:57884kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:11240kB dirty:68kB writeback:0kB shmem:3304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:6320kB pagetables:20492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 661.398114][ T4432] Node 0 DMA free:1152192kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20428kB inactive_anon:0kB active_file:328kB inactive_file:57884kB unevictable:3072kB writepending:68kB zspages:0kB present:2097152kB managed:1524544kB mlocked:0kB bounce:0kB free_pcp:23904kB local_pcp:11496kB free_cma:32512kB [ 661.399012][ T4432] lowmem_reserve[]: 0 0 0 0 0 [ 661.399662][ T4432] Node 0 DMA: 1468*4kB (UM) 1006*8kB (UME) 816*16kB (UM) 585*32kB (UME) 747*64kB (UME) 679*128kB (UME) 624*256kB (UMEC) 528*512kB (UMC) 421*1024kB (UMC) 16*2048kB (UMEC) 19*4096kB (UMC) = 1152192kB [ 661.427888][ T4432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.428077][ T4432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 661.428175][ T4432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.428261][ T4432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 661.428533][ T4432] 15375 total pagecache pages [ 661.428672][ T4432] 0 pages in swap cache [ 661.428780][ T4432] Free swap = 124996kB [ 661.428880][ T4432] Total swap = 124996kB [ 661.429147][ T4432] 524288 pages RAM [ 661.429231][ T4432] 0 pages HighMem/MovableOnly [ 661.429303][ T4432] 143152 pages reserved [ 661.429379][ T4432] 8192 pages cma reserved [ 661.429486][ T4432] 0 pages hwpoisoned [ 661.431265][ T4432] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 664.474109][ T29] audit: type=1400 audit(664.180:320): avc: denied { write } for pid=4441 comm="syz.0.350" name="nullb" dev="configfs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 664.657899][ T4442] null_blk: nullb1: using native zone append [ 665.324290][ T4442] null_blk: disk nullb1 created [ 669.976355][ T29] audit: type=1400 audit(669.690:321): avc: denied { map_read map_write } for pid=4456 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 670.924540][ T4464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.358'. [ 671.003669][ T4464] bond0: entered promiscuous mode [ 671.005736][ T4464] bond_slave_1: entered promiscuous mode [ 671.035650][ T4464] gretap0: entered promiscuous mode [ 671.062845][ T4464] hsr1: entered promiscuous mode [ 672.697351][ T4470] binder: 4469:4470 ioctl c0306201 20000080 returned -14 [ 672.778854][ T4470] binder: 4469:4470 tried to acquire reference to desc 0, got 1 instead [ 672.781521][ T4470] binder: 4469:4470 ioctl c0306201 200003c0 returned -14 [ 672.855053][ T900] binder: release 4469:4470 transaction 24 out, still active [ 672.859956][ T900] binder: undelivered TRANSACTION_COMPLETE [ 672.966703][ T900] binder: send failed reply for transaction 24, target dead [ 673.453911][ T4472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.477720][ T4472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.248772][ T29] audit: type=1400 audit(677.960:322): avc: denied { write } for pid=4489 comm="syz.1.370" name="route" dev="proc" ino=4026532722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 685.976308][ T4528] FAULT_INJECTION: forcing a failure. [ 685.976308][ T4528] name failslab, interval 1, probability 0, space 0, times 0 [ 685.980719][ T4528] CPU: 1 UID: 0 PID: 4528 Comm: syz.1.384 Tainted: G W syzkaller #0 PREEMPT [ 685.980924][ T4528] Tainted: [W]=WARN [ 685.980985][ T4528] Hardware name: linux,dummy-virt (DT) [ 685.981058][ T4528] Call trace: [ 685.981124][ T4528] show_stack+0x18/0x24 (C) [ 685.981313][ T4528] dump_stack_lvl+0x7c/0xb0 [ 685.981448][ T4528] dump_stack+0x1c/0x28 [ 685.981574][ T4528] should_fail_ex+0x6b4/0x6c4 [ 685.981768][ T4528] should_failslab+0xbc/0x120 [ 685.981925][ T4528] __kmalloc_cache_noprof+0x3ec/0x628 [ 685.982061][ T4528] register_netdevice+0x3b4/0x1b0c [ 685.982196][ T4528] ip6_mroute_setsockopt+0x3e0/0x11c0 [ 685.982348][ T4528] do_ipv6_setsockopt+0x258/0x2c80 [ 685.982478][ T4528] ipv6_setsockopt+0x8c/0x120 [ 685.982591][ T4528] rawv6_setsockopt+0x148/0x390 [ 685.982707][ T4528] sock_common_setsockopt+0x70/0xe0 [ 685.982840][ T4528] do_sock_setsockopt+0x178/0x35c [ 685.982955][ T4528] __sys_setsockopt+0xc8/0x160 [ 685.983067][ T4528] __arm64_sys_setsockopt+0xa8/0x104 [ 685.983179][ T4528] invoke_syscall+0x74/0x240 [ 685.983290][ T4528] el0_svc_common.constprop.0+0xac/0x230 [ 685.983406][ T4528] do_el0_svc+0x40/0x58 [ 685.983522][ T4528] el0_svc+0x58/0x2a4 [ 685.983641][ T4528] el0t_64_sync_handler+0xa0/0xe4 [ 685.983759][ T4528] el0t_64_sync+0x198/0x19c [ 686.449271][ T4530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.475885][ T4530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.378322][ T4537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.385477][ T4537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.625688][ T4538] block nbd0: Cannot add socket to a running device [ 689.349001][ T923] block nbd0: Receive control failed (result -32) [ 689.389866][ T4531] block nbd0: shutting down sockets [ 702.145516][ T29] audit: type=1400 audit(701.860:323): avc: denied { write } for pid=4578 comm="syz.0.405" name="usb_gadget" dev="configfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.170948][ T29] audit: type=1400 audit(701.880:324): avc: denied { write } for pid=4578 comm="syz.0.405" name="configs" dev="configfs" ino=6965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.199308][ T29] audit: type=1400 audit(701.910:325): avc: denied { write } for pid=4578 comm="syz.0.405" name="functions" dev="configfs" ino=6964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.234226][ T29] audit: type=1400 audit(701.940:326): avc: denied { write } for pid=4578 comm="syz.0.405" name="c.1" dev="configfs" ino=6969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.249926][ T29] audit: type=1400 audit(701.950:327): avc: denied { create } for pid=4578 comm="syz.0.405" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 702.260800][ T29] audit: type=1400 audit(701.970:328): avc: denied { write } for pid=4578 comm="syz.0.405" name="c.1" dev="configfs" ino=6969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.296320][ T4580] UDC core: g1: couldn't find an available UDC or it's busy [ 703.135709][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'. [ 703.898990][ T29] audit: type=1400 audit(703.610:329): avc: denied { write } for pid=4585 comm="syz.0.408" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 706.325569][ T29] audit: type=1400 audit(706.040:330): avc: denied { read } for pid=4593 comm="syz.1.412" name="trace" dev="tracefs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 706.329019][ T29] audit: type=1400 audit(706.040:331): avc: denied { ioctl } for pid=4593 comm="syz.1.412" path="/239/trace/trace" dev="tracefs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 713.264415][ T29] audit: type=1400 audit(712.970:332): avc: denied { mount } for pid=4598 comm="syz.0.413" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 713.295700][ T4612] FAULT_INJECTION: forcing a failure. [ 713.295700][ T4612] name failslab, interval 1, probability 0, space 0, times 0 [ 713.297025][ T4612] CPU: 0 UID: 0 PID: 4612 Comm: syz.0.413 Tainted: G W syzkaller #0 PREEMPT [ 713.297101][ T4612] Tainted: [W]=WARN [ 713.297129][ T4612] Hardware name: linux,dummy-virt (DT) [ 713.297161][ T4612] Call trace: [ 713.297190][ T4612] show_stack+0x18/0x24 (C) [ 713.297281][ T4612] dump_stack_lvl+0x7c/0xb0 [ 713.297355][ T4612] dump_stack+0x1c/0x28 [ 713.297408][ T4612] should_fail_ex+0x6b4/0x6c4 [ 713.297471][ T4612] should_failslab+0xbc/0x120 [ 713.297530][ T4612] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 713.297587][ T4612] sock_alloc_inode+0x24/0x238 [ 713.297647][ T4612] alloc_inode+0x58/0x1c0 [ 713.297702][ T4612] sock_alloc+0x3c/0x240 [ 713.297758][ T4612] __sock_create+0xa0/0x5fc [ 713.297809][ T4612] __sys_socket+0x124/0x1f0 [ 713.297863][ T4612] __arm64_sys_socket+0x70/0xa4 [ 713.297915][ T4612] invoke_syscall+0x74/0x240 [ 713.297970][ T4612] el0_svc_common.constprop.0+0xac/0x230 [ 713.298024][ T4612] do_el0_svc+0x40/0x58 [ 713.298076][ T4612] el0_svc+0x58/0x2a4 [ 713.298132][ T4612] el0t_64_sync_handler+0xa0/0xe4 [ 713.298184][ T4612] el0t_64_sync+0x198/0x19c [ 713.306239][ T4612] socket: no more sockets [ 716.144884][ T29] audit: type=1400 audit(715.830:333): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 724.476790][ T29] audit: type=1400 audit(724.190:334): avc: denied { setopt } for pid=4624 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 727.123046][ T29] audit: type=1400 audit(726.830:335): avc: denied { write } for pid=4637 comm="syz.0.426" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 730.641129][ T29] audit: type=1400 audit(730.350:336): avc: denied { create } for pid=4652 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 731.604802][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 732.744625][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 732.933506][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 732.944735][ T11] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 732.963596][ T11] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 732.965355][ T11] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 732.968049][ T11] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 732.970562][ T11] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 733.183766][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.185048][ T11] usb 1-1: Product: syz [ 733.187230][ T11] usb 1-1: Manufacturer: syz [ 733.188021][ T11] usb 1-1: SerialNumber: syz [ 747.664125][ T9] atkbd serio0: keyboard reset failed on [ 747.701043][ T3473] usb 1-1: USB disconnect, device number 3 [ 751.258716][ T900] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 751.544172][ T900] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 751.629726][ T900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.630889][ T900] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.707633][ T900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.708838][ T900] usb 1-1: Product: syz [ 751.709337][ T900] usb 1-1: Manufacturer: syz [ 751.709462][ T900] usb 1-1: SerialNumber: syz [ 752.509979][ T3473] usb 1-1: USB disconnect, device number 4 [ 755.194056][ T29] audit: type=1400 audit(754.910:337): avc: denied { create } for pid=4689 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 755.268883][ T29] audit: type=1400 audit(754.970:338): avc: denied { setopt } for pid=4689 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 756.013681][ T4692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.439'. [ 760.265560][ T29] audit: type=1400 audit(759.980:339): avc: denied { ioctl } for pid=4701 comm="syz.1.442" path="socket:[7795]" dev="sockfs" ino=7795 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 762.855446][ T4693] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 767.276123][ T29] audit: type=1400 audit(766.980:340): avc: denied { getopt } for pid=4711 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 774.163072][ T4737] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 774.188619][ T4737] bond5 (unregistering): Released all slaves [ 777.370158][ T29] audit: type=1400 audit(777.080:341): avc: denied { bind } for pid=4749 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 777.423562][ T29] audit: type=1400 audit(777.100:342): avc: denied { name_bind } for pid=4749 comm="syz.1.459" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 777.424465][ T29] audit: type=1400 audit(777.130:343): avc: denied { node_bind } for pid=4749 comm="syz.1.459" saddr=172.20.20.32 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 780.109673][ T29] audit: type=1400 audit(779.820:344): avc: denied { recv } for pid=3377 comm="syz-executor" saddr=127.0.0.1 src=55146 daddr=127.0.0.1 dest=30002 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 780.159477][ T29] audit: type=1400 audit(779.870:345): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=127.0.0.1 src=30002 daddr=127.0.0.1 dest=55146 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 781.343181][ T29] audit: type=1400 audit(781.040:346): avc: denied { watch_mount watch_reads } for pid=4762 comm="syz.0.464" path="/200" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 781.386623][ T29] audit: type=1400 audit(781.100:347): avc: denied { watch } for pid=4762 comm="syz.0.464" path="/200" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 781.659444][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.689050][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.026801][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.069304][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.030883][ T4771] ubi0: attaching mtd0 [ 785.381211][ T4771] ubi0: scanning is finished [ 785.394068][ T4771] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 785.718593][ T4771] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 786.073705][ T3197] block nbd1: shutting down sockets [ 786.575103][ T29] audit: type=1400 audit(786.290:348): avc: denied { bind } for pid=4782 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 786.747169][ T29] audit: type=1400 audit(786.460:349): avc: denied { map } for pid=4782 comm="syz.1.473" path="socket:[7930]" dev="sockfs" ino=7930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 788.098397][ T4788] IPv6: NLM_F_REPLACE set, but no existing node found! [ 789.713171][ T4790] block nbd1: shutting down sockets [ 797.063006][ T4536] block nbd1: Receive control failed (result -32) [ 797.160367][ T4806] block nbd1: shutting down sockets [ 797.527842][ T4810] nvme_fabrics: missing parameter 'traddr=%s' [ 803.967250][ T4536] block nbd1: Receive control failed (result -32) [ 804.141745][ T4821] block nbd1: shutting down sockets [ 810.674648][ T4536] block nbd1: Receive control failed (result -32) [ 810.722174][ T4833] block nbd1: shutting down sockets [ 812.825236][ T4840] netlink: 277 bytes leftover after parsing attributes in process `syz.1.498'. [ 816.475922][ T4849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 816.476513][ T4849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 816.477051][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 817.093030][ T4851] netlink: 'syz.1.503': attribute type 4 has an invalid length. [ 817.477988][ T4853] netlink: 71 bytes leftover after parsing attributes in process `syz.1.504'. [ 819.990574][ T4861] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 819.990574][ T4861] Please contact the netfilter-devel mailing list or update your nftables rules. [ 821.911678][ T4868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.511'. [ 821.912994][ T4868] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 829.440153][ T4906] netlink: 'syz.1.529': attribute type 12 has an invalid length. [ 833.372725][ T4920] netlink: 56 bytes leftover after parsing attributes in process `syz.1.536'. [ 833.823249][ T29] audit: type=1400 audit(1089.527:350): avc: denied { create } for pid=4921 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 833.838029][ T29] audit: type=1400 audit(1089.547:351): avc: denied { setopt } for pid=4921 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 839.418109][ T29] audit: type=1400 audit(1095.128:352): avc: denied { create } for pid=4935 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 839.454686][ T29] audit: type=1400 audit(1095.168:353): avc: denied { write } for pid=4935 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 839.514976][ T4936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 850.978526][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 852.843556][ T29] audit: type=1400 audit(1108.560:354): avc: denied { read } for pid=4974 comm="syz.0.561" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 856.581012][ T29] audit: type=1400 audit(1112.290:355): avc: denied { write } for pid=4984 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 857.001468][ T29] audit: type=1400 audit(1112.710:356): avc: denied { create } for pid=4986 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 857.557337][ T4990] netlink: 'syz.1.568': attribute type 29 has an invalid length. [ 857.618008][ T4990] netlink: 'syz.1.568': attribute type 29 has an invalid length. [ 858.699651][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 861.790568][ T5012] netlink: 163 bytes leftover after parsing attributes in process `syz.1.578'. [ 881.759029][ T29] audit: type=1400 audit(1137.473:357): avc: denied { write } for pid=5044 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 884.347657][ T5058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.595'. [ 884.743763][ T5058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.595'. [ 884.769461][ T5058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.595'. [ 886.693078][ T5065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.599'. [ 895.163857][ T5115] netlink: 'syz.1.624': attribute type 29 has an invalid length. [ 895.173531][ T5115] netlink: 'syz.1.624': attribute type 29 has an invalid length. [ 908.467247][ T29] audit: type=1400 audit(1164.186:358): avc: denied { allowed } for pid=5173 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 908.631192][ T29] audit: type=1400 audit(1164.246:359): avc: denied { connect } for pid=5173 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 925.853411][ T5194] syzkaller0: entered promiscuous mode [ 925.855518][ T5194] syzkaller0: entered allmulticast mode [ 932.197872][ T29] audit: type=1400 audit(1187.929:360): avc: denied { getopt } for pid=5195 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 932.209313][ T5197] FAULT_INJECTION: forcing a failure. [ 932.209313][ T5197] name fail_futex, interval 1, probability 0, space 0, times 1 [ 932.211433][ T5197] CPU: 1 UID: 0 PID: 5197 Comm: syz.0.654 Tainted: G W syzkaller #0 PREEMPT [ 932.211572][ T5197] Tainted: [W]=WARN [ 932.211601][ T5197] Hardware name: linux,dummy-virt (DT) [ 932.211633][ T5197] Call trace: [ 932.211661][ T5197] show_stack+0x18/0x24 (C) [ 932.211752][ T5197] dump_stack_lvl+0x7c/0xb0 [ 932.211808][ T5197] dump_stack+0x1c/0x28 [ 932.211860][ T5197] should_fail_ex+0x6b4/0x6c4 [ 932.211930][ T5197] should_fail+0x14/0x34 [ 932.211984][ T5197] get_futex_key+0x198/0xf84 [ 932.212037][ T5197] futex_wait_setup+0x64/0x55c [ 932.212090][ T5197] __futex_wait+0x138/0x218 [ 932.212140][ T5197] futex_wait+0xe4/0x2ac [ 932.212190][ T5197] do_futex+0x1e8/0x280 [ 932.212239][ T5197] __arm64_sys_futex+0x1e8/0x310 [ 932.212289][ T5197] invoke_syscall+0x74/0x240 [ 932.212342][ T5197] el0_svc_common.constprop.0+0xac/0x230 [ 932.212394][ T5197] do_el0_svc+0x40/0x58 [ 932.212501][ T5197] el0_svc+0x58/0x2a4 [ 932.212574][ T5197] el0t_64_sync_handler+0xa0/0xe4 [ 932.212665][ T5197] el0t_64_sync+0x198/0x19c [ 937.027386][ T29] audit: type=1400 audit(1192.750:361): avc: denied { read write } for pid=5206 comm="syz.0.658" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 937.043973][ T29] audit: type=1400 audit(1192.770:362): avc: denied { open } for pid=5206 comm="syz.0.658" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 937.168202][ T29] audit: type=1400 audit(1192.840:363): avc: denied { ioctl } for pid=5206 comm="syz.0.658" path="/dev/uinput" dev="devtmpfs" ino=709 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 938.806649][ T3445] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 939.007415][ T3445] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 939.102002][ T3445] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 939.104190][ T3445] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.107453][ T3445] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 939.110925][ T3445] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.368392][ T3445] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 939.370510][ T3445] usb 1-1: Product: syz [ 939.375997][ T3445] usb 1-1: Manufacturer: syz [ 939.628045][ T3445] cdc_wdm 1-1:1.0: skipping garbage [ 939.630184][ T3445] cdc_wdm 1-1:1.0: skipping garbage [ 939.670677][ T3445] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 939.869844][ T3445] usb 1-1: USB disconnect, device number 5 [ 940.749792][ T3445] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 941.019552][ T3445] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 941.059543][ T3445] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 941.061917][ T3445] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.063397][ T3445] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 941.065288][ T3445] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.145183][ T3445] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 941.146435][ T3445] usb 1-1: Product: syz [ 941.147314][ T3445] usb 1-1: Manufacturer: syz [ 941.270636][ T3445] cdc_wdm 1-1:1.0: skipping garbage [ 941.286009][ T3445] cdc_wdm 1-1:1.0: skipping garbage [ 941.304121][ T3445] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 945.204702][ T29] audit: type=1400 audit(1200.921:364): avc: denied { read write } for pid=5212 comm="syz.0.661" name="cdc-wdm0" dev="devtmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 945.216265][ T29] audit: type=1400 audit(1200.941:365): avc: denied { open } for pid=5212 comm="syz.0.661" path="/dev/cdc-wdm0" dev="devtmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 945.558715][ T3473] usb 1-1: USB disconnect, device number 6 [ 946.482872][ T29] audit: type=1400 audit(1202.201:366): avc: denied { map } for pid=5226 comm="syz.0.665" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 946.498971][ T29] audit: type=1400 audit(1202.221:367): avc: denied { read write } for pid=5226 comm="syz.0.665" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 959.190670][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 961.658912][ T29] audit: type=1400 audit(1217.383:368): avc: denied { ioctl } for pid=5264 comm="syz.1.678" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9944 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 961.804959][ T5266] FAULT_INJECTION: forcing a failure. [ 961.804959][ T5266] name failslab, interval 1, probability 0, space 0, times 0 [ 961.810443][ T5266] CPU: 1 UID: 0 PID: 5266 Comm: syz.0.677 Tainted: G W syzkaller #0 PREEMPT [ 961.810648][ T5266] Tainted: [W]=WARN [ 961.810712][ T5266] Hardware name: linux,dummy-virt (DT) [ 961.810785][ T5266] Call trace: [ 961.810881][ T5266] show_stack+0x18/0x24 (C) [ 961.811082][ T5266] dump_stack_lvl+0x7c/0xb0 [ 961.811208][ T5266] dump_stack+0x1c/0x28 [ 961.811325][ T5266] should_fail_ex+0x6b4/0x6c4 [ 961.811463][ T5266] should_failslab+0xbc/0x120 [ 961.811592][ T5266] kmem_cache_alloc_noprof+0x3d4/0x610 [ 961.811811][ T5266] fib_insert_alias+0x354/0xb40 [ 961.811977][ T5266] fib_trie_unmerge+0x1f4/0x9a0 [ 961.812095][ T5266] fib_unmerge+0xac/0x364 [ 961.812209][ T5266] fib4_rule_configure+0x7dc/0xde0 [ 961.812327][ T5266] fib_newrule+0x27c/0x1c8c [ 961.812482][ T5266] fib_nl_newrule+0x70/0x94 [ 961.812609][ T5266] rtnetlink_rcv_msg+0x638/0x880 [ 961.812738][ T5266] netlink_rcv_skb+0x1ac/0x360 [ 961.812871][ T5266] rtnetlink_rcv+0x18/0x24 [ 961.812989][ T5266] netlink_unicast+0x418/0x6e0 [ 961.813106][ T5266] netlink_sendmsg+0x638/0xa4c [ 961.813224][ T5266] __sock_sendmsg+0xc8/0x1a4 [ 961.813344][ T5266] ____sys_sendmsg+0x52c/0x76c [ 961.813462][ T5266] ___sys_sendmsg+0x124/0x1a4 [ 961.813581][ T5266] __sys_sendmsg+0x10c/0x198 [ 961.813696][ T5266] __arm64_sys_sendmsg+0x74/0xa4 [ 961.813814][ T5266] invoke_syscall+0x74/0x240 [ 961.813957][ T5266] el0_svc_common.constprop.0+0xac/0x230 [ 961.814079][ T5266] do_el0_svc+0x40/0x58 [ 961.814195][ T5266] el0_svc+0x58/0x2a4 [ 961.814318][ T5266] el0t_64_sync_handler+0xa0/0xe4 [ 961.814438][ T5266] el0t_64_sync+0x198/0x19c [ 965.698350][ T29] audit: type=1400 audit(1221.303:369): avc: denied { read } for pid=5270 comm="syz.0.680" name="loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 965.717753][ T29] audit: type=1400 audit(1221.303:370): avc: denied { open } for pid=5270 comm="syz.0.680" path="/dev/loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 965.776482][ T29] audit: type=1400 audit(1221.313:371): avc: denied { ioctl } for pid=5270 comm="syz.0.680" path="/dev/loop-control" dev="devtmpfs" ino=637 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 977.547043][ T5284] netlink: 108 bytes leftover after parsing attributes in process `syz.0.681'. [ 983.535932][ T29] audit: type=1400 audit(1239.265:372): avc: denied { write } for pid=5288 comm="syz.1.683" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 988.418476][ T5304] nbd0: detected capacity change from 0 to 63 [ 989.486751][ T4536] block nbd0: Receive control failed (result -104) [ 997.663108][ T29] audit: type=1400 audit(1253.397:373): avc: denied { read write } for pid=5334 comm="syz.1.698" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 997.667176][ T29] audit: type=1400 audit(1253.397:374): avc: denied { open } for pid=5334 comm="syz.1.698" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 997.852628][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.924604][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.111214][ T805] input: syz0 as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input3 [ 998.259929][ T29] audit: type=1400 audit(1253.987:375): avc: denied { create } for pid=5332 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 998.387012][ T805] hid-generic 0005:057E:0306.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1000.454235][ T5342] fido_id[5342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1001.936339][ T29] audit: type=1400 audit(1257.667:376): avc: denied { recv } for pid=0 comm="swapper/0" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1005.890439][ T29] audit: type=1400 audit(1261.538:377): avc: denied { search } for pid=5348 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.891407][ T29] audit: type=1400 audit(1261.568:378): avc: denied { search } for pid=5348 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=928 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.892206][ T29] audit: type=1400 audit(1261.578:379): avc: denied { search } for pid=5348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.892715][ T29] audit: type=1400 audit(1261.578:380): avc: denied { search } for pid=5348 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.190682][ T29] audit: type=1400 audit(1261.908:381): avc: denied { read } for pid=5349 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.195298][ T29] audit: type=1400 audit(1261.918:382): avc: denied { read open } for pid=5349 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.211318][ T29] audit: type=1400 audit(1261.918:383): avc: denied { getattr } for pid=5349 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.800580][ T29] audit: type=1400 audit(1262.528:384): avc: denied { write } for pid=5348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.822483][ T29] audit: type=1400 audit(1262.548:385): avc: denied { add_name } for pid=5348 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.667659][ T29] audit: type=1400 audit(1266.398:386): avc: denied { write } for pid=5351 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.906025][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1014.907295][ T29] audit: type=1400 audit(1270.639:388): avc: denied { sqpoll } for pid=5363 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1016.010577][ T5376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.707'. [ 1016.267117][ T29] audit: type=1400 audit(1271.999:389): avc: denied { read append } for pid=5378 comm="syz.1.708" name="vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1016.271009][ T29] audit: type=1400 audit(1272.009:390): avc: denied { open } for pid=5378 comm="syz.1.708" path="/dev/vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1016.284795][ T29] audit: type=1400 audit(1272.019:391): avc: denied { write } for pid=5378 comm="syz.1.708" name="vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1017.499634][ T11] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1017.757381][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1017.853417][ T11] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1017.963623][ T11] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1017.965027][ T11] usb 1-1: config 179 has no interface number 0 [ 1017.968113][ T11] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1017.969213][ T11] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1017.970286][ T11] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1017.971338][ T11] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1017.972398][ T11] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1017.973688][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.042318][ T5385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1018.647111][ T3473] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 1018.812074][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1018.812165][ T4926] usb 1-1: USB disconnect, device number 7 [ 1018.812330][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1018.864382][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 1018.983569][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 30 seconds [ 1018.997235][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 30 seconds [ 1018.997566][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 30 seconds [ 1026.418676][ T5436] netlink: 188 bytes leftover after parsing attributes in process `syz.1.734'. [ 1040.150309][ T5474] : renamed from bond0 (while UP) [ 1040.227028][ T40] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.228558][ T40] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.228884][ T40] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.229178][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.306037][ T900] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1041.356038][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 1041.546026][ T900] usb 1-1: Using ep0 maxpacket: 16 [ 1041.709991][ T900] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1041.858513][ T900] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1041.859258][ T900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1042.026260][ T900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.026874][ T900] usb 1-1: Product: syz [ 1042.027370][ T900] usb 1-1: Manufacturer: syz [ 1042.027477][ T900] usb 1-1: SerialNumber: syz [ 1042.082314][ T900] usb 1-1: config 0 descriptor?? [ 1043.938513][ T29] audit: type=1400 audit(1299.672:392): avc: denied { ioctl } for pid=5502 comm="syz.1.762" path="socket:[10402]" dev="sockfs" ino=10402 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1044.975845][ T5510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.010099][ T5510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.790918][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.814168][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.671268][ T5525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.235237][ T5525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1048.236099][ T5525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1048.268588][ T5525] veth1_vlan: left promiscuous mode [ 1048.288657][ T5525] veth0_vlan: left promiscuous mode [ 1048.303527][ T5525] veth0_vlan: entered promiscuous mode [ 1048.325354][ T5525] veth1_vlan: entered promiscuous mode [ 1048.419451][ T5525] veth1_macvtap: left promiscuous mode [ 1048.441298][ T5525] veth0_macvtap: left promiscuous mode [ 1048.461233][ T5525] veth0_macvtap: entered promiscuous mode [ 1048.478771][ T5525] veth1_macvtap: entered promiscuous mode [ 1048.534338][ T5525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1048.553430][ T5525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.564844][ T5525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1048.574794][ T5525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1048.586512][ T5525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1048.607730][ T5525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1048.617404][ T5525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1048.623657][ T5525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1048.895316][ T3197] udevd[3197]: worker [5305] /devices/virtual/block/nbd0 is taking a long time [ 1049.057641][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 60 seconds [ 1049.060107][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 60 seconds [ 1049.066194][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 60 seconds [ 1049.538054][ T1284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.586607][ T1251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.594709][ T1251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.597433][ T1251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.573716][ T41] usb 1-1: USB disconnect, device number 8 [ 1053.917513][ T5538] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 1057.407421][ T29] audit: type=1400 audit(1313.144:393): avc: denied { name_bind } for pid=5545 comm="syz.1.778" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1059.246654][ T5550] netlink: 'syz.1.780': attribute type 9 has an invalid length. [ 1060.156798][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.185865][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.766866][ T29] audit: type=1400 audit(1317.504:394): avc: denied { read write } for pid=5560 comm="syz.1.786" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1061.773336][ T29] audit: type=1400 audit(1317.504:395): avc: denied { open } for pid=5560 comm="syz.1.786" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1061.839541][ T11] input: syz0 as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input5 [ 1061.925301][ T11] hid-generic 0005:057E:0306.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1063.275759][ T5563] fido_id[5563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1077.405234][ T29] audit: type=1400 audit(1333.136:396): avc: denied { execute_no_trans } for pid=5596 comm="syz.0.799" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1077.804036][ T29] audit: type=1400 audit(1333.546:397): avc: denied { getopt } for pid=5598 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1078.815612][ T29] audit: type=1400 audit(1334.556:398): avc: denied { lock } for pid=5592 comm="syz.1.797" path="socket:[11594]" dev="sockfs" ino=11594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1079.132205][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 90 seconds [ 1079.132729][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 90 seconds [ 1079.133134][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 90 seconds [ 1088.844559][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.866114][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.749212][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.781962][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.929178][ T5664] psci: CPU1 killed (polled 0 ms) [ 1109.220049][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 120 seconds [ 1109.220880][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 120 seconds [ 1109.231964][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 120 seconds [ 1120.936575][ T5685] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 1120.940235][ T5685] device-mapper: ioctl: error adding target to table [ 1121.722869][ T29] audit: type=1400 audit(1377.461:399): avc: denied { write } for pid=5689 comm="syz.1.834" name="nullb" dev="configfs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1122.082977][ T29] audit: type=1400 audit(1377.821:400): avc: denied { cmd } for pid=5691 comm="syz.1.835" path="/dev/ublk-control" dev="devtmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1122.246717][ T29] audit: type=1400 audit(1377.961:401): avc: denied { map } for pid=5691 comm="syz.1.835" path="/dev/ublkc0" dev="devtmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1125.458459][ T5698] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1129.347706][ T29] audit: type=1400 audit(1385.082:402): avc: denied { mount } for pid=5714 comm="syz.0.844" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1130.605592][ T5718] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 1130.681379][ T5716] bond0: entered allmulticast mode [ 1130.757919][ T5716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.009682][ T29] audit: type=1400 audit(1388.752:403): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1133.327766][ T29] audit: type=1400 audit(1389.072:404): avc: denied { mount } for pid=5719 comm="syz.0.845" name="/" dev="ramfs" ino=10806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1133.365700][ T29] audit: type=1400 audit(1389.102:405): avc: denied { mounton } for pid=5719 comm="syz.0.845" path="/" dev="ramfs" ino=10806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1135.442316][ C0] net_ratelimit: 27 callbacks suppressed [ 1139.286893][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 150 seconds [ 1139.287696][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 150 seconds [ 1139.295306][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 150 seconds [ 1141.202083][ C0] net_ratelimit: 28 callbacks suppressed [ 1144.663276][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.766276][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.401109][ C0] net_ratelimit: 30 callbacks suppressed [ 1147.408571][ T5735] syzkaller0: entered promiscuous mode [ 1147.426926][ T5735] syzkaller0: entered allmulticast mode [ 1149.214234][ T198] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.215228][ T198] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.215994][ T198] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.216526][ T198] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.601297][ C0] net_ratelimit: 20 callbacks suppressed [ 1154.844575][ T5749] gretap1: entered promiscuous mode [ 1154.874115][ T5749] gretap1: entered allmulticast mode [ 1156.800278][ C0] net_ratelimit: 30 callbacks suppressed [ 1162.079633][ C0] net_ratelimit: 32 callbacks suppressed [ 1167.279120][ C0] net_ratelimit: 38 callbacks suppressed [ 1169.296879][ T3197] udevd[3197]: worker [5305] /devices/virtual/block/nbd0 timeout; kill it [ 1169.331723][ T3197] udevd[3197]: seq 7716 '/devices/virtual/block/nbd0' killed [ 1169.382127][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 180 seconds [ 1169.385455][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 180 seconds [ 1169.390643][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 180 seconds [ 1172.559091][ C0] net_ratelimit: 22 callbacks suppressed ** 113 printk messages dropped ** [ 1178.078246][ C0] net_ratelimit: 36 callbacks suppressed [ 1180.117424][ T5773] FAULT_INJECTION: forcing a failure. [ 1180.117424][ T5773] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.118848][ T5773] CPU: 0 UID: 0 PID: 5773 Comm: syz.1.861 Tainted: G W syzkaller #0 PREEMPT [ 1180.118931][ T5773] Tainted: [W]=WARN [ 1180.118961][ T5773] Hardware name: linux,dummy-virt (DT) [ 1180.119149][ T5773] Call trace: [ 1180.119223][ T5773] show_stack+0x18/0x24 (C) [ 1180.119388][ T5773] dump_stack_lvl+0x7c/0xb0 [ 1180.119503][ T5773] dump_stack+0x1c/0x28 [ 1180.119564][ T5773] should_fail_ex+0x6b4/0x6c4 [ 1180.119632][ T5773] should_failslab+0xbc/0x120 [ 1180.119696][ T5773] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1180.119763][ T5773] alloc_empty_file+0x60/0x164 [ 1180.119860][ T5773] path_openat+0xd0/0x1e40 [ 1180.119937][ T5773] do_file_open+0x18c/0x380 [ 1180.119995][ T5773] do_sys_openat2+0xdc/0x180 [ 1180.120053][ T5773] __arm64_sys_openat+0x134/0x1e0 [ 1180.120142][ T5773] invoke_syscall+0x74/0x240 [ 1180.120230][ T5773] el0_svc_common.constprop.0+0xac/0x230 [ 1180.120330][ T5773] do_el0_svc+0x40/0x58 [ 1180.120386][ T5773] el0_svc+0x58/0x2a4 [ 1180.120516][ T5773] el0t_64_sync_handler+0xa0/0xe4 [ 1180.120578][ T5773] el0t_64_sync+0x198/0x19c [ 1183.277773][ C0] net_ratelimit: 35 callbacks suppressed [ 1188.325682][ C0] net_ratelimit: 29 callbacks suppressed [ 1193.516206][ C0] net_ratelimit: 27 callbacks suppressed [ 1198.715753][ C0] net_ratelimit: 45 callbacks suppressed [ 1199.457313][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 210 seconds [ 1199.458078][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 210 seconds [ 1199.458398][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 210 seconds [ 1203.915823][ C0] net_ratelimit: 69 callbacks suppressed [ 1205.728918][ T5795] block device autoloading is deprecated and will be removed. [ 1209.114150][ C0] net_ratelimit: 26 callbacks suppressed [ 1209.539056][ T5798] FAULT_INJECTION: forcing a failure. [ 1209.539056][ T5798] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.577566][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: syz.1.872 Tainted: G W syzkaller #0 PREEMPT [ 1209.577838][ T5798] Tainted: [W]=WARN [ 1209.577903][ T5798] Hardware name: linux,dummy-virt (DT) [ 1209.578094][ T5798] Call trace: [ 1209.578155][ T5798] show_stack+0x18/0x24 (C) [ 1209.578345][ T5798] dump_stack_lvl+0x7c/0xb0 [ 1209.578525][ T5798] dump_stack+0x1c/0x28 [ 1209.578650][ T5798] should_fail_ex+0x6b4/0x6c4 [ 1209.578786][ T5798] should_failslab+0xbc/0x120 [ 1209.578917][ T5798] __kmalloc_cache_noprof+0x3ec/0x628 [ 1209.579047][ T5798] alloc_workqueue_attrs_noprof+0x40/0x1c4 [ 1209.579176][ T5798] __alloc_workqueue+0xb4/0x1248 [ 1209.579293][ T5798] alloc_workqueue_noprof+0xb8/0x110 [ 1209.579412][ T5798] nci_register_device+0x2d0/0x8c4 [ 1209.579551][ T5798] virtual_ncidev_open+0x110/0x1d0 [ 1209.579672][ T5798] misc_open+0x1c8/0x36c [ 1209.579800][ T5798] chrdev_open+0x1a0/0x4dc [ 1209.579941][ T5798] do_dentry_open+0x37c/0xfe8 [ 1209.580066][ T5798] vfs_open+0x5c/0x300 [ 1209.580190][ T5798] path_openat+0x12d4/0x1e40 [ 1209.580309][ T5798] do_file_open+0x18c/0x380 [ 1209.580422][ T5798] do_sys_openat2+0xdc/0x180 [ 1209.580605][ T5798] __arm64_sys_openat+0x134/0x1e0 [ 1209.580725][ T5798] invoke_syscall+0x74/0x240 [ 1209.580848][ T5798] el0_svc_common.constprop.0+0xac/0x230 [ 1209.580983][ T5798] do_el0_svc+0x40/0x58 [ 1209.581110][ T5798] el0_svc+0x58/0x2a4 [ 1209.581240][ T5798] el0t_64_sync_handler+0xa0/0xe4 [ 1209.581369][ T5798] el0t_64_sync+0x198/0x19c [ 1214.394134][ C0] net_ratelimit: 49 callbacks suppressed [ 1217.647916][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 1219.593999][ C0] net_ratelimit: 84 callbacks suppressed [ 1220.673956][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.883'. [ 1224.792945][ C0] net_ratelimit: 43 callbacks suppressed [ 1229.104961][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 1229.522974][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 240 seconds [ 1229.524305][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 240 seconds [ 1229.525496][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 240 seconds [ 1229.991961][ C0] net_ratelimit: 46 callbacks suppressed [ 1235.191215][ C0] net_ratelimit: 35 callbacks suppressed [ 1240.230899][ C0] net_ratelimit: 50 callbacks suppressed [ 1245.670685][ C0] net_ratelimit: 30 callbacks suppressed [ 1250.870397][ C0] net_ratelimit: 38 callbacks suppressed [ 1251.508010][ T29] audit: type=1400 audit(1507.265:406): avc: denied { read } for pid=5878 comm="syz.0.907" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1251.514364][ T29] audit: type=1400 audit(1507.275:407): avc: denied { open } for pid=5878 comm="syz.0.907" path="net:[4026532628]" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1256.069829][ C0] net_ratelimit: 36 callbacks suppressed [ 1256.636745][ T5884] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1259.627278][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 270 seconds [ 1259.629500][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 270 seconds [ 1259.631115][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 270 seconds [ 1260.381556][ T29] audit: type=1400 audit(1516.146:408): avc: denied { write } for pid=5899 comm="syz.1.915" name="functions" dev="configfs" ino=6964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1260.457178][ T29] audit: type=1400 audit(1516.216:409): avc: denied { write } for pid=5899 comm="syz.1.915" name="ep.0" dev="configfs" ino=12443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1260.499930][ T29] audit: type=1400 audit(1516.256:410): avc: denied { read } for pid=5899 comm="syz.1.915" name="first_group" dev="configfs" ino=12446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1261.268674][ C0] net_ratelimit: 32 callbacks suppressed [ 1266.468468][ C0] net_ratelimit: 38 callbacks suppressed [ 1269.142181][ T29] audit: type=1400 audit(1524.867:411): avc: denied { append } for pid=5915 comm="syz.1.919" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1271.668315][ C0] net_ratelimit: 29 callbacks suppressed [ 1276.866890][ C0] net_ratelimit: 38 callbacks suppressed [ 1277.330128][ T29] audit: type=1400 audit(1533.098:412): avc: denied { read write } for pid=5925 comm="syz.0.923" name="control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1277.353663][ T29] audit: type=1400 audit(1533.108:413): avc: denied { open } for pid=5925 comm="syz.0.923" path="/392/dev/mapper/control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1277.440225][ T29] audit: type=1400 audit(1533.158:414): avc: denied { ioctl } for pid=5925 comm="syz.0.923" path="/392/dev/mapper/control" dev="devtmpfs" ino=712 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1279.451553][ T5926] device-mapper: table: 248:1: target type multipath must appear alone in table [ 1279.478555][ T5926] device-mapper: ioctl: error adding target to table [ 1282.066261][ C0] net_ratelimit: 32 callbacks suppressed [ 1287.265643][ C0] net_ratelimit: 35 callbacks suppressed [ 1289.670495][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 300 seconds [ 1289.671348][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 300 seconds [ 1289.676983][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 300 seconds [ 1292.465009][ C0] net_ratelimit: 32 callbacks suppressed [ 1293.049767][ T5957] binder: 5956:5957 tried to acquire reference to desc 0, got 1 instead [ 1293.059718][ T5957] binder: 5956:5957 got transaction with invalid offsets ptr [ 1293.077749][ T5957] binder: 5956:5957 transaction async to 5956:0 failed 31/29201/-14, code 0 size 40-5632 line 3447 [ 1293.091887][ T3864] binder: undelivered TRANSACTION_ERROR: 29201 [ 1295.698818][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.803620][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.576316][ T11] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1297.707267][ T11] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1297.744417][ C0] net_ratelimit: 32 callbacks suppressed [ 1297.791595][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.791825][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1297.932912][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 1297.935143][ T11] usb 1-1: SerialNumber: syz [ 1298.138713][ T11] usb 1-1: config 0 descriptor?? [ 1298.636432][ T11] usb 1-1: USB disconnect, device number 9 [ 1302.944021][ C0] net_ratelimit: 35 callbacks suppressed [ 1308.543342][ C0] net_ratelimit: 32 callbacks suppressed [ 1311.979008][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.052187][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.822770][ C0] net_ratelimit: 35 callbacks suppressed [ 1316.945220][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.950701][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.022169][ C0] net_ratelimit: 45 callbacks suppressed [ 1319.759586][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 330 seconds [ 1319.762908][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 330 seconds [ 1319.764865][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 330 seconds [ 1320.236396][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1320.237944][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1320.435535][ T11] usb 1-1: device descriptor read/64, error -32 [ 1320.797924][ T11] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1321.034178][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1321.139612][ T11] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1321.496532][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.497500][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.612793][ T11] usb 1-1: config 0 descriptor?? [ 1324.090929][ T6011] net_ratelimit: 62 callbacks suppressed [ 1324.567978][ T11] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1329.101166][ C0] net_ratelimit: 65 callbacks suppressed [ 1334.220866][ C0] net_ratelimit: 35 callbacks suppressed [ 1339.500747][ C0] net_ratelimit: 32 callbacks suppressed [ 1340.347814][ T6007] infiniband syz1: set active [ 1340.386711][ T6007] infiniband syz1: added syz_tun [ 1343.894401][ T6007] RDS/IB: syz1: added [ 1343.925892][ T6007] smc: adding ib device syz1 with port count 1 [ 1343.954812][ T6007] smc: ib device syz1 port 1 has no pnetid [ 1344.701125][ C0] net_ratelimit: 35 callbacks suppressed [ 1349.828086][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 360 seconds [ 1349.830138][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 360 seconds [ 1349.830480][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 360 seconds [ 1349.899776][ C0] net_ratelimit: 35 callbacks suppressed [ 1354.602157][ T6011] usb 1-1: USB disconnect, device number 11 [ 1355.098370][ C0] net_ratelimit: 29 callbacks suppressed [ 1357.150207][ T6011] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1357.417332][ T6011] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1357.456763][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1357.459303][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1357.462262][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1358.178692][ T6011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.179621][ T6011] usb 1-1: Product: syz [ 1358.180783][ T6011] usb 1-1: Manufacturer: syz [ 1358.201997][ T6011] usb 1-1: SerialNumber: syz [ 1358.794107][ T6011] usb 1-1: config 0 descriptor?? [ 1360.537631][ C0] net_ratelimit: 53 callbacks suppressed [ 1360.699326][ T6011] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1361.300952][ T6011] usb 1-1: USB disconnect, device number 12 [ 1365.405143][ T29] audit: type=1400 audit(1621.168:415): avc: denied { watch } for pid=6033 comm="syz.0.965" path="/proc/959" dev="proc" ino=12869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1365.817386][ C0] net_ratelimit: 35 callbacks suppressed [ 1369.444338][ T6040] FAULT_INJECTION: forcing a failure. [ 1369.444338][ T6040] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.525918][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.0.968 Tainted: G W syzkaller #0 PREEMPT [ 1369.526132][ T6040] Tainted: [W]=WARN [ 1369.526165][ T6040] Hardware name: linux,dummy-virt (DT) [ 1369.526261][ T6040] Call trace: [ 1369.526293][ T6040] show_stack+0x18/0x24 (C) [ 1369.526390][ T6040] dump_stack_lvl+0x7c/0xb0 [ 1369.526451][ T6040] dump_stack+0x1c/0x28 [ 1369.526508][ T6040] should_fail_ex+0x6b4/0x6c4 [ 1369.526573][ T6040] should_failslab+0xbc/0x120 [ 1369.526637][ T6040] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1369.526696][ T6040] radix_tree_node_alloc.constprop.0+0x88/0x300 [ 1369.526762][ T6040] idr_get_free+0x2d0/0x8f8 [ 1369.526816][ T6040] idr_alloc_u32+0x134/0x2a0 [ 1369.526873][ T6040] tcf_idr_check_alloc+0x118/0x530 [ 1369.526943][ T6040] tcf_simp_init+0x188/0x59c [ 1369.527001][ T6040] tcf_action_init_1+0x358/0x4f0 [ 1369.527056][ T6040] tcf_action_init+0x330/0x750 [ 1369.527109][ T6040] tcf_action_add+0x104/0x480 [ 1369.527162][ T6040] tc_ctl_action+0x21c/0x370 [ 1369.527216][ T6040] rtnetlink_rcv_msg+0x2d0/0x880 [ 1369.527276][ T6040] netlink_rcv_skb+0x1ac/0x360 [ 1369.527335][ T6040] rtnetlink_rcv+0x18/0x24 [ 1369.527391][ T6040] netlink_unicast+0x418/0x6e0 [ 1369.527449][ T6040] netlink_sendmsg+0x638/0xa4c [ 1369.527504][ T6040] __sock_sendmsg+0xc8/0x1a4 [ 1369.527561][ T6040] ____sys_sendmsg+0x52c/0x76c [ 1369.527614][ T6040] ___sys_sendmsg+0x124/0x1a4 [ 1369.527667][ T6040] __sys_sendmsg+0x10c/0x198 [ 1369.527722][ T6040] __arm64_sys_sendmsg+0x74/0xa4 [ 1369.527777][ T6040] invoke_syscall+0x74/0x240 [ 1369.527836][ T6040] el0_svc_common.constprop.0+0xac/0x230 [ 1369.527892][ T6040] do_el0_svc+0x40/0x58 [ 1369.527955][ T6040] el0_svc+0x58/0x2a4 [ 1369.528014][ T6040] el0t_64_sync_handler+0xa0/0xe4 [ 1369.528069][ T6040] el0t_64_sync+0x198/0x19c [ 1370.857829][ C0] net_ratelimit: 45 callbacks suppressed [ 1376.216587][ C0] net_ratelimit: 45 callbacks suppressed [ 1379.897831][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 390 seconds [ 1379.898245][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 390 seconds [ 1379.898534][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 390 seconds [ 1381.576216][ C0] net_ratelimit: 48 callbacks suppressed [ 1385.183791][ T6054] binder: 6053:6054 tried to acquire reference to desc 0, got 1 instead [ 1385.322665][ T6054] binder: tried to use weak ref as strong ref [ 1385.323771][ T6054] binder: 6053:6054 got transaction to invalid handle, 1 [ 1385.339642][ T6054] binder: 6053:6054 cannot find target node [ 1385.387966][ T6054] binder: 6053:6054 transaction async to 0:0 failed 43/29201/-22, code 0 size 0-0 line 3252 [ 1385.477083][ T3473] binder: undelivered TRANSACTION_COMPLETE [ 1385.809875][ T3473] binder: undelivered TRANSACTION_ERROR: 29201 [ 1385.813488][ T3473] binder: undelivered transaction 36, process died. [ 1386.775380][ C0] net_ratelimit: 48 callbacks suppressed [ 1390.338379][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.363708][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.759681][ T6070] binder: 6068:6070 tried to acquire reference to desc 0, got 1 instead [ 1391.493372][ T6073] binder_alloc: 6068: binder_alloc_buf size 12224 failed, no address space [ 1391.552138][ T6073] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 1391.587223][ T6073] binder: cannot allocate buffer: no space left [ 1391.587996][ T6073] binder: 6068:6073 transaction call to 6068:0 failed 49/29201/-28, code 0 size 0-0 line 3408 [ 1391.974898][ C0] net_ratelimit: 29 callbacks suppressed [ 1392.950500][ T3473] binder: release 6068:6070 transaction 48 out, still active [ 1392.978198][ T3473] binder: undelivered TRANSACTION_COMPLETE [ 1392.979315][ T3473] binder: undelivered TRANSACTION_ERROR: 29201 [ 1393.122588][ T6070] syz.0.981 (6070): drop_caches: 2 [ 1393.674904][ T3864] binder: send failed reply for transaction 48, target dead [ 1394.286366][ T6072] nvme nvme0: rdma connection establishment failed (-512) [ 1394.581657][ T1251] nvme nvme0: rdma_resolve_route failed (-110). [ 1397.173960][ C0] net_ratelimit: 35 callbacks suppressed [ 1402.297726][ C0] net_ratelimit: 48 callbacks suppressed [ 1407.652679][ C0] net_ratelimit: 32 callbacks suppressed [ 1409.988964][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 420 seconds [ 1409.994239][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 420 seconds [ 1409.996275][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 420 seconds [ 1412.932816][ C0] net_ratelimit: 35 callbacks suppressed [ 1415.722478][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.797424][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.131766][ C0] net_ratelimit: 32 callbacks suppressed [ 1422.221558][ T3864] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1422.552159][ T3864] usb 1-1: Using ep0 maxpacket: 8 [ 1422.574324][ T3864] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1423.156559][ T3459] net_ratelimit: 36 callbacks suppressed [ 1424.288927][ T3864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1424.293407][ T3864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1424.323172][ T3864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.846227][ T3864] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 1426.266037][ T3864] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1426.903587][ T3864] usb 1-1: USB disconnect, device number 13 [ 1428.036684][ T3864] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1428.091650][ T3864] kobil_sct 1-1:1.0: device disconnected [ 1428.931184][ C0] net_ratelimit: 22 callbacks suppressed [ 1434.130815][ C0] net_ratelimit: 38 callbacks suppressed [ 1434.327172][ T6137] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 1434.374528][ T6137] device-mapper: ioctl: error adding target to table [ 1435.831120][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.942841][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.177099][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.329985][ C0] net_ratelimit: 48 callbacks suppressed [ 1439.471017][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.059792][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 450 seconds [ 1440.060560][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 450 seconds [ 1440.061088][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 450 seconds [ 1442.971028][ T29] audit: type=1400 audit(1698.746:416): avc: denied { setattr } for pid=6152 comm="syz.1.1007" path="/dev/mixer" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1444.449629][ C0] net_ratelimit: 43 callbacks suppressed [ 1449.728497][ C0] net_ratelimit: 45 callbacks suppressed [ 1454.927984][ C0] net_ratelimit: 35 callbacks suppressed [ 1457.919506][ T6181] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1019'. [ 1460.127473][ C0] net_ratelimit: 147 callbacks suppressed [ 1465.097839][ T29] audit: type=1400 audit(1720.878:417): avc: denied { execute } for pid=6191 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1465.112902][ T29] audit: type=1400 audit(1720.888:418): avc: denied { execute_no_trans } for pid=6191 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1465.327360][ C0] net_ratelimit: 26 callbacks suppressed [ 1470.135408][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 480 seconds [ 1470.137057][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 480 seconds [ 1470.137615][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 480 seconds [ 1470.526339][ C0] net_ratelimit: 38 callbacks suppressed [ 1475.725771][ C0] net_ratelimit: 62 callbacks suppressed [ 1480.925728][ C0] net_ratelimit: 32 callbacks suppressed [ 1486.125176][ C0] net_ratelimit: 32 callbacks suppressed [ 1491.324285][ C0] net_ratelimit: 38 callbacks suppressed [ 1493.379785][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1029'. [ 1493.381562][ T6214] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1029'. [ 1493.385006][ T6214] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1029'. [ 1496.346016][ T3450] net_ratelimit: 30 callbacks suppressed [ 1500.211808][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 510 seconds [ 1500.214140][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 510 seconds [ 1500.215306][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 510 seconds [ 1501.803165][ C0] net_ratelimit: 47 callbacks suppressed [ 1507.002800][ C0] net_ratelimit: 35 callbacks suppressed [ 1509.148029][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.455492][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.202068][ C0] net_ratelimit: 35 callbacks suppressed [ 1517.401830][ C0] net_ratelimit: 29 callbacks suppressed [ 1522.601745][ C0] net_ratelimit: 35 callbacks suppressed [ 1527.470993][ T6194] hsr_slave_0: entered promiscuous mode [ 1527.527935][ T6194] hsr_slave_1: entered promiscuous mode [ 1527.563380][ T6194] debugfs: 'hsr0' already exists in 'hsr' [ 1527.572170][ T6194] Cannot create hsr debugfs directory [ 1527.800454][ C0] net_ratelimit: 38 callbacks suppressed [ 1530.286757][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 540 seconds [ 1530.289277][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 540 seconds [ 1530.296169][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 540 seconds [ 1532.999625][ C0] net_ratelimit: 32 callbacks suppressed [ 1538.199776][ C0] net_ratelimit: 32 callbacks suppressed [ 1543.479213][ C0] net_ratelimit: 34 callbacks suppressed [ 1544.567021][ T6194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1544.572681][ T6194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.781334][ T6194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1546.782664][ T6194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.360531][ T6194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1548.369376][ T6194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.679010][ C0] net_ratelimit: 51 callbacks suppressed [ 1550.165034][ T6194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1550.176516][ T6194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.878315][ C0] net_ratelimit: 39 callbacks suppressed [ 1555.900311][ T6194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1556.383323][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1556.396207][ T6194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1556.708030][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1556.723667][ T6194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1556.959399][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1556.985744][ T6194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1557.211753][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1559.077748][ C0] net_ratelimit: 38 callbacks suppressed [ 1560.360888][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 570 seconds [ 1560.362102][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 570 seconds [ 1560.363081][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 570 seconds [ 1561.859281][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.276754][ C0] net_ratelimit: 35 callbacks suppressed [ 1569.287990][ T3450] net_ratelimit: 47 callbacks suppressed [ 1574.052958][ T6194] veth0_vlan: entered promiscuous mode [ 1574.659527][ T6194] veth1_vlan: entered promiscuous mode [ 1574.836741][ C0] net_ratelimit: 56 callbacks suppressed [ 1575.707712][ T6194] veth0_macvtap: entered promiscuous mode [ 1575.986289][ T6194] veth1_macvtap: entered promiscuous mode [ 1576.897592][ T5679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.899193][ T5679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.900561][ T5679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.905941][ T5679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.216744][ T29] audit: type=1400 audit(1834.010:419): avc: denied { mounton } for pid=6194 comm="syz-executor" path="/syzkaller.tleCsc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1579.955543][ C0] net_ratelimit: 234 callbacks suppressed [ 1580.750818][ T3473] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1581.687628][ T3473] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1582.053271][ T3473] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.053839][ T3473] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.055011][ T3473] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1582.055249][ T3473] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1582.055607][ T3473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.233507][ T3473] usb 1-1: USB disconnect, device number 14 [ 1584.994911][ C0] net_ratelimit: 78 callbacks suppressed [ 1589.673218][ T6311] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1045'. [ 1589.785191][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 1590.456502][ T10] block nbd0: Possible stuck request 00000000f026f060: control (read@0,1024B). Runtime 600 seconds [ 1590.456922][ T10] block nbd0: Possible stuck request 00000000a8626a0a: control (read@1024,1024B). Runtime 600 seconds [ 1590.457260][ T10] block nbd0: Possible stuck request 000000002d5d2338: control (read@2048,2048B). Runtime 600 seconds [ 1590.833938][ C0] net_ratelimit: 46 callbacks suppressed [ 1591.484277][ T29] audit: type=1400 audit(1847.271:420): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1595.728053][ T29] audit: type=1400 audit(1851.512:421): avc: denied { write } for pid=6321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.033494][ C0] net_ratelimit: 79 callbacks suppressed [ 1597.376957][ T6331] FAULT_INJECTION: forcing a failure. [ 1597.376957][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.396877][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.0.1053 Tainted: G W syzkaller #0 PREEMPT [ 1597.397090][ T6331] Tainted: [W]=WARN [ 1597.397151][ T6331] Hardware name: linux,dummy-virt (DT) [ 1597.397316][ T6331] Call trace: [ 1597.397372][ T6331] show_stack+0x18/0x24 (C) [ 1597.397568][ T6331] dump_stack_lvl+0x7c/0xb0 [ 1597.397696][ T6331] dump_stack+0x1c/0x28 [ 1597.397823][ T6331] should_fail_ex+0x6b4/0x6c4 [ 1597.397963][ T6331] should_failslab+0xbc/0x120 [ 1597.398096][ T6331] __kmalloc_noprof+0x4dc/0x74c [ 1597.398235][ T6331] lsm_blob_alloc+0x60/0x80 [ 1597.398365][ T6331] security_bpf_map_create+0x3c/0x258 [ 1597.398499][ T6331] map_create+0xc70/0x1ccc [ 1597.398635][ T6331] __sys_bpf+0x8b8/0x2c70 [ 1597.398761][ T6331] __arm64_sys_bpf+0xb0/0x10c [ 1597.398891][ T6331] invoke_syscall+0x74/0x240 [ 1597.399019][ T6331] el0_svc_common.constprop.0+0xac/0x230 [ 1597.399149][ T6331] do_el0_svc+0x40/0x58 [ 1597.399278][ T6331] el0_svc+0x58/0x2a4 [ 1597.399421][ T6331] el0t_64_sync_handler+0xa0/0xe4 [ 1597.399556][ T6331] el0t_64_sync+0x198/0x19c [ 1599.281268][ T29] audit: type=1400 audit(1855.072:422): avc: denied { read } for pid=6335 comm="syz.1.1055" name="card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1599.299640][ T29] audit: type=1400 audit(1855.092:423): avc: denied { open } for pid=6335 comm="syz.1.1055" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1599.378495][ T29] audit: type=1400 audit(1855.162:424): avc: denied { write } for pid=6333 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1599.379050][ T29] audit: type=1400 audit(1855.162:425): avc: denied { ioctl } for pid=6335 comm="syz.1.1055" path="/dev/dri/card0" dev="devtmpfs" ino=618 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1599.431148][ T29] audit: type=1400 audit(1855.212:426): avc: denied { map } for pid=6335 comm="syz.1.1055" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1599.431684][ T29] audit: type=1400 audit(1855.212:427): avc: denied { execute } for pid=6335 comm="syz.1.1055" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1601.234056][ C0] net_ratelimit: 50 callbacks suppressed [ 1604.690856][ T29] audit: type=1400 audit(1860.472:428): avc: denied { write } for pid=6343 comm="syz.1.1058" name="c.1" dev="configfs" ino=6969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1606.435311][ C0] net_ratelimit: 46 callbacks suppressed [ 1610.540399][ T29] audit: type=1326 audit(1866.323:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.1062" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 1610.573304][ T29] audit: type=1326 audit(1866.363:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.1062" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 1610.575273][ T29] audit: type=1326 audit(1866.363:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.1062" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 1610.597070][ T29] audit: type=1326 audit(1866.383:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.1062" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 1610.598823][ T29] audit: type=1326 audit(1866.393:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.1062" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 1610.642642][ T29] audit: type=1326 audit(1866.423:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.1062" exe="/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 1610.644419][ T29] audit: type=1326 audit(1866.423:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.1.1062" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f79368 code=0x7ffc0000 [ 1611.022281][ T29] audit: type=1400 audit(1866.813:436): avc: denied { read } for pid=6357 comm="syz.0.1063" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1611.551672][ C0] net_ratelimit: 70 callbacks suppressed [ 1612.207410][ T31] INFO: task udevd:5305 blocked in I/O wait for more than 430 seconds. [ 1612.209812][ C0] virtqueue callback for 0000000010057246 (00000000b8b3c420) [ 1612.210725][ C0] No more buffers in queue [ 1612.212568][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 1612.212896][ C0] No more buffers in queue [ 1612.215241][ C0] eth0: xmit 00000000569dd741 52:55:0a:00:02:02 [ 1612.215625][ C0] Added buffer head 20 to 00000000cb7cc689 [ 1612.216121][ C0] virtqueue callback for 00000000cb7cc689 (00000000848a7b97) [ 1612.216411][ C0] Sent skb 00000000569dd741 [ 1612.216830][ C0] No more buffers in queue [ 1612.238989][ T3382] kernfs control: removing [ 1612.242264][ T31] Tainted: G W syzkaller #0 [ 1612.243974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1612.248370][ T31] task:udevd state:D stack:0 pid:5305 tgid:5305 ppid:3197 task_flags:0x400040 flags:0x00000011 [ 1612.275171][ T31] dump_backtrace(regs = 0000000000000000 tsk = 0000000043e7587e) [ 1612.275492][ T31] Call trace: [ 1612.275778][ T31] __switch_to+0x20c/0x520 (T) [ 1612.276148][ T31] __schedule+0xf98/0x34f4 [ 1612.276412][ T31] schedule+0xcc/0x288 [ 1612.276694][ T31] io_schedule+0xac/0x120 [ 1612.276936][ T31] folio_wait_bit_common+0x2a0/0x660 [ 1612.277205][ T31] do_read_cache_folio+0x238/0x3ec [ 1612.277475][ T31] read_cache_folio+0x44/0x74 [ 1612.277723][ T31] read_part_sector+0xa4/0x5d8 [ 1612.277985][ T31] msdos_partition+0xec/0x1d5c [ 1612.278235][ T31] bdev_disk_changed+0x4e8/0xe90 [ 1612.278501][ T31] blkdev_get_whole+0x144/0x1f0 [ 1612.278746][ T31] bdev_open+0x1d4/0xa70 [ 1612.278990][ T31] blkdev_open+0x270/0x3f8 [ 1612.279233][ T31] do_dentry_open+0x37c/0xfe8 [ 1612.279501][ T31] vfs_open+0x5c/0x300 [ 1612.279742][ T31] path_openat+0x12d4/0x1e40 [ 1612.279998][ T31] do_file_open+0x18c/0x380 [ 1612.280247][ T31] do_sys_openat2+0xdc/0x180 [ 1612.280534][ T31] __arm64_sys_openat+0x134/0x1e0 [ 1612.280783][ T31] invoke_syscall+0x74/0x240 [ 1612.334377][ T3382] kernfs runtime_suspended_time: removing [ 1612.337511][ T3382] kernfs runtime_active_time: removing [ 1612.344537][ T5679] bond2: (slave ip6erspan0): Send learning packet: mac ce:82:f0:ab:8e:73 vlan 0 [ 1612.354812][ T31] el0_svc_common.constprop.0+0xac/0x230 [ 1612.356811][ T31] do_el0_svc+0x40/0x58 [ 1612.358331][ T31] el0_svc+0x58/0x2a4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1612.379203][ T3376] eth0: xmit 00000000cd159e5b 52:55:0a:00:02:02 [ 1612.380203][ T3376] Added buffer head 20 to 00000000cb7cc689 [ 1612.381868][ C0] virtqueue callback for 0000000010057246 (00000000b8b3c420) [ 1612.382167][ C0] virtqueue callback for 00000000cb7cc689 (00000000848a7b97) [ 1612.383095][ C0] Sent skb 00000000cd159e5b [ 1612.383492][ C0] No more buffers in queue [ 1612.384376][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 1612.384733][ C0] No more buffers in queue [ 1612.385675][ C0] No more buffers in queue [ 1612.394120][ T6360] kernfs rx_length_errors: removing [ 1612.417992][ T31] el0t_64_sync_handler+0xa0/0xe4 [ 1612.418786][ T31] el0t_64_sync+0x198/0x19c [ 1612.419661][ T31] [ 1612.419661][ T31] Showing all locks held in the system: [ 1612.420105][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1612.420367][ T31] #0: ffff8000879d1660 ( [ 1612.439488][ T6360] kernfs rx_over_errors: removing [ 1612.454443][ T31] rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x40/0x190 [ 1612.456115][ T31] locks held by kworker/u8:2/40: 3, last CPU#0: [ 1612.456368][ T31] #0: ffff00000e04c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 1612.457556][ T31] #1: ffff80008e0b7c70 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x780/0x1c00 [ 1612.458606][ T31] #2: ffff000013cea258 (&devlink->lock_key){+.+.}-{4:4}, at: devl_trylock+0x18/0x30 [ 1612.459774][ T31] locks held by kworker/u8:5/198: 2, last CPU#0: [ 1612.460022][ T31] #0: ffff00000e04b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 1612.477549][ T6360] kernfs rx_crc_errors: removing [ 1612.479280][ T6360] kernfs rx_frame_errors: removing [ 1612.480253][ T6360] kernfs rx_fifo_errors: removing [ 1612.506393][ T3382] kernfs autosuspend_delay_ms: removing [ 1612.513693][ T31] #1: ffff80008e4a7c70 ((work_completion)(&(&tbl->gc_work)->work) [ 1612.524880][ T3382] kernfs power: removing [ 1612.527653][ T31] ){+.+.}-{0:0}, at: psi_task_switch+0x60/0x81c [ 1612.533716][ T31] locks held by kworker/u8:6/1137: 3, on CPU#0: [ 1612.559089][ T3382] kernfs subsystem: removing [ 1612.562442][ T31] #0: ffff00000e04c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 1612.563880][ T31] #1: ffff80008f317c70 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x780/0x1c00 [ 1612.565042][ T31] #2: ffff800088f4b6c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 [ 1612.566287][ T31] locks held by klogd/3186: 1, last CPU#0: [ 1612.566494][ T31] #0: ffff800087ba21d0 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x6c/0x1ac [ 1612.567764][ T31] locks held by getty/3322: 2, on CPU#0: [ 1612.583111][ T6360] kernfs rx_missed_errors: removing [ 1612.585988][ T6360] kernfs tx_aborted_errors: removing [ 1612.589048][ T31] #0: ffff0000145430a0 [ 1612.604036][ T6360] kernfs tx_carrier_errors: removing [ 1612.608415][ T31] (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1612.624684][ T31] #1: ffff80008dcab2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x420/0xec0 [ 1612.666472][ T31] locks held by syz-executor/3377: 2, last CPU#0: [ 1612.667131][ T31] #0: ffff0000187d3a78 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x108/0xa84 [ 1612.668318][ T31] #1: ffff8000879d1660 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x28/0x208 [ 1612.669431][ T31] locks held by syz-executor/3382: 2, last CPU#0: [ 1612.669638][ T31] #0: ffff00000e6682a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x40/0xe0 [ 1612.670744][ T31] #1: ffff00000e668180 [ 1612.693765][ T3382] kernfs 0:53: removing [ 1612.694778][ T3382] kernfs uevent: removing [ 1612.695406][ T3382] kernfs read_ahead_kb: removing [ 1612.695879][ T3382] kernfs min_ratio: removing [ 1612.696406][ T3382] kernfs min_ratio_fine: removing [ 1612.697300][ T3382] kernfs max_ratio: removing [ 1612.698174][ T3382] kernfs max_ratio_fine: removing [ 1612.699074][ T3382] kernfs min_bytes: removing [ 1612.699957][ T3382] kernfs max_bytes: removing [ 1612.700648][ T3382] kernfs stable_pages_required: removing [ 1612.730283][ T31] (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x48/0xe0 [ 1612.732854][ T31] locks held by udevd/5305: 1, on CPU#0: [ 1612.733088][ T31] #0: ffff000014d9c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2b8/0xa70 [ 1612.734219][ T31] locks held by kworker/0:6/6127: 1, last CPU#0: [ 1612.734433][ T31] #0: ffff0000187b4540 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_one_work+0x12ec/0x1c00 [ 1612.735827][ T31] locks held by syz.1.1064/6360: 3, last CPU#0: [ 1612.736050][ T31] #0: ffff800088f4b6c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x1c/0x28 [ 1612.737186][ T31] #1: ffff00000e6682a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x40/0xe0 [ 1612.738242][ T31] #2: ffff00000e668180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x48/0xe0 [ 1612.739553][ T31] [ 1612.739756][ T31] ============================================= [ 1612.739756][ T31] [ 1612.740818][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1612.746284][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G W syzkaller #0 PREEMPT [ 1612.746825][ T31] Tainted: [W]=WARN [ 1612.747092][ T31] Hardware name: linux,dummy-virt (DT) [ 1612.747447][ T31] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 1612.747868][ T31] Call trace: [ 1612.748117][ T31] show_stack+0x18/0x24 (C) [ 1612.748564][ T31] dump_stack_lvl+0x7c/0xb0 [ 1612.748922][ T31] dump_stack+0x1c/0x28 [ 1612.749264][ T31] vpanic+0x464/0x764 [ 1612.749576][ T31] do_panic_on_target_cpu+0x0/0x40 [ 1612.749940][ T31] watchdog+0x560/0xf18 [ 1612.750280][ T31] kthread+0x2ec/0x384 [ 1612.750579][ T31] ret_from_fork+0x10/0x20 [ 1612.752124][ T31] Kernel Offset: disabled [ 1612.752485][ T31] CPU features: 0x0,40400002,00340020,00100000,0800821b [ 1612.752950][ T31] Memory Limit: none [ 1612.754910][ T31] Rebooting in 86400 seconds..