last executing test programs: 3m58.956991963s ago: executing program 0 (id=1369): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0xfffffec1) read$FUSE(r2, &(0x7f0000006540)={0x2020}, 0xfffffce2) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000000c0)=""/115, &(0x7f0000000140)=0x73) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x18, r4, 0x507, 0xf0bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8002}, 0x20000050) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000200)={0x80002004}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) 3m55.937567114s ago: executing program 0 (id=1374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) unshare(0x26020600) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchmod(r0, 0x16) 3m55.197930859s ago: executing program 0 (id=1376): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x20, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 3m52.832587916s ago: executing program 0 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 3m52.037168341s ago: executing program 0 (id=1383): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x7d, &(0x7f0000001180), 0x13f, 0x8}}, 0x20) 3m50.918757199s ago: executing program 0 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c000100000201010020000020010000000000000000000600"], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 3m50.89200737s ago: executing program 32 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c000100000201010020000020010000000000000000000600"], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 2m31.723613032s ago: executing program 1 (id=1544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fbff1f00000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000500000037010000f8ffffffb702000008000000b7030000f7ffffff14000000060000005d93000000000000b5030200f7ffffff85000000b5000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2m31.578358653s ago: executing program 1 (id=1545): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb84, 0x80, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2m28.938285761s ago: executing program 1 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x78c11, 0x50103}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x24008000) 2m28.848106522s ago: executing program 1 (id=1547): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9801) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m28.677427543s ago: executing program 1 (id=1548): socket$nl_generic(0x10, 0x3, 0x10) exit(0xef1) fsopen(0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000498000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020) 2m28.367178116s ago: executing program 1 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m28.366938676s ago: executing program 33 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 7.784949697s ago: executing program 2 (id=1818): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) 5.128683895s ago: executing program 2 (id=1819): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 4.768847547s ago: executing program 2 (id=1820): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.027118412s ago: executing program 2 (id=1821): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x4c840) 3.808625434s ago: executing program 2 (id=1822): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x0, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYRES32=0x0], 0x50}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x5c}}}, 0x0) 3.468792767s ago: executing program 2 (id=1823): socket(0xa, 0x3, 0x87) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) 1.615398159s ago: executing program 3 (id=1825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) 971.015493ms ago: executing program 3 (id=1826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) 526.465547ms ago: executing program 3 (id=1827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d024000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 339.706908ms ago: executing program 3 (id=1828): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00') 80.14085ms ago: executing program 3 (id=1829): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000380), 0x81, &(0x7f0000000440)=ANY=[]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x800}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) lsm_set_self_attr(0x66, 0x0, 0x21, 0x0) 0s ago: executing program 3 (id=1830): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'8255\x00', [0x4, 0x5, 0x4, 0x20, 0x14000000, 0x20, 0x3, 0x8, 0xefd, 0x7ffe, 0x8, 0x16, 0x1000, 0x2, 0x13, 0x4000bd55, 0x3, 0x3c, 0x351, 0x6, 0x3ff, 0xa, 0x7fffffff, 0x860, 0x2, 0x0, 0x4, 0x0, 0xa, 0xf58, 0x2cf]}) kernel console output (not intermixed with test programs): <81b055d8>] (xskq_create+0x78/0xac) [ 497.236398][ T6586] [<81b05560>] (xskq_create) from [<81b02d04>] (xsk_setsockopt+0x128/0x344) [ 497.236501][ T6586] r7:86319ef8 r6:86319c00 r5:00000000 r4:00000002 [ 497.236547][ T6586] [<81b02be0>] (xsk_setsockopt) from [<8162eaa0>] (do_sock_setsockopt+0x70/0xc8) [ 497.236622][ T6586] r8:00000004 r7:85638a40 r6:00000002 r5:0000011b r4:81b02bdc [ 497.236699][ T6586] [<8162ea30>] (do_sock_setsockopt) from [<81632a24>] (__sys_setsockopt+0x7c/0xc4) [ 497.236777][ T6586] r8:00000000 r7:8610cd80 r6:8610cd81 r5:00000002 r4:0000011b [ 497.236823][ T6586] [<816329a8>] (__sys_setsockopt) from [<81632a88>] (sys_setsockopt+0x1c/0x24) [ 497.236994][ T6586] r8:8020029c r7:00000126 r6:0012f454 r5:00000000 r4:00000004 [ 497.237026][ T6586] [<81632a6c>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 497.237156][ T6586] Exception stack(0xead5dfa8 to 0xead5dff0) [ 497.237237][ T6586] dfa0: 00000004 00000000 00000003 0000011b 00000002 20000040 [ 497.237288][ T6586] dfc0: 00000004 00000000 0012f454 00000126 003562d8 00000000 00000001 76f5d0dc [ 497.237313][ T6586] dfe0: 76f5ce88 76f5ce78 00018fa0 00130a50 [ 497.283348][ T6586] syz.0.853: vmalloc error: size 266240, failed to allocated page array size 260, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 497.284884][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.0.853 Not tainted syzkaller #0 PREEMPT [ 497.284937][ T6586] Hardware name: ARM-Versatile Express [ 497.284951][ T6586] Call trace: [ 497.284968][ T6586] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 497.285030][ T6586] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 497.285041][ T6586] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 497.285069][ T6586] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 497.285100][ T6586] r7:865345c0 r6:82352d04 r5:8499a4c0 r4:00000000 [ 497.285108][ T6586] [<8021ec7c>] (dump_stack) from [<80536494>] (warn_alloc+0xdc/0xf8) [ 497.285137][ T6586] [<805363b8>] (warn_alloc) from [<80524224>] (__vmalloc_node_range_noprof+0x660/0x6a4) [ 497.285167][ T6586] r3:00041000 r2:82352d04 [ 497.285249][ T6586] r6:00000001 r5:df800000 r4:00000104 [ 497.285316][ T6586] [<80523bc4>] (__vmalloc_node_range_noprof) from [<805240c4>] (__vmalloc_node_range_noprof+0x500/0x6a4) [ 497.285435][ T6586] r10:ffffffff r9:00010001 r8:00000dc0 r7:86535500 r6:00004000 r5:df800000 [ 497.285459][ T6586] r4:00040004 [ 497.285496][ T6586] [<80523bc4>] (__vmalloc_node_range_noprof) from [<80524374>] (vmalloc_user_noprof+0x6c/0x74) [ 497.285602][ T6586] r10:00000126 r9:8499a4c0 r8:86319e80 r7:86319ef8 r6:00000000 r5:860cdd40 [ 497.285638][ T6586] r4:10001000 [ 497.285669][ T6586] [<80524308>] (vmalloc_user_noprof) from [<81b055d8>] (xskq_create+0x78/0xac) [ 497.285773][ T6586] [<81b05560>] (xskq_create) from [<81b02d04>] (xsk_setsockopt+0x128/0x344) [ 497.285833][ T6586] r7:86319ef8 r6:86319c00 r5:00000000 r4:00000002 [ 497.285868][ T6586] [<81b02be0>] (xsk_setsockopt) from [<8162eaa0>] (do_sock_setsockopt+0x70/0xc8) [ 497.285955][ T6586] r8:00000004 r7:85638a40 r6:00000002 r5:0000011b r4:81b02bdc [ 497.285976][ T6586] [<8162ea30>] (do_sock_setsockopt) from [<81632a24>] (__sys_setsockopt+0x7c/0xc4) [ 497.286057][ T6586] r8:00000000 r7:8610cd80 r6:8610cd81 r5:00000002 r4:0000011b [ 497.286088][ T6586] [<816329a8>] (__sys_setsockopt) from [<81632a88>] (sys_setsockopt+0x1c/0x24) [ 497.286146][ T6586] r8:8020029c r7:00000126 r6:0012f454 r5:00000000 r4:00000004 [ 497.286155][ T6586] [<81632a6c>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 497.286205][ T6586] Exception stack(0xead5dfa8 to 0xead5dff0) [ 497.286238][ T6586] dfa0: 00000004 00000000 00000003 0000011b 00000002 20000040 [ 497.286256][ T6586] dfc0: 00000004 00000000 0012f454 00000126 003562d8 00000000 00000001 76f5d0dc [ 497.286269][ T6586] dfe0: 76f5ce88 76f5ce78 00018fa0 00130a50 [ 497.286581][ T6586] Mem-Info: [ 497.328836][ T6586] active_anon:1360 inactive_anon:0 isolated_anon:0 [ 497.328836][ T6586] active_file:0 inactive_file:41639 isolated_file:0 [ 497.328836][ T6586] unevictable:768 dirty:20 writeback:0 [ 497.328836][ T6586] slab_reclaimable:1192 slab_unreclaimable:6366 [ 497.328836][ T6586] mapped:2450 shmem:777 pagetables:350 [ 497.328836][ T6586] sec_pagetables:0 bounce:0 [ 497.328836][ T6586] kernel_misc_reclaimable:0 [ 497.328836][ T6586] free:433096 free_pcp:1623 free_cma:4032 [ 497.332924][ T6586] Node 0 active_anon:5440kB inactive_anon:0kB active_file:0kB inactive_file:166556kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:9800kB dirty:80kB writeback:0kB shmem:3108kB kernel_stack:1472kB pagetables:1400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 497.337639][ T6586] Normal free:1369772kB boost:0kB min:4768kB low:6188kB high:7608kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1464kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1424816kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:2864kB free_cma:0kB [ 497.340831][ T6586] lowmem_reserve[]: 0 4224 4224 [ 497.350623][ T6586] HighMem free:362612kB boost:0kB min:512kB low:1052kB high:1592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5424kB inactive_anon:0kB active_file:0kB inactive_file:165092kB unevictable:3072kB writepending:56kB zspages:0kB present:540672kB managed:540672kB mlocked:0kB bounce:0kB free_pcp:704kB local_pcp:268kB free_cma:16128kB [ 497.352785][ T6586] lowmem_reserve[]: 0 0 0 [ 497.355321][ T6586] Normal: 31*4kB (UM) 6*8kB (UE) 8*16kB (UE) 12*32kB (UME) 22*64kB (UE) 11*128kB (UE) 5*256kB (UM) 10*512kB (UME) 6*1024kB (ME) 5*2048kB (UM) 328*4096kB (UM) = 1369772kB [ 497.391858][ T6586] HighMem: 29*4kB (M) 43*8kB (UM) 37*16kB (UM) 29*32kB (UM) 18*64kB (UM) 16*128kB (UM) 10*256kB (UMC) 11*512kB (UMC) 7*1024kB (UMC) 5*2048kB (UMC) 81*4096kB (UMC) = 362556kB [ 497.423958][ T6586] 42416 total pagecache pages [ 497.435212][ T6586] 0 pages in swap cache [ 497.438971][ T6586] Free swap = 124996kB [ 497.441688][ T6586] Total swap = 124996kB [ 497.444016][ T6586] 524288 pages RAM [ 497.448721][ T6586] 135168 pages HighMem/MovableOnly [ 497.448981][ T6586] 32916 pages reserved [ 497.449092][ T6586] 4096 pages cma reserved [ 497.809723][ T28] audit: type=1400 audit(497.713:261): avc: denied { create } for pid=6582 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 501.273577][ T28] audit: type=1400 audit(501.173:262): avc: denied { getopt } for pid=6613 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 513.159485][ T28] audit: type=1400 audit(513.063:263): avc: denied { write } for pid=6679 comm="syz.0.881" path="socket:[12553]" dev="sockfs" ino=12553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 516.911295][ T28] audit: type=1400 audit(516.813:264): avc: denied { bind } for pid=6713 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 516.929921][ T28] audit: type=1400 audit(516.833:265): avc: denied { name_bind } for pid=6713 comm="syz.0.891" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 516.934192][ T28] audit: type=1400 audit(516.833:266): avc: denied { node_bind } for pid=6713 comm="syz.0.891" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 517.179969][ T28] audit: type=1400 audit(517.083:267): avc: denied { map } for pid=6713 comm="syz.0.891" path="socket:[11658]" dev="sockfs" ino=11658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 520.705111][ T28] audit: type=1400 audit(520.603:268): avc: denied { create } for pid=6743 comm="syz.1.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 527.476187][ T6789] netlink: 'syz.0.916': attribute type 2 has an invalid length. [ 527.482918][ T6789] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 527.493580][ T6789] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 527.846141][ T6791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6791 comm=syz.0.917 [ 531.111328][ T28] audit: type=1400 audit(531.013:269): avc: denied { setattr } for pid=6785 comm="syz.1.915" name="" dev="pipefs" ino=12724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 531.568691][ T6810] FAULT_INJECTION: forcing a failure. [ 531.568691][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.570029][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.925 Not tainted syzkaller #0 PREEMPT [ 531.570120][ T6810] Hardware name: ARM-Versatile Express [ 531.570134][ T6810] Call trace: [ 531.570162][ T6810] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 531.570286][ T6810] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 531.570305][ T6810] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 531.570394][ T6810] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 531.570452][ T6810] r7:20001a40 r6:00000000 r5:83184980 r4:82b54788 [ 531.570461][ T6810] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 531.570490][ T6810] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 531.570521][ T6810] r8:00000090 r7:20001a40 r6:dfd5de30 r5:00000000 r4:dfd5df28 [ 531.570529][ T6810] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 531.570555][ T6810] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 531.570586][ T6810] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 531.570620][ T6810] r8:00000090 r7:00000000 r6:837902c0 r5:dfd5df28 r4:dfd5de74 [ 531.570628][ T6810] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 531.570661][ T6810] r9:83184980 r8:8610d400 r7:00000090 r6:20001a40 r5:8610d401 r4:00000003 [ 531.570670][ T6810] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 531.570741][ T6810] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 531.570750][ T6810] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 531.570777][ T6810] Exception stack(0xdfd5dfa8 to 0xdfd5dff0) [ 531.570815][ T6810] dfa0: 00000000 00000000 00000003 20001a40 00000090 00000000 [ 531.570856][ T6810] dfc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fed0dc [ 531.570884][ T6810] dfe0: 76fece88 76fece78 00018fa0 00130a50 [ 534.563486][ T28] audit: type=1400 audit(534.463:270): avc: denied { create } for pid=6829 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 534.878474][ T6827] FAULT_INJECTION: forcing a failure. [ 534.878474][ T6827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.878986][ T6827] CPU: 1 UID: 0 PID: 6827 Comm: syz.0.932 Not tainted syzkaller #0 PREEMPT [ 534.879090][ T6827] Hardware name: ARM-Versatile Express [ 534.879116][ T6827] Call trace: [ 534.879164][ T6827] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 534.879278][ T6827] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 534.879300][ T6827] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 534.880824][ T6827] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 534.880931][ T6827] r7:b5403587 r6:00000000 r5:8318d5c0 r4:82b54788 [ 534.880970][ T6827] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 534.881052][ T6827] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 534.881120][ T6827] r8:003562d8 r7:b5403587 r6:00000000 r5:8318ddf0 r4:76f5cb80 [ 534.881139][ T6827] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 534.881189][ T6827] [<809fdf1c>] (should_fail_usercopy) from [<8022b184>] (setup_sigframe+0x124/0x1c8) [ 534.881266][ T6827] [<8022b060>] (setup_sigframe) from [<8022b7d8>] (do_work_pending+0x2cc/0x4e0) [ 534.881366][ T6827] r10:00000077 r9:b5403587 r8:00000000 r7:8318ddf0 r6:76f5cb80 r5:ea435fb0 [ 534.881433][ T6827] r4:8318d5c0 [ 534.881507][ T6827] [<8022b50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 534.881580][ T6827] Exception stack(0xea435fb0 to 0xea435ff8) [ 534.881662][ T6827] 5fa0: fffffffc 200004c0 00000000 00000000 [ 534.881730][ T6827] 5fc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76f5d0dc [ 534.881781][ T6827] 5fe0: 76f5ce88 76f5ce78 00018fa0 00130a50 60000010 00000011 [ 534.881845][ T6827] r10:00000077 r9:8318d5c0 r8:00000000 r7:00000077 r6:0012f454 r5:00000000 [ 534.881874][ T6827] r4:00000000 [ 535.055821][ T28] audit: type=1400 audit(534.953:271): avc: denied { ioctl } for pid=6829 comm="syz.1.933" path="socket:[12826]" dev="sockfs" ino=12826 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 535.949168][ T28] audit: type=1400 audit(535.853:272): avc: denied { allowed } for pid=6859 comm="syz.1.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 536.712706][ T6864] FAULT_INJECTION: forcing a failure. [ 536.712706][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 536.713997][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.1.937 Not tainted syzkaller #0 PREEMPT [ 536.714068][ T6864] Hardware name: ARM-Versatile Express [ 536.714082][ T6864] Call trace: [ 536.714106][ T6864] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 536.714166][ T6864] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 536.714176][ T6864] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 536.714204][ T6864] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 536.714237][ T6864] r7:84989880 r6:00000000 r5:84989880 r4:82b1ac48 [ 536.714245][ T6864] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 536.714276][ T6864] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 536.714381][ T6864] r8:00000000 r7:84989880 r6:830016c0 r5:00000c40 r4:00001000 [ 536.714408][ T6864] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 536.714442][ T6864] [<8054778c>] (__kmalloc_noprof) from [<808385b4>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 536.714482][ T6864] r10:00000000 r9:830c3800 r8:00000000 r7:834f7bb0 r6:8610d2a8 r5:00001000 [ 536.714493][ T6864] r4:00000000 [ 536.714502][ T6864] [<80838578>] (tomoyo_realpath_from_path) from [<8083467c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 536.714537][ T6864] r10:00000000 r9:00000004 r8:8610d280 r7:0000541b r6:81cddcac r5:00000004 [ 536.714549][ T6864] r4:8610d2a8 r3:828d2500 [ 536.714557][ T6864] [<808345b0>] (tomoyo_path_number_perm) from [<80838fd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 536.714593][ T6864] r10:84989880 r9:00000004 r8:8610d280 r7:00000000 r6:00000000 r5:0000541b [ 536.714603][ T6864] r4:8610d280 [ 536.714611][ T6864] [<80838fb4>] (tomoyo_file_ioctl) from [<807e3bac>] (security_file_ioctl+0x80/0x1d4) [ 536.714641][ T6864] [<807e3b2c>] (security_file_ioctl) from [<805bdd80>] (sys_ioctl+0x4c/0xb5c) [ 536.714675][ T6864] r7:00000000 r6:0000541b r5:8610d281 r4:00000000 [ 536.714683][ T6864] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 536.714708][ T6864] Exception stack(0xea435fa8 to 0xea435ff0) [ 536.714742][ T6864] 5fa0: 00000000 00000000 00000004 0000541b 00000000 00000000 [ 536.714762][ T6864] 5fc0: 00000000 00000000 0012f454 00000036 003562d8 00000000 00000001 76fed0dc [ 536.714776][ T6864] 5fe0: 76fece88 76fece78 00018fa0 00130a50 [ 536.714801][ T6864] r10:00000036 r9:84989880 r8:8020029c r7:00000036 r6:0012f454 r5:00000000 [ 536.714811][ T6864] r4:00000000 [ 536.744710][ T6864] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.852380][ T6869] block nbd0: Receive control failed (result -32) [ 536.852382][ T6865] block nbd0: Receive control failed (result -32) [ 546.849694][ T6903] FAULT_INJECTION: forcing a failure. [ 546.849694][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.877554][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.0.948 Not tainted syzkaller #0 PREEMPT [ 546.877715][ T6903] Hardware name: ARM-Versatile Express [ 546.877743][ T6903] Call trace: [ 546.877788][ T6903] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 546.877904][ T6903] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 546.877924][ T6903] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 546.877972][ T6903] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 546.878030][ T6903] r7:20000400 r6:00000000 r5:84989880 r4:82b54788 [ 546.878047][ T6903] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 546.878106][ T6903] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 546.878206][ T6903] r8:00040014 r7:20000400 r6:ea68de30 r5:00000000 r4:ea68df28 [ 546.878253][ T6903] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 546.878307][ T6903] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 546.878404][ T6903] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 546.878470][ T6903] r8:00040014 r7:00000000 r6:85636f40 r5:ea68df28 r4:ea68de74 [ 546.878520][ T6903] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 546.878613][ T6903] r9:84989880 r8:8610d280 r7:00040014 r6:20000400 r5:8610d281 r4:00000003 [ 546.878673][ T6903] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 546.878746][ T6903] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 546.878764][ T6903] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 546.878816][ T6903] Exception stack(0xea68dfa8 to 0xea68dff0) [ 546.878865][ T6903] dfa0: 00000000 00000000 00000003 20000400 00040014 00000000 [ 546.878903][ T6903] dfc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76f5d0dc [ 546.878931][ T6903] dfe0: 76f5ce88 76f5ce78 00018fa0 00130a50 [ 552.840872][ T28] audit: type=1400 audit(552.743:273): avc: denied { name_bind } for pid=6928 comm="syz.1.958" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 552.999406][ T28] audit: type=1400 audit(552.903:274): avc: denied { sqpoll } for pid=6930 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 553.163582][ T6935] FAULT_INJECTION: forcing a failure. [ 553.163582][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 553.189837][ T6935] CPU: 1 UID: 0 PID: 6935 Comm: syz.1.960 Not tainted syzkaller #0 PREEMPT [ 553.190004][ T6935] Hardware name: ARM-Versatile Express [ 553.190033][ T6935] Call trace: [ 553.190079][ T6935] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 553.190192][ T6935] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 553.190211][ T6935] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 553.190262][ T6935] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 553.190337][ T6935] r7:ffffffff r6:00000000 r5:8318d5c0 r4:82b1ac48 [ 553.190410][ T6935] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 553.190471][ T6935] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 553.190544][ T6935] r8:8318d5c0 r7:ffffffff r6:83001240 r5:00000820 r4:00000017 [ 553.190565][ T6935] [<80568de8>] (should_failslab) from [<80547c00>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 553.190624][ T6935] [<80547b54>] (__kmalloc_node_track_caller_noprof) from [<804d4d04>] (kmemdup_noprof+0x28/0x44) [ 553.190692][ T6935] r10:00000000 r9:8494dc04 r8:ea831ce4 r7:83330000 r6:851c0c98 r5:ea831cdc [ 553.190714][ T6935] r4:00000017 [ 553.190732][ T6935] [<804d4cdc>] (kmemdup_noprof) from [<808166b8>] (sidtab_sid2str_get+0x54/0xa4) [ 553.190795][ T6935] r7:83330000 r6:ea831ce4 r5:ea831cdc r4:831930c0 [ 553.190812][ T6935] [<80816664>] (sidtab_sid2str_get) from [<8081e7b0>] (sidtab_entry_to_string+0x34/0x94) [ 553.190870][ T6935] r7:83330000 r6:831930c0 r5:ea831cdc r4:0000005f [ 553.190888][ T6935] [<8081e77c>] (sidtab_entry_to_string) from [<8081e928>] (security_sid_to_context_core+0x118/0x17c) [ 553.190956][ T6935] r9:ea831e04 r8:83330000 r7:8494dc04 r6:ea831ce4 r5:ea831cdc r4:0000005f [ 553.190978][ T6935] [<8081e810>] (security_sid_to_context_core) from [<80821848>] (security_sid_to_context+0x1c/0x24) [ 553.191042][ T6935] r8:00000000 r7:8080173c r6:8318d5c0 r5:8590cf18 r4:ea831d70 [ 553.191061][ T6935] [<8082182c>] (security_sid_to_context) from [<80801788>] (avc_audit_post_callback+0x4c/0x318) [ 553.191141][ T6935] [<8080173c>] (avc_audit_post_callback) from [<808299ec>] (common_lsm_audit+0x108/0x14c) [ 553.191220][ T6935] r10:00000000 r9:ea831e04 r8:00000000 r7:8080173c r6:ea831e04 r5:8590cf18 [ 553.191241][ T6935] r4:8318dda8 [ 553.191258][ T6935] [<808298e4>] (common_lsm_audit) from [<80801c6c>] (slow_avc_audit+0xbc/0x114) [ 553.191353][ T6935] r8:00000057 r7:00000000 r6:0000005f r5:0000005f r4:0000005f [ 553.191375][ T6935] [<80801bb0>] (slow_avc_audit) from [<808026c0>] (avc_has_perm+0xe4/0xf4) [ 553.191432][ T6935] r5:0000005f r4:00008000 [ 553.191448][ T6935] [<808025dc>] (avc_has_perm) from [<80808b7c>] (sock_has_perm+0xd8/0x104) [ 553.191511][ T6935] r9:8318d5c0 r8:00008000 r7:87600a80 r6:8254e844 r5:86538dc0 r4:00000000 [ 553.191529][ T6935] [<80808aa4>] (sock_has_perm) from [<80808bdc>] (selinux_socket_getsockopt+0x18/0x1c) [ 553.191590][ T6935] r9:00000000 r8:00000000 r7:00000000 r6:0000000d r5:00000001 r4:8563aa40 [ 553.191608][ T6935] [<80808bc4>] (selinux_socket_getsockopt) from [<807fb48c>] (security_socket_getsockopt+0x58/0x1d4) [ 553.191656][ T6935] [<807fb434>] (security_socket_getsockopt) from [<816303a4>] (do_sock_getsockopt+0x70/0x2f8) [ 553.191719][ T6935] r7:00000000 r6:0000000d r5:00000001 r4:8563aa40 [ 553.191736][ T6935] [<81630334>] (do_sock_getsockopt) from [<81632b24>] (__sys_getsockopt+0x94/0xdc) [ 553.191797][ T6935] r10:00000127 r9:8318d5c0 r8:838d6600 r7:ea831f50 r6:0000000d r5:ea831f58 [ 553.191816][ T6935] r4:838d6601 [ 553.191833][ T6935] [<81632a90>] (__sys_getsockopt) from [<81632b88>] (sys_getsockopt+0x1c/0x24) [ 553.191892][ T6935] r8:8020029c r7:00000127 r6:0012f454 r5:00000000 r4:20000040 [ 553.191909][ T6935] [<81632b6c>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 553.191957][ T6935] Exception stack(0xea831fa8 to 0xea831ff0) [ 553.191992][ T6935] 1fa0: 20000040 00000000 00000003 00000001 0000000d 00000000 [ 553.192028][ T6935] 1fc0: 20000040 00000000 0012f454 00000127 003562d8 00000000 00000001 76fed0dc [ 553.192059][ T6935] 1fe0: 76fece88 76fece78 00018fa0 00130a50 [ 553.243266][ T28] audit: type=1400 audit(553.063:275): avc: denied { getopt } for pid=6932 comm="syz.1.960" ssid=95 tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 554.426010][ T6943] FAULT_INJECTION: forcing a failure. [ 554.426010][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.426408][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.0.961 Not tainted syzkaller #0 PREEMPT [ 554.426529][ T6943] Hardware name: ARM-Versatile Express [ 554.426553][ T6943] Call trace: [ 554.426594][ T6943] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 554.426781][ T6943] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 554.426807][ T6943] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 554.426882][ T6943] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 554.426962][ T6943] r7:00000000 r6:00000000 r5:83183d40 r4:82b54788 [ 554.427032][ T6943] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 554.427157][ T6943] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 554.427300][ T6943] r8:76f3bf08 r7:00000000 r6:00000000 r5:ea8a5f68 r4:00000002 [ 554.427389][ T6943] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 554.427484][ T6943] [<809fdf1c>] (should_fail_usercopy) from [<805e2370>] (simple_read_from_buffer+0x80/0x140) [ 554.427618][ T6943] [<805e22f0>] (simple_read_from_buffer) from [<806683c0>] (proc_fail_nth_read+0xb8/0x108) [ 554.427716][ T6943] r10:80668308 r9:00000001 r8:00000002 r7:ea8a5f68 r6:0000000f r5:76f3bf08 [ 554.427740][ T6943] r4:83183d40 r3:ea8a5e9f [ 554.427756][ T6943] [<80668308>] (proc_fail_nth_read) from [<805a0968>] (vfs_read+0xc0/0x328) [ 554.427824][ T6943] r8:83183d40 r7:ea8a5f68 r6:76f3bf08 r5:838d5500 r4:0000000f [ 554.427881][ T6943] [<805a08a8>] (vfs_read) from [<805a15b4>] (ksys_read+0x74/0xec) [ 554.427978][ T6943] r10:00000003 r9:83183d40 r8:8020029c r7:00000000 r6:00000000 r5:838d5500 [ 554.428003][ T6943] r4:838d5503 [ 554.428020][ T6943] [<805a1540>] (ksys_read) from [<805a163c>] (sys_read+0x10/0x14) [ 554.428081][ T6943] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 554.428099][ T6943] [<805a162c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 554.428183][ T6943] Exception stack(0xea8a5fa8 to 0xea8a5ff0) [ 554.428304][ T6943] 5fa0: 00000000 00000000 00000005 76f3bf08 0000000f 00000000 [ 554.428441][ T6943] 5fc0: 00000000 00000000 00000000 00000003 00356378 00000000 003d0f00 76f3c0dc [ 554.428486][ T6943] 5fe0: 76f3be58 76f3be44 0010bc74 00112858 [ 555.553786][ T28] audit: type=1400 audit(555.453:276): avc: denied { write } for pid=6956 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 556.920889][ T28] audit: type=1800 audit(556.823:277): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.973" name="/" dev="sockfs" ino=12132 res=0 errno=0 [ 561.078250][ T7011] FAULT_INJECTION: forcing a failure. [ 561.078250][ T7011] name failslab, interval 1, probability 0, space 0, times 0 [ 561.078844][ T7011] CPU: 0 UID: 0 PID: 7011 Comm: syz.0.985 Not tainted syzkaller #0 PREEMPT [ 561.078953][ T7011] Hardware name: ARM-Versatile Express [ 561.078983][ T7011] Call trace: [ 561.079035][ T7011] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 561.079153][ T7011] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 561.079174][ T7011] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 561.079298][ T7011] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 561.079474][ T7011] r7:0000025c r6:00000000 r5:84978c40 r4:82b1ac48 [ 561.079616][ T7011] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 561.079717][ T7011] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 561.079826][ T7011] r8:84978c40 r7:0000025c r6:8156425c r5:00000cc0 r4:83001540 [ 561.079904][ T7011] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 561.079995][ T7011] [<80548874>] (__kmalloc_cache_noprof) from [<8156425c>] (snd_pcm_oss_change_params_locked+0x1f4/0xce4) [ 561.080114][ T7011] r10:85c2fc04 r9:00001f40 r8:85fb5c00 r7:00000018 r6:8254373c r5:8465f200 [ 561.080157][ T7011] r4:85c2fc00 [ 561.080176][ T7011] [<81564068>] (snd_pcm_oss_change_params_locked) from [<81566c5c>] (snd_pcm_oss_ioctl+0xdd4/0xf88) [ 561.080274][ T7011] r10:85fb5eb0 r9:8465f200 r8:ea8a5ed0 r7:85fb5c00 r6:20000100 r5:8610d281 [ 561.080392][ T7011] r4:8010500c [ 561.080503][ T7011] [<81565e88>] (snd_pcm_oss_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 561.080637][ T7011] r10:84978c40 r9:00000003 r8:8610d280 r7:20000100 r6:8010500c r5:8610d281 [ 561.080685][ T7011] r4:00000000 [ 561.080730][ T7011] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 561.080900][ T7011] Exception stack(0xea8a5fa8 to 0xea8a5ff0) [ 561.080948][ T7011] 5fa0: 00000000 00000000 00000003 8010500c 20000100 00000000 [ 561.081065][ T7011] 5fc0: 00000000 00000000 0012f454 00000036 003562d8 00000000 00000001 76f5d0dc [ 561.081172][ T7011] 5fe0: 76f5ce88 76f5ce78 00018fa0 00130a50 [ 561.081450][ T7011] r10:00000036 r9:84978c40 r8:8020029c r7:00000036 r6:0012f454 r5:00000000 [ 561.081484][ T7011] r4:00000000 [ 566.840261][ T7057] FAULT_INJECTION: forcing a failure. [ 566.840261][ T7057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.840870][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.1.1003 Not tainted syzkaller #0 PREEMPT [ 566.840965][ T7057] Hardware name: ARM-Versatile Express [ 566.840992][ T7057] Call trace: [ 566.841039][ T7057] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 566.841198][ T7057] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 566.841237][ T7057] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 566.841296][ T7057] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 566.841354][ T7057] r7:20000180 r6:00000000 r5:84993100 r4:82b54788 [ 566.841373][ T7057] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 566.841428][ T7057] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 566.841482][ T7057] r8:00008014 r7:20000180 r6:eae0de30 r5:00000000 r4:eae0df28 [ 566.841499][ T7057] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 566.841561][ T7057] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 566.841649][ T7057] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 566.841727][ T7057] r8:00008014 r7:00000000 r6:837907c0 r5:eae0df28 r4:eae0de74 [ 566.841789][ T7057] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 566.841875][ T7057] r9:84993100 r8:8610dc00 r7:00008014 r6:20000180 r5:8610dc01 r4:00000003 [ 566.841897][ T7057] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 566.841963][ T7057] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 566.841983][ T7057] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 566.842083][ T7057] Exception stack(0xeae0dfa8 to 0xeae0dff0) [ 566.842145][ T7057] dfa0: 00000000 00000000 00000003 20000180 00008014 00000000 [ 566.842186][ T7057] dfc0: 00000000 00000000 0012f454 00000128 00356378 00000000 003d0f00 76fcc0dc [ 566.842242][ T7057] dfe0: 76fcbe88 76fcbe78 00018fa0 00130a50 [ 570.358755][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 570.511036][ T42] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 570.527519][ T42] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 570.528708][ T42] usb 1-1: config 1 has no interface number 0 [ 570.529718][ T42] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 570.530885][ T42] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x8B has invalid maxpacket 1975, setting to 1024 [ 570.537403][ T42] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 570.538800][ T42] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 570.564174][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.565297][ T42] usb 1-1: Product: syz [ 570.567236][ T42] usb 1-1: Manufacturer: syz [ 570.568079][ T42] usb 1-1: SerialNumber: syz [ 570.599287][ T7082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 570.826160][ T42] usb 1-1: Error in usbnet_get_endpoints (-71) [ 570.845239][ T42] usb 1-1: USB disconnect, device number 4 [ 571.326573][ T42] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 576.571073][ T42] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 576.574666][ T42] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 576.575896][ T42] usb 1-1: chopping to 0 config(s) [ 576.577306][ T42] usb 1-1: can't read configurations, error -32 [ 580.001956][ T7135] FAULT_INJECTION: forcing a failure. [ 580.001956][ T7135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.002390][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.0.1023 Not tainted syzkaller #0 PREEMPT [ 580.002490][ T7135] Hardware name: ARM-Versatile Express [ 580.002516][ T7135] Call trace: [ 580.002559][ T7135] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 580.002714][ T7135] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 580.002783][ T7135] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 580.002941][ T7135] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 580.003048][ T7135] r7:00000001 r6:00000000 r5:84978c40 r4:82b1ac9c [ 580.003084][ T7135] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 580.003182][ T7135] [<809fdce0>] (should_fail_ex) from [<80568ee4>] (should_fail_alloc_page+0x68/0x74) [ 580.003267][ T7135] r8:eb011d7c r7:00000001 r6:00000000 r5:00140cca r4:eb011d90 [ 580.003327][ T7135] [<80568e7c>] (should_fail_alloc_page) from [<8052d6f0>] (prepare_alloc_pages+0xf8/0x1b8) [ 580.003393][ T7135] [<8052d5f8>] (prepare_alloc_pages) from [<80536560>] (__alloc_frozen_pages_noprof+0xb0/0x1808) [ 580.003494][ T7135] r10:00000000 r9:852bb300 r8:84978c40 r7:000ebb92 r6:00000000 r5:00140cca [ 580.003598][ T7135] r4:eb011eb8 [ 580.003633][ T7135] [<805364b0>] (__alloc_frozen_pages_noprof) from [<80537d2c>] (__folio_alloc_noprof+0x14/0x6c) [ 580.003743][ T7135] r10:00000040 r9:852bb300 r8:ded16c48 r7:000ebb92 r6:84978c40 r5:00000000 [ 580.003767][ T7135] r4:eb011eb8 [ 580.003825][ T7135] [<80537d18>] (__folio_alloc_noprof) from [<8050120c>] (do_wp_page+0x82c/0x1280) [ 580.003922][ T7135] r5:00000000 r4:eb011eb8 [ 580.003940][ T7135] [<805009e0>] (do_wp_page) from [<80504e80>] (handle_mm_fault+0x620/0x6b8) [ 580.004050][ T7135] r10:00000040 r9:04e00000 r8:ebb927df r7:eb011fb0 r6:00e86d8c r5:84978c40 [ 580.004073][ T7135] r4:00001255 [ 580.004102][ T7135] [<80504860>] (handle_mm_fault) from [<8023409c>] (do_page_fault+0x21c/0x4d0) [ 580.004183][ T7135] r10:00000002 r9:8622a000 r8:00000255 r7:84978c40 r6:00000a0f r5:00e86d8c [ 580.004206][ T7135] r4:eb011fb0 [ 580.004235][ T7135] [<80233e80>] (do_page_fault) from [<8023451c>] (do_DataAbort+0x38/0xac) [ 580.004319][ T7135] r10:76f5d5c0 r9:00320000 r8:80233e80 r7:eb011fb0 r6:00e86d8c r5:00000a0f [ 580.004371][ T7135] r4:82a1eca0 [ 580.004412][ T7135] [<802344e4>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 580.004464][ T7135] Exception stack(0xeb011fb0 to 0xeb011ff8) [ 580.004500][ T7135] 1fa0: 00000000 00000001 00e86d8c 00000000 [ 580.004592][ T7135] 1fc0: 00000000 00326c58 0018f310 76f5cea4 00000000 00320000 76f5d5c0 76f5d0dc [ 580.004676][ T7135] 1fe0: 76f5ce58 76f5cda8 00103150 ffff0fcc 60000010 ffffffff [ 580.004751][ T7135] r8:828c9044 r7:84978c40 r6:ffffffff r5:60000010 r4:ffff0fcc [ 580.019485][ T7135] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 602.048981][ T7280] FAULT_INJECTION: forcing a failure. [ 602.048981][ T7280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.049566][ T7280] CPU: 0 UID: 0 PID: 7280 Comm: syz.1.1070 Not tainted syzkaller #0 PREEMPT [ 602.049672][ T7280] Hardware name: ARM-Versatile Express [ 602.049703][ T7280] Call trace: [ 602.049754][ T7280] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 602.049888][ T7280] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 602.049912][ T7280] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 602.050025][ T7280] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 602.050116][ T7280] r7:00000000 r6:00000000 r5:84993100 r4:82b54788 [ 602.050202][ T7280] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 602.050310][ T7280] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 602.050425][ T7280] r8:76fecf08 r7:00000000 r6:00000000 r5:ed629f68 r4:00000002 [ 602.050493][ T7280] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 602.050573][ T7280] [<809fdf1c>] (should_fail_usercopy) from [<805e2370>] (simple_read_from_buffer+0x80/0x140) [ 602.050648][ T7280] [<805e22f0>] (simple_read_from_buffer) from [<806683c0>] (proc_fail_nth_read+0xb8/0x108) [ 602.050811][ T7280] r10:80668308 r9:00000001 r8:00000002 r7:ed629f68 r6:0000000f r5:76fecf08 [ 602.050860][ T7280] r4:84993100 r3:ed629e9f [ 602.050905][ T7280] [<80668308>] (proc_fail_nth_read) from [<805a0968>] (vfs_read+0xc0/0x328) [ 602.051016][ T7280] r8:84993100 r7:ed629f68 r6:76fecf08 r5:85911c80 r4:0000000f [ 602.051055][ T7280] [<805a08a8>] (vfs_read) from [<805a15b4>] (ksys_read+0x74/0xec) [ 602.051141][ T7280] r10:00000003 r9:84993100 r8:8020029c r7:00000000 r6:00000000 r5:85911c80 [ 602.051191][ T7280] r4:85911c83 [ 602.051211][ T7280] [<805a1540>] (ksys_read) from [<805a163c>] (sys_read+0x10/0x14) [ 602.051307][ T7280] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 602.051360][ T7280] [<805a162c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 602.051414][ T7280] Exception stack(0xed629fa8 to 0xed629ff0) [ 602.051480][ T7280] 9fa0: 00000000 00000000 00000004 76fecf08 0000000f 00000000 [ 602.051568][ T7280] 9fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fed0dc [ 602.051597][ T7280] 9fe0: 76fece58 76fece44 0010bc74 00112858 [ 603.110972][ T7288] FAULT_INJECTION: forcing a failure. [ 603.110972][ T7288] name failslab, interval 1, probability 0, space 0, times 0 [ 603.112457][ T7288] CPU: 1 UID: 0 PID: 7288 Comm: syz.1.1073 Not tainted syzkaller #0 PREEMPT [ 603.112557][ T7288] Hardware name: ARM-Versatile Express [ 603.112579][ T7288] Call trace: [ 603.112615][ T7288] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 603.112706][ T7288] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 603.112722][ T7288] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 603.112766][ T7288] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 603.112818][ T7288] r7:83bf1880 r6:00000000 r5:83bf1880 r4:82b1ac48 [ 603.112832][ T7288] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 603.112878][ T7288] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 603.112945][ T7288] r8:00000000 r7:83bf1880 r6:83001240 r5:00000cc0 r4:0000000c [ 603.112959][ T7288] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 603.113007][ T7288] [<8054778c>] (__kmalloc_noprof) from [<8176d434>] (genl_family_rcv_msg_attrs_parse+0x64/0x118) [ 603.113070][ T7288] r10:82554534 r9:00000000 r8:ed735d30 r7:83130240 r6:833cc9c0 r5:ed735cc0 [ 603.113087][ T7288] r4:00000004 [ 603.113100][ T7288] [<8176d3d0>] (genl_family_rcv_msg_attrs_parse) from [<8176d554>] (genl_family_rcv_msg_doit+0x6c/0x140) [ 603.113157][ T7288] r9:85d82000 r8:ed735d30 r7:ed735cc0 r6:833cc9c0 r5:00000004 r4:83130240 [ 603.113172][ T7288] [<8176d4e8>] (genl_family_rcv_msg_doit) from [<8176de1c>] (genl_rcv_msg+0x240/0x3a8) [ 603.113227][ T7288] r10:00000002 r9:85d82000 r8:833cc9c0 r7:ed735cc0 r6:00000001 r5:83130240 [ 603.113244][ T7288] r4:82554534 [ 603.113257][ T7288] [<8176dbdc>] (genl_rcv_msg) from [<8176c82c>] (netlink_rcv_skb+0xc0/0x120) [ 603.113310][ T7288] r10:86312d84 r9:85d82000 r8:833cc9c0 r7:83130240 r6:8176dbdc r5:833cc9c0 [ 603.113328][ T7288] r4:00000000 [ 603.113342][ T7288] [<8176c76c>] (netlink_rcv_skb) from [<8176d3c0>] (genl_rcv+0x28/0x38) [ 603.113391][ T7288] r7:858e2e80 r6:00000024 r5:850c9064 r4:833cc9c0 [ 603.113405][ T7288] [<8176d398>] (genl_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380) [ 603.113448][ T7288] r5:850c9064 r4:850c9000 [ 603.113461][ T7288] [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444) [ 603.113513][ T7288] r10:00000000 r9:00000000 r8:00000000 r7:86312c00 r6:00000024 r5:833cc9c0 [ 603.113529][ T7288] r4:ed735ea0 [ 603.113543][ T7288] [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78) [ 603.113600][ T7288] r10:00000122 r9:8610e080 r8:8563b6c0 r7:76febde4 r6:8563b6c0 r5:ed735ea0 [ 603.113617][ T7288] r4:00000000 [ 603.113630][ T7288] [<8162f780>] (__sock_sendmsg) from [<81632768>] (__sys_sendto+0x110/0x160) [ 603.113680][ T7288] r7:76febde4 r6:8610e081 r5:00000000 r4:00000000 [ 603.113694][ T7288] [<81632658>] (__sys_sendto) from [<816327d4>] (sys_sendto+0x1c/0x24) [ 603.113790][ T7288] r9:83bf1880 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76febde4 [ 603.113805][ T7288] [<816327b8>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 603.113846][ T7288] Exception stack(0xed735fa8 to 0xed735ff0) [ 603.113880][ T7288] 5fa0: 76febde4 0000000c 00000004 76febe78 00000024 00000000 [ 603.113915][ T7288] 5fc0: 76febde4 0000000c 00000000 00000122 76febe9c 00000000 76febe78 76fed0dc [ 603.113938][ T7288] 5fe0: 76febd78 76febd64 0010bc74 00112858 [ 609.793425][ T28] audit: type=1400 audit(609.693:278): avc: denied { getopt } for pid=7341 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 610.833723][ T28] audit: type=1400 audit(610.733:279): avc: denied { read } for pid=7354 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.389230][ T28] audit: type=1400 audit(611.293:280): avc: denied { write } for pid=7354 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 615.504183][ T7376] FAULT_INJECTION: forcing a failure. [ 615.504183][ T7376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.517722][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.0.1109 Not tainted syzkaller #0 PREEMPT [ 615.517894][ T7376] Hardware name: ARM-Versatile Express [ 615.517922][ T7376] Call trace: [ 615.517968][ T7376] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 615.518076][ T7376] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 615.518096][ T7376] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 615.518149][ T7376] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 615.518207][ T7376] r7:b5403587 r6:00000000 r5:83bdee40 r4:82b54788 [ 615.518223][ T7376] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 615.518275][ T7376] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 615.518335][ T7376] r8:003562d8 r7:b5403587 r6:00000000 r5:83bdf670 r4:76f5cc68 [ 615.518387][ T7376] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 615.518440][ T7376] [<809fdf1c>] (should_fail_usercopy) from [<8022b014>] (preserve_vfp_context+0x7c/0xc8) [ 615.518500][ T7376] [<8022af98>] (preserve_vfp_context) from [<8022b21c>] (setup_sigframe+0x1bc/0x1c8) [ 615.518555][ T7376] r5:83bdf670 r4:76f5cb80 [ 615.518574][ T7376] [<8022b060>] (setup_sigframe) from [<8022b8b8>] (do_work_pending+0x3ac/0x4e0) [ 615.518647][ T7376] r10:b5403587 r9:76f5cb80 r8:00000000 r7:83bdf670 r6:76f5cb00 r5:edc09fb0 [ 615.518673][ T7376] r4:83bdee40 [ 615.518692][ T7376] [<8022b50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 615.518747][ T7376] Exception stack(0xedc09fb0 to 0xedc09ff8) [ 615.518801][ T7376] 9fa0: 00000003 200009c0 04044010 00000000 [ 615.518844][ T7376] 9fc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76f5d0dc [ 615.518877][ T7376] 9fe0: 76f5ce88 76f5ce78 00018fa0 00130a4c 60000010 00000003 [ 615.518915][ T7376] r10:00000128 r9:83bdee40 r8:8020029c r7:00000128 r6:0012f454 r5:00000000 [ 615.518937][ T7376] r4:00000000 [ 615.758880][ T7374] FAULT_INJECTION: forcing a failure. [ 615.758880][ T7374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.759307][ T7374] CPU: 0 UID: 0 PID: 7374 Comm: syz.1.1108 Not tainted syzkaller #0 PREEMPT [ 615.759409][ T7374] Hardware name: ARM-Versatile Express [ 615.759440][ T7374] Call trace: [ 615.759488][ T7374] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 615.759657][ T7374] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 615.759696][ T7374] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 615.759754][ T7374] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 615.759843][ T7374] r7:00000000 r6:00000000 r5:84f3b100 r4:82b54788 [ 615.759873][ T7374] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 615.759996][ T7374] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 615.760138][ T7374] r8:76fecf08 r7:00000000 r6:00000000 r5:edc05f68 r4:00000002 [ 615.760255][ T7374] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 615.760313][ T7374] [<809fdf1c>] (should_fail_usercopy) from [<805e2370>] (simple_read_from_buffer+0x80/0x140) [ 615.760367][ T7374] [<805e22f0>] (simple_read_from_buffer) from [<806683c0>] (proc_fail_nth_read+0xb8/0x108) [ 615.760446][ T7374] r10:80668308 r9:00000001 r8:00000002 r7:edc05f68 r6:0000000f r5:76fecf08 [ 615.760515][ T7374] r4:84f3b100 r3:edc05e9f [ 615.760577][ T7374] [<80668308>] (proc_fail_nth_read) from [<805a0968>] (vfs_read+0xc0/0x328) [ 615.760672][ T7374] r8:84f3b100 r7:edc05f68 r6:76fecf08 r5:8610f200 r4:0000000f [ 615.760762][ T7374] [<805a08a8>] (vfs_read) from [<805a15b4>] (ksys_read+0x74/0xec) [ 615.760868][ T7374] r10:00000003 r9:84f3b100 r8:8020029c r7:00000000 r6:00000000 r5:8610f200 [ 615.760913][ T7374] r4:8610f203 [ 615.760934][ T7374] [<805a1540>] (ksys_read) from [<805a163c>] (sys_read+0x10/0x14) [ 615.761048][ T7374] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 615.761081][ T7374] [<805a162c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 615.761166][ T7374] Exception stack(0xedc05fa8 to 0xedc05ff0) [ 615.761209][ T7374] 5fa0: 00000000 00000000 00000004 76fecf08 0000000f 00000000 [ 615.761279][ T7374] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fed0dc [ 615.761320][ T7374] 5fe0: 76fece58 76fece44 0010bc74 00112858 [ 618.849672][ T7393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7393 comm=syz.1.1114 [ 630.032561][ T7464] FAULT_INJECTION: forcing a failure. [ 630.032561][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 630.036944][ T7464] CPU: 1 UID: 0 PID: 7464 Comm: syz.1.1138 Not tainted syzkaller #0 PREEMPT [ 630.037086][ T7464] Hardware name: ARM-Versatile Express [ 630.037113][ T7464] Call trace: [ 630.037158][ T7464] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 630.037262][ T7464] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 630.037284][ T7464] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 630.037340][ T7464] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 630.037395][ T7464] r7:8497bd40 r6:00000000 r5:8497bd40 r4:82b1ac48 [ 630.037411][ T7464] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 630.037459][ T7464] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 630.037521][ T7464] r8:00000000 r7:8497bd40 r6:83001240 r5:00000d40 r4:00000021 [ 630.037537][ T7464] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 630.037588][ T7464] [<8054778c>] (__kmalloc_noprof) from [<808384c0>] (tomoyo_encode2+0x64/0xec) [ 630.037651][ T7464] r10:00000fff r9:830c3800 r8:00000000 r7:8340fb28 r6:8380c428 r5:83bc5ffc [ 630.037672][ T7464] r4:83bc5fe6 [ 630.037685][ T7464] [<8083845c>] (tomoyo_encode2) from [<8083856c>] (tomoyo_encode+0x24/0x30) [ 630.037749][ T7464] r9:830c3800 r8:00000000 r7:8340fb28 r6:8380c428 r5:00001000 r4:83bc5fe7 [ 630.037767][ T7464] [<80838548>] (tomoyo_encode) from [<808385f8>] (tomoyo_realpath_from_path+0x80/0x16c) [ 630.037834][ T7464] r5:00001000 r4:83bc5000 [ 630.037851][ T7464] [<80838578>] (tomoyo_realpath_from_path) from [<8083467c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 630.037915][ T7464] r10:00000000 r9:00000003 r8:8380c400 r7:00005450 r6:81cddcac r5:00000004 [ 630.037935][ T7464] r4:8380c428 r3:828d2500 [ 630.037951][ T7464] [<808345b0>] (tomoyo_path_number_perm) from [<80838fd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 630.038012][ T7464] r10:8497bd40 r9:00000003 r8:8380c400 r7:00000000 r6:00000000 r5:00005450 [ 630.038031][ T7464] r4:8380c400 [ 630.038046][ T7464] [<80838fb4>] (tomoyo_file_ioctl) from [<807e3bac>] (security_file_ioctl+0x80/0x1d4) [ 630.038099][ T7464] [<807e3b2c>] (security_file_ioctl) from [<805bdd80>] (sys_ioctl+0x4c/0xb5c) [ 630.038162][ T7464] r7:00000000 r6:00005450 r5:8380c401 r4:00000000 [ 630.038180][ T7464] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 630.038224][ T7464] Exception stack(0xedfc1fa8 to 0xedfc1ff0) [ 630.038264][ T7464] 1fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 630.038297][ T7464] 1fc0: 00000000 00000000 0012f454 00000036 003562d8 00000000 00000001 76fed0dc [ 630.038325][ T7464] 1fe0: 76fece88 76fece78 00018fa0 00130a50 [ 630.038389][ T7464] r10:00000036 r9:8497bd40 r8:8020029c r7:00000036 r6:0012f454 r5:00000000 [ 630.038411][ T7464] r4:00000000 [ 630.066214][ T7464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.313502][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1792 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.1147 [ 643.527881][ T28] audit: type=1400 audit(643.423:281): avc: denied { getopt } for pid=7534 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 643.814399][ T7538] input: syz1 as /devices/virtual/input/input15 [ 653.525627][ T7583] FAULT_INJECTION: forcing a failure. [ 653.525627][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.547843][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.1.1178 Not tainted syzkaller #0 PREEMPT [ 653.548007][ T7583] Hardware name: ARM-Versatile Express [ 653.548034][ T7583] Call trace: [ 653.548084][ T7583] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 653.548202][ T7583] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 653.548222][ T7583] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 653.548277][ T7583] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 653.548339][ T7583] r7:00000000 r6:00000000 r5:84f3bd40 r4:82b54788 [ 653.548358][ T7583] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 653.548416][ T7583] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 653.548475][ T7583] r8:76fecf08 r7:00000000 r6:00000000 r5:ee425f68 r4:00000002 [ 653.548493][ T7583] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 653.548539][ T7583] [<809fdf1c>] (should_fail_usercopy) from [<805e2370>] (simple_read_from_buffer+0x80/0x140) [ 653.548593][ T7583] [<805e22f0>] (simple_read_from_buffer) from [<806683c0>] (proc_fail_nth_read+0xb8/0x108) [ 653.548662][ T7583] r10:80668308 r9:00000001 r8:00000002 r7:ee425f68 r6:0000000f r5:76fecf08 [ 653.548686][ T7583] r4:84f3bd40 r3:ee425e9f [ 653.548703][ T7583] [<80668308>] (proc_fail_nth_read) from [<805a0968>] (vfs_read+0xc0/0x328) [ 653.548772][ T7583] r8:84f3bd40 r7:ee425f68 r6:76fecf08 r5:851ba700 r4:0000000f [ 653.548790][ T7583] [<805a08a8>] (vfs_read) from [<805a15b4>] (ksys_read+0x74/0xec) [ 653.548863][ T7583] r10:00000003 r9:84f3bd40 r8:8020029c r7:00000000 r6:00000000 r5:851ba700 [ 653.548884][ T7583] r4:851ba703 [ 653.548902][ T7583] [<805a1540>] (ksys_read) from [<805a163c>] (sys_read+0x10/0x14) [ 653.548965][ T7583] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 653.548981][ T7583] [<805a162c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 653.549028][ T7583] Exception stack(0xee425fa8 to 0xee425ff0) [ 653.549067][ T7583] 5fa0: 00000000 00000000 00000005 76fecf08 0000000f 00000000 [ 653.549101][ T7583] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fed0dc [ 653.549127][ T7583] 5fe0: 76fece58 76fece44 0010bc74 00112858 [ 660.189943][ T28] audit: type=1400 audit(660.093:282): avc: denied { write } for pid=7600 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 672.332576][ T7626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.342617][ T7626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.326465][ T7626] hsr_slave_0: entered promiscuous mode [ 673.332593][ T7626] hsr_slave_1: entered promiscuous mode [ 673.334475][ T7626] debugfs: 'hsr0' already exists in 'hsr' [ 673.338583][ T7626] Cannot create hsr debugfs directory [ 673.584232][ T7626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.652459][ T7626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.734156][ T7626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.801439][ T7626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.953301][ T7626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.965000][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.972237][ T7626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.988072][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.994502][ T7626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 674.010177][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.014507][ T7626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 674.028697][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.812635][ T28] audit: type=1400 audit(674.713:283): avc: denied { setattr } for pid=7912 comm="syz.1.1196" name="CAN_BCM" dev="sockfs" ino=15680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 674.830198][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.294010][ T7626] veth0_vlan: entered promiscuous mode [ 678.320368][ T7626] veth1_vlan: entered promiscuous mode [ 678.402847][ T7626] veth0_macvtap: entered promiscuous mode [ 678.421986][ T7626] veth1_macvtap: entered promiscuous mode [ 678.558261][ T95] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.558568][ T95] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.558826][ T95] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.558874][ T95] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.639421][ T28] audit: type=1400 audit(678.543:284): avc: denied { unmount } for pid=7626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 681.090840][ T28] audit: type=1400 audit(680.993:285): avc: denied { write } for pid=7975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.322846][ T28] audit: type=1400 audit(681.223:286): avc: denied { write } for pid=7979 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.330727][ T7237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.393989][ T7237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.480742][ T7237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.548477][ T7237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.891536][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.907461][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.911524][ T7237] bond0 (unregistering): Released all slaves [ 683.000257][ T7237] hsr_slave_0: left promiscuous mode [ 683.003268][ T7237] hsr_slave_1: left promiscuous mode [ 683.026069][ T7237] veth1_macvtap: left promiscuous mode [ 683.029514][ T7237] veth0_macvtap: left promiscuous mode [ 683.030259][ T7237] veth1_vlan: left promiscuous mode [ 683.030414][ T7237] veth0_vlan: left promiscuous mode [ 684.057269][ T28] audit: type=1400 audit(683.953:287): avc: denied { write } for pid=8010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.497413][ T28] audit: type=1400 audit(684.373:288): avc: denied { write } for pid=8060 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.691112][ T2962] 8021q: adding VLAN 0 to HW filter on device eth1 [ 685.567883][ T28] audit: type=1400 audit(685.453:289): avc: denied { write } for pid=8123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.573795][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.591620][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.924499][ T28] audit: type=1400 audit(685.823:290): avc: denied { write } for pid=8160 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.209813][ T2962] 8021q: adding VLAN 0 to HW filter on device eth2 [ 687.122571][ T7984] hsr_slave_0: entered promiscuous mode [ 687.133437][ T7984] hsr_slave_1: entered promiscuous mode [ 687.229597][ T28] audit: type=1400 audit(687.133:291): avc: denied { write } for pid=8186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.614752][ T28] audit: type=1400 audit(687.513:292): avc: denied { write } for pid=8275 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.956145][ T7984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 687.991131][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.003464][ T7984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 688.014227][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.036286][ T7984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 688.062588][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.074404][ T7984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.099483][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.771690][ T28] audit: type=1400 audit(688.673:293): avc: denied { write } for pid=8320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.177249][ T28] audit: type=1400 audit(689.073:294): avc: denied { write } for pid=8336 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.409285][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.711832][ T28] audit: type=1400 audit(689.613:295): avc: denied { write } for pid=8339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.152417][ T28] audit: type=1400 audit(690.053:296): avc: denied { write } for pid=8349 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.762785][ T28] audit: type=1400 audit(690.663:297): avc: denied { write } for pid=8353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.865407][ T28] audit: type=1400 audit(690.763:298): avc: denied { write } for pid=8345 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 691.009757][ T28] audit: type=1400 audit(690.913:299): avc: denied { ioctl } for pid=8359 comm="syz.0.1218" path="socket:[16964]" dev="sockfs" ino=16964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 691.117723][ T28] audit: type=1400 audit(691.013:300): avc: denied { write } for pid=8361 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.153899][ T8378] fuse: Bad value for 'group_id' [ 692.154261][ T8378] fuse: Bad value for 'group_id' [ 692.585005][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 692.590026][ T28] audit: type=1400 audit(692.483:304): avc: denied { write } for pid=8384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.877935][ T28] audit: type=1400 audit(692.773:305): avc: denied { write } for pid=8389 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.402918][ T28] audit: type=1400 audit(693.303:306): avc: denied { write } for pid=8396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.774098][ T28] audit: type=1400 audit(693.673:307): avc: denied { write } for pid=8402 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.818027][ T28] audit: type=1400 audit(693.723:308): avc: denied { create } for pid=8405 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 694.554014][ T7984] veth0_vlan: entered promiscuous mode [ 694.590282][ T7984] veth1_vlan: entered promiscuous mode [ 694.698955][ T7984] veth0_macvtap: entered promiscuous mode [ 694.721432][ T7984] veth1_macvtap: entered promiscuous mode [ 694.758067][ T8421] fuse: Bad value for 'group_id' [ 694.759507][ T8421] fuse: Bad value for 'group_id' [ 694.878406][ T7237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.880210][ T7237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.880989][ T7237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.881097][ T7237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.933388][ T8434] FAULT_INJECTION: forcing a failure. [ 695.933388][ T8434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.934018][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.1.1226 Not tainted syzkaller #0 PREEMPT [ 695.934117][ T8434] Hardware name: ARM-Versatile Express [ 695.934144][ T8434] Call trace: [ 695.934195][ T8434] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 695.934426][ T8434] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 695.934506][ T8434] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 695.934633][ T8434] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 695.934711][ T8434] r7:20000d80 r6:00000000 r5:8318ee40 r4:82b54788 [ 695.934758][ T8434] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 695.934853][ T8434] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 695.934942][ T8434] r8:ffffff9c r7:20000d80 r6:00000100 r5:20000dc0 r4:20000dc0 [ 695.934979][ T8434] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 695.935058][ T8434] [<809fdf1c>] (should_fail_usercopy) from [<80a03f20>] (strncpy_from_user+0x20/0x1b0) [ 695.935119][ T8434] [<80a03f00>] (strncpy_from_user) from [<805defbc>] (path_setxattrat+0x7c/0x1bc) [ 695.935239][ T8434] r10:00000003 r9:00000000 r8:ffffff9c r7:20000d80 r6:00000000 r5:00000000 [ 695.935282][ T8434] r4:20000dc0 [ 695.935318][ T8434] [<805def40>] (path_setxattrat) from [<805df288>] (sys_setxattr+0x34/0x3c) [ 695.935421][ T8434] r10:000000e2 r9:8318ee40 r8:8020029c r7:000000e2 r6:0012f454 r5:00000000 [ 695.935518][ T8434] r4:20000dc0 [ 695.935633][ T8434] [<805df254>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 695.935702][ T8434] Exception stack(0xea4d1fa8 to 0xea4d1ff0) [ 695.935791][ T8434] 1fa0: 00000003 00000000 20000d80 20000dc0 00000000 00000000 [ 695.935880][ T8434] 1fc0: 00000003 00000000 0012f454 000000e2 00356378 00000000 003d0f00 76f4b0dc [ 695.935926][ T8434] 1fe0: 76f4ae88 76f4ae78 00018fa0 00130a50 [ 695.936050][ T8434] r4:00000003 [ 696.145924][ T8439] fuse: Bad value for 'fd' [ 705.283649][ T2893] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 705.459372][ T2893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 705.466154][ T2893] usb 2-1: not running at top speed; connect to a high speed hub [ 705.470762][ T2893] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 705.501585][ T2893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.503056][ T2893] usb 2-1: Product: syz [ 705.506631][ T2893] usb 2-1: Manufacturer: syz [ 705.509273][ T2893] usb 2-1: SerialNumber: syz [ 706.055295][ T2893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 706.057455][ T2893] usb 2-1: MIDIStreaming interface descriptor not found [ 706.095281][ T2893] usb 2-1: USB disconnect, device number 4 [ 714.509705][ T28] audit: type=1400 audit(714.413:309): avc: denied { write } for pid=8626 comm="syz.0.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 723.736077][ T8691] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 723.736474][ T28] audit: type=1400 audit(723.633:310): avc: denied { relabelfrom } for pid=8690 comm="syz.0.1305" name="UDPv6" dev="sockfs" ino=17457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 723.742071][ T28] audit: type=1400 audit(723.643:311): avc: denied { relabelto } for pid=8690 comm="syz.0.1305" name="UDPv6" dev="sockfs" ino=17457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 723.757564][ T28] audit: type=1400 audit(723.653:312): avc: granted { setsecparam } for pid=8690 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 727.822342][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1318'. [ 727.822981][ T8731] netlink: 'syz.0.1318': attribute type 2 has an invalid length. [ 727.835609][ T8732] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 728.198133][ T28] audit: type=1326 audit(728.093:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1321" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 729.039450][ T8760] syzkaller0: entered promiscuous mode [ 729.040014][ T8760] syzkaller0: entered allmulticast mode [ 729.471400][ T28] audit: type=1400 audit(729.373:314): avc: denied { map } for pid=8771 comm="syz.0.1330" path="socket:[17568]" dev="sockfs" ino=17568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 730.418208][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 730.578188][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 730.582065][ T42] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 730.588365][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.588844][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 730.599746][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.600175][ T42] usb 1-1: Product: syz [ 730.600515][ T42] usb 1-1: Manufacturer: syz [ 730.600592][ T42] usb 1-1: SerialNumber: syz [ 730.606620][ T42] usb 1-1: config 0 descriptor?? [ 730.825777][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 730.831659][ T42] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 730.839465][ T42] imon:send_packet: packet tx failed (-71) [ 730.859830][ T42] imon 1-1:0.0: panel buttons/knobs setup failed [ 731.038137][ T42] rc_core: IR keymap rc-imon-pad not found [ 731.038616][ T42] Registered IR keymap rc-empty [ 731.039350][ T42] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 731.039816][ T42] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 731.043222][ T42] imon:send_packet: packet tx failed (-71) [ 731.058091][ T42] imon 1-1:0.0: remote input dev register failed [ 731.058806][ T42] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 731.080187][ T42] imon 1-1:0.0: unable to initialize intf0, err 0 [ 731.080592][ T42] imon:imon_probe: failed to initialize context! [ 731.081099][ T42] imon 1-1:0.0: unable to register, err -19 [ 731.086566][ T42] usb 1-1: USB disconnect, device number 7 [ 731.398138][ T42] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 731.550399][ T42] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 731.556353][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 731.557420][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 731.557664][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 731.581471][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.581902][ T42] usb 1-1: Product: syz [ 731.582211][ T42] usb 1-1: Manufacturer: syz [ 731.582266][ T42] usb 1-1: SerialNumber: syz [ 731.592481][ T42] usb 1-1: config 0 descriptor?? [ 731.613483][ T8787] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 731.843106][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 731.846552][ T42] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 731.938202][ T7237] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.940884][ T7237] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.944454][ T7237] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.946114][ T7237] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.207536][ T42] rc_core: IR keymap rc-imon-pad not found [ 732.207840][ T42] Registered IR keymap rc-empty [ 732.208227][ T42] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 732.208283][ T42] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 732.279760][ T42] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 732.281226][ T42] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 732.291412][ T42] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:8> initialized [ 732.491772][ T42] usb 1-1: USB disconnect, device number 8 [ 732.759606][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'. [ 732.861926][ T8853] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 732.920414][ T8853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.942800][ T8853] bond1: (slave dummy0): making interface the new active one [ 732.949359][ T8853] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 733.550547][ T28] audit: type=1326 audit(733.453:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.1345" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 734.407902][ T7237] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.408287][ T7237] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.408606][ T7237] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.408833][ T7237] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.420956][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 734.422366][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 736.327787][ T2893] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 736.497793][ T2893] usb 1-1: Using ep0 maxpacket: 16 [ 736.512131][ T2893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 736.512608][ T2893] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 736.525697][ T2893] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 736.544034][ T2893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.544339][ T2893] usb 1-1: Product: syz [ 736.544627][ T2893] usb 1-1: Manufacturer: syz [ 736.544673][ T2893] usb 1-1: SerialNumber: syz [ 736.772822][ T2893] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 736.773925][ T2893] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 736.817709][ T2893] usb 1-1: USB disconnect, device number 9 [ 737.817917][ T42] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 737.970579][ T42] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 737.974738][ T42] usb 1-1: config 0 has no interfaces? [ 737.994915][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.995344][ T42] usb 1-1: Product: syz [ 737.995621][ T42] usb 1-1: Manufacturer: syz [ 737.995781][ T42] usb 1-1: SerialNumber: syz [ 738.004127][ T42] usb 1-1: config 0 descriptor?? [ 741.775042][ T8952] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 741.792328][ T8952] syzkaller0: entered promiscuous mode [ 741.797832][ T8952] syzkaller0: entered allmulticast mode [ 746.096598][ T28] audit: type=1326 audit(745.993:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 746.098643][ T28] audit: type=1326 audit(745.993:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=314 compat=0 ip=0x130a50 code=0x7ffc0000 [ 746.103573][ T28] audit: type=1326 audit(746.003:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 746.108528][ T28] audit: type=1326 audit(746.013:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 746.109964][ T28] audit: type=1326 audit(745.993:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 746.111221][ T28] audit: type=1326 audit(746.013:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 746.112290][ T28] audit: type=1326 audit(746.013:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130a50 code=0x7ffc0000 [ 746.115039][ T28] audit: type=1326 audit(746.013:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.1360" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130a50 code=0x7ffc0000 [ 747.907740][ T28] audit: type=1400 audit(747.813:324): avc: denied { nlmsg_write } for pid=8971 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 748.579655][ T3713] usb 1-1: USB disconnect, device number 10 [ 749.823833][ T8992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1370'. [ 760.852773][ T9037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.862751][ T9037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.131246][ T9037] hsr_slave_0: entered promiscuous mode [ 762.133842][ T9037] hsr_slave_1: entered promiscuous mode [ 762.135979][ T9037] debugfs: 'hsr0' already exists in 'hsr' [ 762.137485][ T9037] Cannot create hsr debugfs directory [ 762.612983][ T9037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 762.620994][ T9037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.625435][ T9037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 762.637648][ T9037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.642161][ T9037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 762.652825][ T9037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.657873][ T9037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 762.664745][ T9037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.323717][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.779502][ T9037] veth0_vlan: entered promiscuous mode [ 765.802442][ T9037] veth1_vlan: entered promiscuous mode [ 765.864976][ T9037] veth0_macvtap: entered promiscuous mode [ 765.876569][ T9037] veth1_macvtap: entered promiscuous mode [ 765.988733][ T95] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.989257][ T95] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.989652][ T95] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.989902][ T95] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.012565][ T28] audit: type=1400 audit(766.913:325): avc: denied { bind } for pid=9385 comm="syz.2.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 767.035369][ T28] audit: type=1400 audit(766.933:326): avc: denied { getopt } for pid=9385 comm="syz.2.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 768.329441][ T28] audit: type=1400 audit(768.233:327): avc: denied { read } for pid=9394 comm="syz.2.1402" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 768.333306][ T28] audit: type=1400 audit(768.233:328): avc: denied { open } for pid=9394 comm="syz.2.1402" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 772.339577][ T9411] netdevsim netdevsim2: Direct firmware load for iĆ failed with error -2 [ 772.340859][ T9411] netdevsim netdevsim2: Falling back to sysfs fallback for: iĆ [ 772.340959][ T28] audit: type=1400 audit(772.243:329): avc: denied { firmware_load } for pid=9410 comm="syz.2.1408" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 774.083244][ T28] audit: type=1326 audit(773.983:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 774.086112][ T28] audit: type=1326 audit(773.983:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 774.092514][ T28] audit: type=1326 audit(773.993:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 774.097806][ T28] audit: type=1326 audit(773.993:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000028 syscall=371 compat=0 ip=0x130a50 code=0x7ffc0000 [ 774.102918][ T28] audit: type=1326 audit(774.003:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 776.368613][ T9436] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 776.599655][ T9436] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 776.917769][ T9432] netlink: 'syz.2.1414': attribute type 10 has an invalid length. [ 777.328574][ T9470] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 779.188613][ T9498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1428'. [ 779.367540][ T9502] capability: warning: `syz.2.1429' uses 32-bit capabilities (legacy support in use) [ 783.540105][ T28] audit: type=1400 audit(783.443:335): avc: denied { watch watch_reads } for pid=9526 comm="syz.2.1438" path="pipe:[17755]" dev="pipefs" ino=17755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 784.243661][ T28] audit: type=1326 audit(784.143:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.2.1441" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 785.099575][ T28] audit: type=1400 audit(784.993:337): avc: denied { cmd } for pid=9541 comm="iou-wrk-9543" path="socket:[19483]" dev="sockfs" ino=19483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 786.801126][ T9560] netlink: 'syz.1.1446': attribute type 13 has an invalid length. [ 787.483365][ T28] audit: type=1400 audit(787.363:338): avc: denied { execute } for pid=9561 comm="syz.1.1447" name="file0" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 787.490795][ T9562] process 'syz.1.1447' launched './file0' with NULL argv: empty string added [ 787.495083][ T28] audit: type=1400 audit(787.393:339): avc: denied { execute_no_trans } for pid=9561 comm="syz.1.1447" path="/116/file0" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 787.965078][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 789.608674][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.632508][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.069535][ T9574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 791.257494][ T7236] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.258205][ T7236] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.258920][ T7236] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.259531][ T7236] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.420989][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 791.442583][ T28] audit: type=1400 audit(791.343:340): avc: denied { execute } for pid=9588 comm="syz.1.1455" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 791.485936][ T9591] Trying to write to read-only block-device nullb0 [ 792.328213][ T28] audit: type=1400 audit(792.233:341): avc: denied { create } for pid=9614 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 792.592629][ T28] audit: type=1400 audit(792.493:342): avc: denied { unlink } for pid=9617 comm="syz.2.1467" name="file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 792.597278][ T28] audit: type=1400 audit(792.493:343): avc: denied { rename } for pid=9617 comm="syz.2.1467" name="file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 794.687865][ T28] audit: type=1400 audit(794.583:344): avc: denied { bind } for pid=9624 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 794.693159][ T28] audit: type=1400 audit(794.593:345): avc: denied { listen } for pid=9624 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 795.427643][ T6213] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 795.579272][ T6213] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 795.596522][ T6213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.597965][ T6213] usb 2-1: Product: syz [ 795.598819][ T6213] usb 2-1: Manufacturer: syz [ 795.599524][ T6213] usb 2-1: SerialNumber: syz [ 795.658922][ T6213] usb 2-1: config 0 descriptor?? [ 796.947878][ T9627] i2c i2c-1: sendbytes: error -110 [ 798.017895][ T9] usb 2-1: USB disconnect, device number 5 [ 798.109723][ T947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.128873][ T947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.140735][ T947] bond0 (unregistering): Released all slaves [ 798.171612][ T947] bond1 (unregistering): (slave dummy0): Releasing active interface [ 798.188744][ T947] bond1 (unregistering): Released all slaves [ 798.357553][ T947] hsr_slave_0: left promiscuous mode [ 798.360940][ T28] audit: type=1400 audit(798.263:346): avc: denied { setopt } for pid=9668 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 798.371209][ T947] hsr_slave_1: left promiscuous mode [ 799.397454][ T28] audit: type=1400 audit(799.283:347): avc: denied { write } for pid=9681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.694930][ T28] audit: type=1400 audit(799.593:348): avc: denied { write } for pid=9687 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.890029][ T2962] 8021q: adding VLAN 0 to HW filter on device eth1 [ 799.898561][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 799.903847][ T9694] ipvlan2: entered allmulticast mode [ 799.904596][ T9694] syz_tun: entered allmulticast mode [ 800.704062][ T9713] input: syz1 as /devices/virtual/input/input20 [ 800.911474][ T28] audit: type=1400 audit(800.813:349): avc: denied { write } for pid=9711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.013083][ T28] audit: type=1400 audit(800.903:350): avc: denied { execute } for pid=9723 comm="syz.1.1491" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 801.480266][ T28] audit: type=1400 audit(801.383:351): avc: denied { write } for pid=9728 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.717679][ T2962] 8021q: adding VLAN 0 to HW filter on device eth2 [ 802.871107][ T28] audit: type=1400 audit(802.773:352): avc: denied { write } for pid=9733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.424481][ T28] audit: type=1400 audit(803.323:353): avc: denied { write } for pid=9736 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.713362][ T28] audit: type=1400 audit(803.613:354): avc: denied { connect } for pid=9738 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 803.859581][ T2962] 8021q: adding VLAN 0 to HW filter on device eth3 [ 805.669400][ T28] audit: type=1400 audit(805.573:355): avc: denied { write } for pid=9758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.137229][ T28] audit: type=1400 audit(806.033:356): avc: denied { write } for pid=9764 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.091986][ T2962] 8021q: adding VLAN 0 to HW filter on device eth4 [ 807.588351][ T28] audit: type=1400 audit(807.493:357): avc: denied { prog_run } for pid=9777 comm="syz.2.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 807.850498][ T28] audit: type=1326 audit(807.743:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1504" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 807.851647][ T28] audit: type=1326 audit(807.743:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1504" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 807.882556][ T28] audit: type=1326 audit(807.783:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1504" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 807.891011][ T28] audit: type=1326 audit(807.793:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1504" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 807.893168][ T28] audit: type=1326 audit(807.793:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1504" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 810.988033][ T9798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.992986][ T9798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.234234][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 819.238500][ T28] audit: type=1400 audit(819.133:372): avc: denied { write } for pid=9833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.471478][ T28] audit: type=1400 audit(819.373:373): avc: denied { write } for pid=9836 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.751559][ T28] audit: type=1400 audit(820.653:374): avc: denied { write } for pid=9841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.030912][ T28] audit: type=1400 audit(820.933:375): avc: denied { write } for pid=9847 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.758281][ T28] audit: type=1400 audit(821.663:376): avc: denied { write } for pid=9855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.051033][ T28] audit: type=1400 audit(821.953:377): avc: denied { write } for pid=9859 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.531536][ T28] audit: type=1400 audit(822.433:378): avc: denied { write } for pid=9863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.773754][ T28] audit: type=1400 audit(822.673:379): avc: denied { write } for pid=9866 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.287865][ T28] audit: type=1400 audit(824.183:380): avc: denied { bind } for pid=9871 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.305290][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.310611][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.450105][ T9927] netlink: 'syz.1.1537': attribute type 39 has an invalid length. [ 833.037501][ T3713] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 833.187345][ T3713] usb 2-1: Using ep0 maxpacket: 32 [ 833.205997][ T3713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 833.206393][ T3713] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 833.215159][ T3713] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 833.215584][ T3713] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 833.215729][ T3713] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 833.215800][ T3713] usb 2-1: config 128 has no interface number 0 [ 833.215924][ T3713] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.215970][ T3713] usb 2-1: config 128 interface 127 has no altsetting 0 [ 833.244222][ T3713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.244595][ T3713] usb 2-1: Product: syz [ 833.249352][ T3713] usb 2-1: Manufacturer: syz [ 833.250927][ T3713] usb 2-1: SerialNumber: syz [ 833.530963][ T3713] usb 2-1: USB disconnect, device number 6 [ 833.823349][ T28] audit: type=1400 audit(833.723:381): avc: denied { bind } for pid=9961 comm="syz.1.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.777420][ T40] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 834.928078][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 834.932811][ T40] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 834.939056][ T40] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.940682][ T40] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.941436][ T40] usb 2-1: config 0 interface 0 has no altsetting 0 [ 834.941993][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.944990][ T40] usb 2-1: config 0 descriptor?? [ 835.365232][ T40] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 835.366645][ T40] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 835.368813][ T40] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 835.372202][ T40] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 835.374199][ T40] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 835.378552][ T40] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 836.607487][ T40] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 837.389654][ T42] usb 2-1: USB disconnect, device number 7 [ 840.307274][ T7239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.320630][ T7239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.325131][ T7239] bond0 (unregistering): Released all slaves [ 840.339487][ T7239] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 840.345390][ T7239] bond1 (unregistering): Released all slaves [ 840.432896][ T7239] hsr_slave_0: left promiscuous mode [ 840.435495][ T7239] hsr_slave_1: left promiscuous mode [ 841.182253][ T28] audit: type=1400 audit(841.083:382): avc: denied { write } for pid=10041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.380034][ T28] audit: type=1400 audit(841.283:383): avc: denied { write } for pid=10082 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.475296][ T2962] 8021q: adding VLAN 0 to HW filter on device eth5 [ 841.896408][ T28] audit: type=1400 audit(841.793:384): avc: denied { write } for pid=10145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.994105][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.999139][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 842.667220][ T28] audit: type=1400 audit(842.563:385): avc: denied { write } for pid=10184 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.443121][ T2962] 8021q: adding VLAN 0 to HW filter on device eth6 [ 844.862205][T10019] hsr_slave_0: entered promiscuous mode [ 844.864101][T10019] hsr_slave_1: entered promiscuous mode [ 845.380163][ T28] audit: type=1400 audit(845.263:386): avc: denied { write } for pid=10219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.893329][T10019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 846.909239][T10019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.912639][T10019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 846.941193][T10019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.945052][T10019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 846.955297][T10019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.969699][T10019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 846.976008][T10019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.977662][ T28] audit: type=1400 audit(846.873:387): avc: denied { write } for pid=10320 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.195084][ T2962] 8021q: adding VLAN 0 to HW filter on device eth7 [ 847.924677][ T28] audit: type=1400 audit(847.823:388): avc: denied { write } for pid=10354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.040240][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.390478][ T28] audit: type=1400 audit(848.293:389): avc: denied { write } for pid=10366 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.618287][ T2962] 8021q: adding VLAN 0 to HW filter on device eth8 [ 848.810187][ T28] audit: type=1400 audit(848.713:390): avc: denied { create } for pid=10377 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 851.800111][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1565'. [ 852.086382][T10019] veth0_vlan: entered promiscuous mode [ 852.112322][T10019] veth1_vlan: entered promiscuous mode [ 852.189207][T10019] veth0_macvtap: entered promiscuous mode [ 852.205969][T10019] veth1_macvtap: entered promiscuous mode [ 852.295960][ T947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.300994][ T947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.318510][ T947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.320606][ T947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.483311][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 853.274521][T10435] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1571'. [ 855.880636][T10449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1574'. [ 856.081195][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.114968][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.330079][T10464] bridge_slave_0: default FDB implementation only supports local addresses [ 859.027176][ T28] audit: type=1400 audit(858.923:391): avc: denied { write } for pid=10472 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 859.588902][ T28] audit: type=1400 audit(859.493:392): avc: denied { execute } for pid=10474 comm="syz.3.1584" path="/freezer.state" dev="ramfs" ino=20297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 860.272384][T10471] input: syz1 as /devices/virtual/input/input21 [ 860.304409][ T28] audit: type=1400 audit(860.203:393): avc: denied { write } for pid=10476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.858463][ T28] audit: type=1400 audit(860.753:394): avc: denied { write } for pid=10484 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.854499][ T28] audit: type=1400 audit(861.753:395): avc: denied { write } for pid=10488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.355800][ T28] audit: type=1400 audit(862.253:396): avc: denied { write } for pid=10491 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.030010][ T28] audit: type=1400 audit(863.933:397): avc: denied { write } for pid=10503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.917365][ T28] audit: type=1400 audit(864.803:398): avc: denied { write } for pid=10513 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.412639][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.430095][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.572128][ T28] audit: type=1400 audit(866.473:399): avc: denied { write } for pid=10520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.326264][ T28] audit: type=1400 audit(867.223:400): avc: denied { write } for pid=10523 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.582448][ T28] audit: type=1400 audit(869.483:401): avc: denied { setopt } for pid=10529 comm="syz.2.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 872.779120][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.783192][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.701222][T10574] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 878.707786][T10574] veth0_macvtap: left promiscuous mode [ 878.712943][T10574] macvtap0: entered allmulticast mode [ 882.350116][ T28] audit: type=1326 audit(882.253:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 882.355858][ T28] audit: type=1326 audit(882.253:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 882.359614][ T28] audit: type=1326 audit(882.263:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000028 syscall=274 compat=0 ip=0x130a50 code=0x7ffc0000 [ 882.363730][ T28] audit: type=1326 audit(882.263:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 883.001472][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'. [ 885.579915][ T28] audit: type=1326 audit(885.483:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.2.1627" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 888.404356][ T28] audit: type=1326 audit(888.303:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.3.1632" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 888.406455][ T28] audit: type=1326 audit(888.303:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.3.1632" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 888.417783][ T28] audit: type=1326 audit(888.303:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.3.1632" exe="/syz-executor" sig=0 arch=40000028 syscall=384 compat=0 ip=0x130a50 code=0x7ffc0000 [ 888.420096][ T28] audit: type=1326 audit(888.303:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.3.1632" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 888.425106][ T28] audit: type=1326 audit(888.303:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.3.1632" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 888.500070][T10637] »»»»»»: renamed from vlan0 [ 888.938232][T10641] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1635'. [ 889.185485][T10643] random: crng reseeded on system resumption [ 893.890532][ T28] audit: type=1400 audit(893.793:412): avc: denied { bind } for pid=10675 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 896.078959][ T28] audit: type=1400 audit(895.973:413): avc: denied { name_bind } for pid=10703 comm="syz.3.1661" src=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 900.349140][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 900.873632][T10742] input: syz0 as /devices/virtual/input/input22 [ 900.886493][ T28] audit: type=1326 audit(900.783:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.2.1673" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 908.506615][ T28] audit: type=1326 audit(908.403:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.507489][ T28] audit: type=1326 audit(908.403:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.523540][ T28] audit: type=1326 audit(908.423:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.529162][ T28] audit: type=1326 audit(908.423:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.532485][ T28] audit: type=1326 audit(908.423:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=8 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.538483][ T28] audit: type=1326 audit(908.433:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.543460][ T28] audit: type=1326 audit(908.433:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.551378][ T28] audit: type=1326 audit(908.453:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.558847][ T28] audit: type=1326 audit(908.463:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=10 compat=0 ip=0x130a50 code=0x7ffc0000 [ 908.559108][ T28] audit: type=1326 audit(908.463:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.1686" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 909.059714][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.061560][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.727488][T10880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1701'. [ 917.776147][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1701'. [ 922.729438][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.730844][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.238745][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 926.239118][T10951] netlink: 'syz.2.1724': attribute type 7 has an invalid length. [ 926.239273][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1724'. [ 926.269433][T10951] gretap0: entered promiscuous mode [ 926.288218][T10951] gretap0: left promiscuous mode [ 926.357523][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 926.357832][T10951] netlink: 'syz.2.1724': attribute type 7 has an invalid length. [ 926.358004][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1724'. [ 926.370044][T10951] gretap0: entered promiscuous mode [ 926.379393][T10951] gretap0: left promiscuous mode [ 926.936082][T10969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.939676][T10969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.003532][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 927.004087][T10973] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 927.147818][T10977] syzkaller0: entered promiscuous mode [ 927.150133][T10977] syzkaller0: entered allmulticast mode [ 928.078336][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1737'. [ 935.065280][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1745'. [ 936.301586][T11025] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.57589 [ 936.302120][T11025] PKCS7: Only support pkcs7_signedData type [ 939.899396][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.901243][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.920221][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.922872][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.679059][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 945.695175][ T28] audit: type=1400 audit(945.583:430): avc: denied { connect } for pid=11056 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 945.737537][ T28] audit: type=1400 audit(945.633:431): avc: denied { accept } for pid=11056 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 945.772639][ T28] audit: type=1400 audit(945.673:432): avc: denied { write } for pid=11056 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 945.801641][ T28] audit: type=1400 audit(945.703:433): avc: denied { read } for pid=11056 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 948.658171][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.658726][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.668534][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.669135][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.968010][T11093] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1770'. [ 955.037991][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.038930][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.058676][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.079692][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.340406][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 960.242461][ T28] audit: type=1326 audit(960.143:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.268059][ T28] audit: type=1326 audit(960.173:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.275279][ T28] audit: type=1326 audit(960.173:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.297141][ T28] audit: type=1326 audit(960.173:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.297502][ T28] audit: type=1326 audit(960.173:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=307 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.297703][ T28] audit: type=1326 audit(960.173:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.297893][ T28] audit: type=1326 audit(960.173:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.350730][ T28] audit: type=1326 audit(960.253:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=440 compat=0 ip=0x130a50 code=0x7ffc0000 [ 960.362418][ T28] audit: type=1326 audit(960.263:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 963.963406][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 965.768339][ T28] audit: type=1400 audit(965.663:443): avc: denied { mount } for pid=11183 comm="syz.2.1798" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 966.067357][ T28] audit: type=1400 audit(965.963:444): avc: denied { unmount } for pid=9037 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 968.305537][ T28] audit: type=1400 audit(968.203:445): avc: denied { ioctl } for pid=11192 comm="syz.2.1801" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 968.308584][ T28] audit: type=1400 audit(968.203:446): avc: denied { set_context_mgr } for pid=11192 comm="syz.2.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 968.443765][T11195] binder: 11194:11195 ioctl 4018620d 0 returned -22 [ 968.445644][ T28] audit: type=1400 audit(968.343:447): avc: denied { write } for pid=11194 comm="syz.2.1802" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 968.463235][T11195] binder: 11194:11195 ioctl c0306201 20000040 returned -22 [ 968.464693][T11195] binder: 11194:11195 ioctl c0306201 20000640 returned -22 [ 969.817666][ T28] audit: type=1400 audit(969.713:448): avc: denied { search } for pid=11196 comm="syz.2.1803" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 969.819494][ T28] audit: type=1400 audit(969.723:449): avc: denied { search } for pid=11196 comm="syz.2.1803" name="usb_gadget" dev="configfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 969.821940][ T28] audit: type=1400 audit(969.723:450): avc: denied { write search } for pid=11196 comm="syz.2.1803" name="usb_gadget" dev="configfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 969.823959][ T28] audit: type=1400 audit(969.723:451): avc: denied { add_name } for pid=11196 comm="syz.2.1803" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 969.825781][ T28] audit: type=1400 audit(969.723:452): avc: denied { create } for pid=11196 comm="syz.2.1803" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 969.832302][T11197] Mass Storage Function, version: 2009/09/11 [ 969.832744][T11197] LUN: removable file: (no medium) [ 977.708506][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 978.712787][T11233] FAULT_INJECTION: forcing a failure. [ 978.712787][T11233] name failslab, interval 1, probability 0, space 0, times 0 [ 978.713273][T11233] CPU: 1 UID: 0 PID: 11233 Comm: syz.2.1814 Not tainted syzkaller #0 PREEMPT [ 978.713361][T11233] Hardware name: ARM-Versatile Express [ 978.713387][T11233] Call trace: [ 978.713439][T11233] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 978.713541][T11233] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 978.713626][T11233] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 978.713748][T11233] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 978.713836][T11233] r7:84f33d40 r6:00000000 r5:84f33d40 r4:82b1ac48 [ 978.713980][T11233] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 978.714140][T11233] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 978.714283][T11233] r8:00000cc0 r7:84f33d40 r6:8164175c r5:00000cc0 r4:830e5c00 [ 978.714401][T11233] [<80568de8>] (should_failslab) from [<80547028>] (kmem_cache_alloc_node_noprof+0x60/0x3ec) [ 978.714491][T11233] [<80546fc8>] (kmem_cache_alloc_node_noprof) from [<8164175c>] (__alloc_skb+0x74/0x2ec) [ 978.714600][T11233] r10:00000100 r9:8164194c r8:00000cc0 r7:00000000 r6:830e5c00 r5:ffffffff [ 978.714645][T11233] r4:ddde4908 [ 978.714745][T11233] [<816416e8>] (__alloc_skb) from [<8176c5bc>] (netlink_ack+0x70/0x220) [ 978.714916][T11233] r9:00000000 r8:00000000 r7:833cfd80 r6:8658d200 r5:833cfd80 r4:00000014 [ 978.714965][T11233] [<8176c54c>] (netlink_ack) from [<8176c858>] (netlink_rcv_skb+0xec/0x120) [ 978.715074][T11233] r10:87840d84 r9:85e63000 r8:833cfd80 r7:8658d200 r6:81681fa0 r5:833cfd80 [ 978.715163][T11233] r4:00000000 [ 978.715181][T11233] [<8176c76c>] (netlink_rcv_skb) from [<81680be8>] (rtnetlink_rcv+0x18/0x1c) [ 978.715313][T11233] r7:85f110c0 r6:00000048 r5:8620e064 r4:8620e000 [ 978.715407][T11233] [<81680bd0>] (rtnetlink_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380) [ 978.715500][T11233] [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444) [ 978.715567][T11233] r10:00000000 r9:00000000 r8:00000000 r7:87840c00 r6:00000048 r5:833cfd80 [ 978.715740][T11233] r4:dfac5f28 [ 978.715791][T11233] [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78) [ 978.715861][T11233] r10:00000000 r9:00000000 r8:dfac5dd4 r7:00000000 r6:85638040 r5:dfac5f28 [ 978.716065][T11233] r4:00000000 [ 978.716144][T11233] [<8162f780>] (__sock_sendmsg) from [<81630864>] (____sys_sendmsg+0x238/0x2c4) [ 978.716256][T11233] r7:00000000 r6:00000000 r5:85638040 r4:dfac5f28 [ 978.716312][T11233] [<8163062c>] (____sys_sendmsg) from [<81630c64>] (___sys_sendmsg+0x9c/0xd0) [ 978.716401][T11233] r10:00000128 r9:20000280 r8:00000000 r7:00000000 r6:85638040 r5:dfac5f28 [ 978.716435][T11233] r4:00000000 [ 978.716454][T11233] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 978.716547][T11233] r9:84f33d40 r8:8590f100 r7:00000000 r6:20000280 r5:8590f101 r4:00000004 [ 978.716590][T11233] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 978.716731][T11233] r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [ 978.716799][T11233] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 978.716926][T11233] Exception stack(0xdfac5fa8 to 0xdfac5ff0) [ 978.716973][T11233] 5fa0: 00000000 00000000 00000004 20000280 00000000 00000000 [ 978.717010][T11233] 5fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000001 76f5a0dc [ 978.717041][T11233] 5fe0: 76f59e88 76f59e78 00018fa0 00130a50 [ 979.785137][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 979.788541][ T28] audit: type=1400 audit(979.683:468): avc: denied { write } for pid=11237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.807748][ T28] audit: type=1400 audit(980.693:469): avc: denied { write } for pid=11243 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.800063][T11257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1822'. [ 987.569597][ T28] audit: type=1400 audit(987.473:470): avc: denied { mount } for pid=11265 comm="syz.3.1826" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 987.790570][ T28] audit: type=1400 audit(987.693:471): avc: denied { unmount } for pid=10019 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 987.962335][T11268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.965683][T11268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.429818][T11276] 8<--- cut here --- [ 988.445990][T11276] Unable to handle kernel paging request at virtual address fee00007 when write [ 988.460537][ T28] audit: type=1400 audit(988.353:472): avc: denied { read } for pid=2914 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 988.461010][ T28] audit: type=1400 audit(988.353:473): avc: denied { search } for pid=2914 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.461383][ T28] audit: type=1400 audit(988.353:474): avc: denied { write search } for pid=2914 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.461604][ T28] audit: type=1400 audit(988.353:475): avc: denied { add_name } for pid=2914 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.461810][ T28] audit: type=1400 audit(988.353:476): avc: denied { create } for pid=2914 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 988.462023][ T28] audit: type=1400 audit(988.353:477): avc: denied { append open } for pid=2914 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 988.462218][ T28] audit: type=1400 audit(988.353:478): avc: denied { getattr } for pid=2914 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 988.485842][T11276] [fee00007] *pgd=80000080007003, *pmd=00000000 [ 988.498611][T11276] Internal error: Oops: a06 [#1] SMP ARM [ 988.500320][T11276] Modules linked in: [ 988.500774][T11276] CPU: 0 UID: 0 PID: 11276 Comm: syz.3.1830 Not tainted syzkaller #0 PREEMPT [ 988.501072][T11276] Hardware name: ARM-Versatile Express [ 988.501309][T11276] PC is at subdev_8255_io+0x60/0x6c [ 988.501599][T11276] LR is at subdev_8255_io+0x4c/0x6c [ 988.501822][T11276] pc : [<814ad81c>] lr : [<814ad808>] psr: 60000013 [ 988.502085][T11276] sp : dfb59cb8 ip : dfb59cb8 fp : dfb59cd4 [ 988.502318][T11276] r10: 00000004 r9 : 00000004 r8 : dfb59da4 [ 988.502594][T11276] r7 : 00000000 r6 : 0000009b r5 : 831d3f00 r4 : 00000007 [ 988.502867][T11276] r3 : 0000009b r2 : fee00007 r1 : 00000001 r0 : 831d3f00 [ 988.503226][T11276] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 988.503555][T11276] Control: 30c5387d Table: 866ceb80 DAC: fffffffd [ 988.503853][T11276] Register r0 information: slab kmalloc-192 start 831d3f00 pointer offset 0 size 192 [ 988.505011][T11276] Register r1 information: non-paged memory [ 988.505492][T11276] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 988.506048][T11276] Register r3 information: non-paged memory [ 988.506304][T11276] Register r4 information: non-paged memory [ 988.506624][T11276] Register r5 information: slab kmalloc-192 start 831d3f00 pointer offset 0 size 192 [ 988.507287][T11276] Register r6 information: non-paged memory [ 988.507552][T11276] Register r7 information: NULL pointer [ 988.507807][T11276] Register r8 information: 2-page vmalloc region starting at 0xdfb58000 allocated at kernel_clone+0xc4/0x43c [ 988.508267][T11276] Register r9 information: non-paged memory [ 988.508522][T11276] Register r10 information: non-paged memory [ 988.508773][T11276] Register r11 information: 2-page vmalloc region starting at 0xdfb58000 allocated at kernel_clone+0xc4/0x43c [ 988.509219][T11276] Register r12 information: 2-page vmalloc region starting at 0xdfb58000 allocated at kernel_clone+0xc4/0x43c [ 988.509670][T11276] Process syz.3.1830 (pid: 11276, stack limit = 0xdfb58000) [ 988.509991][T11276] Stack: (0xdfb59cb8 to 0xdfb5a000) [ 988.510220][T11276] 9ca0: 814ad7bc 00000004 [ 988.510577][T11276] 9cc0: 831d3f00 00000000 dfb59cf4 dfb59cd8 814ad4f8 814ad7c8 00000004 80547798 [ 988.510882][T11276] 9ce0: 863e9000 863e9000 dfb59d14 dfb59cf8 814ad8b0 814ad4ac 831d3f00 00000000 [ 988.511196][T11276] 9d00: 863e9000 00000000 dfb59d54 dfb59d18 814ada60 814ad834 ffffffff 00000004 [ 988.511524][T11276] 9d20: 82a22dc0 00000000 00000000 82bdac60 831d3f00 00000000 dfb59d90 831d3f00 [ 988.511843][T11276] 9d40: 00000000 82d32f9c dfb59d8c dfb59d58 8149c3e8 814ad9f8 40946400 00000000 [ 988.512164][T11276] 9d60: dfb59d7c 20000080 831d3f00 b5403587 40946400 00000001 00000003 83be3100 [ 988.512476][T11276] 9d80: dfb59e4c dfb59d90 81497bec 8149c2ec 35353238 00000000 00000000 00000000 [ 988.512787][T11276] 9da0: 00000000 00000004 00000005 00000004 00000020 14000000 00000020 00000003 [ 988.513109][T11276] 9dc0: 00000008 00000efd 00007ffe 00000008 00000016 00001000 00000002 00000013 [ 988.513423][T11276] 9de0: 4000bd55 00000003 0000003c 00000351 00000006 000003ff 0000000a 7fffffff [ 988.513740][T11276] 9e00: 00000860 00000002 00000000 00000004 00000000 0000000a 00000f58 000002cf [ 988.514069][T11276] 9e20: 00000000 ac5484f9 00000000 86101300 831d3f00 20000080 40946400 00000001 [ 988.514404][T11276] 9e40: dfb59f14 dfb59e50 81498f14 81497b2c 00000000 ac5484f9 00000000 00000000 [ 988.514718][T11276] 9e60: 8254e844 dfb59ea4 0000005f 843007b8 00000064 831d3f30 dfb59ee4 dfb59e88 [ 988.515043][T11276] 9e80: 8080b76c 80801e24 00000064 00000001 00000000 dfb59ea4 84eff410 83418220 [ 988.515366][T11276] 9ea0: 00006400 0000000b dfb59e98 00000000 00000000 ac5484f9 5b4fd000 86101300 [ 988.515685][T11276] 9ec0: 40946400 20000080 20000080 86101300 00000003 83be3100 dfb59ef4 dfb59ee8 [ 988.516016][T11276] 9ee0: 8080b8a0 ac5484f9 dfb59f14 00000000 86101301 40946400 20000080 86101300 [ 988.516310][T11276] 9f00: 00000003 83be3100 dfb59fa4 dfb59f18 805bdf78 81498bcc ecac8b10 83be3100 [ 988.516622][T11276] 9f20: dfb59f3c dfb59f30 81b6ec00 81b6eacc dfb59f54 dfb59f40 8025b878 8028f548 [ 988.517119][T11276] 9f40: dfb59fb0 40000000 dfb59f84 dfb59f58 80221bdc 8025b834 00000000 82a1eb0c [ 988.517493][T11276] 9f60: dfb59fb0 0013ebf0 ecac8b10 80221b30 00000000 ac5484f9 dfb59fac 00000000 [ 988.517820][T11276] 9f80: 00000000 00356310 00000036 8020029c 83be3100 00000036 00000000 dfb59fa8 [ 988.518145][T11276] 9fa0: 80200060 805bdd40 00000000 00000000 00000003 40946400 20000080 00000000 [ 988.518524][T11276] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fcc0dc [ 988.518837][T11276] 9fe0: 76fcbe88 76fcbe78 00018fa0 00130a50 60000010 00000003 00000000 00000000 [ 988.519180][T11276] Call trace: [ 988.519393][T11276] [<814ad7bc>] (subdev_8255_io) from [<814ad4f8>] (subdev_8255_do_config+0x58/0x60) [ 988.519790][T11276] r7:00000000 r6:831d3f00 r5:00000004 r4:814ad7bc [ 988.520039][T11276] [<814ad4a0>] (subdev_8255_do_config) from [<814ad8b0>] (subdev_8255_io_init+0x88/0x98) [ 988.520416][T11276] r4:863e9000 [ 988.520577][T11276] [<814ad828>] (subdev_8255_io_init) from [<814ada60>] (dev_8255_attach+0x74/0x138) [ 988.520943][T11276] r7:00000000 r6:863e9000 r5:00000000 r4:831d3f00 [ 988.521170][T11276] [<814ad9ec>] (dev_8255_attach) from [<8149c3e8>] (comedi_device_attach+0x108/0x244) [ 988.521537][T11276] r10:82d32f9c r9:00000000 r8:831d3f00 r7:dfb59d90 r6:00000000 r5:831d3f00 [ 988.521830][T11276] r4:82bdac60 [ 988.521998][T11276] [<8149c2e0>] (comedi_device_attach) from [<81497bec>] (do_devconfig_ioctl+0xcc/0x218) [ 988.522411][T11276] r10:83be3100 r9:00000003 r8:00000001 r7:40946400 r6:b5403587 r5:831d3f00 [ 988.522707][T11276] r4:20000080 [ 988.523311][T11276] [<81497b20>] (do_devconfig_ioctl) from [<81498f14>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 988.524823][T11276] r8:00000001 r7:40946400 r6:20000080 r5:831d3f00 r4:86101300 [ 988.525086][T11276] [<81498bc0>] (comedi_unlocked_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 988.525418][T11276] r10:83be3100 r9:00000003 r8:86101300 r7:20000080 r6:40946400 r5:86101301 [ 988.525681][T11276] r4:00000000 [ 988.525818][T11276] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 988.526126][T11276] Exception stack(0xdfb59fa8 to 0xdfb59ff0) [ 988.526376][T11276] 9fa0: 00000000 00000000 00000003 40946400 20000080 00000000 [ 988.526801][T11276] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fcc0dc [ 988.527195][T11276] 9fe0: 76fcbe88 76fcbe78 00018fa0 00130a50 [ 988.527433][T11276] r10:00000036 r9:83be3100 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 988.527696][T11276] r4:00000000 [ 988.528105][T11276] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 988.529888][T11276] ---[ end trace 0000000000000000 ]--- [ 988.809014][T11276] Kernel panic - not syncing: Fatal exception [ 988.811141][T11276] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:15:50 Registers: info registers vcpu 0 CPU#0 R00=00040004 R01=00000001 R02=00001ae2 R03=00001ae2 R04=ebb99e58 R05=00000001 R06=83426000 R07=83490668 R08=ebb99ea4 R09=00000002 R10=00000018 R11=ebb99d0c R12=ebb99c90 R13=ebb99c90 R14=150d1c20 R15=80290b48 PSR=600f0013 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ffedc000 R01=00000000 R02=00107000 R03=80003000 R04=ffedc000 R05=83bd9880 R06=00000001 R07=dfa51cd0 R08=00000001 R09=decf1fa0 R10=82c85518 R11=dfa51c54 R12=00081c22 R13=dfa51c58 R14=804d1d78 R15=80502694 PSR=a00c0013 N-C- A S svc32 s00=37303030 s01=65687720 d00=6568772037303030 s02=31545b5d s03=36373231 d01=3637323131545b5d s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=6170206c s11=676e6967 d05=676e69676170206c s12=71657220 s13=74736575 d06=7473657571657220 s14=20746120 s15=74726976 d07=7472697620746120 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000