last executing test programs: 4.703238277s ago: executing program 0 (id=51): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) close(0x3) 4.545019874s ago: executing program 0 (id=53): unshare(0x26020480) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 4.370583987s ago: executing program 0 (id=54): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588c3, 0x1, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x5, 0xed, &(0x7f0000000800)=ANY=[], 0x0) 3.073789498s ago: executing program 0 (id=56): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_futex/probability\x00', 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='9', 0x1}], 0x1) 2.945657099s ago: executing program 0 (id=57): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x60, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x11, 0x8, "0c5bfbd8c79b3161"}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x81, 0x2, "07bb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2.317579178s ago: executing program 1 (id=62): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 2.096075441s ago: executing program 1 (id=63): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x8000000003) 1.909317774s ago: executing program 1 (id=64): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) getgid() 1.671431761s ago: executing program 1 (id=65): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b70800ec00000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff582ffa03ff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 484.955106ms ago: executing program 1 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4089, 0xff9}, {&(0x7f00000003c0)=""/63, 0x3f}], 0x2}, 0x40000020) 260.340122ms ago: executing program 0 (id=67): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x7, 0x60000) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 0s ago: executing program 1 (id=68): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 36.460075][ T28] audit: type=1400 audit(36.350:88): avc: denied { write } for pid=3084 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.342000][ T28] audit: type=1400 audit(39.250:89): avc: denied { write } for pid=3090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.923501][ T28] audit: type=1400 audit(39.830:90): avc: denied { read write } for pid=3091 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.925192][ T28] audit: type=1400 audit(39.830:91): avc: denied { open } for pid=3091 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.004087][ T28] audit: type=1400 audit(39.910:92): avc: denied { write } for pid=3094 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:51096' (ED25519) to the list of known hosts. [ 58.988440][ T28] audit: type=1400 audit(58.890:93): avc: denied { name_bind } for pid=3099 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.401945][ T28] audit: type=1400 audit(60.310:94): avc: denied { execute } for pid=3100 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.405356][ T28] audit: type=1400 audit(60.310:95): avc: denied { execute_no_trans } for pid=3100 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.411787][ T28] audit: type=1400 audit(63.320:96): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.417012][ T28] audit: type=1400 audit(63.320:97): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.432349][ T3100] cgroup: Unknown subsys name 'net' [ 63.441785][ T28] audit: type=1400 audit(63.350:98): avc: denied { unmount } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.607850][ T3100] cgroup: Unknown subsys name 'cpuset' [ 63.615523][ T3100] cgroup: Unknown subsys name 'hugetlb' [ 63.616415][ T3100] cgroup: Unknown subsys name 'rlimit' [ 63.814470][ T28] audit: type=1400 audit(63.720:99): avc: denied { setattr } for pid=3100 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.025628][ T3102] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.029386][ T28] audit: type=1400 audit(63.930:100): avc: denied { relabelto } for pid=3102 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.036279][ T28] audit: type=1400 audit(63.940:101): avc: denied { write } for pid=3102 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 64.078730][ T28] audit: type=1400 audit(63.980:102): avc: denied { read } for pid=3100 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.079277][ T28] audit: type=1400 audit(63.980:103): avc: denied { open } for pid=3100 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 71.854212][ T3100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.965709][ T28] audit: type=1400 audit(73.870:104): avc: denied { execmem } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.018299][ T28] audit: type=1400 audit(73.920:105): avc: denied { read } for pid=3105 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.030418][ T28] audit: type=1400 audit(73.930:106): avc: denied { open } for pid=3105 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.030722][ T28] audit: type=1400 audit(73.930:107): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 74.051832][ T28] audit: type=1400 audit(73.960:108): avc: denied { module_request } for pid=3105 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.133787][ T28] audit: type=1400 audit(74.040:109): avc: denied { sys_module } for pid=3105 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.688637][ T28] audit: type=1400 audit(74.590:110): avc: denied { ioctl } for pid=3106 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.690250][ T3105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.695248][ T3106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.698478][ T3105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.717454][ T3106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.414622][ T3105] hsr_slave_0: entered promiscuous mode [ 76.418597][ T3105] hsr_slave_1: entered promiscuous mode [ 76.605033][ T3106] hsr_slave_0: entered promiscuous mode [ 76.607712][ T3106] hsr_slave_1: entered promiscuous mode [ 76.612736][ T3106] debugfs: 'hsr0' already exists in 'hsr' [ 76.613355][ T3106] Cannot create hsr debugfs directory [ 77.013359][ T28] audit: type=1400 audit(76.920:111): avc: denied { create } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.016392][ T28] audit: type=1400 audit(76.920:112): avc: denied { write } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.021505][ T28] audit: type=1400 audit(76.930:113): avc: denied { read } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.038252][ T3105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.052810][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.067655][ T3105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.075535][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.089018][ T3105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.102966][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.107648][ T3105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.117528][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.172240][ T3106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.180282][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.196489][ T3106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.205319][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.208059][ T3106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.219416][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.223427][ T3106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.231654][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.845405][ T3106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.892028][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.213453][ T3106] veth0_vlan: entered promiscuous mode [ 80.245158][ T3106] veth1_vlan: entered promiscuous mode [ 80.297050][ T3105] veth0_vlan: entered promiscuous mode [ 80.321564][ T3105] veth1_vlan: entered promiscuous mode [ 80.341111][ T3106] veth0_macvtap: entered promiscuous mode [ 80.355727][ T3106] veth1_macvtap: entered promiscuous mode [ 80.415646][ T3105] veth0_macvtap: entered promiscuous mode [ 80.443654][ T3105] veth1_macvtap: entered promiscuous mode [ 80.514635][ T2166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.543639][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.544133][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.554579][ T28] audit: type=1400 audit(80.460:114): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.569241][ T28] audit: type=1400 audit(80.470:115): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.Tipgvq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.579157][ T28] audit: type=1400 audit(80.480:116): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.593627][ T1269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.594515][ T1269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.594818][ T1269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.594957][ T1269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.595169][ T1269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.595442][ T28] audit: type=1400 audit(80.500:117): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.Tipgvq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.599284][ T28] audit: type=1400 audit(80.500:118): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.Tipgvq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 80.623433][ T28] audit: type=1400 audit(80.530:119): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.636912][ T28] audit: type=1400 audit(80.540:120): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.637370][ T28] audit: type=1400 audit(80.540:121): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="gadgetfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 80.656146][ T28] audit: type=1400 audit(80.550:122): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.656503][ T28] audit: type=1400 audit(80.550:123): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 80.721251][ T3106] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.448911][ T3718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3718 comm=syz.0.1 [ 81.468943][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.483841][ T3718] 8021q: VLANs not supported on tunl0 [ 81.551075][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.720678][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 81.724353][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 81.741948][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.742334][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.766656][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.767007][ T23] usb 2-1: SerialNumber: syz [ 81.822124][ T23] usb 2-1: 0:2 : does not exist [ 82.709340][ T23] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 82.745570][ T23] usb 2-1: USB disconnect, device number 2 [ 82.970743][ T3750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7'. [ 82.971372][ T3750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 83.556811][ T3754] binder: 3753:3754 ioctl c0306201 20000080 returned -14 [ 85.931585][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 85.931817][ T28] audit: type=1400 audit(85.840:150): avc: denied { create } for pid=3773 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.313388][ T28] audit: type=1400 audit(87.220:151): avc: denied { execute } for pid=3786 comm="syz.1.20" name="file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.854096][ T3787] process 'syz.1.20' launched './file0' with NULL argv: empty string added [ 87.864912][ T28] audit: type=1400 audit(87.770:152): avc: denied { execute_no_trans } for pid=3786 comm="syz.1.20" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.788597][ T28] audit: type=1400 audit(91.690:153): avc: denied { name_bind } for pid=3797 comm="syz.1.23" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 92.895004][ T3801] FAULT_INJECTION: forcing a failure. [ 92.895004][ T3801] name failslab, interval 1, probability 0, space 0, times 1 [ 92.895924][ T3801] CPU: 0 UID: 0 PID: 3801 Comm: syz.1.24 Not tainted syzkaller #0 PREEMPT [ 92.896070][ T3801] Hardware name: ARM-Versatile Express [ 92.896275][ T3801] Call trace: [ 92.897101][ T3801] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 92.898162][ T3801] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 92.898240][ T3801] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 92.898279][ T3801] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 92.898313][ T3801] r7:859aee40 r6:00000000 r5:859aee40 r4:82b1ac48 [ 92.898323][ T3801] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 92.898352][ T3801] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 92.898389][ T3801] r8:00000000 r7:859aee40 r6:81644954 r5:00000820 r4:830e5c00 [ 92.898398][ T3801] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 92.898426][ T3801] [<80546804>] (kmem_cache_alloc_noprof) from [<81644954>] (skb_clone+0x60/0x1c8) [ 92.898475][ T3801] r10:85d27d84 r9:856cd580 r8:85a09800 r7:833cd240 r6:85b6e700 r5:833cd240 [ 92.898490][ T3801] r4:00000820 [ 92.898498][ T3801] [<816448f4>] (skb_clone) from [<8176a0b4>] (__netlink_deliver_tap+0x1e4/0x27c) [ 92.898533][ T3801] r7:833cd240 r6:85b6e700 r5:85a09864 r4:85b6e000 [ 92.898541][ T3801] [<81769ed0>] (__netlink_deliver_tap) from [<8176c0e4>] (netlink_unicast+0x35c/0x380) [ 92.898572][ T3801] r10:85d27d84 r9:85eea000 r8:833cd240 r7:856cd580 r6:00000005 r5:85a09864 [ 92.898582][ T3801] r4:85a09800 [ 92.898591][ T3801] [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444) [ 92.898625][ T3801] r10:00000000 r9:00000000 r8:00000000 r7:85d27c00 r6:00000005 r5:833cd240 [ 92.898635][ T3801] r4:e0211de8 [ 92.898642][ T3801] [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78) [ 92.898675][ T3801] r10:00000000 r9:00000001 r8:859aee40 r7:838c5980 r6:850c3940 r5:e0211de8 [ 92.898684][ T3801] r4:00000000 [ 92.898692][ T3801] [<8162f780>] (__sock_sendmsg) from [<8162f8a8>] (sock_write_iter+0xb0/0xfc) [ 92.898720][ T3801] r7:838c5980 r6:850c3940 r5:e0211e58 r4:e0211ed0 [ 92.898728][ T3801] [<8162f7f8>] (sock_write_iter) from [<8059e6ec>] (do_iter_readv_writev+0x130/0x220) [ 92.898760][ T3801] r7:00000000 r6:00000000 r5:838c5980 r4:00004004 [ 92.898768][ T3801] [<8059e5bc>] (do_iter_readv_writev) from [<8059fe14>] (vfs_writev+0x134/0x39c) [ 92.898802][ T3801] r10:00000092 r9:00000002 r8:859aee40 r7:00000000 r6:838c5980 r5:00000000 [ 92.898812][ T3801] r4:8162f7f8 [ 92.898820][ T3801] [<8059fce0>] (vfs_writev) from [<805a018c>] (do_writev+0x110/0x148) [ 92.898853][ T3801] r9:00000002 r8:20009ac0 r7:00000000 r6:838c5980 r5:838c5981 r4:859aee40 [ 92.898862][ T3801] [<805a007c>] (do_writev) from [<805a1a0c>] (sys_writev+0x14/0x18) [ 92.898911][ T3801] r9:859aee40 r8:8020029c r7:00000092 r6:00356310 r5:00000000 r4:00000000 [ 92.898920][ T3801] [<805a19f8>] (sys_writev) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 92.898994][ T3801] Exception stack(0xe0211fa8 to 0xe0211ff0) [ 92.899088][ T3801] 1fa0: 00000000 00000000 00000003 20009ac0 00000002 00000000 [ 92.899122][ T3801] 1fc0: 00000000 00000000 00356310 00000092 003562d8 00000000 00000001 76f080dc [ 92.899137][ T3801] 1fe0: 76f07e88 76f07e78 00018fa0 00130a50 [ 93.038227][ T28] audit: type=1400 audit(92.940:154): avc: denied { create } for pid=3804 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.590345][ T3724] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.753440][ T3724] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 93.767932][ T3724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 93.771296][ T3724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 93.775456][ T3724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.804925][ T3724] usb 2-1: probing VID:PID(0424:012C) [ 93.813172][ T3724] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 93.814290][ T3724] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 93.818819][ T3724] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 93.821991][ T3724] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 93.824421][ T3724] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 94.239941][ T3724] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 94.452616][ T3724] vub300 2-1:1.0: probe with driver vub300 failed with error -22 [ 94.650807][ T3724] usb 2-1: USB disconnect, device number 3 [ 94.841996][ T28] audit: type=1400 audit(94.750:155): avc: denied { name_bind } for pid=3824 comm="syz.1.29" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 95.861496][ T28] audit: type=1400 audit(95.770:156): avc: denied { create } for pid=3827 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.865379][ T28] audit: type=1400 audit(95.770:157): avc: denied { bind } for pid=3827 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.960291][ T28] audit: type=1400 audit(96.860:158): avc: denied { write } for pid=3839 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.674392][ T28] audit: type=1400 audit(97.580:159): avc: denied { watch watch_reads } for pid=3841 comm="syz.0.37" path="/17/file0" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.961535][ T3724] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.164356][ T3724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.173950][ T3724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.189430][ T3724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.201279][ T3724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.213385][ T3724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.248556][ T3724] usb 2-1: config 0 descriptor?? [ 98.780279][ T3724] input: HID 047f:ffff as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0001/input/input3 [ 98.803289][ T3724] plantronics 0003:047F:FFFF.0001: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 98.952188][ T2863] usb 2-1: USB disconnect, device number 4 [ 99.033431][ T28] audit: type=1400 audit(98.940:160): avc: denied { set_context_mgr } for pid=3861 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.151135][ T28] audit: type=1400 audit(99.060:161): avc: denied { map } for pid=3861 comm="syz.0.40" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.196371][ T28] audit: type=1400 audit(99.100:162): avc: denied { call } for pid=3861 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.233551][ T3869] binder_alloc: 3861: pid 3861 spamming oneway? 1 buffers allocated for a total size of 4096 [ 99.840182][ T28] audit: type=1400 audit(99.740:163): avc: denied { getopt } for pid=3879 comm="syz.0.42" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.090454][ T3724] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.242890][ T3724] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 100.293931][ T3724] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 100.294271][ T3724] usb 1-1: Product: syz [ 100.294549][ T3724] usb 1-1: SerialNumber: syz [ 100.299374][ T3724] usb 1-1: config 0 descriptor?? [ 100.596324][ T28] audit: type=1400 audit(100.500:164): avc: denied { create } for pid=3879 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.771990][ T3724] usb 1-1: USB disconnect, device number 2 [ 102.110287][ T28] audit: type=1400 audit(102.010:165): avc: denied { allowed } for pid=3900 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.733172][ T28] audit: type=1400 audit(102.640:166): avc: denied { create } for pid=3910 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.761132][ T28] audit: type=1400 audit(102.670:167): avc: denied { setopt } for pid=3910 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.864518][ T3915] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 103.320293][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.480458][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 103.484211][ T11] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 103.493334][ T11] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 103.494452][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 103.497441][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 103.500709][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 103.503679][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 103.520642][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.521744][ T11] usb 1-1: Product: syz [ 103.525072][ T11] usb 1-1: Manufacturer: syz [ 103.527743][ T11] usb 1-1: SerialNumber: syz [ 103.534600][ T11] usb 1-1: config 0 descriptor?? [ 103.962333][ T11] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 103.963615][ T11] input input4: Device does not respond to id packet M [ 103.979191][ T11] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 103.981862][ T11] input input4: Device does not respond to id packet P [ 103.994740][ T11] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 103.995887][ T11] input input4: Device does not respond to id packet B [ 104.006976][ T11] input input4: Device does not respond to id packet N [ 104.083893][ T3915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3915 comm=syz.1.52 [ 104.106201][ T28] audit: type=1400 audit(104.010:168): avc: denied { write } for pid=3914 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.238416][ T3923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.253766][ T3923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.265088][ T11] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 104.266783][ T11] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 104.272196][ T11] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 104.280314][ T11] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 104.283135][ T11] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 104.307487][ T11] usb 1-1: USB disconnect, device number 3 [ 104.503290][ T28] audit: type=1400 audit(104.410:169): avc: denied { map } for pid=3949 comm="syz.1.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.505877][ T28] audit: type=1400 audit(104.410:170): avc: denied { read write } for pid=3949 comm="syz.1.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.564332][ T28] audit: type=1400 audit(104.470:171): avc: denied { map } for pid=3949 comm="syz.1.55" path="socket:[2667]" dev="sockfs" ino=2667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 104.810422][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.985902][ T11] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 105.031955][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 105.032468][ T11] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 105.032812][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.053239][ T11] usb 1-1: probing VID:PID(0424:012C) [ 105.060379][ T11] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 105.061655][ T11] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 105.062557][ T11] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 105.063350][ T11] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 105.064913][ T11] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 105.466238][ T11] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 105.558193][ T28] audit: type=1326 audit(105.450:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 105.563923][ T28] audit: type=1326 audit(105.470:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 105.570173][ T28] audit: type=1326 audit(105.470:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 105.700858][ T11] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 106.400870][ T3724] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 106.552738][ T3724] usb 2-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 106.558246][ T3724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.561058][ T3724] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.572403][ T3724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.572700][ T3724] usb 2-1: SerialNumber: syz [ 106.829421][ T3724] usb 2-1: 0:2 : does not exist [ 106.855898][ T1810] usb 1-1: USB disconnect, device number 4 [ 106.856142][ T11] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 106.861015][ T11] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 106.921599][ T3724] usb 2-1: USB disconnect, device number 5 [ 106.981955][ T1810] USB vub300 remote SDIO host controller[0] now disconnected [ 107.269263][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 107.273013][ T28] audit: type=1400 audit(107.170:185): avc: denied { read } for pid=4001 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.600336][ C0] ODEBUG: object df801d04 is NOT on stack eacbc000, but annotated. [ 107.600615][ C0] ------------[ cut here ]------------ [ 107.601188][ C0] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0+0x180/0x1ec, CPU#0: kworker/u8:9/2166 [ 107.618063][ C0] Modules linked in: [ 107.621165][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.629919][ C0] CPU: 0 UID: 0 PID: 2166 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT [ 107.638641][ C0] Tainted: [L]=SOFTLOCKUP [ 107.639930][ C0] Hardware name: ARM-Versatile Express [ 107.643888][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 107.650522][ C0] Call trace: frame pointer underflow [ 107.660090][ C0] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 107.660834][ C0] r7:82a20f78 r6:00000000 r5:82336570 r4:00000001 [ 107.661198][ C0] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 107.661534][ C0] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 107.661941][ C0] r7:82a20f78 r6:00000000 r5:84043100 r4:82c85d40 [ 107.662229][ C0] [<8021ec7c>] (dump_stack) from [<80202590>] (vpanic+0x114/0x320) [ 107.662579][ C0] [<8020247c>] (vpanic) from [<802027d0>] (trace_suspend_resume+0x0/0x100) [ 107.663012][ C0] r7:80967ec8 [ 107.663222][ C0] [<8020279c>] (panic) from [<80251b50>] (get_taint+0x0/0x1c) [ 107.663593][ C0] r3:82a0b144 r2:00000001 r1:8231c298 r0:82323c10 [ 107.663928][ C0] [<80251ad8>] (check_panic_on_warn) from [<80251ccc>] (__warn+0x98/0x1a4) [ 107.664312][ C0] [<80251c34>] (__warn) from [<80251f50>] (warn_slowpath_fmt+0x178/0x1f4) [ 107.664680][ C0] r8:00000009 r7:82391274 r6:df801c1c r5:84043100 r4:00000000 [ 107.664979][ C0] [<80251ddc>] (warn_slowpath_fmt) from [<80967ec8>] (lookup_object_or_alloc.part.0+0x180/0x1ec) [ 107.665539][ C0] r10:00000001 r9:81c04380 r8:df801d04 r7:00000000 r6:82d0ce9c r5:82cfe370 [ 107.665967][ C0] r4:8604c9c0 [ 107.666165][ C0] [<80967d48>] (lookup_object_or_alloc.part.0) from [<809684d8>] (__debug_object_init+0x140/0x1d8) [ 107.666711][ C0] r10:0000eaf0 r9:82cfe3ac r8:00000001 r7:81c04380 r6:20000113 r5:82d0cea0 [ 107.667053][ C0] r4:df801d04 r3:00000001 [ 107.667287][ C0] [<80968398>] (__debug_object_init) from [<809685c4>] (debug_object_init_on_stack+0x28/0x2c) [ 107.667763][ C0] r10:df801eac r9:ffffb4d0 r8:00000101 r7:00000000 r6:dddcff00 r5:82b63908 [ 107.668096][ C0] r4:00000000 [ 107.668265][ C0] [<8096859c>] (debug_object_init_on_stack) from [<80300b3c>] (init_rcu_head_on_stack+0x18/0x1c) [ 107.668660][ C0] [<80300b24>] (init_rcu_head_on_stack) from [<80304f04>] (__synchronize_srcu+0x7c/0xcc) [ 107.669051][ C0] [<80304e88>] (__synchronize_srcu) from [<80304ff0>] (synchronize_srcu+0x78/0x14c) [ 107.669461][ C0] r5:60000113 r4:82b63908 [ 107.669828][ C0] [<80304f78>] (synchronize_srcu) from [<80bfa5a0>] (wakeup_source_unregister.part.0+0x64/0x1b4) [ 107.671306][ C0] r7:00000000 r6:860119c0 r5:00000113 r4:8603d300 [ 107.676490][ C0] [<80bfa53c>] (wakeup_source_unregister.part.0) from [<80bfa708>] (wakeup_source_unregister+0x18/0x1c) [ 107.680258][ C0] r7:00000000 r6:860119c0 r5:85dc8000 r4:85dc8008 [ 107.680684][ C0] [<80bfa6f0>] (wakeup_source_unregister) from [<812fbe28>] (mmc_host_classdev_release+0x1c/0x58) [ 107.681168][ C0] [<812fbe0c>] (mmc_host_classdev_release) from [<80bd729c>] (device_release+0x40/0xb0) [ 107.681558][ C0] r5:860a3600 r4:85dc8008 [ 107.681745][ C0] [<80bd725c>] (device_release) from [<81b458b0>] (kobject_put+0xa0/0x258) [ 107.682126][ C0] r5:81d5b39c r4:85dc8008 [ 107.682316][ C0] [<81b45810>] (kobject_put) from [<80bd7410>] (put_device+0x18/0x1c) [ 107.682682][ C0] r8:00000101 r7:8131a5fc r6:85dc8000 r5:00000000 r4:85dc8000 [ 107.682936][ C0] [<80bd73f8>] (put_device) from [<812fc584>] (mmc_free_host+0x28/0x2c) [ 107.683354][ C0] [<812fc55c>] (mmc_free_host) from [<8131a75c>] (vub300_inactivity_timer_expired+0x160/0x1b8) [ 107.683722][ C0] r5:00000000 r4:85dc8aec [ 107.683920][ C0] [<8131a5fc>] (vub300_inactivity_timer_expired) from [<8032f000>] (call_timer_fn+0x30/0x268) [ 107.684342][ C0] r7:8131a5fc r6:84043100 r5:85dc8aec r4:85dc8aec [ 107.684573][ C0] [<8032efd0>] (call_timer_fn) from [<8032f4d4>] (__run_timers+0x29c/0x420) [ 107.684927][ C0] r10:df801eac r9:ffffb4d0 r8:00000000 r7:8131a5fc r6:82a0b150 r5:85dc8aec [ 107.685290][ C0] r4:dddc6fc0 [ 107.685449][ C0] [<8032f238>] (__run_timers) from [<8032f6c0>] (run_timer_base+0x68/0x78) [ 107.685791][ C0] r10:84043100 r9:00000002 r8:00000101 r7:00000004 r6:00000002 r5:00000001 [ 107.686153][ C0] r4:dddc6fc0 [ 107.686303][ C0] [<8032f658>] (run_timer_base) from [<8032f6ec>] (run_timer_softirq+0x1c/0x34) [ 107.686629][ C0] r4:82a03084 [ 107.686776][ C0] [<8032f6d0>] (run_timer_softirq) from [<8025b1ac>] (handle_softirqs+0x160/0x4e4) [ 107.687122][ C0] [<8025b04c>] (handle_softirqs) from [<8025b6cc>] (__irq_exit_rcu+0x150/0x1d0) [ 107.687548][ C0] r10:00000000 r9:84043100 r8:00000000 r7:eacbdcf0 r6:824ea5cc r5:82525dfc [ 107.687859][ C0] r4:84043100 [ 107.688006][ C0] [<8025b57c>] (__irq_exit_rcu) from [<8025ba04>] (irq_exit+0x10/0x18) [ 107.688336][ C0] r5:82525dfc r4:828d3f6c [ 107.688507][ C0] [<8025b9f4>] (irq_exit) from [<81b6df3c>] (generic_handle_arch_irq+0x7c/0x80) [ 107.688889][ C0] [<81b6dec0>] (generic_handle_arch_irq) from [<81b3abc8>] (call_with_stack+0x1c/0x20) [ 107.689292][ C0] r9:84043100 r8:00000000 r7:eacbdd24 r6:ffffffff r5:20000113 r4:80291268 [ 107.689723][ C0] [<81b3abac>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc) [ 107.690243][ C0] Exception stack(0xeacbdcf0 to 0xeacbdd38) [ 107.690614][ C0] dce0: 00000001 82336570 00000001 84043100 [ 107.690969][ C0] dd00: dddd1680 82a0b444 828d4680 8477b400 00000000 84043100 00000000 eacbdd94 [ 107.694589][ C0] dd20: eacbdd30 eacbdd40 81b7c108 80291268 20000113 ffffffff [ 107.699831][ C0] [<802911a8>] (finish_task_switch) from [<81b71dd4>] (__schedule+0x540/0x146c) [ 107.700358][ C0] r10:00000001 r9:00000000 r8:00000000 r7:8477b400 r6:84043100 r5:803b665c [ 107.700655][ C0] r4:84063d40 [ 107.700805][ C0] [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8) [ 107.701156][ C0] r10:81da5428 r9:84043100 r8:80200c04 r7:eacbde74 r6:ffffffff r5:84043100 [ 107.701433][ C0] r4:00000000 [ 107.701630][ C0] [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) [ 107.701997][ C0] Exception stack(0xeacbde40 to 0xeacbde88) [ 107.702267][ C0] de40: 00000008 83012800 84fe6200 0000000a 8547f198 84fe61e8 8547f120 84fe6244 [ 107.702633][ C0] de60: 00000000 84fe6200 81da5428 eacbdef4 00000000 eacbde90 80f041a4 8027a1bc [ 107.702941][ C0] de80: 60000113 ffffffff [ 107.703130][ C0] r5:60000113 r4:8027a1bc [ 107.703304][ C0] [<80f03e3c>] (nsim_dev_trap_report_work) from [<802772b8>] (process_one_work+0x1c8/0x580) [ 107.703790][ C0] r10:83029a05 r9:84043100 r8:02000000 r7:83012a00 r6:83029a00 r5:84fe6200 [ 107.704086][ C0] r4:84cfa700 [ 107.704251][ C0] [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318) [ 107.704646][ C0] r10:83012a00 r9:84cfa730 r8:84043100 r7:82a03d80 r6:83012a20 r5:83012a00 [ 107.704940][ C0] r4:84cfa700 [ 107.705090][ C0] [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154) [ 107.705468][ C0] r10:00000000 r9:ead61e88 r8:84cfa680 r7:84cfa700 r6:80277df8 r5:84043100 [ 107.705860][ C0] r4:84d07dc0 [ 107.706017][ C0] [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 107.706330][ C0] Exception stack(0xeacbdfb0 to 0xeacbdff8) [ 107.706605][ C0] dfa0: 00000000 00000000 00000000 00000000 [ 107.706907][ C0] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 107.707221][ C0] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 107.707500][ C0] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:84d07dc0 [ 107.710306][ C0] Rebooting in 86400 seconds..