last executing test programs: 3m49.481210705s ago: executing program 1 (id=792): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x74, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfe, {0xa, 0x8, 0x0, 0xff, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1000}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0xb, 0x800, 0x7, 0xfffff55d}}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x8, 0x7, 0xfff}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004c040}, 0x40000) 3m48.161532319s ago: executing program 1 (id=794): ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x0, 0x2, 0x0, {0x1, 0x8c7, 0x1}}], 0x800000000000166, 0x20, 0xd, 0x15d2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) 3m47.200714444s ago: executing program 1 (id=797): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(0xffffffffffffffff, 0x10, 0x20c01, 0x8000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x2226, &(0x7f00000056c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd600000a021f03afffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) 3m46.438753518s ago: executing program 1 (id=798): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009003940422c021664da0102030109021200018c296fb80904852a"], 0x0) close(0x3) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x34, 0x40, 0x62, {0x8, 0xb, 0x0, 0x0, 0x1, 0x6c, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0xb02}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe, 0xc, 0x4, {0xa, 0x25, 0x25, 0x80000000, 0xde, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x5, 0x49, {0xa, 0x25, 0x25, 0x7, 0xf9, 0x5}}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m45.920886634s ago: executing program 1 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93, 0x8000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3m44.531011777s ago: executing program 1 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4) io_uring_setup(0x46eb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x808080, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000001c0)) 2m59.113251641s ago: executing program 32 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4) io_uring_setup(0x46eb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x808080, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000001c0)) 2m2.940582324s ago: executing program 2 (id=934): sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=')\x00'], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2m2.707988289s ago: executing program 2 (id=935): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(0xffffffffffffffff, 0x0, 0x44004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100ff0004000000560ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001b331280b0afa"], 0xffe) 2m2.450824717s ago: executing program 2 (id=936): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000001080)='./file0\x00', 0x100) umount2(&(0x7f0000000140)='./file0\x00', 0x1) 2m2.260838258s ago: executing program 2 (id=937): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xfe0f, 0x4) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/23, 0x17}}], 0x400000000000083, 0x40010180, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1m59.661432013s ago: executing program 2 (id=942): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000005240)={0x5, 0x0, [{0xfec00000, 0xfa, &(0x7f0000000cc0)=""/250}, {0x0, 0x73, &(0x7f0000000c40)=""/115}, {0x1f5801000, 0x35, &(0x7f0000000e40)=""/53}, {0x4, 0x1000, &(0x7f0000004140)=""/4096}, {0x1000, 0xd7, &(0x7f0000005140)=""/215}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) 1m59.160180268s ago: executing program 2 (id=943): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc93848f0fd8be283) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=@ipv6_newroute={0x74, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xfe, 0x1}, [@RTA_METRICS={0x55, 0x8, 0x0, 0x1, "ce402f1bdaec2fea6b23f1b92253c6f123e9c22d7f6b3452472d1406ffd1ca8545f4500578ac4b3433ade68687b5a18b2d4d09db47b69b5fe9980ec41acd1f8d2a43ed5fb7643d4381c70c9315cfdd6ac4"}]}, 0x74}, 0x1, 0xc0fe, 0x0, 0x4000080}, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) 1m18.651354865s ago: executing program 0 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x8000) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000002180)) sendmsg$nl_route(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, 0x19013, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 1m18.350523348s ago: executing program 0 (id=970): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000000000005f"], 0x0, 0x35}, 0x28) signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x8]}, 0x8, 0x800) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1m17.920617615s ago: executing program 0 (id=971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m17.210764373s ago: executing program 0 (id=972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x1, 0xfffbff80, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20088804}, 0x4080) 1m17.077073517s ago: executing program 0 (id=973): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xfffffffe, 0xffffffff, 0x40008, 0x100, 0x7, 0x406, 0x2000008, 0xd, 0x0, 0x7, 0x1, 0x5, 0x10005, 0x1, 0x0, 0x5, 0xfe9, 0xf, 0xa, 0x9, 0xc000007, 0x25, 0x48, 0x10005, 0x3, 0x3, 0x6, 0x7, 0x7fffffff]}) chdir(&(0x7f0000000540)='./cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1m16.861492291s ago: executing program 0 (id=974): socket$inet6_tcp(0xa, 0x1, 0x0) sched_rr_get_interval(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@polexpire={0xcc, 0x1b, 0x321, 0x70bd29, 0x25dfdbff, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x8, 0x4e22, 0xfff7, 0x2, 0xa0, 0xa0, 0x89}, {0x0, 0x7fffffffffffffff, 0xa07d, 0xffffffff, 0x6, 0x3, 0x0, 0x9}, {0x4, 0xf8177b30, 0x9, 0x6c62}, 0x3, 0x6e6bb8, 0x2, 0x0, 0x3, 0x3}, 0x5d}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x350759, 0x1}}]}, 0xcc}}, 0x0) r4 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 1m13.608854197s ago: executing program 33 (id=943): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc93848f0fd8be283) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=@ipv6_newroute={0x74, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xfe, 0x1}, [@RTA_METRICS={0x55, 0x8, 0x0, 0x1, "ce402f1bdaec2fea6b23f1b92253c6f123e9c22d7f6b3452472d1406ffd1ca8545f4500578ac4b3433ade68687b5a18b2d4d09db47b69b5fe9980ec41acd1f8d2a43ed5fb7643d4381c70c9315cfdd6ac4"}]}, 0x74}, 0x1, 0xc0fe, 0x0, 0x4000080}, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) 30.900794025s ago: executing program 34 (id=974): socket$inet6_tcp(0xa, 0x1, 0x0) sched_rr_get_interval(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@polexpire={0xcc, 0x1b, 0x321, 0x70bd29, 0x25dfdbff, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x8, 0x4e22, 0xfff7, 0x2, 0xa0, 0xa0, 0x89}, {0x0, 0x7fffffffffffffff, 0xa07d, 0xffffffff, 0x6, 0x3, 0x0, 0x9}, {0x4, 0xf8177b30, 0x9, 0x6c62}, 0x3, 0x6e6bb8, 0x2, 0x0, 0x3, 0x3}, 0x5d}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x350759, 0x1}}]}, 0xcc}}, 0x0) r4 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 24.328840135s ago: executing program 3 (id=994): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) r3 = dup(r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 23.340622123s ago: executing program 3 (id=995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) 22.970573573s ago: executing program 3 (id=996): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_clone(0x80100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) read$FUSE(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 22.692817994s ago: executing program 3 (id=997): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 13.957165801s ago: executing program 3 (id=1001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "0895cd22bb9e149b"}, 0x28) 3.161351684s ago: executing program 3 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000001c0)={0x1}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf583ed4abba62108}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000b191b923c870b44fc4033423bebfcfb35fe430af930c6af93acee6a3f7dec01ad65d25ba726169416cb9", @ANYBLOB="000125bd7000fbdbdf25090000000800090005ac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4040004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.632897461s ago: executing program 4 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2c, 0x25dfd9fb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 2.10081303s ago: executing program 4 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="410400001d34e30a180012800e0001007769726567756172640000001408028008000a00", @ANYRES32], 0x40}}, 0x40000) 1.45955466s ago: executing program 4 (id=1003): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000000000001c000000000000002f7379732f6b65"], 0x45) 1.330886574s ago: executing program 4 (id=1004): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newqdisc={0x30, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 672.870876ms ago: executing program 4 (id=1005): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) r3 = dup(r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 0s ago: executing program 4 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): r5:00000000 r4:00000000 [ 216.042336][ T4631] [<815eedc4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 216.042378][ T4631] Exception stack(0xeaeadfa8 to 0xeaeadff0) [ 216.042416][ T4631] dfa0: 00000000 00000000 00000003 200004c0 04000800 00000000 [ 216.042449][ T4631] dfc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f370dc [ 216.042475][ T4631] dfe0: 76f36e88 76f36e78 00018ebc 00130810 [ 216.989940][ T4642] capability: warning: `syz.1.312' uses 32-bit capabilities (legacy support in use) [ 217.010990][ T28] audit: type=1400 audit(216.930:223): avc: denied { write } for pid=4641 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.709534][ T28] audit: type=1400 audit(218.620:224): avc: denied { create } for pid=4650 comm="syz.1.315" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.719955][ T28] audit: type=1400 audit(218.630:225): avc: denied { setattr } for pid=4650 comm="syz.1.315" name="file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.746874][ T28] audit: type=1400 audit(218.660:226): avc: denied { unlink } for pid=3099 comm="syz-executor" name="file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.048165][ T4657] fuse: Bad value for 'fd' [ 220.384695][ T28] audit: type=1400 audit(220.300:227): avc: denied { accept } for pid=4660 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.562184][ T28] audit: type=1400 audit(220.480:228): avc: denied { write } for pid=4664 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.066701][ T4700] FAULT_INJECTION: forcing a failure. [ 223.066701][ T4700] name failslab, interval 1, probability 0, space 0, times 0 [ 223.068659][ T4700] CPU: 0 UID: 0 PID: 4700 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT [ 223.068770][ T4700] Hardware name: ARM-Versatile Express [ 223.068809][ T4700] Call trace: [ 223.068860][ T4700] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 223.069011][ T4700] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 223.069038][ T4700] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 223.069099][ T4700] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 223.069177][ T4700] r7:830c0c00 r6:00000000 r5:8401b200 r4:82b18108 [ 223.069194][ T4700] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 223.069302][ T4700] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 223.069369][ T4700] r8:8401b200 r7:830c0c00 r6:00000cc0 r5:00000000 r4:830c4b40 [ 223.069408][ T4700] [<80554618>] (should_failslab) from [<80531d18>] (kmem_cache_alloc_lru_noprof+0x58/0x3c4) [ 223.069471][ T4700] [<80531cc0>] (kmem_cache_alloc_lru_noprof) from [<805a660c>] (__d_alloc+0x30/0x218) [ 223.069547][ T4700] r10:830c0c00 r9:825268c0 r8:836edb00 r7:830c0c00 r6:830ed9d0 r5:00000000 [ 223.069572][ T4700] r4:ebbf9e84 [ 223.069589][ T4700] [<805a65dc>] (__d_alloc) from [<805a6870>] (d_alloc_anon+0x14/0x18) [ 223.069677][ T4700] r9:81c23d40 r8:836edb00 r7:8572a080 r6:830ed9d0 r5:8572a0c4 r4:ebbf9e84 [ 223.069709][ T4700] [<805a685c>] (d_alloc_anon) from [<805c7f90>] (path_from_stashed+0x13c/0x29c) [ 223.069771][ T4700] [<805c7e54>] (path_from_stashed) from [<805dc9a8>] (open_namespace+0x48/0xd4) [ 223.069852][ T4700] r10:8401b200 r9:00000003 r8:85716d00 r7:8572a000 r6:8401b200 r5:00000000 [ 223.069904][ T4700] r4:0000894c [ 223.069929][ T4700] [<805dc960>] (open_namespace) from [<805dca50>] (open_related_ns+0x1c/0x20) [ 223.070000][ T4700] r6:00000000 r5:837e56c0 r4:0000894c [ 223.070020][ T4700] [<805dca34>] (open_related_ns) from [<815ed58c>] (sock_ioctl+0x350/0x4c0) [ 223.070124][ T4700] [<815ed23c>] (sock_ioctl) from [<805a1e5c>] (sys_ioctl+0x244/0xb5c) [ 223.070266][ T4700] r9:00000003 r8:85716d00 r7:00000000 r6:0000894c r5:85716d01 r4:00000000 [ 223.070295][ T4700] [<805a1c18>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 223.070356][ T4700] Exception stack(0xebbf9fa8 to 0xebbf9ff0) [ 223.070401][ T4700] 9fa0: 00000000 00000000 00000003 0000894c 00000000 00000000 [ 223.070444][ T4700] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f7f0dc [ 223.070512][ T4700] 9fe0: 76f7ee88 76f7ee78 00018ebc 00130810 [ 223.070554][ T4700] r10:00000036 r9:8401b200 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 223.070574][ T4700] r4:00000000 [ 223.275354][ T4702] FAULT_INJECTION: forcing a failure. [ 223.275354][ T4702] name failslab, interval 1, probability 0, space 0, times 0 [ 223.275880][ T4702] CPU: 1 UID: 0 PID: 4702 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT [ 223.275981][ T4702] Hardware name: ARM-Versatile Express [ 223.276011][ T4702] Call trace: [ 223.276060][ T4702] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 223.276295][ T4702] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 223.276322][ T4702] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 223.276423][ T4702] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 223.276617][ T4702] r7:00000000 r6:00000000 r5:8401b200 r4:82b18108 [ 223.276731][ T4702] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 223.276802][ T4702] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 223.276888][ T4702] r8:00000000 r7:00000000 r6:83001240 r5:00000d40 r4:00000020 [ 223.276909][ T4702] [<80554618>] (should_failslab) from [<805328ac>] (__kmalloc_noprof+0xa4/0x39c) [ 223.276965][ T4702] [<80532808>] (__kmalloc_noprof) from [<80816190>] (tomoyo_encode2+0x64/0xec) [ 223.277030][ T4702] r10:00000fff r9:830c0000 r8:00000000 r7:8340e000 r6:857144a8 r5:85dcbffc [ 223.277084][ T4702] r4:85dcbfe7 [ 223.277130][ T4702] [<8081612c>] (tomoyo_encode2) from [<8081623c>] (tomoyo_encode+0x24/0x30) [ 223.277211][ T4702] r9:830c0000 r8:00000000 r7:8340e000 r6:857144a8 r5:00001000 r4:85dcbfe8 [ 223.277256][ T4702] [<80816218>] (tomoyo_encode) from [<808162c8>] (tomoyo_realpath_from_path+0x80/0x16c) [ 223.277314][ T4702] r5:00001000 r4:85dcb000 [ 223.277331][ T4702] [<80816248>] (tomoyo_realpath_from_path) from [<8081234c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 223.277434][ T4702] r10:00000000 r9:00000003 r8:85714480 r7:8008330e r6:81cda164 r5:00000004 [ 223.277487][ T4702] r4:857144a8 r3:828d1400 [ 223.277525][ T4702] [<80812280>] (tomoyo_path_number_perm) from [<80816ca0>] (tomoyo_file_ioctl+0x1c/0x20) [ 223.277623][ T4702] r10:8401b200 r9:00000003 r8:85714480 r7:00000000 r6:00000000 r5:8008330e [ 223.277649][ T4702] r4:85714480 [ 223.277716][ T4702] [<80816c84>] (tomoyo_file_ioctl) from [<807c2598>] (security_file_ioctl+0x80/0x1d4) [ 223.277816][ T4702] [<807c2518>] (security_file_ioctl) from [<805a1c64>] (sys_ioctl+0x4c/0xb5c) [ 223.277944][ T4702] r7:00000000 r6:8008330e r5:85714481 r4:00000000 [ 223.278010][ T4702] [<805a1c18>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 223.278069][ T4702] Exception stack(0xebe79fa8 to 0xebe79ff0) [ 223.278165][ T4702] 9fa0: 00000000 00000000 00000003 8008330e 00000000 00000000 [ 223.278247][ T4702] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f7f0dc [ 223.278323][ T4702] 9fe0: 76f7ee88 76f7ee78 00018ebc 00130810 [ 223.278402][ T4702] r10:00000036 r9:8401b200 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 223.278770][ T4702] r4:00000000 [ 223.287578][ T4702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.589887][ T4705] FAULT_INJECTION: forcing a failure. [ 223.589887][ T4705] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 223.592754][ T4705] CPU: 0 UID: 0 PID: 4705 Comm: syz.0.334 Not tainted syzkaller #0 PREEMPT [ 223.592831][ T4705] Hardware name: ARM-Versatile Express [ 223.592847][ T4705] Call trace: [ 223.592871][ T4705] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 223.592936][ T4705] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 223.592958][ T4705] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 223.593012][ T4705] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 223.593046][ T4705] r7:00000001 r6:00000000 r5:8401b200 r4:82b1815c [ 223.593056][ T4705] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 223.593087][ T4705] [<809d878c>] (should_fail_ex) from [<80554714>] (should_fail_alloc_page+0x68/0x74) [ 223.593121][ T4705] r8:ec105dbc r7:00000001 r6:00000000 r5:00000cc0 r4:ec105dc8 [ 223.593131][ T4705] [<805546ac>] (should_fail_alloc_page) from [<8051a2b8>] (prepare_alloc_pages+0xf8/0x1b4) [ 223.593184][ T4705] [<8051a1c0>] (prepare_alloc_pages) from [<805233d0>] (__alloc_frozen_pages_noprof+0xb0/0x1620) [ 223.593248][ T4705] r10:00000000 r9:8401b200 r8:80ac5434 r7:ec105f68 r6:00000cc0 r5:00000000 [ 223.593260][ T4705] r4:00000000 [ 223.593274][ T4705] [<80523320>] (__alloc_frozen_pages_noprof) from [<80524a28>] (get_free_pages_noprof+0x1c/0x74) [ 223.593373][ T4705] r10:81d2a324 r9:8401b200 r8:80ac5434 r7:ec105f68 r6:ec105f68 r5:831234a0 [ 223.593407][ T4705] r4:00000000 [ 223.593419][ T4705] [<80524a0c>] (get_free_pages_noprof) from [<80ac5488>] (vcs_write+0x54/0x82c) [ 223.593453][ T4705] [<80ac5434>] (vcs_write) from [<805869fc>] (vfs_write+0xd4/0x450) [ 223.593492][ T4705] r10:81d2a324 r9:8401b200 r8:80ac5434 r7:ec105f68 r6:00000000 r5:8389d280 [ 223.593503][ T4705] r4:00000000 [ 223.593511][ T4705] [<80586928>] (vfs_write) from [<80586eec>] (ksys_write+0x74/0xec) [ 223.593545][ T4705] r10:00000004 r9:8401b200 r8:8020029c r7:00000000 r6:00000000 r5:8389d280 [ 223.593556][ T4705] r4:8389d281 [ 223.593566][ T4705] [<80586e78>] (ksys_write) from [<80586f74>] (sys_write+0x10/0x14) [ 223.593668][ T4705] r7:00000004 r6:0012f214 r5:00000000 r4:00000000 [ 223.593680][ T4705] [<80586f64>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 223.593725][ T4705] Exception stack(0xec105fa8 to 0xec105ff0) [ 223.593776][ T4705] 5fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 223.593811][ T4705] 5fc0: 00000000 00000000 0012f214 00000004 003462d8 00000000 00000001 76f7f0dc [ 223.593834][ T4705] 5fe0: 76f7ee88 76f7ee78 00018ebc 00130810 [ 224.552959][ T4717] FAULT_INJECTION: forcing a failure. [ 224.552959][ T4717] name failslab, interval 1, probability 0, space 0, times 0 [ 224.553531][ T4717] CPU: 1 UID: 0 PID: 4717 Comm: syz.0.339 Not tainted syzkaller #0 PREEMPT [ 224.553648][ T4717] Hardware name: ARM-Versatile Express [ 224.553682][ T4717] Call trace: [ 224.553751][ T4717] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 224.553872][ T4717] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 224.553894][ T4717] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 224.553951][ T4717] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 224.554022][ T4717] r7:00000000 r6:00000000 r5:8400d780 r4:82b18108 [ 224.554040][ T4717] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 224.554100][ T4717] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 224.554206][ T4717] r8:00400cc0 r7:00000000 r6:00400cc0 r5:00000000 r4:830e4c00 [ 224.554237][ T4717] [<80554618>] (should_failslab) from [<805320dc>] (kmem_cache_alloc_node_noprof+0x58/0x3c8) [ 224.554300][ T4717] [<80532084>] (kmem_cache_alloc_node_noprof) from [<815fd588>] (__alloc_skb+0x74/0x2c0) [ 224.554378][ T4717] r10:802c3afc r9:815fd738 r8:00400cc0 r7:00000000 r6:830e4c00 r5:ffffffff [ 224.554400][ T4717] r4:ddde4708 [ 224.554420][ T4717] [<815fd514>] (__alloc_skb) from [<816025cc>] (alloc_skb_with_frags+0x44/0x1f0) [ 224.554483][ T4717] r9:ebce9d24 r8:7fffffff r7:85f80a98 r6:00000000 r5:8400d780 r4:00000003 [ 224.554524][ T4717] [<81602588>] (alloc_skb_with_frags) from [<815f1b44>] (sock_alloc_send_pskb+0x1f4/0x228) [ 224.554605][ T4717] r10:802c3afc r9:ebce9d24 r8:7fffffff r7:85f80a98 r6:ebce9ccc r5:8400d780 [ 224.554628][ T4717] r4:85f809c0 [ 224.554644][ T4717] [<815f1950>] (sock_alloc_send_pskb) from [<818df948>] (unix_dgram_sendmsg+0x128/0x734) [ 224.554717][ T4717] r10:00000000 r9:00000000 r8:8400d780 r7:85f809c0 r6:00000000 r5:00000000 [ 224.554754][ T4717] r4:ebce9f20 [ 224.554775][ T4717] [<818df820>] (unix_dgram_sendmsg) from [<818dff90>] (unix_seqpacket_sendmsg+0x3c/0x7c) [ 224.554859][ T4717] r10:00040000 r9:00000000 r8:ebce9dcc r7:00000000 r6:858c3bc0 r5:ebce9f20 [ 224.554882][ T4717] r4:00000000 [ 224.554898][ T4717] [<818dff54>] (unix_seqpacket_sendmsg) from [<815eb7f0>] (__sock_sendmsg+0x44/0x78) [ 224.554964][ T4717] r5:ebce9f20 r4:00000000 [ 224.554983][ T4717] [<815eb7ac>] (__sock_sendmsg) from [<815ec820>] (____sys_sendmsg+0x238/0x2c4) [ 224.555063][ T4717] r7:00000000 r6:00000000 r5:858c3bc0 r4:ebce9f20 [ 224.555088][ T4717] [<815ec5e8>] (____sys_sendmsg) from [<815ecc20>] (___sys_sendmsg+0x9c/0xd0) [ 224.555153][ T4717] r10:00000128 r9:20000180 r8:00040000 r7:00000000 r6:858c3bc0 r5:ebce9f20 [ 224.555172][ T4717] r4:00000000 [ 224.555191][ T4717] [<815ecb84>] (___sys_sendmsg) from [<815eed70>] (__sys_sendmsg+0x8c/0xe0) [ 224.555259][ T4717] r9:8400d780 r8:85716e00 r7:00040000 r6:20000180 r5:85716e01 r4:00000003 [ 224.555283][ T4717] [<815eece4>] (__sys_sendmsg) from [<815eedd8>] (sys_sendmsg+0x14/0x18) [ 224.555349][ T4717] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 224.555369][ T4717] [<815eedc4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 224.555420][ T4717] Exception stack(0xebce9fa8 to 0xebce9ff0) [ 224.555460][ T4717] 9fa0: 00000000 00000000 00000003 20000180 00040000 00000000 [ 224.555520][ T4717] 9fc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f7f0dc [ 224.555569][ T4717] 9fe0: 76f7ee88 76f7ee78 00018ebc 00130810 [ 225.986855][ T4733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=271 sclass=netlink_route_socket pid=4733 comm=syz.0.346 [ 226.526091][ T4733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4733 comm=syz.0.346 [ 227.301822][ T4737] fuse: Bad value for 'fd' [ 227.384835][ T4735] FAULT_INJECTION: forcing a failure. [ 227.384835][ T4735] name failslab, interval 1, probability 0, space 0, times 0 [ 227.390899][ T4735] CPU: 0 UID: 0 PID: 4735 Comm: syz.1.347 Not tainted syzkaller #0 PREEMPT [ 227.391028][ T4735] Hardware name: ARM-Versatile Express [ 227.391058][ T4735] Call trace: [ 227.391100][ T4735] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 227.391226][ T4735] r7:60000113 r6:60000113 r5:8231eb0c r4:00000000 [ 227.391252][ T4735] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 227.391354][ T4735] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 227.391431][ T4735] r7:00000000 r6:00000000 r5:8500cb00 r4:82b18108 [ 227.391452][ T4735] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 227.391517][ T4735] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 227.391585][ T4735] r8:00000000 r7:00000000 r6:83001240 r5:00000d40 r4:0000001c [ 227.391603][ T4735] [<80554618>] (should_failslab) from [<805328ac>] (__kmalloc_noprof+0xa4/0x39c) [ 227.391696][ T4735] [<80532808>] (__kmalloc_noprof) from [<80816190>] (tomoyo_encode2+0x64/0xec) [ 227.391798][ T4735] r10:00000fff r9:830c0000 r8:00000000 r7:8340d5d8 r6:83e69228 r5:85fd4ffc [ 227.391824][ T4735] r4:85fd4feb [ 227.391844][ T4735] [<8081612c>] (tomoyo_encode2) from [<8081623c>] (tomoyo_encode+0x24/0x30) [ 227.391919][ T4735] r9:830c0000 r8:00000000 r7:8340d5d8 r6:83e69228 r5:00001000 r4:85fd4fec [ 227.391941][ T4735] [<80816218>] (tomoyo_encode) from [<808162c8>] (tomoyo_realpath_from_path+0x80/0x16c) [ 227.391999][ T4735] r5:00001000 r4:85fd4000 [ 227.392018][ T4735] [<80816248>] (tomoyo_realpath_from_path) from [<8081234c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 227.392100][ T4735] r10:00000000 r9:00000003 r8:83e69200 r7:00005452 r6:81cda164 r5:00000004 [ 227.392154][ T4735] r4:83e69228 r3:828d1400 [ 227.392175][ T4735] [<80812280>] (tomoyo_path_number_perm) from [<80816ca0>] (tomoyo_file_ioctl+0x1c/0x20) [ 227.392254][ T4735] r10:8500cb00 r9:00000003 r8:83e69200 r7:200027c0 r6:200027c0 r5:00005452 [ 227.392280][ T4735] r4:83e69200 [ 227.392298][ T4735] [<80816c84>] (tomoyo_file_ioctl) from [<807c2598>] (security_file_ioctl+0x80/0x1d4) [ 227.392358][ T4735] [<807c2518>] (security_file_ioctl) from [<805a1c64>] (sys_ioctl+0x4c/0xb5c) [ 227.392461][ T4735] r7:200027c0 r6:00005452 r5:83e69201 r4:00000000 [ 227.392487][ T4735] [<805a1c18>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 227.392549][ T4735] Exception stack(0xecc7dfa8 to 0xecc7dff0) [ 227.392611][ T4735] dfa0: 00000000 00000000 00000003 00005452 200027c0 00000000 [ 227.392652][ T4735] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f370dc [ 227.392698][ T4735] dfe0: 76f36e88 76f36e78 00018ebc 00130810 [ 227.392742][ T4735] r10:00000036 r9:8500cb00 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 227.392764][ T4735] r4:00000000 [ 227.453131][ T4735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.232609][ T4768] fuse: Bad value for 'fd' [ 232.416882][ T4769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=4769 comm=syz.1.356 [ 232.582880][ T4771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4771 comm=syz.1.358 [ 232.597344][ T28] audit: type=1400 audit(232.510:229): avc: denied { write } for pid=4770 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 234.472966][ T4779] FAULT_INJECTION: forcing a failure. [ 234.472966][ T4779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.480952][ T4779] CPU: 0 UID: 0 PID: 4779 Comm: syz.1.360 Tainted: G L syzkaller #0 PREEMPT [ 234.481178][ T4779] Tainted: [L]=SOFTLOCKUP [ 234.481232][ T4779] Hardware name: ARM-Versatile Express [ 234.481279][ T4779] Call trace: [ 234.481355][ T4779] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 234.481464][ T4779] r7:60000113 r6:60000113 r5:8231eb0c r4:00000000 [ 234.481485][ T4779] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 234.481561][ T4779] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 234.481655][ T4779] r7:00000000 r6:00000000 r5:83e13e80 r4:82b4f348 [ 234.481677][ T4779] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 234.481736][ T4779] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 234.481798][ T4779] r8:00000000 r7:00000000 r6:000000b4 r5:200000c0 r4:8333d240 [ 234.481817][ T4779] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 234.481886][ T4779] [<809d89c8>] (should_fail_usercopy) from [<809de968>] (strncpy_from_user+0x20/0x1b0) [ 234.481961][ T4779] [<809de948>] (strncpy_from_user) from [<80595cf8>] (do_getname+0x4c/0x14c) [ 234.482050][ T4779] r10:8333d24c r9:83e13e80 r8:00000000 r7:00000000 r6:200000c0 r5:825268b8 [ 234.482075][ T4779] r4:8333d240 [ 234.482092][ T4779] [<80595cac>] (do_getname) from [<8059b8bc>] (getname_flags+0x14/0x18) [ 234.482197][ T4779] r10:00000005 r9:83e13e80 r8:8020029c r7:200000c0 r6:ffffff9c r5:ece4df50 [ 234.482224][ T4779] r4:00000000 r3:00000000 [ 234.482264][ T4779] [<8059b8a8>] (getname_flags) from [<80583040>] (do_sys_openat2+0x64/0xf0) [ 234.482361][ T4779] [<80582fdc>] (do_sys_openat2) from [<80583374>] (sys_open+0x7c/0xcc) [ 234.482429][ T4779] r7:00000005 r6:00000000 r5:001803c1 r4:200000c0 [ 234.482449][ T4779] [<805832f8>] (sys_open) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 234.482500][ T4779] Exception stack(0xece4dfa8 to 0xece4dff0) [ 234.482543][ T4779] dfa0: 00000000 00000000 200000c0 001803c1 00000000 00000000 [ 234.482585][ T4779] dfc0: 00000000 00000000 0012f214 00000005 00346418 00000000 003d0f00 76ef50dc [ 234.482638][ T4779] dfe0: 76ef4e88 76ef4e78 00018ebc 00130810 [ 234.482670][ T4779] r6:0012f214 r5:00000000 r4:00000000 [ 240.934002][ T4790] FAULT_INJECTION: forcing a failure. [ 240.934002][ T4790] name failslab, interval 1, probability 0, space 0, times 0 [ 240.934579][ T4790] CPU: 1 UID: 0 PID: 4790 Comm: syz.0.364 Tainted: G L syzkaller #0 PREEMPT [ 240.934678][ T4790] Tainted: [L]=SOFTLOCKUP [ 240.934696][ T4790] Hardware name: ARM-Versatile Express [ 240.934711][ T4790] Call trace: [ 240.934793][ T4790] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 240.934858][ T4790] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 240.934868][ T4790] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 240.934895][ T4790] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 240.934924][ T4790] r7:00000000 r6:00000000 r5:85036400 r4:82b18108 [ 240.934948][ T4790] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 240.934977][ T4790] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 240.935009][ T4790] r8:00000000 r7:00000000 r6:83001240 r5:00000d40 r4:0000001f [ 240.935017][ T4790] [<80554618>] (should_failslab) from [<805328ac>] (__kmalloc_noprof+0xa4/0x39c) [ 240.935057][ T4790] [<80532808>] (__kmalloc_noprof) from [<80816190>] (tomoyo_encode2+0x64/0xec) [ 240.935095][ T4790] r10:00000fff r9:830c0000 r8:00000000 r7:8342ca18 r6:83e690a8 r5:85fdaffc [ 240.935127][ T4790] r4:85fdafe8 [ 240.935136][ T4790] [<8081612c>] (tomoyo_encode2) from [<8081623c>] (tomoyo_encode+0x24/0x30) [ 240.935170][ T4790] r9:830c0000 r8:00000000 r7:8342ca18 r6:83e690a8 r5:00001000 r4:85fdafe9 [ 240.935179][ T4790] [<80816218>] (tomoyo_encode) from [<808162c8>] (tomoyo_realpath_from_path+0x80/0x16c) [ 240.935213][ T4790] r5:00001000 r4:85fda000 [ 240.935220][ T4790] [<80816248>] (tomoyo_realpath_from_path) from [<8081234c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 240.935255][ T4790] r10:00000000 r9:00000003 r8:83e69080 r7:80585882 r6:81cda164 r5:00000004 [ 240.935265][ T4790] r4:83e690a8 r3:828d1400 [ 240.935272][ T4790] [<80812280>] (tomoyo_path_number_perm) from [<80816ca0>] (tomoyo_file_ioctl+0x1c/0x20) [ 240.935321][ T4790] r10:85036400 r9:00000003 r8:83e69080 r7:00000000 r6:00000000 r5:80585882 [ 240.935332][ T4790] r4:83e69080 [ 240.935339][ T4790] [<80816c84>] (tomoyo_file_ioctl) from [<807c2598>] (security_file_ioctl+0x80/0x1d4) [ 240.935366][ T4790] [<807c2518>] (security_file_ioctl) from [<805a1c64>] (sys_ioctl+0x4c/0xb5c) [ 240.935396][ T4790] r7:00000000 r6:80585882 r5:83e69081 r4:00000000 [ 240.935404][ T4790] [<805a1c18>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 240.935439][ T4790] Exception stack(0xecd69fa8 to 0xecd69ff0) [ 240.935459][ T4790] 9fa0: 00000000 00000000 00000003 80585882 00000000 00000000 [ 240.935475][ T4790] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f7f0dc [ 240.935488][ T4790] 9fe0: 76f7ee88 76f7ee78 00018ebc 00130810 [ 240.935505][ T4790] r10:00000036 r9:85036400 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 240.935514][ T4790] r4:00000000 [ 240.935545][ T4790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.081747][ T4792] fuse: Bad value for 'fd' [ 243.685731][ T28] audit: type=1400 audit(243.600:230): avc: denied { create } for pid=4812 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.880967][ T4813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4813 comm=syz.0.374 [ 244.306234][ T4816] FAULT_INJECTION: forcing a failure. [ 244.306234][ T4816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.310853][ T4816] CPU: 0 UID: 0 PID: 4816 Comm: syz.1.375 Tainted: G L syzkaller #0 PREEMPT [ 244.310962][ T4816] Tainted: [L]=SOFTLOCKUP [ 244.310983][ T4816] Hardware name: ARM-Versatile Express [ 244.311008][ T4816] Call trace: [ 244.311051][ T4816] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 244.311164][ T4816] r7:60000113 r6:60000113 r5:8231eb0c r4:00000000 [ 244.311186][ T4816] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 244.311246][ T4816] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 244.311320][ T4816] r7:b5403587 r6:00000000 r5:84763e80 r4:82b4f348 [ 244.311340][ T4816] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 244.311402][ T4816] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 244.311461][ T4816] r8:003462d8 r7:b5403587 r6:00000000 r5:847646ec r4:76f36b48 [ 244.311481][ T4816] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 244.311539][ T4816] [<809d89c8>] (should_fail_usercopy) from [<8022a194>] (setup_sigframe+0x124/0x1c8) [ 244.311598][ T4816] [<8022a070>] (setup_sigframe) from [<8022a7f0>] (do_work_pending+0x2d4/0x4f0) [ 244.311671][ T4816] r10:00000004 r9:b5403587 r8:00000000 r7:847646ec r6:76f36b48 r5:ecdfdfb0 [ 244.311694][ T4816] r4:84763e80 [ 244.311711][ T4816] [<8022a51c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 244.311758][ T4816] Exception stack(0xecdfdfb0 to 0xecdfdff8) [ 244.311789][ T4816] dfa0: 00000001 76f36ef8 00000001 00000000 [ 244.311821][ T4816] dfc0: 00000000 00000000 00000000 00000004 003462d8 00000000 00000001 76f370dc [ 244.311850][ T4816] dfe0: 76f36e58 76f36e44 0010ba34 00112618 60000010 00000004 [ 244.311882][ T4816] r10:00000004 r9:84763e80 r8:8020029c r7:00000004 r6:00000000 r5:00000000 [ 244.311902][ T4816] r4:00000000 [ 244.693850][ T4822] fuse: Bad value for 'fd' [ 248.126957][ T4827] FAULT_INJECTION: forcing a failure. [ 248.126957][ T4827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.129640][ T4827] CPU: 0 UID: 0 PID: 4827 Comm: syz.0.379 Tainted: G L syzkaller #0 PREEMPT [ 248.129766][ T4827] Tainted: [L]=SOFTLOCKUP [ 248.129786][ T4827] Hardware name: ARM-Versatile Express [ 248.129810][ T4827] Call trace: [ 248.129882][ T4827] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 248.129991][ T4827] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 248.130010][ T4827] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 248.130062][ T4827] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 248.130119][ T4827] r7:00000000 r6:00000000 r5:83e16400 r4:82b4f348 [ 248.130219][ T4827] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 248.130309][ T4827] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 248.130370][ T4827] r8:76f7ef08 r7:00000000 r6:00000000 r5:ed00df68 r4:00000002 [ 248.130387][ T4827] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 248.130433][ T4827] [<809d89c8>] (should_fail_usercopy) from [<805c5b20>] (simple_read_from_buffer+0x80/0x140) [ 248.130485][ T4827] [<805c5aa0>] (simple_read_from_buffer) from [<8064cb64>] (proc_fail_nth_read+0xb8/0x10c) [ 248.130559][ T4827] r10:8064caac r9:00000001 r8:00000002 r7:ed00df68 r6:0000000f r5:76f7ef08 [ 248.130582][ T4827] r4:83e16400 r3:ed00de9f [ 248.130639][ T4827] [<8064caac>] (proc_fail_nth_read) from [<80586158>] (vfs_read+0xc0/0x328) [ 248.130721][ T4827] r8:83e16400 r7:ed00df68 r6:76f7ef08 r5:85716100 r4:0000000f [ 248.130740][ T4827] [<80586098>] (vfs_read) from [<80586dec>] (ksys_read+0x74/0xec) [ 248.130814][ T4827] r10:00000003 r9:83e16400 r8:8020029c r7:00000000 r6:00000000 r5:85716100 [ 248.130834][ T4827] r4:85716103 [ 248.130852][ T4827] [<80586d78>] (ksys_read) from [<80586e74>] (sys_read+0x10/0x14) [ 248.130914][ T4827] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 248.130930][ T4827] [<80586e64>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 248.130976][ T4827] Exception stack(0xed00dfa8 to 0xed00dff0) [ 248.131013][ T4827] dfa0: 00000000 00000000 00000004 76f7ef08 0000000f 00000000 [ 248.131046][ T4827] dfc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f7f0dc [ 248.131075][ T4827] dfe0: 76f7ee58 76f7ee44 0010ba34 00112618 [ 250.652896][ T4839] fuse: Bad value for 'fd' [ 254.626589][ T4864] fuse: Bad value for 'fd' [ 258.313856][ T4885] fuse: Bad value for 'fd' [ 258.870758][ T28] audit: type=1400 audit(258.780:231): avc: denied { lock } for pid=4886 comm="syz.1.403" path="socket:[6085]" dev="sockfs" ino=6085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 262.963309][ T4918] fuse: Bad value for 'fd' [ 271.629700][ T4968] FAULT_INJECTION: forcing a failure. [ 271.629700][ T4968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.630203][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.0.433 Tainted: G L syzkaller #0 PREEMPT [ 271.630325][ T4968] Tainted: [L]=SOFTLOCKUP [ 271.630351][ T4968] Hardware name: ARM-Versatile Express [ 271.630378][ T4968] Call trace: [ 271.630422][ T4968] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 271.630533][ T4968] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 271.630620][ T4968] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 271.630682][ T4968] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 271.630749][ T4968] r7:20000440 r6:00000000 r5:85018c80 r4:82b4f348 [ 271.630771][ T4968] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 271.630828][ T4968] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 271.630889][ T4968] r8:00008000 r7:20000440 r6:ed681e28 r5:00000000 r4:ed681f20 [ 271.630930][ T4968] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 271.631042][ T4968] [<809d89c8>] (should_fail_usercopy) from [<815ec9f4>] (copy_msghdr_from_user+0x50/0x1e0) [ 271.631220][ T4968] [<815ec9a4>] (copy_msghdr_from_user) from [<815ecbfc>] (___sys_sendmsg+0x78/0xd0) [ 271.631325][ T4968] r8:00008000 r7:00000000 r6:858c2cc0 r5:ed681f20 r4:ed681e6c [ 271.631466][ T4968] [<815ecb84>] (___sys_sendmsg) from [<815eed70>] (__sys_sendmsg+0x8c/0xe0) [ 271.631573][ T4968] r9:85018c80 r8:85715a00 r7:00008000 r6:20000440 r5:85715a01 r4:00000003 [ 271.631654][ T4968] [<815eece4>] (__sys_sendmsg) from [<815eedd8>] (sys_sendmsg+0x14/0x18) [ 271.631763][ T4968] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 271.631838][ T4968] [<815eedc4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 271.631945][ T4968] Exception stack(0xed681fa8 to 0xed681ff0) [ 271.632039][ T4968] 1fa0: 00000000 00000000 00000003 20000440 00008000 00000000 [ 271.632100][ T4968] 1fc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f7f0dc [ 271.632166][ T4968] 1fe0: 76f7ee88 76f7ee78 00018ebc 00130810 [ 279.229594][ T28] audit: type=1400 audit(279.140:232): avc: denied { name_bind } for pid=4999 comm="syz.0.447" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 305.412186][ T28] audit: type=1400 audit(305.330:233): avc: denied { ioctl } for pid=5062 comm="syz.1.467" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7471 ioctlcmd=0x545e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 311.680995][ T5083] FAULT_INJECTION: forcing a failure. [ 311.680995][ T5083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.682666][ T5083] CPU: 0 UID: 0 PID: 5083 Comm: syz.0.472 Tainted: G L syzkaller #0 PREEMPT [ 311.682795][ T5083] Tainted: [L]=SOFTLOCKUP [ 311.682818][ T5083] Hardware name: ARM-Versatile Express [ 311.682844][ T5083] Call trace: [ 311.682890][ T5083] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 311.683006][ T5083] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 311.683027][ T5083] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 311.683085][ T5083] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 311.683149][ T5083] r7:00000000 r6:00000000 r5:8318e400 r4:82b4f348 [ 311.683167][ T5083] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 311.683224][ T5083] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 311.683285][ T5083] r8:76f7ef08 r7:00000000 r6:00000000 r5:ea8c5f68 r4:00000002 [ 311.683306][ T5083] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 311.683354][ T5083] [<809d89c8>] (should_fail_usercopy) from [<805c5b20>] (simple_read_from_buffer+0x80/0x140) [ 311.683407][ T5083] [<805c5aa0>] (simple_read_from_buffer) from [<8064cb64>] (proc_fail_nth_read+0xb8/0x10c) [ 311.683482][ T5083] r10:8064caac r9:00000001 r8:00000002 r7:ea8c5f68 r6:0000000f r5:76f7ef08 [ 311.683507][ T5083] r4:8318e400 r3:ea8c5e9f [ 311.683526][ T5083] [<8064caac>] (proc_fail_nth_read) from [<80586158>] (vfs_read+0xc0/0x328) [ 311.683601][ T5083] r8:8318e400 r7:ea8c5f68 r6:76f7ef08 r5:85715100 r4:0000000f [ 311.683621][ T5083] [<80586098>] (vfs_read) from [<80586dec>] (ksys_read+0x74/0xec) [ 311.683691][ T5083] r10:00000003 r9:8318e400 r8:8020029c r7:00000000 r6:00000000 r5:85715100 [ 311.683713][ T5083] r4:85715103 [ 311.683731][ T5083] [<80586d78>] (ksys_read) from [<80586e74>] (sys_read+0x10/0x14) [ 311.683808][ T5083] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 311.683828][ T5083] [<80586e64>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 311.683879][ T5083] Exception stack(0xea8c5fa8 to 0xea8c5ff0) [ 311.683920][ T5083] 5fa0: 00000000 00000000 00000006 76f7ef08 0000000f 00000000 [ 311.683959][ T5083] 5fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f7f0dc [ 311.683988][ T5083] 5fe0: 76f7ee58 76f7ee44 0010ba34 00112618 [ 330.116515][ T5168] FAULT_INJECTION: forcing a failure. [ 330.116515][ T5168] name failslab, interval 1, probability 0, space 0, times 0 [ 330.117098][ T5168] CPU: 1 UID: 0 PID: 5168 Comm: syz.0.506 Tainted: G L syzkaller #0 PREEMPT [ 330.117201][ T5168] Tainted: [L]=SOFTLOCKUP [ 330.117234][ T5168] Hardware name: ARM-Versatile Express [ 330.117266][ T5168] Call trace: [ 330.117313][ T5168] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 330.117596][ T5168] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 330.117643][ T5168] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 330.117818][ T5168] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 330.117959][ T5168] r7:00000000 r6:00000000 r5:8400e400 r4:82b18108 [ 330.118062][ T5168] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 330.118183][ T5168] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 330.118308][ T5168] r8:00000000 r7:00000000 r6:83001240 r5:00000d40 r4:00000022 [ 330.118378][ T5168] [<80554618>] (should_failslab) from [<805328ac>] (__kmalloc_noprof+0xa4/0x39c) [ 330.118525][ T5168] [<80532808>] (__kmalloc_noprof) from [<80816190>] (tomoyo_encode2+0x64/0xec) [ 330.118611][ T5168] r10:00000fff r9:830c0000 r8:00000000 r7:834dcd48 r6:85716328 r5:85fdcffc [ 330.118659][ T5168] r4:85fdcfe5 [ 330.118690][ T5168] [<8081612c>] (tomoyo_encode2) from [<8081623c>] (tomoyo_encode+0x24/0x30) [ 330.118802][ T5168] r9:830c0000 r8:00000000 r7:834dcd48 r6:85716328 r5:00001000 r4:85fdcfe6 [ 330.118844][ T5168] [<80816218>] (tomoyo_encode) from [<808162c8>] (tomoyo_realpath_from_path+0x80/0x16c) [ 330.118909][ T5168] r5:00001000 r4:85fdc000 [ 330.118984][ T5168] [<80816248>] (tomoyo_realpath_from_path) from [<808125fc>] (tomoyo_check_open_permission+0x150/0x1c0) [ 330.119139][ T5168] r10:dfb2df18 r9:855d2f00 r8:00000000 r7:85716328 r6:00000006 r5:00020002 [ 330.119167][ T5168] r4:00000001 r3:00000001 [ 330.119394][ T5168] [<808124ac>] (tomoyo_check_open_permission) from [<80817128>] (tomoyo_file_open+0x34/0x38) [ 330.119575][ T5168] r9:85716300 r8:85716328 r7:00000000 r6:8434f4a0 r5:81c227ac r4:85716300 [ 330.119602][ T5168] [<808170f4>] (tomoyo_file_open) from [<807d32d8>] (security_file_open+0x70/0x184) [ 330.119670][ T5168] r5:81c227ac r4:85716300 [ 330.119790][ T5168] [<807d3268>] (security_file_open) from [<80581024>] (do_dentry_open+0xe4/0x508) [ 330.119874][ T5168] r5:81c227ac r4:85716300 [ 330.119897][ T5168] [<80580f40>] (do_dentry_open) from [<80582bd0>] (vfs_open+0x2c/0xe8) [ 330.120008][ T5168] r9:85716300 r8:dfb2de50 r7:83406dd0 r6:85716328 r5:82b1f040 r4:85716300 [ 330.120166][ T5168] [<80582ba4>] (vfs_open) from [<8059d66c>] (path_openat+0x7e0/0x1214) [ 330.120375][ T5168] r6:00000000 r5:82b1f040 r4:00020002 [ 330.120463][ T5168] [<8059ce8c>] (path_openat) from [<8059e158>] (do_file_open+0xb8/0x150) [ 330.120546][ T5168] r10:00000142 r9:8400e400 r8:00000001 r7:ffffff9c r6:dfb2df18 r5:8400e400 [ 330.120571][ T5168] r4:8333cf00 [ 330.120590][ T5168] [<8059e0a0>] (do_file_open) from [<80583068>] (do_sys_openat2+0x8c/0xf0) [ 330.120661][ T5168] r8:8020029c r7:0018aac8 r6:ffffff9c r5:8333cf00 r4:00000004 [ 330.120683][ T5168] [<80582fdc>] (do_sys_openat2) from [<80583444>] (sys_openat+0x80/0xd0) [ 330.120758][ T5168] r7:00000142 r6:00000000 r5:0018aac8 r4:ffffff9c [ 330.120781][ T5168] [<805833c4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 330.120839][ T5168] Exception stack(0xdfb2dfa8 to 0xdfb2dff0) [ 330.120886][ T5168] dfa0: 00000000 00000000 ffffff9c 0018aac8 00020002 00000000 [ 330.120929][ T5168] dfc0: 00000000 00000000 00000000 00000142 00000005 00000000 003d0f00 76f7f0dc [ 330.120962][ T5168] dfe0: 76f7cd68 76f7cd54 0010ba34 00112618 [ 330.120994][ T5168] r6:00000000 r5:00000000 r4:00000000 [ 330.131947][ T5168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.371201][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 330.541367][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 330.552741][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 330.553160][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.584456][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 330.584846][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.585127][ T23] usb 1-1: Product: syz [ 330.585179][ T23] usb 1-1: Manufacturer: syz [ 330.585209][ T23] usb 1-1: SerialNumber: syz [ 330.606257][ T5168] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 330.861203][ T23] usb 1-1: USB disconnect, device number 3 [ 331.616815][ T5192] fuse: Bad value for 'fd' [ 331.626865][ T28] audit: type=1400 audit(331.540:234): avc: denied { remount } for pid=5191 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 337.094297][ T28] audit: type=1400 audit(337.010:235): avc: denied { remount } for pid=5250 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 338.915351][ T28] audit: type=1400 audit(338.830:236): avc: denied { ioctl } for pid=5252 comm="syz.1.539" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.938466][ T28] audit: type=1400 audit(338.850:237): avc: denied { create } for pid=5252 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 339.604671][ T28] audit: type=1400 audit(339.520:238): avc: denied { connect } for pid=5268 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.271073][ T3699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 344.421161][ T3699] usb 1-1: Using ep0 maxpacket: 16 [ 344.432397][ T3699] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 344.433687][ T3699] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.464988][ T3699] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 344.466256][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.468797][ T3699] usb 1-1: Product: syz [ 344.471196][ T3699] usb 1-1: Manufacturer: syz [ 344.473664][ T3699] usb 1-1: SerialNumber: syz [ 344.489531][ T5314] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 344.728436][ T3699] usb 1-1: USB disconnect, device number 4 [ 347.783065][ T5347] FAULT_INJECTION: forcing a failure. [ 347.783065][ T5347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.790764][ T5347] CPU: 0 UID: 0 PID: 5347 Comm: syz.0.567 Tainted: G L syzkaller #0 PREEMPT [ 347.790907][ T5347] Tainted: [L]=SOFTLOCKUP [ 347.790929][ T5347] Hardware name: ARM-Versatile Express [ 347.790970][ T5347] Call trace: [ 347.791048][ T5347] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 347.791172][ T5347] r7:60000113 r6:60000113 r5:8231eb0c r4:00000000 [ 347.791191][ T5347] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 347.791248][ T5347] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 347.791315][ T5347] r7:200004c0 r6:00000000 r5:84003e80 r4:82b4f348 [ 347.791357][ T5347] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 347.791432][ T5347] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 347.791500][ T5347] r8:00004001 r7:200004c0 r6:ea78de28 r5:00000000 r4:ea78df20 [ 347.791540][ T5347] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 347.791598][ T5347] [<809d89c8>] (should_fail_usercopy) from [<815ec9f4>] (copy_msghdr_from_user+0x50/0x1e0) [ 347.791686][ T5347] [<815ec9a4>] (copy_msghdr_from_user) from [<815ecbfc>] (___sys_sendmsg+0x78/0xd0) [ 347.791748][ T5347] r8:00004001 r7:00000000 r6:858c2540 r5:ea78df20 r4:ea78de6c [ 347.791767][ T5347] [<815ecb84>] (___sys_sendmsg) from [<815eed70>] (__sys_sendmsg+0x8c/0xe0) [ 347.791831][ T5347] r9:84003e80 r8:85715d80 r7:00004001 r6:200004c0 r5:85715d81 r4:00000003 [ 347.791850][ T5347] [<815eece4>] (__sys_sendmsg) from [<815eedd8>] (sys_sendmsg+0x14/0x18) [ 347.791915][ T5347] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 347.791934][ T5347] [<815eedc4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 347.791987][ T5347] Exception stack(0xea78dfa8 to 0xea78dff0) [ 347.792026][ T5347] dfa0: 00000000 00000000 00000003 200004c0 00004001 00000000 [ 347.792086][ T5347] dfc0: 00000000 00000000 0012f214 00000128 00346378 00000000 003d0f00 76f5e0dc [ 347.792140][ T5347] dfe0: 76f5de88 76f5de78 00018ebc 00130810 [ 354.296279][ T28] audit: type=1400 audit(354.210:239): avc: denied { write } for pid=5376 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 354.497767][ T5377] fuse: fd is not a fuse device [ 356.124926][ T5389] FAULT_INJECTION: forcing a failure. [ 356.124926][ T5389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.126505][ T5389] CPU: 1 UID: 0 PID: 5389 Comm: syz.0.582 Tainted: G L syzkaller #0 PREEMPT [ 356.126650][ T5389] Tainted: [L]=SOFTLOCKUP [ 356.126672][ T5389] Hardware name: ARM-Versatile Express [ 356.126702][ T5389] Call trace: [ 356.126743][ T5389] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 356.126807][ T5389] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 356.126818][ T5389] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 356.126844][ T5389] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 356.126874][ T5389] r7:00000000 r6:00000000 r5:85036400 r4:82b4f348 [ 356.126882][ T5389] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 356.126908][ T5389] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 356.126948][ T5389] r8:76f7ef08 r7:00000000 r6:00000000 r5:ea501f68 r4:00000002 [ 356.126972][ T5389] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 356.126996][ T5389] [<809d89c8>] (should_fail_usercopy) from [<805c5b20>] (simple_read_from_buffer+0x80/0x140) [ 356.127029][ T5389] [<805c5aa0>] (simple_read_from_buffer) from [<8064cb64>] (proc_fail_nth_read+0xb8/0x10c) [ 356.127064][ T5389] r10:8064caac r9:00000001 r8:00000002 r7:ea501f68 r6:0000000f r5:76f7ef08 [ 356.127086][ T5389] r4:85036400 r3:ea501e9f [ 356.127095][ T5389] [<8064caac>] (proc_fail_nth_read) from [<80586158>] (vfs_read+0xc0/0x328) [ 356.127131][ T5389] r8:85036400 r7:ea501f68 r6:76f7ef08 r5:85714100 r4:0000000f [ 356.127140][ T5389] [<80586098>] (vfs_read) from [<80586dec>] (ksys_read+0x74/0xec) [ 356.127177][ T5389] r10:00000003 r9:85036400 r8:8020029c r7:00000000 r6:00000000 r5:85714100 [ 356.127187][ T5389] r4:85714103 [ 356.127195][ T5389] [<80586d78>] (ksys_read) from [<80586e74>] (sys_read+0x10/0x14) [ 356.127226][ T5389] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 356.127234][ T5389] [<80586e64>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 356.127265][ T5389] Exception stack(0xea501fa8 to 0xea501ff0) [ 356.127284][ T5389] 1fa0: 00000000 00000000 00000004 76f7ef08 0000000f 00000000 [ 356.127301][ T5389] 1fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f7f0dc [ 356.127325][ T5389] 1fe0: 76f7ee58 76f7ee44 0010ba34 00112618 [ 358.250949][ T5397] FAULT_INJECTION: forcing a failure. [ 358.250949][ T5397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.252340][ T5397] CPU: 1 UID: 0 PID: 5397 Comm: syz.1.585 Tainted: G L syzkaller #0 PREEMPT [ 358.252430][ T5397] Tainted: [L]=SOFTLOCKUP [ 358.252451][ T5397] Hardware name: ARM-Versatile Express [ 358.252477][ T5397] Call trace: [ 358.252520][ T5397] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 358.252625][ T5397] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 358.252646][ T5397] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 358.252704][ T5397] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 358.252775][ T5397] r7:00000000 r6:00000000 r5:8501cb00 r4:82b4f348 [ 358.252793][ T5397] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 358.252850][ T5397] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 358.252909][ T5397] r8:ea769eb8 r7:00000000 r6:76f15f08 r5:00000001 r4:00000001 [ 358.252928][ T5397] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 358.252977][ T5397] [<809d89c8>] (should_fail_usercopy) from [<80919218>] (kstrtouint_from_user+0x54/0x13c) [ 358.253034][ T5397] [<809191c4>] (kstrtouint_from_user) from [<8064de68>] (proc_fail_nth_write+0x40/0xf4) [ 358.253110][ T5397] r8:8064de28 r7:ea769f68 r6:76f15f08 r5:85716900 r4:00000001 [ 358.253130][ T5397] [<8064de28>] (proc_fail_nth_write) from [<805869fc>] (vfs_write+0xd4/0x450) [ 358.253196][ T5397] r5:85716900 r4:00000001 [ 358.253216][ T5397] [<80586928>] (vfs_write) from [<80586eec>] (ksys_write+0x74/0xec) [ 358.253290][ T5397] r10:00000004 r9:8501cb00 r8:8020029c r7:00000000 r6:00000002 r5:85716900 [ 358.253313][ T5397] r4:85716903 [ 358.253356][ T5397] [<80586e78>] (ksys_write) from [<80586f74>] (sys_write+0x10/0x14) [ 358.253432][ T5397] r7:00000004 r6:00000000 r5:00000000 r4:00000000 [ 358.253453][ T5397] [<80586f64>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 358.253506][ T5397] Exception stack(0xea769fa8 to 0xea769ff0) [ 358.253551][ T5397] 9fa0: 00000000 00000000 00000004 76f15f08 00000001 00000000 [ 358.253629][ T5397] 9fc0: 00000000 00000000 00000000 00000004 00346378 00000000 003d0f00 76f160dc [ 358.253684][ T5397] 9fe0: 76f15e58 76f15e44 0010ba34 00112618 [ 359.042610][ T28] audit: type=1400 audit(358.960:240): avc: denied { getopt } for pid=5410 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 361.581731][ T5426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.582852][ T5426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.791066][ T3698] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 361.820893][ T28] audit: type=1400 audit(361.730:241): avc: denied { ioctl } for pid=5429 comm="syz.1.598" path="socket:[7127]" dev="sockfs" ino=7127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.854388][ T28] audit: type=1400 audit(361.770:242): avc: denied { getopt } for pid=5429 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 361.940545][ T3698] usb 1-1: Using ep0 maxpacket: 16 [ 361.950499][ T3698] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 361.960157][ T3698] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 361.960764][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.961837][ T3698] usb 1-1: Product: 歴࿳鮮䁨䪵綨쵡ম䁝햾႞濺抿㗽葍ꐄ톿훡ꂩ娔鮸鳄鯆䈹䦇𢡊硍툁ⳏ稅뙓儼඀漄콾ፒ袒脁ꙓꄨ퀲嘕ᔧϳ菥䜹㬴闍粎ᔞ⥁羯杴ᾏ矲Ṩ忧鰠쵵֬刷テ폰픔ꊤ輔嬔ꐳ錢犮齫㸚 [ 361.963029][ T3698] usb 1-1: Manufacturer: М [ 361.963555][ T3698] usb 1-1: SerialNumber: Ѓ [ 361.997443][ T5426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.999920][ T5426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.533623][ T5448] FAULT_INJECTION: forcing a failure. [ 366.533623][ T5448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.534029][ T5448] CPU: 1 UID: 0 PID: 5448 Comm: syz.1.599 Tainted: G L syzkaller #0 PREEMPT [ 366.534130][ T5448] Tainted: [L]=SOFTLOCKUP [ 366.534225][ T5448] Hardware name: ARM-Versatile Express [ 366.534269][ T5448] Call trace: [ 366.534362][ T5448] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 366.534500][ T5448] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 366.534519][ T5448] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 366.534626][ T5448] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 366.534762][ T5448] r7:00000000 r6:00000000 r5:83e13e80 r4:82b4f348 [ 366.534834][ T5448] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 366.534920][ T5448] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 366.535002][ T5448] r8:76f36f08 r7:00000000 r6:00000000 r5:eabe5f68 r4:00000002 [ 366.535048][ T5448] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 366.535129][ T5448] [<809d89c8>] (should_fail_usercopy) from [<805c5b20>] (simple_read_from_buffer+0x80/0x140) [ 366.535274][ T5448] [<805c5aa0>] (simple_read_from_buffer) from [<8064cb64>] (proc_fail_nth_read+0xb8/0x10c) [ 366.535365][ T5448] r10:8064caac r9:00000001 r8:00000002 r7:eabe5f68 r6:0000000f r5:76f36f08 [ 366.535418][ T5448] r4:83e13e80 r3:eabe5e9f [ 366.535435][ T5448] [<8064caac>] (proc_fail_nth_read) from [<80586158>] (vfs_read+0xc0/0x328) [ 366.535476][ T5448] r8:83e13e80 r7:eabe5f68 r6:76f36f08 r5:85716900 r4:0000000f [ 366.535485][ T5448] [<80586098>] (vfs_read) from [<80586dec>] (ksys_read+0x74/0xec) [ 366.535533][ T5448] r10:00000003 r9:83e13e80 r8:8020029c r7:00000000 r6:00000000 r5:85716900 [ 366.535543][ T5448] r4:85716903 [ 366.535551][ T5448] [<80586d78>] (ksys_read) from [<80586e74>] (sys_read+0x10/0x14) [ 366.535586][ T5448] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 366.535604][ T5448] [<80586e64>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 366.535710][ T5448] Exception stack(0xeabe5fa8 to 0xeabe5ff0) [ 366.535853][ T5448] 5fa0: 00000000 00000000 00000004 76f36f08 0000000f 00000000 [ 366.535933][ T5448] 5fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f370dc [ 366.536032][ T5448] 5fe0: 76f36e58 76f36e44 0010ba34 00112618 [ 367.047355][ T3698] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 367.082005][ T3698] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 368.283581][ T5474] FAULT_INJECTION: forcing a failure. [ 368.283581][ T5474] name failslab, interval 1, probability 0, space 0, times 0 [ 368.284104][ T5474] CPU: 1 UID: 0 PID: 5474 Comm: syz.1.606 Tainted: G L syzkaller #0 PREEMPT [ 368.284188][ T5474] Tainted: [L]=SOFTLOCKUP [ 368.284243][ T5474] Hardware name: ARM-Versatile Express [ 368.284275][ T5474] Call trace: [ 368.284325][ T5474] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 368.284439][ T5474] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 368.284459][ T5474] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 368.284517][ T5474] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 368.284583][ T5474] r7:00000000 r6:00000000 r5:83e18000 r4:82b18108 [ 368.284601][ T5474] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 368.284675][ T5474] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 368.284753][ T5474] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 368.284773][ T5474] [<80554618>] (should_failslab) from [<805328ac>] (__kmalloc_noprof+0xa4/0x39c) [ 368.284842][ T5474] [<80532808>] (__kmalloc_noprof) from [<80816284>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 368.284921][ T5474] r10:00000037 r9:830c0000 r8:00000000 r7:83426220 r6:857167a8 r5:00001000 [ 368.284948][ T5474] r4:00000000 [ 368.284972][ T5474] [<80816248>] (tomoyo_realpath_from_path) from [<808125fc>] (tomoyo_check_open_permission+0x150/0x1c0) [ 368.285062][ T5474] r10:00000037 r9:855d2f00 r8:00000000 r7:857167a8 r6:00000002 r5:00000401 [ 368.285092][ T5474] r4:00000001 r3:00000001 [ 368.285122][ T5474] [<808124ac>] (tomoyo_check_open_permission) from [<8081716c>] (tomoyo_file_fcntl+0x40/0x4c) [ 368.285218][ T5474] r9:85716780 r8:00000003 r7:00012c00 r6:00012c00 r5:85716780 r4:00012c00 [ 368.285244][ T5474] [<8081712c>] (tomoyo_file_fcntl) from [<807d2c6c>] (security_file_fcntl+0x58/0x1d4) [ 368.285305][ T5474] r5:00000004 r4:85716780 [ 368.285322][ T5474] [<807d2c14>] (security_file_fcntl) from [<805a0d9c>] (sys_fcntl+0x44/0xd0) [ 368.285384][ T5474] r7:00012c00 r6:00000004 r5:00000000 r4:85716781 [ 368.285401][ T5474] [<805a0d58>] (sys_fcntl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 368.285448][ T5474] Exception stack(0xeac9dfa8 to 0xeac9dff0) [ 368.285486][ T5474] dfa0: 00000000 00000000 00000003 00000004 00012c00 00000000 [ 368.285520][ T5474] dfc0: 00000000 00000000 0012f214 00000037 003462d8 00000000 00000001 76f370dc [ 368.285547][ T5474] dfe0: 76f36e88 76f36e78 00018ebc 00130810 [ 368.285580][ T5474] r9:83e18000 r8:8020029c r7:00000037 r6:0012f214 r5:00000000 r4:00000000 [ 368.285636][ T5474] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.824984][ T28] audit: type=1400 audit(368.740:243): avc: denied { create } for pid=5477 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.831948][ T28] audit: type=1400 audit(368.750:244): avc: denied { ioctl } for pid=5477 comm="syz.1.608" path="socket:[8197]" dev="sockfs" ino=8197 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.062718][ T28] audit: type=1400 audit(369.980:245): avc: denied { write } for pid=5489 comm="syz.1.611" name="file2" dev="tmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 370.064659][ T28] audit: type=1400 audit(369.980:246): avc: denied { open } for pid=5489 comm="syz.1.611" path="/304/file2" dev="tmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.183389][ T3699] usb 1-1: USB disconnect, device number 5 [ 373.302878][ T28] audit: type=1400 audit(373.220:247): avc: denied { create } for pid=5512 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 373.314798][ T5513] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 373.331269][ T5513] audit: out of memory in audit_log_start [ 376.245083][ T28] audit: type=1400 audit(376.160:248): avc: denied { wake_alarm } for pid=5526 comm="syz.1.622" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.065147][ T5553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5553 comm=syz.0.631 [ 379.481126][ T5556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=5556 comm=syz.1.632 [ 379.612880][ T28] audit: type=1400 audit(379.530:249): avc: denied { remount } for pid=5552 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 379.841238][ T5568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5568 comm=syz.1.633 [ 379.862453][ T5568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5568 comm=syz.1.633 [ 380.851784][ T5577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5577 comm=syz.1.637 [ 381.258731][ T28] audit: type=1400 audit(381.170:250): avc: denied { setattr } for pid=5578 comm="syz.1.638" name="NETLINK" dev="sockfs" ino=8364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 383.372986][ T5606] fuse: Unknown parameter '@0x0000000000000004' [ 383.407107][ T5606] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 383.420880][ T28] audit: type=1400 audit(383.330:251): avc: denied { relabelto } for pid=5604 comm="syz.0.646" name="file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 383.421301][ T28] audit: type=1400 audit(383.330:252): avc: denied { associate } for pid=5604 comm="syz.0.646" name="file0" dev="tmpfs" ino=1680 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lock_t:s0" [ 384.461238][ T28] audit: type=1400 audit(384.370:253): avc: denied { execute } for pid=5604 comm="syz.0.646" name="file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 384.472630][ T28] audit: type=1400 audit(384.380:254): avc: denied { read open } for pid=5604 comm="syz.0.646" path="/318/file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 384.484048][ T28] audit: type=1400 audit(384.390:255): avc: denied { write } for pid=5604 comm="syz.0.646" name="file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 385.836978][ T28] audit: type=1400 audit(385.750:256): avc: denied { unlink } for pid=3098 comm="syz-executor" name="file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 389.889638][ T5666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5666 comm=syz.0.666 [ 390.694508][ T5676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=5676 comm=syz.0.670 [ 391.002516][ T5676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=329 sclass=netlink_audit_socket pid=5676 comm=syz.0.670 [ 391.164546][ T5681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5681 comm=syz.0.671 [ 392.413941][ T5697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5697 comm=syz.1.677 [ 392.481247][ T41] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 392.646585][ T41] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 392.646900][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.647117][ T41] usb 1-1: Product: syz [ 392.647263][ T41] usb 1-1: Manufacturer: syz [ 392.647394][ T41] usb 1-1: SerialNumber: syz [ 392.891285][ T41] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 392.892999][ T41] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 392.901136][ T41] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 392.907263][ T41] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 392.932817][ T41] usb 1-1: USB disconnect, device number 6 [ 393.097236][ T5709] fuse: Bad value for 'fd' [ 393.799334][ T28] audit: type=1400 audit(393.710:257): avc: denied { create } for pid=5718 comm="syz.1.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.256642][ T5902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5902 comm=syz.0.744 [ 438.924537][ T5904] FAULT_INJECTION: forcing a failure. [ 438.924537][ T5904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.932542][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.0.745 Tainted: G L syzkaller #0 PREEMPT [ 438.932690][ T5904] Tainted: [L]=SOFTLOCKUP [ 438.932714][ T5904] Hardware name: ARM-Versatile Express [ 438.932742][ T5904] Call trace: [ 438.932791][ T5904] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 438.932910][ T5904] r7:60000113 r6:60000113 r5:8231eb0c r4:00000000 [ 438.932933][ T5904] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 438.932997][ T5904] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 438.933069][ T5904] r7:b5403587 r6:00000000 r5:8380b200 r4:82b4f348 [ 438.933089][ T5904] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 438.933154][ T5904] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 438.933224][ T5904] r8:003462d8 r7:b5403587 r6:00000000 r5:8380ba6c r4:76f7eb80 [ 438.933251][ T5904] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 438.933307][ T5904] [<809d89c8>] (should_fail_usercopy) from [<8022a194>] (setup_sigframe+0x124/0x1c8) [ 438.933363][ T5904] [<8022a070>] (setup_sigframe) from [<8022a7f0>] (do_work_pending+0x2d4/0x4f0) [ 438.933433][ T5904] r10:00000128 r9:b5403587 r8:00000000 r7:8380ba6c r6:76f7eb80 r5:ed06dfb0 [ 438.933456][ T5904] r4:8380b200 [ 438.933474][ T5904] [<8022a51c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 438.933530][ T5904] Exception stack(0xed06dfb0 to 0xed06dff8) [ 438.933569][ T5904] dfa0: fffffffc 20000280 00000104 00000000 [ 438.933607][ T5904] dfc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f7f0dc [ 438.933642][ T5904] dfe0: 76f7ee88 76f7ee78 00018ebc 00130810 60000010 00000003 [ 438.933682][ T5904] r10:00000128 r9:8380b200 r8:8020029c r7:00000128 r6:0012f214 r5:00000000 [ 438.933703][ T5904] r4:00000000 [ 446.869653][ T28] audit: type=1400 audit(446.780:258): avc: denied { write } for pid=5932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.077552][ T28] audit: type=1400 audit(446.990:259): avc: denied { write } for pid=5945 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.403336][ T5954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=5954 comm=syz.0.759 [ 449.537269][ T5960] FAULT_INJECTION: forcing a failure. [ 449.537269][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 449.537786][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.0.761 Tainted: G L syzkaller #0 PREEMPT [ 449.537889][ T5960] Tainted: [L]=SOFTLOCKUP [ 449.537910][ T5960] Hardware name: ARM-Versatile Express [ 449.537937][ T5960] Call trace: [ 449.537983][ T5960] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 449.538097][ T5960] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 449.538196][ T5960] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 449.538277][ T5960] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 449.538374][ T5960] r7:00000000 r6:00000000 r5:8380b200 r4:82b18108 [ 449.538438][ T5960] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 449.538534][ T5960] [<809d878c>] (should_fail_ex) from [<80554684>] (should_failslab+0x6c/0x94) [ 449.538623][ T5960] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 449.538673][ T5960] [<80554618>] (should_failslab) from [<805328ac>] (__kmalloc_noprof+0xa4/0x39c) [ 449.538772][ T5960] [<80532808>] (__kmalloc_noprof) from [<80816284>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 449.538853][ T5960] r10:00000000 r9:830c0000 r8:00000000 r7:834246e8 r6:8636bf28 r5:00001000 [ 449.538895][ T5960] r4:00000000 [ 449.538932][ T5960] [<80816248>] (tomoyo_realpath_from_path) from [<8081234c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 449.539035][ T5960] r10:00000000 r9:00000004 r8:8636bf00 r7:0000125f r6:81cda164 r5:00000004 [ 449.539099][ T5960] r4:8636bf28 r3:828d1400 [ 449.539151][ T5960] [<80812280>] (tomoyo_path_number_perm) from [<80816ca0>] (tomoyo_file_ioctl+0x1c/0x20) [ 449.539284][ T5960] r10:8380b200 r9:00000004 r8:8636bf00 r7:00000000 r6:00000000 r5:0000125f [ 449.539341][ T5960] r4:8636bf00 [ 449.539377][ T5960] [<80816c84>] (tomoyo_file_ioctl) from [<807c2598>] (security_file_ioctl+0x80/0x1d4) [ 449.539457][ T5960] [<807c2518>] (security_file_ioctl) from [<805a1c64>] (sys_ioctl+0x4c/0xb5c) [ 449.539601][ T5960] r7:00000000 r6:0000125f r5:8636bf01 r4:00000000 [ 449.539652][ T5960] [<805a1c18>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 449.539747][ T5960] Exception stack(0xed04dfa8 to 0xed04dff0) [ 449.539792][ T5960] dfa0: 00000000 00000000 00000004 0000125f 00000000 00000000 [ 449.539955][ T5960] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f7f0dc [ 449.540015][ T5960] dfe0: 76f7ee88 76f7ee78 00018ebc 00130810 [ 449.540075][ T5960] r10:00000036 r9:8380b200 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 449.540131][ T5960] r4:00000000 [ 449.562622][ T5958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5958 comm=syz.1.760 [ 449.569586][ T5960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.851955][ T5976] FAULT_INJECTION: forcing a failure. [ 454.851955][ T5976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.852282][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: syz.1.766 Tainted: G L syzkaller #0 PREEMPT [ 454.852342][ T5976] Tainted: [L]=SOFTLOCKUP [ 454.852351][ T5976] Hardware name: ARM-Versatile Express [ 454.852366][ T5976] Call trace: [ 454.852390][ T5976] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 454.852453][ T5976] r7:60000013 r6:60000013 r5:8231eb0c r4:00000000 [ 454.852463][ T5976] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 454.852489][ T5976] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 454.852519][ T5976] r7:20000440 r6:00000000 r5:833fbe80 r4:82b4f348 [ 454.852527][ T5976] [<8021e398>] (dump_stack) from [<809d894c>] (should_fail_ex+0x1c0/0x224) [ 454.852553][ T5976] [<809d878c>] (should_fail_ex) from [<809d89c4>] (should_fail+0x14/0x18) [ 454.852582][ T5976] r8:00000000 r7:20000440 r6:ed385e28 r5:00000000 r4:ed385f20 [ 454.852590][ T5976] [<809d89b0>] (should_fail) from [<809d89e4>] (should_fail_usercopy+0x1c/0x20) [ 454.852612][ T5976] [<809d89c8>] (should_fail_usercopy) from [<815ec9f4>] (copy_msghdr_from_user+0x50/0x1e0) [ 454.852639][ T5976] [<815ec9a4>] (copy_msghdr_from_user) from [<815ecbfc>] (___sys_sendmsg+0x78/0xd0) [ 454.852668][ T5976] r8:00000000 r7:00000000 r6:858c36c0 r5:ed385f20 r4:ed385e6c [ 454.852676][ T5976] [<815ecb84>] (___sys_sendmsg) from [<815eed70>] (__sys_sendmsg+0x8c/0xe0) [ 454.852718][ T5976] r9:833fbe80 r8:85716580 r7:00000000 r6:20000440 r5:85716581 r4:00000003 [ 454.852728][ T5976] [<815eece4>] (__sys_sendmsg) from [<815eedd8>] (sys_sendmsg+0x14/0x18) [ 454.852758][ T5976] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 454.852766][ T5976] [<815eedc4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 454.852788][ T5976] Exception stack(0xed385fa8 to 0xed385ff0) [ 454.852808][ T5976] 5fa0: 00000000 00000000 00000003 20000440 00000000 00000000 [ 454.852826][ T5976] 5fc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f370dc [ 454.852839][ T5976] 5fe0: 76f36e88 76f36e78 00018ebc 00130810 [ 458.591350][ T28] audit: type=1400 audit(458.510:260): avc: denied { setopt } for pid=5983 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.745268][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.747353][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.355589][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.371766][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.402094][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.403730][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.723942][ T28] audit: type=1400 audit(460.640:261): avc: denied { prog_run } for pid=6025 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 462.567384][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.567784][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.568094][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.568479][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.960979][ T28] audit: type=1400 audit(462.850:262): avc: denied { write } for pid=6035 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 463.532575][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.534818][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.349455][ T6061] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 467.252176][ T3699] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 467.423196][ T3699] usb 1-1: Using ep0 maxpacket: 16 [ 467.454181][ T3699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 467.481255][ T3699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.481563][ T3699] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.501383][ T3699] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 467.502378][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.505697][ T3699] usb 1-1: Product: syz [ 467.507761][ T3699] usb 1-1: Manufacturer: syz [ 467.510038][ T3699] usb 1-1: SerialNumber: syz [ 467.757805][ T3699] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 467.791942][ T3699] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 468.184598][ T3699] usb 1-1: 2:1 : invalid Cluster Descriptor size [ 468.397365][ T50] usb 1-1: USB disconnect, device number 7 [ 471.132701][ T6154] syzkaller0: entered promiscuous mode [ 471.141035][ T6154] syzkaller0: entered allmulticast mode [ 471.262789][ T28] audit: type=1400 audit(471.180:263): avc: denied { setopt } for pid=6153 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 471.267356][ T28] audit: type=1400 audit(471.180:264): avc: denied { ioctl } for pid=6153 comm="syz.0.788" path="socket:[8985]" dev="sockfs" ino=8985 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.721653][ T5745] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 472.988979][ T5745] usb 1-1: Using ep0 maxpacket: 32 [ 473.071231][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 473.084424][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.084844][ T5745] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.085241][ T5745] usb 1-1: config 1 has no interface number 0 [ 473.085327][ T5745] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 473.085370][ T5745] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 473.193068][ T5745] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 473.196493][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.196566][ T5745] usb 1-1: Product: syz [ 473.196602][ T5745] usb 1-1: Manufacturer: syz [ 473.196871][ T5745] usb 1-1: SerialNumber: syz [ 473.455722][ T5745] usb 1-1: USB disconnect, device number 8 [ 474.895926][ T28] audit: type=1400 audit(474.810:265): avc: denied { execute } for pid=6201 comm="syz.0.795" name="file0" dev="tmpfs" ino=2095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 474.917969][ T6202] process 'syz.0.795' launched './file0' with NULL argv: empty string added [ 475.001709][ T28] audit: type=1400 audit(474.920:266): avc: denied { execute_no_trans } for pid=6201 comm="syz.0.795" path="/398/file0" dev="tmpfs" ino=2095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 476.275389][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.292043][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.444472][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.445180][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.232493][ T28] audit: type=1400 audit(478.150:267): avc: denied { allowed } for pid=6225 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 478.846796][ T28] audit: type=1400 audit(478.750:268): avc: denied { relabelfrom } for pid=6228 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 478.847191][ T28] audit: type=1400 audit(478.750:269): avc: denied { relabelto } for pid=6228 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 480.151197][ T3699] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 480.334902][ T3699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 480.342763][ T3699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 480.364344][ T3699] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 480.364673][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.364965][ T3699] usb 1-1: Product: syz [ 480.365136][ T3699] usb 1-1: Manufacturer: syz [ 480.365312][ T3699] usb 1-1: SerialNumber: syz [ 481.312682][ T3045] usb 1-1: USB disconnect, device number 9 [ 482.101398][ T3045] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 482.357643][ T3045] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.377117][ T3045] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 482.583334][ T3045] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.583836][ T3045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.584212][ T3045] usb 1-1: Product: syz [ 482.584269][ T3045] usb 1-1: Manufacturer: syz [ 482.584305][ T3045] usb 1-1: SerialNumber: syz [ 482.607829][ T3045] cdc_mbim 1-1:1.0: skipping garbage [ 482.804085][ T6265] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 483.428583][ T6265] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 483.433441][ T3045] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 483.643271][ T3045] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 483.648620][ T3045] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, d2:18:1d:80:4b:6b [ 483.663701][ T3045] usb 1-1: USB disconnect, device number 10 [ 483.664977][ T3045] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 484.621194][ T41] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 484.778517][ T41] usb 1-1: not running at top speed; connect to a high speed hub [ 484.794536][ T41] usb 1-1: config 11 has an invalid interface number: 46 but max is 1 [ 484.795743][ T41] usb 1-1: config 11 has an invalid interface number: 58 but max is 1 [ 484.796747][ T41] usb 1-1: config 11 has no interface number 0 [ 484.797611][ T41] usb 1-1: config 11 has no interface number 1 [ 484.798581][ T41] usb 1-1: config 11 interface 46 has no altsetting 0 [ 484.802722][ T41] usb 1-1: config 11 interface 58 has no altsetting 0 [ 484.832794][ T41] usb 1-1: New USB device found, idVendor=13d3, idProduct=3201, bcdDevice=8b.7c [ 484.834181][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.839057][ T41] usb 1-1: Product: syz [ 484.851128][ T41] usb 1-1: Manufacturer: syz [ 484.851525][ T41] usb 1-1: SerialNumber: syz [ 485.077393][ T41] rndis_host 1-1:11.46: ACM capabilities 03, not really RNDIS? [ 485.104803][ T41] usb 1-1: USB disconnect, device number 11 [ 485.951062][ T41] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 486.111481][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.112649][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.116300][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.119696][ T41] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 486.122884][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.132602][ T41] usb 1-1: config 0 descriptor?? [ 486.599156][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.601406][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.605822][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.607931][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.611100][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.614036][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.615798][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.618101][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.622283][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.622734][ T41] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 486.634031][ T41] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 486.822785][ T41] usb 1-1: USB disconnect, device number 12 [ 487.280966][ T41] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 487.444690][ T41] usb 1-1: unable to get BOS descriptor or descriptor too short [ 487.448629][ T41] usb 1-1: not running at top speed; connect to a high speed hub [ 487.463736][ T41] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 487.465008][ T41] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 487.491140][ T41] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 487.492227][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.493181][ T41] usb 1-1: Product: syz [ 487.493885][ T41] usb 1-1: Manufacturer: syz [ 487.495059][ T41] usb 1-1: SerialNumber: syz [ 487.728623][ T41] usb 1-1: unit 3 not found! [ 487.792545][ T41] usb 1-1: USB disconnect, device number 13 [ 488.645446][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.815'. [ 493.521103][ T41] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 493.678127][ T41] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 493.678506][ T41] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 493.711042][ T41] usb 1-1: string descriptor 0 read error: -22 [ 493.711564][ T41] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 493.711630][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.979508][ T41] usb 1-1: USB disconnect, device number 14 [ 494.802223][ T6434] syzkaller0: entered promiscuous mode [ 494.804495][ T6434] syzkaller0: entered allmulticast mode [ 495.311047][ T41] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 495.479529][ T41] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 495.481234][ T41] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 495.497099][ T41] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.498102][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.502260][ T41] usb 1-1: SerialNumber: syz [ 495.523470][ T6440] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 496.182470][ T6440] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 496.395826][ T41] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 496.402420][ T41] usb 1-1: USB disconnect, device number 15 [ 496.961302][ T41] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 497.136698][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 497.151856][ T41] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 497.154120][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.155106][ T41] usb 1-1: Product: syz [ 497.155798][ T41] usb 1-1: Manufacturer: syz [ 497.156502][ T41] usb 1-1: SerialNumber: syz [ 497.161439][ T41] usb 1-1: config 0 descriptor?? [ 497.173615][ T41] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 497.182893][ T41] usb 1-1: Detected FT232B [ 497.374378][ T41] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 497.376166][ T41] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 497.379187][ T41] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 497.391808][ T41] usb 1-1: USB disconnect, device number 16 [ 497.398611][ T41] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 497.401997][ T41] ftdi_sio 1-1:0.0: device disconnected [ 497.871060][ T41] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 498.031053][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 498.041921][ T41] usb 1-1: config 1 has an invalid descriptor of length 197, skipping remainder of the config [ 498.042360][ T41] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.067016][ T41] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 498.067374][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.067669][ T41] usb 1-1: Product: syz [ 498.067848][ T41] usb 1-1: Manufacturer: syz [ 498.068166][ T41] usb 1-1: SerialNumber: syz [ 498.295781][ T41] usb 1-1: cannot find UAC_HEADER [ 498.349685][ T41] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 498.381558][ T41] usb 1-1: USB disconnect, device number 17 [ 499.908285][ T28] audit: type=1400 audit(499.820:270): avc: denied { write } for pid=6506 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 499.924079][ T28] audit: type=1400 audit(499.840:271): avc: denied { nlmsg_write } for pid=6506 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 500.651138][ T3045] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 500.820675][ T3045] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 500.831164][ T3045] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.831465][ T3045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.831654][ T3045] usb 1-1: SerialNumber: syz [ 501.502882][ T3045] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 501.705559][ T3045] usb 1-1: USB disconnect, device number 18 [ 503.699883][ T28] audit: type=1400 audit(503.610:272): avc: denied { connect } for pid=6536 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 506.207683][ T5745] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 506.418381][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.418674][ T5745] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.432343][ T5745] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 506.433262][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 506.434169][ T5745] usb 1-1: SerialNumber: syz [ 506.455177][ T5745] usb 1-1: 0:2 : does not exist [ 516.914772][ T2449] usb 1-1: USB disconnect, device number 19 [ 519.010868][ T28] audit: type=1400 audit(518.920:273): avc: denied { map } for pid=6567 comm="syz.0.849" path="socket:[10261]" dev="sockfs" ino=10261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 522.852781][ T3045] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 523.012319][ T3045] usb 1-1: Using ep0 maxpacket: 16 [ 523.074646][ T3045] usb 1-1: config 0 has no interfaces? [ 523.105822][ T3045] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 523.107000][ T3045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.107977][ T3045] usb 1-1: Product: syz [ 523.109157][ T3045] usb 1-1: Manufacturer: syz [ 523.109993][ T3045] usb 1-1: SerialNumber: syz [ 523.151167][ T3045] r8152-cfgselector 1-1: Unknown version 0x0000 [ 523.156904][ T3045] r8152-cfgselector 1-1: config 0 descriptor?? [ 523.395328][ T2449] usb 2-1: USB disconnect, device number 2 [ 523.446270][ T2449] option 2-1:14.43: device disconnected [ 529.194105][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.205291][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.111541][ T6598] hsr_slave_0: entered promiscuous mode [ 531.113492][ T6598] hsr_slave_1: entered promiscuous mode [ 531.115029][ T6598] debugfs: 'hsr0' already exists in 'hsr' [ 531.115777][ T6598] Cannot create hsr debugfs directory [ 531.379793][ T6598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.391371][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.404132][ T6598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.416305][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.424915][ T6598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.433170][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.442447][ T6598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.448855][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.263338][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.428943][ T6031] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 536.826130][ T28] audit: type=1400 audit(536.740:274): avc: denied { map } for pid=6918 comm="syz.0.861" path="socket:[11603]" dev="sockfs" ino=11603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 536.826586][ T28] audit: type=1400 audit(536.740:275): avc: denied { read } for pid=6918 comm="syz.0.861" path="socket:[11603]" dev="sockfs" ino=11603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.085050][ T6031] hid_parser_main: 1 callbacks suppressed [ 538.100055][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.101103][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.101566][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.101901][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.102253][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.102547][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.102856][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.103191][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.103500][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.103807][ T6031] hid-generic D34C:493DC4E8:0074.0002: unknown main item tag 0x0 [ 538.140685][ T6031] hid-generic D34C:493DC4E8:0074.0002: hidraw0: HID v80.00 Device [syz1] on syz0 [ 538.206785][ T6598] veth0_vlan: entered promiscuous mode [ 538.300183][ T6598] veth1_vlan: entered promiscuous mode [ 538.520058][ T6598] veth0_macvtap: entered promiscuous mode [ 538.559267][ T6598] veth1_macvtap: entered promiscuous mode [ 538.915979][ T6092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.916533][ T6092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.917001][ T6092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.917253][ T6092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.173004][ T28] audit: type=1400 audit(539.090:276): avc: denied { unmount } for pid=6598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 541.044305][ T28] audit: type=1326 audit(540.950:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.864" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7fc00000 [ 545.656261][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'. [ 547.801584][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.803406][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.923774][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 548.344834][ T6981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.449380][ T6981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.532282][ T6981] bond0 (unregistering): Released all slaves [ 549.511295][ T5745] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 549.676116][ T5745] usb 1-1: Using ep0 maxpacket: 8 [ 549.864172][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 549.874643][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.875017][ T5745] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.976885][ T5745] usb 1-1: string descriptor 0 read error: -22 [ 549.977129][ T5745] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 549.977308][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.074887][ T5745] usb 1-1: 0:1 : does not exist [ 550.075719][ T5745] usb 1-1: unit 5 not found! [ 550.119600][ T5745] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 550.154475][ T5745] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 550.303429][ T5745] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 550.330773][ T5745] usb 1-1: USB disconnect, device number 21 [ 551.350944][ T28] audit: type=1400 audit(551.250:278): avc: denied { write } for pid=7022 comm="syz.0.886" path="socket:[11705]" dev="sockfs" ino=11705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 552.045373][ T6119] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 552.269958][ T6119] usb 1-1: Using ep0 maxpacket: 8 [ 552.361235][ T6119] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 552.361654][ T6119] usb 1-1: config 179 has no interface number 0 [ 552.362018][ T6119] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 552.362100][ T6119] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 552.362177][ T6119] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 552.362234][ T6119] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 552.362288][ T6119] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 552.362369][ T6119] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 552.362408][ T6119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.378568][ T7026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 552.385403][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.391558][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.657908][ T6119] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 552.857919][ T23] usb 1-1: USB disconnect, device number 22 [ 552.858079][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 552.858295][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 553.365707][ T28] audit: type=1400 audit(553.280:279): avc: denied { read } for pid=7055 comm="syz.0.891" name="file2" dev="tmpfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 553.369317][ T28] audit: type=1400 audit(553.280:280): avc: denied { ioctl } for pid=7055 comm="syz.0.891" path="/476/file2" dev="tmpfs" ino=2491 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 555.073323][ T7067] Illegal XDP return value 4294967282 on prog (id 9) dev syz_tun, expect packet loss! [ 555.590981][ T6119] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 555.785745][ T6119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.786031][ T6119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.786326][ T6119] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.786515][ T6119] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.786682][ T6119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.797533][ T6119] usb 1-1: config 0 descriptor?? [ 556.316077][ T6119] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 558.282202][ T6119] usb 1-1: USB disconnect, device number 23 [ 558.872671][ T6119] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 559.132489][ T6119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.137589][ T6119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.149798][ T6119] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 559.151366][ T6119] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 559.152283][ T6119] usb 1-1: Manufacturer: syz [ 559.171760][ T6119] usb 1-1: config 0 descriptor?? [ 560.253703][ T6119] uclogic 0003:256C:006D.0004: v1 frame probing failed: -71 [ 560.254933][ T6119] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 560.255948][ T6119] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 560.259700][ T6119] usb 1-1: USB disconnect, device number 24 [ 561.243253][ T7123] random: crng reseeded on system resumption [ 561.290935][ T6119] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 561.459462][ T6119] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.460992][ T6119] usb 1-1: config 0 has no interface number 0 [ 561.461993][ T6119] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 561.471266][ T6119] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.472657][ T6119] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.473988][ T6119] usb 1-1: config 0 interface 1 has no altsetting 0 [ 561.475131][ T6119] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 561.476382][ T6119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.505431][ T6119] usb 1-1: config 0 descriptor?? [ 562.143044][ T6119] uclogic 0003:145F:0212.0005: failed retrieving string descriptor #100: -71 [ 562.151752][ T6119] uclogic 0003:145F:0212.0005: failed retrieving pen parameters: -71 [ 562.155124][ T6119] uclogic 0003:145F:0212.0005: pen probing failed: -71 [ 562.156899][ T6119] uclogic 0003:145F:0212.0005: failed probing parameters: -71 [ 562.158696][ T6119] uclogic 0003:145F:0212.0005: probe with driver uclogic failed with error -71 [ 562.165379][ T6119] usb 1-1: USB disconnect, device number 25 [ 563.632261][ T28] audit: type=1400 audit(563.530:281): avc: denied { mount } for pid=7146 comm="syz.0.905" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 563.642260][ T28] audit: type=1400 audit(563.550:282): avc: denied { watch } for pid=7146 comm="syz.0.905" path="/488/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 563.676612][ T28] audit: type=1400 audit(563.590:283): avc: denied { unmount } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 563.880051][ T7149] ip6erspan0: entered allmulticast mode [ 572.335937][ T7162] veth1_to_bond: entered allmulticast mode [ 572.352637][ T7161] veth1_to_bond: left allmulticast mode [ 577.183828][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.184302][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.367565][ T7200] netlink: 'syz.2.925': attribute type 4 has an invalid length. [ 578.387526][ T7200] netlink: 'syz.2.925': attribute type 4 has an invalid length. [ 578.621292][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.927'. [ 578.940989][ T28] audit: type=1400 audit(578.850:284): avc: denied { nlmsg_write } for pid=7214 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 578.943872][ T7215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=7215 comm=syz.0.931 [ 579.062537][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 579.465632][ T28] audit: type=1400 audit(579.380:285): avc: denied { name_bind } for pid=7221 comm="syz.2.933" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 580.076941][ T28] audit: type=1400 audit(579.990:286): avc: denied { watch } for pid=7231 comm="syz.2.936" path="/38/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 581.776933][ T28] audit: type=1400 audit(581.690:287): avc: denied { bind } for pid=7242 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 581.778625][ T28] audit: type=1400 audit(581.690:288): avc: denied { name_bind } for pid=7242 comm="syz.0.939" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 581.784764][ T28] audit: type=1400 audit(581.690:289): avc: denied { node_bind } for pid=7242 comm="syz.0.939" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 581.796313][ T28] audit: type=1400 audit(581.710:290): avc: denied { read } for pid=7242 comm="syz.0.939" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 586.241769][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.945'. [ 595.035610][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.053966][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.058125][ T6081] bond0 (unregistering): Released all slaves [ 595.168258][ T6081] hsr_slave_0: left promiscuous mode [ 595.175468][ T6081] hsr_slave_1: left promiscuous mode [ 596.172130][ T28] audit: type=1400 audit(596.080:291): avc: denied { write } for pid=7284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.415774][ T28] audit: type=1400 audit(596.330:292): avc: denied { write } for pid=7287 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.593548][ T2953] 8021q: adding VLAN 0 to HW filter on device eth1 [ 597.440935][ T28] audit: type=1400 audit(597.350:293): avc: denied { write } for pid=7291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.798911][ T28] audit: type=1400 audit(597.710:294): avc: denied { write } for pid=7294 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.110072][ T2953] 8021q: adding VLAN 0 to HW filter on device eth2 [ 598.996822][ T28] audit: type=1400 audit(598.910:295): avc: denied { write } for pid=7298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.361341][ T28] audit: type=1400 audit(599.280:296): avc: denied { write } for pid=7301 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.593622][ T2953] 8021q: adding VLAN 0 to HW filter on device eth3 [ 600.409101][ T28] audit: type=1400 audit(600.320:297): avc: denied { write } for pid=7313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.804152][ T28] audit: type=1400 audit(600.720:298): avc: denied { write } for pid=7317 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.125730][ T2953] 8021q: adding VLAN 0 to HW filter on device eth4 [ 602.606013][ T7325] input: syz0 as /devices/virtual/input/input7 [ 603.262947][ T28] audit: type=1400 audit(603.180:299): avc: denied { watch watch_reads } for pid=7334 comm="syz.0.953" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 603.685042][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 604.596320][ T6119] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 604.813755][ T6119] usb 1-1: Using ep0 maxpacket: 16 [ 604.859172][ T6119] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.901184][ T6119] usb 1-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 604.926927][ T6119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.941176][ T6119] usb 1-1: Product: syz [ 604.942074][ T6119] usb 1-1: Manufacturer: syz [ 604.942816][ T6119] usb 1-1: SerialNumber: syz [ 612.247010][ T28] audit: type=1400 audit(612.160:300): avc: denied { write } for pid=7356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.487747][ T28] audit: type=1400 audit(612.400:301): avc: denied { write } for pid=7359 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.861018][ T28] audit: type=1400 audit(612.770:302): avc: denied { write } for pid=7362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.078189][ T28] audit: type=1400 audit(612.990:303): avc: denied { write } for pid=7365 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.446200][ T28] audit: type=1400 audit(613.360:304): avc: denied { write } for pid=7368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.592691][ T28] audit: type=1400 audit(613.510:305): avc: denied { write } for pid=7371 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.045303][ T28] audit: type=1400 audit(613.960:306): avc: denied { write } for pid=7374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.328462][ T28] audit: type=1400 audit(614.240:307): avc: denied { write } for pid=7377 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.671033][ T6119] usb 1-1: USB disconnect, device number 26 [ 618.636089][ T28] audit: type=1400 audit(618.550:308): avc: denied { bind } for pid=7397 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 621.801065][ T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 621.966590][ T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 621.968063][ T23] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 621.973579][ T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 621.977202][ T23] usb 1-1: config 220 has no interface number 2 [ 621.981273][ T23] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 621.986285][ T23] usb 1-1: config 220 interface 0 has no altsetting 0 [ 621.989445][ T23] usb 1-1: config 220 interface 76 has no altsetting 0 [ 621.994190][ T23] usb 1-1: config 220 interface 1 has no altsetting 0 [ 622.018203][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 622.020823][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.024899][ T23] usb 1-1: Product: syz [ 622.027863][ T23] usb 1-1: Manufacturer: syz [ 622.029485][ T23] usb 1-1: SerialNumber: syz [ 622.328017][ T23] usb 1-1: USB disconnect, device number 27 [ 622.819126][ T7451] veth0: entered promiscuous mode [ 622.826908][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 623.052030][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 623.103648][ T7461] syz.0.966 uses obsolete (PF_INET,SOCK_PACKET) [ 624.601265][ T28] audit: type=1400 audit(624.510:309): avc: denied { set_context_mgr } for pid=7481 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 624.646458][ T28] audit: type=1400 audit(624.560:310): avc: denied { map } for pid=7481 comm="syz.0.971" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 625.184060][ T28] audit: type=1400 audit(625.100:311): avc: denied { call } for pid=7481 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 625.187395][ T7483] binder: 7481:7483 unknown command 0 [ 625.187941][ T7483] binder: 7481:7483 ioctl c0306201 20000480 returned -22 [ 625.361549][ T28] audit: type=1400 audit(625.260:312): avc: denied { recv } for pid=3093 comm="syz-executor" saddr=127.0.0.1 src=34612 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 625.393752][ T28] audit: type=1400 audit(625.310:313): avc: denied { recv } for pid=3098 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=34612 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 625.457457][ T7487] comedi: valid board names for 8255 driver are: [ 625.461465][ T7487] 8255 [ 625.465779][ T7487] comedi: valid board names for vmk80xx driver are: [ 625.470714][ T7487] vmk80xx [ 625.473417][ T7487] comedi: valid board names for usbduxsigma driver are: [ 625.476387][ T7487] usbduxsigma [ 625.479134][ T7487] comedi: valid board names for usbduxfast driver are: [ 625.489425][ T7487] usbduxfast [ 625.492584][ T7487] comedi: valid board names for usbdux driver are: [ 625.495110][ T7487] usbdux [ 625.497400][ T7487] comedi: valid board names for ni6501 driver are: [ 625.499961][ T7487] ni6501 [ 625.502817][ T7487] comedi: valid board names for dt9812 driver are: [ 625.505287][ T7487] dt9812 [ 625.507588][ T7487] comedi: valid board names for ni_labpc_cs driver are: [ 625.510191][ T7487] ni_labpc_cs [ 625.513417][ T7487] comedi: valid board names for ni_daq_700 driver are: [ 625.516378][ T7487] ni_daq_700 [ 625.518617][ T7487] comedi: valid board names for labpc_pci driver are: [ 625.521818][ T7487] labpc_pci [ 625.524052][ T7487] comedi: valid board names for adl_pci9118 driver are: [ 625.526546][ T7487] pci9118dg [ 625.528884][ T7487] pci9118hg [ 625.532350][ T7487] pci9118hr [ 625.532716][ T7487] comedi: valid board names for 8255_pci driver are: [ 625.532866][ T7487] 8255_pci [ 625.533012][ T7487] comedi: valid board names for comedi_parport driver are: [ 625.533157][ T7487] comedi_parport [ 625.533300][ T7487] comedi: valid board names for comedi_test driver are: [ 625.533437][ T7487] comedi_test [ 625.533581][ T7487] comedi: valid board names for comedi_bond driver are: [ 625.537973][ T7487] comedi_bond [ 627.873172][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 636.055862][ T7493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.072931][ T7493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.450815][ T7493] hsr_slave_0: entered promiscuous mode [ 639.452508][ T7493] hsr_slave_1: entered promiscuous mode [ 639.456758][ T7493] debugfs: 'hsr0' already exists in 'hsr' [ 639.457579][ T7493] Cannot create hsr debugfs directory [ 640.264366][ T7493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 640.281540][ T7493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 640.284734][ T7493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 640.302537][ T7493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 640.306618][ T7493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 640.337054][ T7493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 640.342283][ T7493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 640.349919][ T7493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.706351][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.553939][ T7493] veth0_vlan: entered promiscuous mode [ 648.593073][ T7493] veth1_vlan: entered promiscuous mode [ 648.664144][ T7493] veth0_macvtap: entered promiscuous mode [ 648.684316][ T7493] veth1_macvtap: entered promiscuous mode [ 648.795722][ T6092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.796175][ T6092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.796521][ T6092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.796759][ T6092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.376709][ T28] audit: type=1400 audit(652.290:314): avc: denied { transfer } for pid=7813 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 657.875403][ T6105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.017547][ T6105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.133916][ T6105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.254446][ T6105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.921785][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.944826][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.961697][ T6105] bond0 (unregistering): Released all slaves [ 659.078620][ T6105] hsr_slave_0: left promiscuous mode [ 659.092581][ T6105] hsr_slave_1: left promiscuous mode [ 659.125065][ T6105] veth1_macvtap: left promiscuous mode [ 659.125510][ T6105] veth0_macvtap: left promiscuous mode [ 659.125939][ T6105] veth1_vlan: left promiscuous mode [ 659.126247][ T6105] veth0_vlan: left promiscuous mode [ 661.978077][ T28] audit: type=1400 audit(661.890:315): avc: denied { write } for pid=7853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.611606][ T28] audit: type=1400 audit(663.520:316): avc: denied { write } for pid=7856 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.015148][ T2953] 8021q: adding VLAN 0 to HW filter on device eth5 [ 665.907588][ T28] audit: type=1400 audit(665.820:317): avc: denied { write } for pid=7860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.359619][ T28] audit: type=1400 audit(666.270:318): avc: denied { write } for pid=7863 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.806024][ T2953] 8021q: adding VLAN 0 to HW filter on device eth6 [ 667.754700][ T28] audit: type=1400 audit(667.670:319): avc: denied { write } for pid=7867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.144268][ T28] audit: type=1400 audit(668.060:320): avc: denied { write } for pid=7870 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.341370][ T2953] 8021q: adding VLAN 0 to HW filter on device eth7 [ 670.137580][ T28] audit: type=1400 audit(670.050:321): avc: denied { write } for pid=7875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.438051][ T28] audit: type=1400 audit(670.350:322): avc: denied { write } for pid=7878 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.291892][ T2953] 8021q: adding VLAN 0 to HW filter on device eth8 [ 677.548307][ T6103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.613860][ T6103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.689297][ T6103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.749820][ T6103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.107990][ T6103] hsr_slave_0: left promiscuous mode [ 678.113097][ T6103] hsr_slave_1: left promiscuous mode [ 678.123449][ T6103] veth1_macvtap: left promiscuous mode [ 678.124389][ T6103] veth0_macvtap: left promiscuous mode [ 678.125427][ T6103] veth1_vlan: left promiscuous mode [ 678.126330][ T6103] veth0_vlan: left promiscuous mode [ 679.352113][ T28] audit: type=1400 audit(679.260:323): avc: denied { write } for pid=8038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.384395][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.401677][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.761071][ T28] audit: type=1400 audit(679.670:324): avc: denied { write } for pid=8088 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.095317][ T2953] 8021q: adding VLAN 0 to HW filter on device eth9 [ 681.893708][ T7883] hsr_slave_0: entered promiscuous mode [ 681.902564][ T7883] hsr_slave_1: entered promiscuous mode [ 682.282660][ T28] audit: type=1400 audit(682.200:325): avc: denied { write } for pid=8118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.171225][ T7883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 683.223155][ T7883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.225924][ T7883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 683.247324][ T7883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.252711][ T7883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 683.271084][ T7883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.312860][ T7883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 683.332389][ T7883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.408477][ T28] audit: type=1400 audit(683.320:326): avc: denied { write } for pid=8213 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.776469][ T2953] 8021q: adding VLAN 0 to HW filter on device eth10 [ 685.049430][ T28] audit: type=1400 audit(684.960:327): avc: denied { write } for pid=8238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.101142][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.338991][ T28] audit: type=1400 audit(685.250:328): avc: denied { write } for pid=8244 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.515518][ T2953] 8021q: adding VLAN 0 to HW filter on device eth11 [ 686.045386][ T28] audit: type=1400 audit(685.960:329): avc: denied { write } for pid=8253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.263243][ T28] audit: type=1400 audit(686.180:330): avc: denied { write } for pid=8259 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.364401][ T2953] 8021q: adding VLAN 0 to HW filter on device eth12 [ 688.173399][ T7883] veth0_vlan: entered promiscuous mode [ 688.195649][ T7883] veth1_vlan: entered promiscuous mode [ 688.252236][ T7883] veth0_macvtap: entered promiscuous mode [ 688.264918][ T7883] veth1_macvtap: entered promiscuous mode [ 688.312958][ T6105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.317803][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.325547][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.334660][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.555167][ T8293] tls_set_device_offload: netdev not found [ 688.783345][ T28] audit: type=1400 audit(688.700:331): avc: denied { write } for pid=8291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.165518][ T28] audit: type=1400 audit(689.080:332): avc: denied { write } for pid=8301 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.181646][ T8302] syz_tun: entered allmulticast mode [ 689.199804][ T8302] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 689.200906][ T8302] mroute: pending queue full, dropping entries [ 689.236464][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.238776][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.738244][ T28] audit: type=1400 audit(689.650:333): avc: denied { write } for pid=8309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.922693][ T28] audit: type=1400 audit(689.840:334): avc: denied { write } for pid=8312 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.328312][ T28] audit: type=1400 audit(690.240:335): avc: denied { write } for pid=8315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.522960][ T28] audit: type=1400 audit(690.440:336): avc: denied { write } for pid=8318 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.926485][ T28] audit: type=1400 audit(690.840:337): avc: denied { write } for pid=8321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.101473][ T28] audit: type=1400 audit(691.010:338): avc: denied { write } for pid=8324 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.845167][ T28] audit: type=1400 audit(697.760:339): avc: denied { write } for pid=8331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.029722][ T28] audit: type=1400 audit(697.940:340): avc: denied { write } for pid=8334 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.522943][ T28] audit: type=1400 audit(698.440:341): avc: denied { write } for pid=8337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.738077][ T28] audit: type=1400 audit(698.650:342): avc: denied { write } for pid=8340 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.278890][ T8297] syz_tun: left allmulticast mode [ 699.737699][ T28] audit: type=1400 audit(699.650:343): avc: denied { write } for pid=8351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.178549][ T28] audit: type=1400 audit(700.090:344): avc: denied { write } for pid=8361 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.595737][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 701.094900][ T28] audit: type=1400 audit(701.010:345): avc: denied { write } for pid=8366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.487894][ T28] audit: type=1400 audit(701.400:346): avc: denied { write } for pid=8379 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.494613][ T8357] ------------[ cut here ]------------ [ 702.494887][ T8357] WARNING: kernel/signal.c:2174 at do_notify_parent+0x37c/0x384, CPU#1: syz.3.999/8357 [ 702.496603][ T8357] Modules linked in: [ 702.497581][ T8357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 702.498060][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.3.999 Tainted: G L syzkaller #0 PREEMPT [ 702.498600][ T8357] Tainted: [L]=SOFTLOCKUP [ 702.498702][ T8357] Hardware name: ARM-Versatile Express [ 702.498857][ T8357] Call trace: [ 702.498963][ T8357] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 702.499140][ T8357] r7:82a1eab8 r6:00000000 r5:8231eb0c r4:00000001 [ 702.499268][ T8357] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 702.499471][ T8357] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 702.499657][ T8357] r7:82a1eab8 r6:00000000 r5:85035780 r4:82c7cd3c [ 702.499790][ T8357] [<8021e398>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 702.499979][ T8357] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 702.500151][ T8357] r7:80266184 [ 702.500285][ T8357] [<80202818>] (panic) from [<80250854>] (get_taint+0x0/0x1c) [ 702.500440][ T8357] r3:82a0b544 r2:00000001 r1:823055d4 r0:8230ced0 [ 702.500625][ T8357] [<802507dc>] (check_panic_on_warn) from [<802509d0>] (__warn+0x98/0x1ac) [ 702.500796][ T8357] [<80250938>] (__warn) from [<80250c5c>] (warn_slowpath_fmt+0x178/0x1f4) [ 702.501006][ T8357] r8:00000009 r7:8230e0cc r6:dfb21de4 r5:85035780 r4:00000000 [ 702.501181][ T8357] [<80250ae8>] (warn_slowpath_fmt) from [<80266184>] (do_notify_parent+0x37c/0x384) [ 702.501401][ T8357] r10:85035e74 r9:00000000 r8:dfb21e90 r7:dfb21780 r6:00000080 r5:85035780 [ 702.501555][ T8357] r4:85035780 [ 702.501679][ T8357] [<80265e08>] (do_notify_parent) from [<80257c6c>] (do_exit+0x7b8/0xb04) [ 702.501855][ T8357] r8:dfb21e90 r7:dfb21780 r6:83151c00 r5:85035780 r4:85035780 [ 702.501982][ T8357] [<802574b4>] (do_exit) from [<80258188>] (do_group_exit+0x40/0x8c) [ 702.502226][ T8357] r7:0000000a [ 702.502310][ T8357] [<80258148>] (do_group_exit) from [<802691d4>] (get_signal+0xa8c/0xab4) [ 702.502479][ T8357] r7:0000000a r4:85035780 [ 702.502566][ T8357] [<80268748>] (get_signal) from [<8022a640>] (do_work_pending+0x124/0x4f0) [ 702.502755][ T8357] r10:b5403587 r9:76f8ef20 r8:fffffff2 r7:85035fec r6:00000000 r5:dfb21fb0 [ 702.502913][ T8357] r4:85035780 [ 702.502981][ T8357] [<8022a51c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 702.503165][ T8357] Exception stack(0xdfb21fb0 to 0xdfb21ff8) [ 702.503274][ T8357] 1fa0: 00000000 76f8f230 76f8f2b0 76faddfc [ 702.503470][ T8357] 1fc0: 00000040 0000000b 76faddf0 00000000 003462d8 00000000 00000001 76fae0dc [ 702.503692][ T8357] 1fe0: 00000000 76f8f218 00015788 0001578c 00000010 ffffffff [ 702.503833][ T8357] r10:00000001 r9:85035780 r8:00000000 r7:85035780 r6:ffffffff r5:00000010 [ 702.504008][ T8357] r4:0001578c [ 702.506087][ T8357] Rebooting in 86400 seconds..