last executing test programs: 11m16.861428735s ago: executing program 1 (id=3): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0xc, &(0x7f0000000300)) 11m16.700432816s ago: executing program 1 (id=4): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 11m16.580471747s ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0132004601000001") 11m16.020771671s ago: executing program 1 (id=7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002440)=@newsa={0x154, 0x1a, 0x633, 0x70bd25, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x4a}, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x1, 0x7, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x0, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffffb, 0x3, 0xca09}, 0x70bd25, 0x3502, 0x2, 0x1, 0x0, 0x9}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x42}}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) 11m15.670094333s ago: executing program 1 (id=8): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) setresuid(0x0, 0xee01, 0x0) 11m15.539102414s ago: executing program 1 (id=9): bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xfff, 0x9, 0x8000, 0xa000, 0x1, 0xb, '\x00', r0, r1, 0x4, 0x2, 0x0, 0x1, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\x00'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 10m29.942967315s ago: executing program 32 (id=9): bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xfff, 0x9, 0x8000, 0xa000, 0x1, 0xb, '\x00', r0, r1, 0x4, 0x2, 0x0, 0x1, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\x00'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 7m21.130947907s ago: executing program 0 (id=293): syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB='\a'], 0x0) 7m19.625930548s ago: executing program 0 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x100) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x1) 7m18.767171803s ago: executing program 0 (id=295): removexattr(&(0x7f0000000540)='.\x00', &(0x7f0000000580)=ANY=[]) 7m18.297936246s ago: executing program 0 (id=296): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x16}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) 7m6.233261489s ago: executing program 0 (id=312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x440, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x41) 7m5.931952491s ago: executing program 0 (id=314): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a50c0, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x10000, &(0x7f0000000180)) io_setup(0x4, &(0x7f0000000380)) 6m20.625076181s ago: executing program 33 (id=314): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a50c0, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x10000, &(0x7f0000000180)) io_setup(0x4, &(0x7f0000000380)) 5m59.591066755s ago: executing program 3 (id=345): r0 = gettid() rt_sigqueueinfo(r0, 0x18, &(0x7f00000004c0)={0x1b, 0x10, 0xd812}) 5m59.326235377s ago: executing program 3 (id=346): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x23, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x3, 0x100) semtimedop(r2, &(0x7f0000000000)=[{0x2, 0xfffe}], 0x1, &(0x7f0000000040)={0x77359400}) semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000100)=0x3) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d0347a463552"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x58}}, 0x4044000) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 5m55.383935464s ago: executing program 3 (id=353): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x480}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x7fffffe, 0x2, 0xff, 0x0, 0x0, 0x9}, 0x20) 5m54.952144116s ago: executing program 3 (id=354): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0xdf80, 0x0) 5m54.821876027s ago: executing program 3 (id=355): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000083000021000b032500b37488"], 0x0}, 0x0) 5m54.638684249s ago: executing program 3 (id=356): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 5m9.12692237s ago: executing program 34 (id=356): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 3m49.412617575s ago: executing program 4 (id=508): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m20.150096165s ago: executing program 4 (id=531): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = fanotify_init(0x10, 0x400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x1, 0x4000001a, r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) 3m19.847469997s ago: executing program 4 (id=533): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) 3m19.688097458s ago: executing program 4 (id=534): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) 3m16.49694275s ago: executing program 4 (id=538): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x96) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 3m16.199725142s ago: executing program 4 (id=539): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 3m14.412492454s ago: executing program 35 (id=539): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 2m45.331778333s ago: executing program 2 (id=593): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001}, @multicast2, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 2m44.589953348s ago: executing program 2 (id=596): mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r5, 0x0, 0x81, 0x2) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m30.852571092s ago: executing program 2 (id=614): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) 2m30.571401344s ago: executing program 2 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000000103010000000000000000000a0000000c000200000000010000000134000a9a769d2ec47f8b2b40fe8000"], 0x54}}, 0x0) 2m29.967909728s ago: executing program 2 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/time\x00', 0x0, 0x0) read(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2m29.429592132s ago: executing program 2 (id=621): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x421, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}}, 0x0) 2m27.632436705s ago: executing program 36 (id=621): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x421, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}}, 0x0) 2m14.920609341s ago: executing program 5 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001e00010302000000000000002d0000000000001000000000", 0x1c) 2m14.692450963s ago: executing program 5 (id=636): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a5}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 2m13.725608309s ago: executing program 5 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f0000001040)=""/4100, 0x1004}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f00000000c0)=""/111, 0x6f}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002080)=""/4098, 0x1002}, {&(0x7f0000004740)=""/4073, 0xfe9}, {&(0x7f0000000180)=""/249, 0xf9}], 0x3}, 0x4}], 0x7, 0x40000102, 0x0) 2m13.362084332s ago: executing program 5 (id=638): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m12.797177386s ago: executing program 5 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0) 2m12.427822688s ago: executing program 5 (id=640): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 2m12.427509158s ago: executing program 37 (id=640): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 9.513127595s ago: executing program 7 (id=807): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x280) fsopen(0x0, 0x0) 4.622943688s ago: executing program 7 (id=812): keyctl$set_reqkey_keyring(0x10, 0x5) 4.35752883s ago: executing program 7 (id=814): socketpair(0x1d, 0x80003, 0x3, 0x0) 3.858431114s ago: executing program 7 (id=816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003980)={0x14, r1, 0x701, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800c094}, 0x4004040) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) 2.528018872s ago: executing program 7 (id=818): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) 2.181169545s ago: executing program 6 (id=819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.932248467s ago: executing program 7 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001bc0)=""/158, 0x9e}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000002840)=""/4098, 0x1002}], 0x4}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4082, 0xff2}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000002640)=""/203, 0xcb}, {&(0x7f0000002740)=""/84, 0x54}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) 1.650729038s ago: executing program 6 (id=821): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3324", 0x2a}], 0x1}, 0x30008b08) 1.39779757s ago: executing program 6 (id=822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) 1.069655123s ago: executing program 6 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 369.081857ms ago: executing program 6 (id=824): r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 0s ago: executing program 6 (id=825): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'8255\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x5, 0xfffffffe, 0x20000004, 0x0, 0xffe, 0x7fffffff, 0x5, 0x2, 0x4, 0x8, 0xfffc, 0x6, 0x5, 0x7ff, 0x100830, 0x8, 0x10000, 0x9, 0xc4f, 0x101, 0x2, 0x8001, 0x4, 0x3, 0x0, 0x2, 0x6]}) kernel console output (not intermixed with test programs): write } for pid=3113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.329615][ T3113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.344630][ T3113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.347511][ T3113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.358141][ T3113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.388583][ T3113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.398065][ T3113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.400383][ T3113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.408046][ T3113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.688613][ T3112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.701498][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.708107][ T3112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.721779][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.728393][ T3112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.744596][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.747185][ T3112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.758729][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.404044][ T3113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.545025][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.688436][ T3113] veth0_vlan: entered promiscuous mode [ 89.711998][ T3113] veth1_vlan: entered promiscuous mode [ 89.780881][ T3113] veth0_macvtap: entered promiscuous mode [ 89.807716][ T3113] veth1_macvtap: entered promiscuous mode [ 89.916914][ T2810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.978562][ T3112] veth0_vlan: entered promiscuous mode [ 90.024006][ T2810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.044969][ T3112] veth1_vlan: entered promiscuous mode [ 90.099344][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.113554][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 90.113664][ T28] audit: type=1400 audit(90.020:117): avc: denied { mount } for pid=3113 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.129259][ T28] audit: type=1400 audit(90.040:118): avc: denied { mounton } for pid=3113 comm="syz-executor" path="/syzkaller.Jc14nx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.144428][ T2599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.147092][ T28] audit: type=1400 audit(90.040:119): avc: denied { mount } for pid=3113 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 90.164949][ T28] audit: type=1400 audit(90.070:120): avc: denied { mounton } for pid=3113 comm="syz-executor" path="/syzkaller.Jc14nx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 90.167099][ T28] audit: type=1400 audit(90.070:121): avc: denied { mounton } for pid=3113 comm="syz-executor" path="/syzkaller.Jc14nx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 90.179527][ T3112] veth0_macvtap: entered promiscuous mode [ 90.187857][ T28] audit: type=1400 audit(90.100:122): avc: denied { unmount } for pid=3113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.197322][ T28] audit: type=1400 audit(90.110:123): avc: denied { mounton } for pid=3113 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 90.200364][ T28] audit: type=1400 audit(90.110:124): avc: denied { mount } for pid=3113 comm="syz-executor" name="/" dev="gadgetfs" ino=2235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 90.209706][ T3112] veth1_macvtap: entered promiscuous mode [ 90.210803][ T28] audit: type=1400 audit(90.120:125): avc: denied { mount } for pid=3113 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.224231][ T28] audit: type=1400 audit(90.130:126): avc: denied { mounton } for pid=3113 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 90.306245][ T3113] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.444104][ T2729] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.445338][ T2729] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.445429][ T2729] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.445496][ T2729] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.040462][ T3721] input: syz0 as /devices/virtual/input/input3 [ 91.534937][ T3729] FAULT_INJECTION: forcing a failure. [ 91.534937][ T3729] name failslab, interval 1, probability 0, space 0, times 1 [ 91.535733][ T3729] CPU: 0 UID: 0 PID: 3729 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 91.535939][ T3729] Hardware name: ARM-Versatile Express [ 91.536188][ T3729] Call trace: [ 91.536492][ T3729] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 91.537495][ T3729] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 91.537588][ T3729] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 91.537652][ T3729] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 91.537710][ T3729] r7:00000070 r6:00000000 r5:8398d780 r4:82b1601c [ 91.537725][ T3729] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 91.537780][ T3729] [<80a21aec>] (should_fail_ex) from [<80579f00>] (should_failslab+0x6c/0x94) [ 91.537852][ T3729] r8:8398d780 r7:00000070 r6:815a9780 r5:00000dc0 r4:83001300 [ 91.537868][ T3729] [<80579e94>] (should_failslab) from [<80559950>] (__kmalloc_cache_noprof+0x58/0x338) [ 91.537923][ T3729] [<805598f8>] (__kmalloc_cache_noprof) from [<815a9780>] (snd_seq_timer_new+0x24/0x68) [ 91.538014][ T3729] r10:81e3d8d8 r9:00000004 r8:00000000 r7:0000000f r6:00000001 r5:8635b000 [ 91.538044][ T3729] r4:84627c00 [ 91.538059][ T3729] [<815a975c>] (snd_seq_timer_new) from [<815a7408>] (snd_seq_queue_alloc+0x70/0x19c) [ 91.538119][ T3729] r7:0000000f r6:00000001 r5:8635b000 r4:84627c00 [ 91.538135][ T3729] [<815a7398>] (snd_seq_queue_alloc) from [<815a4538>] (snd_seq_ioctl_create_queue+0x24/0xe4) [ 91.538203][ T3729] r9:00000004 r8:82e386b8 r7:00000000 r6:e00d1c58 r5:e00d1c58 r4:84627c00 [ 91.538219][ T3729] [<815a4514>] (snd_seq_ioctl_create_queue) from [<815a283c>] (call_seq_client_ctl+0x48/0x9c) [ 91.538278][ T3729] r7:00000000 r6:e00d1c58 r5:c08c5332 r4:84627c00 [ 91.538295][ T3729] [<815a27f4>] (call_seq_client_ctl) from [<815a2f94>] (snd_seq_kernel_client_ctl+0x50/0x94) [ 91.538356][ T3729] r4:84627c00 [ 91.538372][ T3729] [<815a2f44>] (snd_seq_kernel_client_ctl) from [<815abbd8>] (alloc_seq_queue+0x88/0xbc) [ 91.538431][ T3729] r7:00000000 r6:83892400 r5:00000000 r4:862bd000 [ 91.538447][ T3729] [<815abb50>] (alloc_seq_queue) from [<815abf04>] (snd_seq_oss_open+0xc8/0x280) [ 91.538500][ T3729] r4:862bd000 [ 91.538514][ T3729] [<815abe3c>] (snd_seq_oss_open) from [<815ab84c>] (odev_open+0x44/0x58) [ 91.538578][ T3729] r9:00000004 r8:847eb2c8 r7:00000001 r6:83892400 r5:82e386a4 r4:00000000 [ 91.538595][ T3729] [<815ab808>] (odev_open) from [<81569d10>] (soundcore_open+0x17c/0x1e4) [ 91.538660][ T3729] r7:00000001 r6:82e371c4 r5:83892400 r4:00000001 [ 91.538676][ T3729] [<81569b94>] (soundcore_open) from [<805bbd60>] (chrdev_open+0xbc/0x234) [ 91.538748][ T3729] r10:00000000 r9:8387b9ec r8:8387b9ec r7:81e3b65c r6:83892400 r5:847eb2c8 [ 91.538770][ T3729] r4:8387b9c0 r3:81569b94 [ 91.538786][ T3729] [<805bbca4>] (chrdev_open) from [<805ae6d8>] (do_dentry_open+0x138/0x50c) [ 91.538854][ T3729] r9:83892400 r8:83892428 r7:805bbca4 r6:847eb2c8 r5:00000000 r4:83892400 [ 91.538872][ T3729] [<805ae5a0>] (do_dentry_open) from [<805b0258>] (vfs_open+0x2c/0xe8) [ 91.538938][ T3729] r9:83892400 r8:8398d780 r7:e00d1f20 r6:83892428 r5:82b1d1d4 r4:83892400 [ 91.538956][ T3729] [<805b022c>] (vfs_open) from [<805ccb5c>] (path_openat+0x430/0xa3c) [ 91.539015][ T3729] r6:00000000 r5:82b1d1d4 r4:e00d1e58 [ 91.539033][ T3729] [<805cc72c>] (path_openat) from [<805cd220>] (do_file_open+0xb8/0x150) [ 91.539099][ T3729] r10:00000142 r9:8398d780 r8:00000000 r7:ffffff9c r6:e00d1f20 r5:8398d780 [ 91.539119][ T3729] r4:83888a80 [ 91.539134][ T3729] [<805cd168>] (do_file_open) from [<805b0744>] (do_sys_openat2+0x8c/0xf0) [ 91.539196][ T3729] r8:8020029c r7:20000040 r6:ffffff9c r5:83888a80 r4:00000005 [ 91.539216][ T3729] [<805b06b8>] (do_sys_openat2) from [<805b0c5c>] (sys_openat+0x88/0xd8) [ 91.539329][ T3729] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 91.539349][ T3729] [<805b0bd4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 91.539480][ T3729] Exception stack(0xe00d1fa8 to 0xe00d1ff0) [ 91.539656][ T3729] 1fa0: 00000000 00000000 ffffff9c 20000040 00109042 00000000 [ 91.539713][ T3729] 1fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76fb60dc [ 91.539743][ T3729] 1fe0: 76fb5e88 76fb5e78 00018fb8 00130a70 [ 91.539809][ T3729] r5:00000000 r4:00000000 [ 91.942585][ T3733] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 96.037433][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 96.038032][ T28] audit: type=1400 audit(95.950:155): avc: denied { create } for pid=3752 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.765224][ T28] audit: type=1400 audit(96.680:156): avc: denied { perfmon } for pid=3757 comm="syz.0.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.921263][ T3758] *** NOT YET: opcode 85 *** [ 97.062165][ T28] audit: type=1400 audit(96.970:157): avc: denied { map_read map_write } for pid=3759 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.115931][ T28] audit: type=1400 audit(98.030:158): avc: denied { create } for pid=3747 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.119659][ T28] audit: type=1400 audit(98.030:159): avc: denied { write } for pid=3747 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.411945][ T3776] : renamed from bond_slave_0 (while UP) [ 108.027645][ T28] audit: type=1400 audit(107.940:160): avc: denied { create } for pid=3790 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.055455][ T28] audit: type=1400 audit(107.970:161): avc: denied { write } for pid=3790 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.390897][ T3797] FAULT_INJECTION: forcing a failure. [ 108.390897][ T3797] name fail_futex, interval 1, probability 0, space 0, times 1 [ 108.391049][ T3797] CPU: 1 UID: 0 PID: 3797 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT [ 108.391102][ T3797] Hardware name: ARM-Versatile Express [ 108.391124][ T3797] Call trace: [ 108.391164][ T3797] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 108.391269][ T3797] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 108.391288][ T3797] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 108.391341][ T3797] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 108.391403][ T3797] r7:e4251de8 r6:00000000 r5:84860c80 r4:82af6240 [ 108.391418][ T3797] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 108.391478][ T3797] [<80a21aec>] (should_fail_ex) from [<80a21d1c>] (should_fail+0x14/0x18) [ 108.391546][ T3797] r8:00000001 r7:e4251de8 r6:decff4d0 r5:76fb6000 r4:82af6240 [ 108.391562][ T3797] [<80a21d08>] (should_fail) from [<803574bc>] (get_futex_key+0x3c8/0x560) [ 108.391617][ T3797] [<803570f4>] (get_futex_key) from [<8035bdf0>] (futex_wake+0x70/0x25c) [ 108.391685][ T3797] r10:861bca80 r9:00000000 r8:e4251dd8 r7:ffffffff r6:76fb6628 r5:00000001 [ 108.391711][ T3797] r4:00000012 [ 108.391727][ T3797] [<8035bd80>] (futex_wake) from [<8035888c>] (do_futex+0x194/0x1d0) [ 108.391796][ T3797] r10:861bca80 r9:00000001 r8:e4251e90 r7:861bca80 r6:00000000 r5:b5403587 [ 108.391816][ T3797] r4:00000001 [ 108.391831][ T3797] [<803586f8>] (do_futex) from [<8024e1a0>] (mm_exit_exec_release+0xcc/0xd0) [ 108.391889][ T3797] r4:84860c80 [ 108.391904][ T3797] [<8024e0d4>] (mm_exit_exec_release) from [<80258990>] (do_exit+0x1e8/0xae4) [ 108.391959][ T3797] r5:84860c80 r4:862d6d00 [ 108.391974][ T3797] [<802587a8>] (do_exit) from [<80259460>] (do_group_exit+0x40/0x8c) [ 108.392024][ T3797] r7:00130a6c [ 108.392038][ T3797] [<80259420>] (do_group_exit) from [<8026a148>] (get_signal+0xa68/0xa90) [ 108.392094][ T3797] r7:00130a6c r4:84860c80 [ 108.392109][ T3797] [<802696e0>] (get_signal) from [<8022b724>] (do_work_pending+0x228/0x4f0) [ 108.392180][ T3797] r10:000000f0 r9:00130a70 r8:fffffe00 r7:00130a6c r6:00000001 r5:e4251fb0 [ 108.392199][ T3797] r4:84860c80 [ 108.392215][ T3797] [<8022b4fc>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 108.392262][ T3797] Exception stack(0xe4251fb0 to 0xe4251ff8) [ 108.392300][ T3797] 1fa0: 003562e0 00000080 00000000 00000000 [ 108.392338][ T3797] 1fc0: 00131df8 ffffffff 76fb67d4 000000f0 00340000 00000000 00000001 76fb60dc [ 108.392370][ T3797] 1fe0: 76fb5f38 76fb5f28 00021ba4 00130a6c 60000010 003562e0 [ 108.392409][ T3797] r10:000000f0 r9:84860c80 r8:8020029c r7:000000f0 r6:76fb67d4 r5:ffffffff [ 108.392427][ T3797] r4:00131df8 [ 108.550189][ T28] audit: type=1400 audit(108.460:162): avc: denied { name_bind } for pid=3798 comm="syz.0.26" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 108.550832][ T28] audit: type=1400 audit(108.460:163): avc: denied { node_bind } for pid=3798 comm="syz.0.26" saddr=::ffff:255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 121.609919][ T3810] FAULT_INJECTION: forcing a failure. [ 121.609919][ T3810] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.610099][ T3810] CPU: 1 UID: 0 PID: 3810 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT [ 121.610159][ T3810] Hardware name: ARM-Versatile Express [ 121.610192][ T3810] Call trace: [ 121.610238][ T3810] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 121.610364][ T3810] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 121.610386][ T3810] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 121.610442][ T3810] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 121.610507][ T3810] r7:dfbf9de8 r6:00000000 r5:84f5cb00 r4:82af6240 [ 121.610524][ T3810] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 121.610588][ T3810] [<80a21aec>] (should_fail_ex) from [<80a21d1c>] (should_fail+0x14/0x18) [ 121.610657][ T3810] r8:00000001 r7:dfbf9de8 r6:decee784 r5:76fb6000 r4:82af6240 [ 121.610674][ T3810] [<80a21d08>] (should_fail) from [<803574bc>] (get_futex_key+0x3c8/0x560) [ 121.610734][ T3810] [<803570f4>] (get_futex_key) from [<8035bdf0>] (futex_wake+0x70/0x25c) [ 121.610807][ T3810] r10:861bca80 r9:00000000 r8:dfbf9dd8 r7:ffffffff r6:76fb6628 r5:00000001 [ 121.610834][ T3810] r4:00000012 [ 121.610851][ T3810] [<8035bd80>] (futex_wake) from [<8035888c>] (do_futex+0x194/0x1d0) [ 121.610921][ T3810] r10:861bca80 r9:00000001 r8:dfbf9e90 r7:861bca80 r6:00000000 r5:b5403587 [ 121.610942][ T3810] r4:00000001 [ 121.610960][ T3810] [<803586f8>] (do_futex) from [<8024e1a0>] (mm_exit_exec_release+0xcc/0xd0) [ 121.611021][ T3810] r4:84f5cb00 [ 121.611038][ T3810] [<8024e0d4>] (mm_exit_exec_release) from [<80258990>] (do_exit+0x1e8/0xae4) [ 121.611096][ T3810] r5:84f5cb00 r4:84f11680 [ 121.611113][ T3810] [<802587a8>] (do_exit) from [<80259460>] (do_group_exit+0x40/0x8c) [ 121.611164][ T3810] r7:00130a6c [ 121.611180][ T3810] [<80259420>] (do_group_exit) from [<8026a148>] (get_signal+0xa68/0xa90) [ 121.611238][ T3810] r7:00130a6c r4:84f5cb00 [ 121.611255][ T3810] [<802696e0>] (get_signal) from [<8022b724>] (do_work_pending+0x228/0x4f0) [ 121.611336][ T3810] r10:000000f0 r9:00130a70 r8:fffffe00 r7:00130a6c r6:00000001 r5:dfbf9fb0 [ 121.611359][ T3810] r4:84f5cb00 [ 121.611375][ T3810] [<8022b4fc>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 121.611426][ T3810] Exception stack(0xdfbf9fb0 to 0xdfbf9ff8) [ 121.611465][ T3810] 9fa0: 003562e0 00000080 00000000 00000000 [ 121.611504][ T3810] 9fc0: 00131df8 ffffffff 76fb67d4 000000f0 00340000 00000000 00000001 76fb60dc [ 121.611537][ T3810] 9fe0: 76fb5f38 76fb5f28 00021ba4 00130a6c 60000010 003562e0 [ 121.611576][ T3810] r10:000000f0 r9:84f5cb00 r8:8020029c r7:000000f0 r6:76fb67d4 r5:ffffffff [ 121.611595][ T3810] r4:00131df8 [ 125.669036][ T28] audit: type=1400 audit(125.580:164): avc: denied { name_bind } for pid=3815 comm="syz.0.32" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 126.435816][ T28] audit: type=1400 audit(126.350:165): avc: denied { create } for pid=3820 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.438374][ T28] audit: type=1400 audit(126.350:166): avc: denied { setopt } for pid=3820 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.741759][ T28] audit: type=1400 audit(126.650:167): avc: denied { prog_run } for pid=3824 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.971218][ T3870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.995630][ T3870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.585014][ T3870] hsr_slave_0: entered promiscuous mode [ 143.587237][ T3870] hsr_slave_1: entered promiscuous mode [ 143.595968][ T3870] debugfs: 'hsr0' already exists in 'hsr' [ 143.596056][ T3870] Cannot create hsr debugfs directory [ 144.227769][ T3870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.280947][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.286333][ T3870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.298083][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.300464][ T3870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.309671][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.314630][ T3870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.335512][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.559679][ T3870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.443640][ T28] audit: type=1400 audit(150.350:168): avc: denied { bind } for pid=4180 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.449032][ T28] audit: type=1400 audit(150.360:169): avc: denied { name_bind } for pid=4180 comm="syz.0.51" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 150.451027][ T28] audit: type=1400 audit(150.360:170): avc: denied { node_bind } for pid=4180 comm="syz.0.51" saddr=fc00::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 150.734706][ T4187] capability: warning: `syz.0.53' uses deprecated v2 capabilities in a way that may be insecure [ 151.527574][ T3870] veth0_vlan: entered promiscuous mode [ 151.579393][ T3870] veth1_vlan: entered promiscuous mode [ 151.705325][ T3870] veth0_macvtap: entered promiscuous mode [ 151.728263][ T3870] veth1_macvtap: entered promiscuous mode [ 151.813709][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.814250][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.814381][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.814452][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.194777][ T28] audit: type=1400 audit(154.080:171): avc: denied { write } for pid=4199 comm="syz.0.55" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.194966][ T28] audit: type=1400 audit(154.110:172): avc: denied { setopt } for pid=4199 comm="syz.0.55" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.263764][ T28] audit: type=1400 audit(154.170:173): avc: denied { read } for pid=4199 comm="syz.0.55" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.447318][ T28] audit: type=1400 audit(155.360:174): avc: denied { create } for pid=4203 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.485821][ T28] audit: type=1400 audit(157.390:175): avc: denied { create } for pid=4209 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.486028][ T28] audit: type=1400 audit(157.400:176): avc: denied { setopt } for pid=4209 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.150698][ T28] audit: type=1400 audit(159.060:177): avc: denied { connect } for pid=4213 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.383436][ T28] audit: type=1400 audit(159.290:178): avc: denied { write } for pid=4213 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.786997][ T28] audit: type=1326 audit(159.700:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.0.60" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 159.789867][ T28] audit: type=1326 audit(159.700:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.0.60" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 159.796765][ T28] audit: type=1326 audit(159.710:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.0.60" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 159.805294][ T28] audit: type=1326 audit(159.720:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.0.60" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 159.805924][ T28] audit: type=1326 audit(159.720:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.0.60" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 159.806525][ T28] audit: type=1326 audit(159.720:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.0.60" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 160.849002][ T3718] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 161.049695][ T3718] usb 1-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 161.064509][ T3718] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 161.093957][ T3718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.094097][ T3718] usb 1-1: Product: syz [ 161.094131][ T3718] usb 1-1: Manufacturer: syz [ 161.094158][ T3718] usb 1-1: SerialNumber: syz [ 161.340497][ T3718] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 161.394220][ T3718] usb 1-1: incorrect wMaxPacketSize 0x20 for BADD profile [ 161.636442][ T3718] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.656336][ T3718] usb 1-1: USB disconnect, device number 2 [ 165.573502][ T1814] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.771416][ T1814] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 165.786545][ T1814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.786779][ T1814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.786942][ T1814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.791329][ T1814] usb 1-1: config 0 descriptor?? [ 166.308599][ T1814] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 166.308956][ T1814] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 166.309077][ T1814] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 166.309187][ T1814] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 166.309304][ T1814] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 166.322095][ T1814] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 167.121090][ T1814] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (3), disabling calibration. [ 167.121279][ T1814] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (4), disabling calibration. [ 167.121321][ T1814] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (5), disabling calibration. [ 167.121451][ T1814] playstation 0003:054C:0DF2.0001: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 167.128805][ T1814] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input4 [ 167.166658][ T1814] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input5 [ 167.193840][ T1814] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input6 [ 167.277599][ T1814] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input7 [ 167.327762][ T1814] playstation 0003:054C:0DF2.0001: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 167.375800][ T3738] usb 1-1: USB disconnect, device number 3 [ 174.455878][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 174.456073][ T28] audit: type=1400 audit(174.370:195): avc: denied { allowed } for pid=4351 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 174.500343][ T28] audit: type=1400 audit(174.410:196): avc: denied { create } for pid=4351 comm="syz.2.73" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 176.019750][ T4363] input: syz0 as /devices/virtual/input/input8 [ 176.588595][ T28] audit: type=1400 audit(176.500:197): avc: denied { write } for pid=4370 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.063612][ T3061] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.227267][ T3061] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 177.274488][ T3061] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.274678][ T3061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.331527][ T3061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.331640][ T3061] usb 1-1: Product: syz [ 177.331671][ T3061] usb 1-1: Manufacturer: syz [ 177.331697][ T3061] usb 1-1: SerialNumber: syz [ 177.612584][ T3061] usb 1-1: 0:1 : does not exist [ 177.636607][ T3061] usb 1-1: unit 4 not found! [ 177.636845][ T3061] usb 1-1: unit 51 not found! [ 177.754978][ T3061] usb 1-1: USB disconnect, device number 4 [ 184.266540][ T2678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.479006][ T2678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.606934][ T2678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.706456][ T4444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.707260][ T4444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.759472][ T2678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.606803][ T2678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.645944][ T2678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.659897][ T2678] bond0 (unregistering): Released all slaves [ 185.855140][ T2678] hsr_slave_0: left promiscuous mode [ 185.868874][ T2678] hsr_slave_1: left promiscuous mode [ 185.899354][ T2678] veth1_macvtap: left promiscuous mode [ 185.899690][ T2678] veth0_macvtap: left promiscuous mode [ 185.899922][ T2678] veth1_vlan: left promiscuous mode [ 185.900170][ T2678] veth0_vlan: left promiscuous mode [ 186.402430][ T28] audit: type=1400 audit(186.310:198): avc: denied { getopt } for pid=4466 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.054404][ T28] audit: type=1400 audit(186.970:199): avc: denied { sqpoll } for pid=4471 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.062178][ T28] audit: type=1400 audit(186.970:200): avc: denied { map } for pid=4471 comm="syz.0.97" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.062403][ T28] audit: type=1400 audit(186.970:201): avc: denied { read write } for pid=4471 comm="syz.0.97" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 188.161772][ T28] audit: type=1400 audit(188.070:202): avc: denied { write } for pid=4477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.498164][ T28] audit: type=1400 audit(188.410:203): avc: denied { write } for pid=4482 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.696097][ T2966] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.505644][ T28] audit: type=1400 audit(190.420:204): avc: denied { write } for pid=4488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.663578][ T28] audit: type=1400 audit(191.570:205): avc: denied { write } for pid=4491 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.225246][ T2966] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.642139][ T28] audit: type=1400 audit(193.550:206): avc: denied { write } for pid=4495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.976796][ T28] audit: type=1400 audit(193.890:207): avc: denied { write } for pid=4498 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.164159][ T2966] 8021q: adding VLAN 0 to HW filter on device eth3 [ 195.272207][ T28] audit: type=1400 audit(195.180:208): avc: denied { write } for pid=4502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.693596][ T28] audit: type=1400 audit(195.600:209): avc: denied { write } for pid=4505 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.892166][ T2966] 8021q: adding VLAN 0 to HW filter on device eth4 [ 200.553946][ T28] audit: type=1400 audit(200.470:210): avc: denied { write } for pid=4517 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.555667][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 200.555882][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 200.824728][ T4520] Illegal XDP return value 32768 on prog (id 8) dev syz_tun, expect packet loss! [ 202.270845][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.275909][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.456664][ T28] audit: type=1326 audit(205.370:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.456851][ T28] audit: type=1326 audit(205.370:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.456915][ T28] audit: type=1326 audit(205.370:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.458180][ T28] audit: type=1326 audit(205.370:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.460381][ T28] audit: type=1326 audit(205.370:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.461318][ T28] audit: type=1326 audit(205.370:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.462056][ T28] audit: type=1326 audit(205.370:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.507683][ T28] audit: type=1326 audit(205.390:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=19 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.564576][ T28] audit: type=1326 audit(205.440:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.564749][ T28] audit: type=1326 audit(205.440:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.564795][ T28] audit: type=1326 audit(205.440:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.564905][ T28] audit: type=1326 audit(205.440:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.564952][ T28] audit: type=1326 audit(205.440:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.564990][ T28] audit: type=1326 audit(205.440:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.565030][ T28] audit: type=1326 audit(205.440:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.565068][ T28] audit: type=1326 audit(205.440:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.565104][ T28] audit: type=1326 audit(205.440:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 205.565141][ T28] audit: type=1326 audit(205.440:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.112" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 209.619755][ T4570] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 210.872024][ T28] kauditd_printk_skb: 632 callbacks suppressed [ 210.872295][ T28] audit: type=1400 audit(210.770:861): avc: denied { write } for pid=4576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.935630][ T28] audit: type=1400 audit(211.850:862): avc: denied { write } for pid=4586 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.503565][ T28] audit: type=1400 audit(213.410:863): avc: denied { write } for pid=4590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.619803][ T4593] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 214.725433][ T28] audit: type=1400 audit(214.630:864): avc: denied { write } for pid=4596 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.035453][ T28] audit: type=1400 audit(215.950:865): avc: denied { ioctl } for pid=4582 comm="syz.2.121" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4389 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.737065][ T28] audit: type=1400 audit(216.650:866): avc: denied { write } for pid=4600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.737763][ T28] audit: type=1400 audit(217.650:867): avc: denied { write } for pid=4604 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.617287][ T28] audit: type=1400 audit(219.530:868): avc: denied { append } for pid=4610 comm="syz.2.125" name="tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.109376][ T4624] device-mapper: ioctl: name not supplied when creating device [ 221.549255][ T4627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.566128][ T4627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.759066][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.761056][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.019746][ T4635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.020351][ T4635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.785250][ T28] audit: type=1400 audit(222.700:869): avc: denied { mounton } for pid=4642 comm="syz.2.135" path="/48/file0" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.227798][ T28] audit: type=1400 audit(227.140:870): avc: denied { ioctl } for pid=4649 comm="syz.2.137" path="socket:[4414]" dev="sockfs" ino=4414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 231.482261][ T28] audit: type=1400 audit(231.390:871): avc: denied { ioctl } for pid=4660 comm="syz.2.141" path="socket:[4425]" dev="sockfs" ino=4425 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.734824][ T28] audit: type=1400 audit(231.640:872): avc: denied { connect } for pid=4666 comm="syz.2.142" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.527204][ T28] audit: type=1400 audit(232.440:873): avc: denied { write } for pid=4677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.823688][ T28] audit: type=1400 audit(232.730:874): avc: denied { write } for pid=4681 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.297513][ T28] audit: type=1400 audit(233.210:875): avc: denied { write } for pid=4684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.545417][ T28] audit: type=1400 audit(233.460:876): avc: denied { write } for pid=4687 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.007519][ T28] audit: type=1400 audit(233.920:877): avc: denied { write } for pid=4690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.260768][ T28] audit: type=1400 audit(234.170:878): avc: denied { write } for pid=4693 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.552292][ T28] audit: type=1400 audit(236.460:879): avc: denied { mount } for pid=4717 comm="syz.2.154" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 239.374033][ T3718] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 239.528843][ T3718] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.589396][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.589549][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.695643][ T3718] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 239.695773][ T3718] usb 1-1: Manufacturer: syz [ 239.708391][ T3718] usb 1-1: config 0 descriptor?? [ 240.649890][ T3718] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 240.856709][ T3718] usb 1-1: USB disconnect, device number 5 [ 243.754635][ T4438] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 243.910142][ T28] audit: type=1400 audit(243.820:880): avc: denied { name_bind } for pid=4791 comm="syz.2.178" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 243.946209][ T4438] usb 1-1: Using ep0 maxpacket: 32 [ 243.974203][ T4438] usb 1-1: New USB device found, idVendor=e16d, idProduct=c31b, bcdDevice= 0.40 [ 243.980773][ T4438] usb 1-1: config 0 has no interfaces? [ 243.981011][ T4438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.007024][ T4438] usb 1-1: config 0 descriptor?? [ 244.101526][ T4792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4792 comm=syz.2.178 [ 244.129605][ T4792] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 244.416999][ T4787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.417710][ T4787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.504478][ T4438] usb 1-1: USB disconnect, device number 6 [ 246.064247][ T4811] ======================================================= [ 246.064247][ T4811] WARNING: The mand mount option has been deprecated and [ 246.064247][ T4811] and is ignored by this kernel. Remove the mand [ 246.064247][ T4811] option from the mount to silence this warning. [ 246.064247][ T4811] ======================================================= [ 246.141495][ T28] audit: type=1400 audit(246.050:881): avc: denied { unmount } for pid=3870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 247.856627][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.857270][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.486639][ T28] audit: type=1400 audit(249.390:882): avc: denied { write } for pid=4847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.848281][ T28] audit: type=1400 audit(249.750:883): avc: denied { write } for pid=4856 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.468156][ T28] audit: type=1400 audit(250.380:884): avc: denied { ioctl } for pid=4860 comm="syz.0.194" path="socket:[5217]" dev="sockfs" ino=5217 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.606722][ T28] audit: type=1400 audit(251.520:885): avc: denied { mounton } for pid=4866 comm="syz.0.196" path="/proc/237/task" dev="proc" ino=4632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 252.879890][ T4871] FAULT_INJECTION: forcing a failure. [ 252.879890][ T4871] name failslab, interval 1, probability 0, space 0, times 0 [ 252.880964][ T4871] CPU: 1 UID: 0 PID: 4871 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT [ 252.881120][ T4871] Hardware name: ARM-Versatile Express [ 252.881358][ T4871] Call trace: [ 252.882236][ T4871] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 252.883535][ T4871] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 252.883628][ T4871] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 252.883691][ T4871] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 252.883752][ T4871] r7:84e91900 r6:00000000 r5:84e91900 r4:82b1601c [ 252.883770][ T4871] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 252.883861][ T4871] [<80a21aec>] (should_fail_ex) from [<80579f00>] (should_failslab+0x6c/0x94) [ 252.883958][ T4871] r8:00000000 r7:84e91900 r6:807f163c r5:00000dc0 r4:830ba480 [ 252.883992][ T4871] [<80579e94>] (should_failslab) from [<805578e4>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 252.884054][ T4871] [<80557888>] (kmem_cache_alloc_noprof) from [<807f163c>] (key_alloc+0x164/0x55c) [ 252.884148][ T4871] r10:82cee834 r9:00000004 r8:824c255c r7:00000000 r6:82b3d784 r5:82b3d7e8 [ 252.884180][ T4871] r4:000f4240 [ 252.884196][ T4871] [<807f14d8>] (key_alloc) from [<807f261c>] (keyring_alloc+0x4c/0x98) [ 252.884271][ T4871] r10:00000137 r9:84e91900 r8:8020029c r7:00000137 r6:00000000 r5:00000000 [ 252.884295][ T4871] r4:00000000 [ 252.884311][ T4871] [<807f25d0>] (keyring_alloc) from [<807f6f78>] (install_process_keyring_to_cred+0x5c/0x6c) [ 252.884377][ T4871] r5:8495cc80 r4:8495cc80 [ 252.884392][ T4871] [<807f6f1c>] (install_process_keyring_to_cred) from [<807f5c20>] (keyctl_set_reqkey_keyring+0x74/0xa4) [ 252.884451][ T4871] r4:00000002 [ 252.884482][ T4871] [<807f5bac>] (keyctl_set_reqkey_keyring) from [<807f67a4>] (sys_keyctl+0x104/0x2a4) [ 252.884585][ T4871] r7:00000137 r6:0035630c r5:00000000 r4:00000032 [ 252.884619][ T4871] [<807f66a0>] (sys_keyctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 252.884768][ T4871] Exception stack(0xe00f9fa8 to 0xe00f9ff0) [ 252.884993][ T4871] 9fa0: 00000000 00000000 0000000e 00000002 00000000 00000000 [ 252.885052][ T4871] 9fc0: 00000000 00000000 0035630c 00000137 003562d8 00000000 00000001 76fb60dc [ 252.885086][ T4871] 9fe0: 76fb5e88 76fb5e78 00018fb8 00130a70 [ 252.885154][ T4871] r5:00000000 r4:00000000 [ 257.563970][ T28] audit: type=1400 audit(257.470:886): avc: denied { create } for pid=4892 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.581615][ T28] audit: type=1400 audit(257.490:887): avc: denied { setopt } for pid=4892 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.661517][ T28] audit: type=1400 audit(257.570:888): avc: denied { bind } for pid=4892 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 258.164911][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 258.326617][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.347096][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.347223][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.347583][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.347732][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.351240][ T10] usb 1-1: config 0 descriptor?? [ 258.825626][ T10] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 258.841175][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 259.121383][ T4438] usb 1-1: USB disconnect, device number 7 [ 259.300668][ T28] audit: type=1326 audit(259.210:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 259.301917][ T28] audit: type=1326 audit(259.210:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 259.306323][ T28] audit: type=1326 audit(259.220:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=342 compat=0 ip=0x130a70 code=0x7ffc0000 [ 259.306911][ T28] audit: type=1326 audit(259.210:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 259.307821][ T28] audit: type=1326 audit(259.220:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 259.311102][ T28] audit: type=1326 audit(259.220:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 259.311220][ T28] audit: type=1326 audit(259.220:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 264.294650][ T4930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'. [ 269.987421][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 269.987786][ T28] audit: type=1400 audit(269.900:899): avc: denied { lock } for pid=4931 comm="syz.0.212" path="socket:[4725]" dev="sockfs" ino=4725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 276.118961][ T28] audit: type=1400 audit(276.030:900): avc: denied { ioctl } for pid=4937 comm="syz.2.214" path="socket:[4737]" dev="sockfs" ino=4737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.015340][ T28] audit: type=1400 audit(278.930:901): avc: denied { connect } for pid=4941 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 279.502131][ T4949] FAULT_INJECTION: forcing a failure. [ 279.502131][ T4949] name fail_futex, interval 1, probability 0, space 0, times 0 [ 279.502293][ T4949] CPU: 1 UID: 0 PID: 4949 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT [ 279.502347][ T4949] Hardware name: ARM-Versatile Express [ 279.502369][ T4949] Call trace: [ 279.502411][ T4949] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 279.502526][ T4949] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 279.502544][ T4949] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 279.502601][ T4949] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 279.502667][ T4949] r7:dfa09e38 r6:00000000 r5:84876400 r4:82af6240 [ 279.502685][ T4949] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 279.502825][ T4949] [<80a21aec>] (should_fail_ex) from [<80a21d1c>] (should_fail+0x14/0x18) [ 279.502903][ T4949] r8:00000000 r7:dfa09e38 r6:00000004 r5:003562e0 r4:00000000 [ 279.502921][ T4949] [<80a21d08>] (should_fail) from [<80357198>] (get_futex_key+0xa4/0x560) [ 279.502982][ T4949] [<803570f4>] (get_futex_key) from [<8035cdc4>] (futex_wait_setup+0x88/0x29c) [ 279.503055][ T4949] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:84876400 [ 279.503077][ T4949] r4:7efffffc [ 279.503092][ T4949] [<8035cd3c>] (futex_wait_setup) from [<8035d05c>] (__futex_wait+0x84/0x104) [ 279.503159][ T4949] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:84876400 [ 279.503179][ T4949] r4:00000000 [ 279.503193][ T4949] [<8035cfd8>] (__futex_wait) from [<8035d15c>] (futex_wait+0x80/0x10c) [ 279.503264][ T4949] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 279.503347][ T4949] [<8035d0dc>] (futex_wait) from [<803588ac>] (do_futex+0x1b4/0x1d0) [ 279.503423][ T4949] r10:000000f0 r9:00000000 r8:84876400 r7:00000000 r6:003562e0 r5:00000080 [ 279.503445][ T4949] r4:00000000 [ 279.503459][ T4949] [<803586f8>] (do_futex) from [<80359160>] (sys_futex_time32+0x11c/0x1bc) [ 279.503513][ T4949] r4:00000000 [ 279.503528][ T4949] [<80359044>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 279.503574][ T4949] Exception stack(0xdfa09fa8 to 0xdfa09ff0) [ 279.503614][ T4949] 9fa0: 00131df8 ffffffff 003562e0 00000080 00000000 00000000 [ 279.503646][ T4949] 9fc0: 00131df8 ffffffff 76fb67d4 000000f0 00340000 00000000 00000001 76fb60dc [ 279.503672][ T4949] 9fe0: 76fb5f38 76fb5f28 00021ba4 00130a70 [ 279.503707][ T4949] r9:84876400 r8:8020029c r7:000000f0 r6:76fb67d4 r5:ffffffff r4:00131df8 [ 280.928684][ T28] audit: type=1400 audit(280.840:902): avc: denied { mount } for pid=4970 comm="syz.0.227" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 280.939510][ T28] audit: type=1400 audit(280.850:903): avc: denied { read write } for pid=4970 comm="syz.0.227" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 280.939704][ T28] audit: type=1400 audit(280.850:904): avc: denied { open } for pid=4970 comm="syz.0.227" path="/126/trace/events/kmem/kmalloc/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 281.005231][ T28] audit: type=1400 audit(280.920:905): avc: denied { unmount } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 284.423892][ T28] audit: type=1400 audit(284.320:906): avc: denied { execute } for pid=4989 comm="syz.0.235" path="/128/file1" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 285.987764][ T5001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 286.618205][ T28] audit: type=1400 audit(286.530:907): avc: denied { create } for pid=5005 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.924795][ T5018] syz.0.245 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 289.954387][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.955057][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.114543][ T5037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.250'. [ 300.474315][ T5067] syz.0.260 uses obsolete (PF_INET,SOCK_PACKET) [ 300.965983][ T28] audit: type=1400 audit(300.880:908): avc: denied { mounton } for pid=5068 comm="syz.0.263" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.966484][ T5071] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 307.416951][ T5098] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 307.676523][ T28] audit: type=1400 audit(307.590:909): avc: denied { read } for pid=5083 comm="syz.0.269" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.683563][ T28] audit: type=1400 audit(307.590:910): avc: denied { open } for pid=5083 comm="syz.0.269" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 315.257514][ T28] audit: type=1400 audit(315.170:911): avc: denied { watch watch_reads } for pid=5112 comm="syz.2.278" path="/122/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 317.630884][ T5119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.631657][ T5119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.399316][ T28] audit: type=1400 audit(320.310:912): avc: denied { ioctl } for pid=5132 comm="syz.0.283" path="socket:[5539]" dev="sockfs" ino=5539 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.960380][ T5144] netlink: 'syz.0.285': attribute type 4 has an invalid length. [ 324.037724][ T2973] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 324.196618][ T2973] usb 1-1: Using ep0 maxpacket: 8 [ 324.202566][ T2973] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 324.223831][ T2973] usb 1-1: config 0 has no interfaces? [ 324.224058][ T2973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.249946][ T2973] usb 1-1: config 0 descriptor?? [ 324.506108][ T2973] usb 1-1: USB disconnect, device number 8 [ 325.889718][ T5164] veth1_to_bond: entered allmulticast mode [ 325.924291][ T5164] netlink: 148 bytes leftover after parsing attributes in process `syz.0.290'. [ 326.117568][ T5163] veth1_to_bond: left allmulticast mode [ 327.454939][ T4438] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 327.721288][ T4438] usb 1-1: Using ep0 maxpacket: 16 [ 327.727077][ T4438] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.814955][ T4438] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.816581][ T4438] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.938158][ T4438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.938280][ T4438] usb 1-1: Product: syz [ 327.938347][ T4438] usb 1-1: Manufacturer: syz [ 327.942304][ T4438] usb 1-1: SerialNumber: syz [ 328.050669][ T4438] usb 1-1: 0:2 : does not exist [ 328.325907][ T4438] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 328.411942][ T4438] usb 1-1: USB disconnect, device number 9 [ 335.644043][ T28] audit: type=1400 audit(335.560:913): avc: denied { read } for pid=5211 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 336.148404][ T28] audit: type=1400 audit(336.060:914): avc: denied { setopt } for pid=5211 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 337.495257][ T28] audit: type=1400 audit(337.390:915): avc: denied { wake_alarm } for pid=5226 comm="syz.2.305" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.262535][ T28] audit: type=1400 audit(361.170:916): avc: denied { remount } for pid=5266 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 367.944775][ T5276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.946271][ T5276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.106541][ T5283] veth0: entered promiscuous mode [ 369.116541][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 370.803807][ T5295] Zero length message leads to an empty skb [ 394.180460][ T5311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.191570][ T5311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.835460][ T5311] hsr_slave_0: entered promiscuous mode [ 395.836251][ T5311] hsr_slave_1: entered promiscuous mode [ 396.471122][ T5311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.495901][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.499531][ T5311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.511681][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.526625][ T5311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.556026][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.559677][ T5311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.577778][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.835785][ T5311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.146324][ T28] audit: type=1400 audit(404.056:917): avc: denied { unmount } for pid=3870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 404.281263][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.282593][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.651171][ T5311] veth0_vlan: entered promiscuous mode [ 405.702569][ T5311] veth1_vlan: entered promiscuous mode [ 405.822527][ T5311] veth0_macvtap: entered promiscuous mode [ 405.858044][ T5311] veth1_macvtap: entered promiscuous mode [ 405.995172][ T5612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.996595][ T5612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.996702][ T5612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.996771][ T5612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.562031][ T28] audit: type=1400 audit(411.466:918): avc: denied { setopt } for pid=5637 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 411.346292][ T28] audit: type=1400 audit(412.256:919): avc: denied { map } for pid=5643 comm="syz.3.346" path="socket:[6009]" dev="sockfs" ino=6009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 412.085801][ T28] audit: type=1400 audit(412.996:920): avc: denied { setopt } for pid=5654 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.427217][ T2973] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 412.427466][ T2973] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 412.461667][ T2973] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 413.301089][ T5670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.301991][ T5670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.069708][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 421.663922][ T28] audit: type=1400 audit(422.556:921): avc: denied { ioctl } for pid=5711 comm="syz.2.366" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.668574][ T5712] binder: 5711:5712 ioctl 4018620d 0 returned -22 [ 423.536618][ T28] audit: type=1400 audit(424.446:922): avc: denied { write } for pid=5715 comm="syz.2.368" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.985197][ T28] audit: type=1400 audit(432.896:923): avc: denied { watch watch_reads } for pid=5737 comm="syz.2.375" path="/196" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 439.818678][ T28] audit: type=1400 audit(440.726:924): avc: denied { connect } for pid=5761 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.844784][ T28] audit: type=1400 audit(440.756:925): avc: denied { write } for pid=5761 comm="syz.2.385" path="socket:[6670]" dev="sockfs" ino=6670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.858778][ T28] audit: type=1400 audit(440.766:926): avc: denied { accept } for pid=5761 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.788336][ T2810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.876689][ T2810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.967804][ T2810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.059867][ T2810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.546945][ T2810] bond0 (unregistering): (slave 30): Releasing backup interface [ 456.557641][ T2810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.569167][ T2810] bond0 (unregistering): Released all slaves [ 456.684963][ T2810] hsr_slave_0: left promiscuous mode [ 456.687766][ T2810] hsr_slave_1: left promiscuous mode [ 456.717704][ T2810] veth1_macvtap: left promiscuous mode [ 456.718428][ T2810] veth0_macvtap: left promiscuous mode [ 456.718643][ T2810] veth1_vlan: left promiscuous mode [ 456.718761][ T2810] veth0_vlan: left promiscuous mode [ 458.584043][ T28] audit: type=1400 audit(459.486:927): avc: denied { write } for pid=5786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.230252][ T28] audit: type=1400 audit(460.136:928): avc: denied { map } for pid=5792 comm="syz.2.388" path="socket:[6846]" dev="sockfs" ino=6846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.230463][ T28] audit: type=1400 audit(460.136:929): avc: denied { read } for pid=5792 comm="syz.2.388" path="socket:[6846]" dev="sockfs" ino=6846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.866701][ T28] audit: type=1400 audit(460.776:930): avc: denied { write } for pid=5794 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.915861][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.917572][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.346385][ T2966] 8021q: adding VLAN 0 to HW filter on device eth5 [ 460.926589][ T28] audit: type=1400 audit(461.836:931): avc: denied { mount } for pid=5812 comm="syz.2.392" name="/" dev="ramfs" ino=7219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 461.034114][ T5814] input: syz1 as /devices/virtual/input/input10 [ 461.566113][ T28] audit: type=1400 audit(462.466:932): avc: denied { write } for pid=5820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.335108][ T28] audit: type=1400 audit(463.236:933): avc: denied { write } for pid=5864 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.806724][ T2966] 8021q: adding VLAN 0 to HW filter on device eth6 [ 463.685269][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.688316][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.511828][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.538053][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.679535][ T28] audit: type=1400 audit(465.576:934): avc: denied { write } for pid=5932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.731094][ T28] audit: type=1400 audit(466.636:935): avc: denied { write } for pid=5975 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.685251][ T2966] 8021q: adding VLAN 0 to HW filter on device eth7 [ 468.067645][ T28] audit: type=1400 audit(468.966:936): avc: denied { create } for pid=6001 comm="syz.2.399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.161757][ T28] audit: type=1400 audit(469.056:937): avc: denied { write } for pid=6001 comm="syz.2.399" name="file0" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.161874][ T28] audit: type=1400 audit(469.056:938): avc: denied { open } for pid=6001 comm="syz.2.399" path="/219/file0" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.238057][ T28] audit: type=1400 audit(469.146:939): avc: denied { unlink } for pid=3870 comm="syz-executor" name="file0" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.633561][ T6007] input: syz0 as /devices/virtual/input/input11 [ 468.838422][ T5790] hsr_slave_0: entered promiscuous mode [ 468.839681][ T5790] hsr_slave_1: entered promiscuous mode [ 468.840367][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 468.840435][ T5790] Cannot create hsr debugfs directory [ 469.779562][ T28] audit: type=1400 audit(470.686:940): avc: denied { write } for pid=6013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.820101][ T5790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.860543][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.872370][ T5790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.976942][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.986718][ T5790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.001496][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.017777][ T5790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.053779][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.139309][ T28] audit: type=1400 audit(472.036:941): avc: denied { write } for pid=6117 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.155727][ T2966] 8021q: adding VLAN 0 to HW filter on device eth8 [ 473.525904][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.078648][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.079306][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.528730][ T5790] veth0_vlan: entered promiscuous mode [ 480.676804][ T5790] veth1_vlan: entered promiscuous mode [ 480.864941][ T6226] input: syz0 as /devices/virtual/input/input12 [ 480.867515][ T5790] veth0_macvtap: entered promiscuous mode [ 480.887909][ T5790] veth1_macvtap: entered promiscuous mode [ 481.082075][ T6103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.082285][ T6103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.082385][ T6103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.082452][ T6103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.166647][ T28] audit: type=1400 audit(483.076:942): avc: denied { create } for pid=6244 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 482.173481][ T28] audit: type=1400 audit(483.076:943): avc: denied { sys_admin } for pid=6244 comm="syz.2.419" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 482.717056][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 483.015407][ T28] audit: type=1400 audit(483.926:944): avc: denied { set_context_mgr } for pid=6252 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 483.264686][ T28] audit: type=1400 audit(484.176:945): avc: denied { map } for pid=6252 comm="syz.2.422" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.356226][ T28] audit: type=1400 audit(484.266:946): avc: denied { call } for pid=6252 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 483.498390][ T6253] binder: 6252:6253 ioctl c0306201 20000180 returned -14 [ 485.327761][ T28] audit: type=1400 audit(486.216:947): avc: denied { write } for pid=6257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.984179][ T28] audit: type=1400 audit(486.876:948): avc: denied { write } for pid=6267 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.998112][ T28] audit: type=1400 audit(486.906:949): avc: denied { audit_write } for pid=6268 comm="syz.2.425" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 487.121757][ T28] audit: type=1400 audit(488.026:950): avc: denied { write } for pid=6273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.604539][ T28] audit: type=1400 audit(488.516:951): avc: denied { name_bind } for pid=6279 comm="syz.4.427" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 487.682018][ T28] audit: type=1400 audit(488.586:952): avc: denied { write } for pid=6278 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.505841][ T28] audit: type=1400 audit(490.386:953): avc: denied { write } for pid=6290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.131151][ T28] audit: type=1400 audit(491.036:954): avc: denied { getopt } for pid=6295 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.271999][ T28] audit: type=1400 audit(491.176:955): avc: denied { write } for pid=6298 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.620017][ T28] audit: type=1400 audit(492.526:956): avc: denied { write } for pid=6305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.627016][ T28] audit: type=1400 audit(492.536:957): avc: denied { create } for pid=6311 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 491.647584][ T28] audit: type=1400 audit(492.556:958): avc: denied { bind } for pid=6311 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 491.685425][ T28] audit: type=1400 audit(492.576:959): avc: denied { setopt } for pid=6311 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 491.707453][ T28] audit: type=1400 audit(492.606:960): avc: denied { accept } for pid=6311 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 492.766860][ T28] audit: type=1400 audit(493.676:961): avc: denied { write } for pid=6316 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.547884][ T6327] FAULT_INJECTION: forcing a failure. [ 494.547884][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 494.548027][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.2.441 Not tainted syzkaller #0 PREEMPT [ 494.548059][ T6327] Hardware name: ARM-Versatile Express [ 494.548071][ T6327] Call trace: [ 494.548093][ T6327] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 494.548156][ T6327] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 494.548176][ T6327] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 494.548236][ T6327] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 494.548298][ T6327] r7:00000100 r6:00000000 r5:840d7080 r4:82b1601c [ 494.548316][ T6327] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 494.548378][ T6327] [<80a21aec>] (should_fail_ex) from [<80579f00>] (should_failslab+0x6c/0x94) [ 494.548448][ T6327] r8:840d7080 r7:00000100 r6:805acabc r5:00000cc0 r4:830013c0 [ 494.548469][ T6327] [<80579e94>] (should_failslab) from [<80559950>] (__kmalloc_cache_noprof+0x58/0x338) [ 494.548526][ T6327] [<805598f8>] (__kmalloc_cache_noprof) from [<805acabc>] (sys_memfd_create+0x98/0x1dc) [ 494.548592][ T6327] r10:00000181 r9:840d7080 r8:00000000 r7:00000000 r6:840d7080 r5:00000010 [ 494.548614][ T6327] r4:20000340 [ 494.548629][ T6327] [<805aca24>] (sys_memfd_create) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 494.548671][ T6327] Exception stack(0xea565fa8 to 0xea565ff0) [ 494.548713][ T6327] 5fa0: 00000000 00000000 20000340 00000000 00000000 00000000 [ 494.548751][ T6327] 5fc0: 00000000 00000000 0035630c 00000181 003562d8 00000000 00000001 76fff0dc [ 494.548776][ T6327] 5fe0: 76ffee88 76ffee78 00018fb8 00130a70 [ 494.548860][ T6327] r8:8020029c r7:00000181 r6:0035630c r5:00000000 r4:00000000 [ 496.231572][ T28] audit: type=1326 audit(497.136:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.231740][ T28] audit: type=1326 audit(497.136:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.238148][ T28] audit: type=1326 audit(497.136:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.238283][ T28] audit: type=1326 audit(497.136:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.238335][ T28] audit: type=1326 audit(497.136:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.238380][ T28] audit: type=1326 audit(497.136:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.238421][ T28] audit: type=1326 audit(497.136:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.238458][ T28] audit: type=1326 audit(497.136:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 496.253769][ T28] audit: type=1326 audit(497.156:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.445" exe="/syz-executor" sig=0 arch=40000028 syscall=282 compat=0 ip=0x130a70 code=0x7ffc0000 [ 507.594974][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 507.595098][ T28] audit: type=1400 audit(508.506:1039): avc: denied { bind } for pid=6377 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 524.347562][ T28] audit: type=1400 audit(525.256:1040): avc: denied { relabelfrom } for pid=6440 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 524.347759][ T28] audit: type=1400 audit(525.256:1041): avc: denied { relabelto } for pid=6440 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 528.834915][ T6486] FAULT_INJECTION: forcing a failure. [ 528.834915][ T6486] name failslab, interval 1, probability 0, space 0, times 0 [ 528.835137][ T6486] CPU: 1 UID: 0 PID: 6486 Comm: syz.2.494 Not tainted syzkaller #0 PREEMPT [ 528.835199][ T6486] Hardware name: ARM-Versatile Express [ 528.835225][ T6486] Call trace: [ 528.835269][ T6486] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 528.835382][ T6486] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 528.835403][ T6486] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 528.835460][ T6486] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 528.835530][ T6486] r7:84ec0c80 r6:00000000 r5:84ec0c80 r4:82b1601c [ 528.835546][ T6486] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 528.835609][ T6486] [<80a21aec>] (should_fail_ex) from [<80579f00>] (should_failslab+0x6c/0x94) [ 528.835690][ T6486] r8:00000000 r7:84ec0c80 r6:805c4ab8 r5:00000cc0 r4:830baa80 [ 528.835712][ T6486] [<80579e94>] (should_failslab) from [<805578e4>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 528.835776][ T6486] [<80557888>] (kmem_cache_alloc_noprof) from [<805c4ab8>] (do_getname+0x2c/0x14c) [ 528.835875][ T6486] r10:00000015 r9:84ec0c80 r8:00000001 r7:00000000 r6:00000000 r5:8251d900 [ 528.835899][ T6486] r4:00000000 [ 528.835913][ T6486] [<805c4a8c>] (do_getname) from [<805cb338>] (user_path_at+0x30/0x6c) [ 528.835983][ T6486] r10:00000015 r9:84ec0c80 r8:00000000 r7:e4255f6c r6:ffffff9c r5:00000001 [ 528.836007][ T6486] r4:00000000 r3:e4255f6c [ 528.836021][ T6486] [<805cb308>] (user_path_at) from [<805ebca8>] (sys_mount+0x1bc/0x260) [ 528.836082][ T6486] r7:00000000 r6:00000000 r5:00000000 r4:00000000 [ 528.836097][ T6486] [<805ebaec>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 528.836146][ T6486] Exception stack(0xe4255fa8 to 0xe4255ff0) [ 528.836185][ T6486] 5fa0: 00000000 00000000 00000000 00000000 00000000 00000000 [ 528.836294][ T6486] 5fc0: 00000000 00000000 00356318 00000015 003562d8 00000000 00000001 76fff0dc [ 528.836334][ T6486] 5fe0: 76ffee88 76ffee78 00018fb8 00130a70 [ 528.836370][ T6486] r10:00000015 r9:84ec0c80 r8:8020029c r7:00000015 r6:00356318 r5:00000000 [ 528.836389][ T6486] r4:00000000 [ 529.765275][ T28] audit: type=1326 audit(530.676:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.2.496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 529.766697][ T28] audit: type=1326 audit(530.676:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.2.496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 529.779108][ T28] audit: type=1326 audit(530.686:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.2.496" exe="/syz-executor" sig=0 arch=40000028 syscall=333 compat=0 ip=0x130a70 code=0x7ffc0000 [ 529.779281][ T28] audit: type=1326 audit(530.686:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.2.496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 529.779353][ T28] audit: type=1326 audit(530.686:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.2.496" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 534.827890][ T28] audit: type=1326 audit(535.736:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.2.504" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x0 [ 547.127644][ T28] audit: type=1400 audit(548.036:1048): avc: denied { read } for pid=6533 comm="syz.2.514" name="file1" dev="tmpfs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 547.394230][ T6536] FAULT_INJECTION: forcing a failure. [ 547.394230][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 547.394411][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.2.515 Not tainted syzkaller #0 PREEMPT [ 547.394469][ T6536] Hardware name: ARM-Versatile Express [ 547.394495][ T6536] Call trace: [ 547.394541][ T6536] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 547.394647][ T6536] r7:60000013 r6:60000013 r5:8230865c r4:00000000 [ 547.394665][ T6536] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70) [ 547.394722][ T6536] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c) [ 547.394783][ T6536] r7:00000020 r6:00000000 r5:84e3cb00 r4:82b1601c [ 547.394797][ T6536] [<8021e84c>] (dump_stack) from [<80a21ca8>] (should_fail_ex+0x1bc/0x21c) [ 547.394862][ T6536] [<80a21aec>] (should_fail_ex) from [<80579f00>] (should_failslab+0x6c/0x94) [ 547.394935][ T6536] r8:84e3cb00 r7:00000020 r6:8062f3fc r5:00000cc0 r4:83001240 [ 547.394953][ T6536] [<80579e94>] (should_failslab) from [<80559950>] (__kmalloc_cache_noprof+0x58/0x338) [ 547.395009][ T6536] [<805598f8>] (__kmalloc_cache_noprof) from [<8062f3fc>] (do_eventfd+0x44/0x150) [ 547.395076][ T6536] r10:0000015f r9:84e3cb00 r8:8020029c r7:00000000 r6:00000000 r5:0000000c [ 547.395095][ T6536] r4:00000000 [ 547.395110][ T6536] [<8062f3b8>] (do_eventfd) from [<8062fcc4>] (sys_eventfd+0x14/0x18) [ 547.395168][ T6536] r7:0000015f r6:00356308 r5:00000000 r4:00000000 [ 547.395186][ T6536] [<8062fcb0>] (sys_eventfd) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 547.395229][ T6536] Exception stack(0xdfa0dfa8 to 0xdfa0dff0) [ 547.395270][ T6536] dfa0: 00000000 00000000 0000000c 00000000 00000000 00000000 [ 547.395306][ T6536] dfc0: 00000000 00000000 00356308 0000015f 003562d8 00000000 00000001 76fff0dc [ 547.395335][ T6536] dfe0: 76ffee88 76ffee78 00018fb8 00130a70 [ 547.697695][ T28] audit: type=1326 audit(548.606:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.707040][ T28] audit: type=1326 audit(548.616:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.707191][ T28] audit: type=1326 audit(548.616:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.707242][ T28] audit: type=1326 audit(548.616:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.707304][ T28] audit: type=1326 audit(548.616:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.707377][ T28] audit: type=1326 audit(548.616:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.707442][ T28] audit: type=1326 audit(548.616:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.708051][ T28] audit: type=1326 audit(548.616:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 547.717748][ T28] audit: type=1326 audit(548.616:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.2.516" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 552.223566][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 552.223689][ T28] audit: type=1400 audit(553.126:1097): avc: denied { execute } for pid=6557 comm="syz.2.524" path="/309/dev/sda" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 554.105934][ T6562] bridge_slave_0: entered promiscuous mode [ 554.137216][ T6562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 563.507556][ T6103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.268966][ T6103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.497667][ T6103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.577319][ T6103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.617202][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.672591][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.686610][ T6103] bond0 (unregistering): Released all slaves [ 565.773841][ T6103] hsr_slave_0: left promiscuous mode [ 565.784381][ T6103] hsr_slave_1: left promiscuous mode [ 565.841295][ T6103] veth1_macvtap: left promiscuous mode [ 565.841509][ T6103] veth0_macvtap: left promiscuous mode [ 565.841720][ T6103] veth1_vlan: left promiscuous mode [ 565.841877][ T6103] veth0_vlan: left promiscuous mode [ 571.187075][ T28] audit: type=1400 audit(572.096:1098): avc: denied { write } for pid=6634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.742495][ T28] audit: type=1400 audit(572.646:1099): avc: denied { mounton } for pid=6644 comm="syz.4.538" path="/39/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 572.016021][ T28] audit: type=1400 audit(572.926:1100): avc: denied { write } for pid=6646 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.364627][ T2966] 8021q: adding VLAN 0 to HW filter on device eth9 [ 574.894781][ T28] audit: type=1400 audit(575.776:1101): avc: denied { write } for pid=6657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.023777][ T28] audit: type=1400 audit(576.926:1102): avc: denied { write } for pid=6666 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.129661][ T2966] 8021q: adding VLAN 0 to HW filter on device eth10 [ 578.747672][ T28] audit: type=1400 audit(579.656:1103): avc: denied { write } for pid=6718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.340009][ T28] audit: type=1400 audit(580.246:1104): avc: denied { write } for pid=6732 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.718767][ T2966] 8021q: adding VLAN 0 to HW filter on device eth11 [ 580.774116][ T28] audit: type=1400 audit(581.666:1105): avc: denied { write } for pid=6790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.797915][ T6654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.829521][ T6654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.103648][ T28] audit: type=1400 audit(582.006:1106): avc: denied { write } for pid=6818 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.459828][ T2966] 8021q: adding VLAN 0 to HW filter on device eth12 [ 582.894596][ T6654] hsr_slave_0: entered promiscuous mode [ 582.896624][ T6654] hsr_slave_1: entered promiscuous mode [ 583.901874][ T6654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 583.919434][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.922249][ T6654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 583.938282][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.942078][ T6654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 583.956076][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.958993][ T6654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 583.977905][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.158920][ T6654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.505479][ T28] audit: type=1400 audit(587.416:1107): avc: denied { setopt } for pid=7013 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 593.067310][ T28] audit: type=1400 audit(593.976:1108): avc: denied { write } for pid=7050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.364106][ T28] audit: type=1400 audit(594.276:1109): avc: denied { write } for pid=7057 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.907585][ T6654] veth0_vlan: entered promiscuous mode [ 593.941597][ T6654] veth1_vlan: entered promiscuous mode [ 593.993829][ T28] audit: type=1400 audit(594.896:1110): avc: denied { write } for pid=7066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.049660][ T6654] veth0_macvtap: entered promiscuous mode [ 594.074633][ T6654] veth1_macvtap: entered promiscuous mode [ 594.193926][ T2810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.194100][ T2810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.194173][ T2810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.194237][ T2810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.335741][ T28] audit: type=1400 audit(595.246:1111): avc: denied { write } for pid=7069 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.083316][ T28] audit: type=1326 audit(596.946:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.2.571" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 596.145795][ T7084] capability: warning: `syz.2.571' uses 32-bit capabilities (legacy support in use) [ 596.157050][ T28] audit: type=1326 audit(597.056:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.2.571" exe="/syz-executor" sig=0 arch=40000028 syscall=185 compat=0 ip=0x130a70 code=0x7ffc0000 [ 596.157187][ T28] audit: type=1326 audit(597.056:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.2.571" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 596.157242][ T28] audit: type=1326 audit(597.056:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.2.571" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 596.189763][ T28] audit: type=1326 audit(597.096:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.2.571" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130a70 code=0x7ffc0000 [ 596.189937][ T28] audit: type=1326 audit(597.096:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.2.571" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 597.213971][ T7093] netlink: 3560 bytes leftover after parsing attributes in process `syz.5.575'. [ 599.667970][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 599.668093][ T28] audit: type=1400 audit(600.576:1127): avc: denied { write } for pid=7107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.943414][ T28] audit: type=1400 audit(601.846:1128): avc: denied { write } for pid=7124 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.933316][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.5.597'. [ 604.005588][ T7158] erspan1: entered allmulticast mode [ 605.221436][ T28] audit: type=1400 audit(606.126:1129): avc: denied { getopt } for pid=7169 comm="syz.5.600" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 607.321389][ T2678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.466585][ T2678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.592490][ T28] audit: type=1326 audit(608.496:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.592640][ T28] audit: type=1326 audit(608.496:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.601862][ T2678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.609154][ T28] audit: type=1326 audit(608.506:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.609334][ T28] audit: type=1326 audit(608.506:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.609392][ T28] audit: type=1326 audit(608.506:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.609449][ T28] audit: type=1326 audit(608.506:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.609497][ T28] audit: type=1326 audit(608.506:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.609543][ T28] audit: type=1326 audit(608.506:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.609589][ T28] audit: type=1326 audit(608.506:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.605" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a70 code=0x7ffc0000 [ 607.759411][ T2678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.549577][ T2678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.572180][ T2678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.577314][ T2678] bond0 (unregistering): Released all slaves [ 608.765402][ T2678] hsr_slave_0: left promiscuous mode [ 608.767746][ T2678] hsr_slave_1: left promiscuous mode [ 608.826024][ T2678] veth1_macvtap: left promiscuous mode [ 608.826200][ T2678] veth0_macvtap: left promiscuous mode [ 608.826395][ T2678] veth1_vlan: left promiscuous mode [ 608.826524][ T2678] veth0_vlan: left promiscuous mode [ 612.783389][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 612.783509][ T28] audit: type=1400 audit(613.686:1240): avc: denied { write } for pid=7206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.091162][ T28] audit: type=1400 audit(614.996:1241): avc: denied { write } for pid=7217 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.697489][ T2966] 8021q: adding VLAN 0 to HW filter on device eth13 [ 617.334357][ T28] audit: type=1400 audit(618.236:1242): avc: denied { write } for pid=7225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.025721][ T28] audit: type=1400 audit(618.936:1243): avc: denied { bind } for pid=7238 comm="syz.5.617" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 618.025974][ T28] audit: type=1400 audit(618.936:1244): avc: denied { name_bind } for pid=7238 comm="syz.5.617" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 618.026062][ T28] audit: type=1400 audit(618.936:1245): avc: denied { node_bind } for pid=7238 comm="syz.5.617" saddr=ff02::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 618.190142][ T28] audit: type=1400 audit(619.096:1246): avc: denied { write } for pid=7235 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.761594][ T2966] 8021q: adding VLAN 0 to HW filter on device eth14 [ 618.861498][ T28] audit: type=1400 audit(619.766:1247): avc: denied { unlink } for pid=3870 comm="syz-executor" name="tap58" dev="devtmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 621.390604][ T28] audit: type=1400 audit(622.296:1248): avc: denied { write } for pid=7260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.018348][ T7268] TCP: TCP_TX_DELAY enabled [ 622.883533][ T28] audit: type=1400 audit(623.776:1249): avc: denied { write } for pid=7272 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.766581][ T2966] 8021q: adding VLAN 0 to HW filter on device eth15 [ 626.412181][ T28] audit: type=1400 audit(627.316:1250): avc: denied { write } for pid=7297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.610087][ T28] audit: type=1400 audit(628.516:1251): avc: denied { write } for pid=7340 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.043933][ T2966] 8021q: adding VLAN 0 to HW filter on device eth16 [ 631.826119][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.832361][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.958185][ T7261] hsr_slave_0: entered promiscuous mode [ 633.959707][ T7261] hsr_slave_1: entered promiscuous mode [ 633.960389][ T7261] debugfs: 'hsr0' already exists in 'hsr' [ 633.960463][ T7261] Cannot create hsr debugfs directory [ 634.789465][ T7261] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 634.811508][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.817645][ T7261] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 634.829979][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.839728][ T7261] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 634.849097][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.851853][ T7261] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 634.865461][ T7261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.541724][ T5612] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.660261][ T5612] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.776610][ T5612] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.871815][ T5612] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.275794][ T5612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.292521][ T5612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.300331][ T5612] bond0 (unregistering): Released all slaves [ 636.376476][ T5612] hsr_slave_0: left promiscuous mode [ 636.384198][ T5612] hsr_slave_1: left promiscuous mode [ 636.391408][ T5612] veth1_macvtap: left promiscuous mode [ 636.391534][ T5612] veth0_macvtap: left promiscuous mode [ 636.391692][ T5612] veth1_vlan: left promiscuous mode [ 636.391811][ T5612] veth0_vlan: left promiscuous mode [ 636.918189][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.872559][ T28] audit: type=1400 audit(638.776:1252): avc: denied { write } for pid=7644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.132436][ T28] audit: type=1400 audit(639.036:1253): avc: denied { write } for pid=7681 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.339364][ T2966] 8021q: adding VLAN 0 to HW filter on device eth17 [ 640.028527][ T28] audit: type=1400 audit(640.936:1254): avc: denied { write } for pid=7710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.411166][ T28] audit: type=1400 audit(641.316:1255): avc: denied { write } for pid=7750 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.654620][ T2966] 8021q: adding VLAN 0 to HW filter on device eth18 [ 640.956727][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.962461][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.949628][ T28] audit: type=1400 audit(642.856:1256): avc: denied { write } for pid=7800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.237093][ T7606] hsr_slave_0: entered promiscuous mode [ 642.238328][ T7606] hsr_slave_1: entered promiscuous mode [ 642.303805][ T28] audit: type=1400 audit(643.206:1257): avc: denied { write } for pid=7833 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.996374][ T2966] 8021q: adding VLAN 0 to HW filter on device eth19 [ 643.368151][ T7606] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 643.372273][ T7606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.380266][ T7606] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 643.397404][ T7606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.398882][ T7606] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 643.402241][ T7606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.416349][ T7606] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 643.435450][ T7606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.141788][ T28] audit: type=1400 audit(645.046:1258): avc: denied { write } for pid=7913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.690314][ T28] audit: type=1400 audit(645.596:1259): avc: denied { write } for pid=7954 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.834598][ T7261] veth0_vlan: entered promiscuous mode [ 644.855449][ T7261] veth1_vlan: entered promiscuous mode [ 644.957036][ T7261] veth0_macvtap: entered promiscuous mode [ 644.968139][ T7261] veth1_macvtap: entered promiscuous mode [ 645.187443][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.224305][ T5612] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.225458][ T5612] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.225564][ T5612] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.225646][ T5612] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.509636][ T28] audit: type=1400 audit(646.416:1260): avc: denied { write } for pid=7959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.951542][ T28] audit: type=1400 audit(646.856:1261): avc: denied { write } for pid=7964 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.749510][ T28] audit: type=1400 audit(647.656:1262): avc: denied { write } for pid=7976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.827124][ T28] audit: type=1400 audit(648.736:1263): avc: denied { write } for pid=7985 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.019093][ T28] audit: type=1400 audit(649.926:1264): avc: denied { write } for pid=7999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.649725][ T28] audit: type=1400 audit(650.556:1265): avc: denied { write } for pid=8011 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.158026][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.159883][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.994763][ T28] audit: type=1400 audit(651.896:1266): avc: denied { write } for pid=8035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.759257][ T28] audit: type=1400 audit(652.666:1267): avc: denied { write } for pid=8046 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.722623][ T2966] 8021q: adding VLAN 0 to HW filter on device eth20 [ 654.314536][ T7606] veth0_vlan: entered promiscuous mode [ 654.400128][ T7606] veth1_vlan: entered promiscuous mode [ 654.784034][ T28] audit: type=1400 audit(655.686:1268): avc: denied { write } for pid=8066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.852476][ T7606] veth0_macvtap: entered promiscuous mode [ 654.889007][ T7606] veth1_macvtap: entered promiscuous mode [ 655.022484][ T2495] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.023988][ T2495] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.024105][ T2495] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.024156][ T2495] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.050233][ T28] audit: type=1400 audit(655.956:1269): avc: denied { write } for pid=8071 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.605486][ T28] audit: type=1400 audit(658.516:1270): avc: denied { bind } for pid=8063 comm="syz.6.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 658.596722][ T28] audit: type=1400 audit(659.506:1271): avc: denied { write } for pid=8087 comm="syz.7.663" name="netlink" dev="proc" ino=4026532748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 661.874811][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.875456][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.896775][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.899281][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.265906][ T28] audit: type=1400 audit(669.176:1272): avc: denied { write } for pid=8144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.424107][ T28] audit: type=1400 audit(670.276:1273): avc: denied { write } for pid=8150 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.434097][ T28] audit: type=1400 audit(674.336:1274): avc: denied { write } for pid=8159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.913631][ T28] audit: type=1400 audit(675.816:1275): avc: denied { write } for pid=8167 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.531462][ T28] audit: type=1400 audit(676.436:1276): avc: denied { mount } for pid=8169 comm="syz.6.687" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 675.545250][ T28] audit: type=1400 audit(676.456:1277): avc: denied { search } for pid=8169 comm="syz.6.687" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.546749][ T28] audit: type=1400 audit(676.456:1278): avc: denied { search } for pid=8169 comm="syz.6.687" name="usb_gadget" dev="configfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.547855][ T28] audit: type=1400 audit(676.456:1279): avc: denied { write search } for pid=8169 comm="syz.6.687" name="usb_gadget" dev="configfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.551529][ T28] audit: type=1400 audit(676.456:1280): avc: denied { add_name } for pid=8169 comm="syz.6.687" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.552244][ T28] audit: type=1400 audit(676.456:1281): avc: denied { create } for pid=8169 comm="syz.6.687" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 675.582759][ T28] audit: type=1400 audit(676.486:1282): avc: denied { search } for pid=8169 comm="syz.6.687" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.584392][ T28] audit: type=1400 audit(676.496:1283): avc: denied { search } for pid=8169 comm="syz.6.687" name="usb_gadget" dev="configfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 676.494101][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 676.654726][ T44] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 676.657429][ T44] usb 1-1: Dual-Role OTG device on HNP port [ 676.661396][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.699108][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 678.778184][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 678.778831][ T28] audit: type=1400 audit(679.686:1327): avc: denied { write } for pid=8209 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.371854][ T28] audit: type=1400 audit(680.276:1328): avc: denied { write } for pid=8213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.383820][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.384673][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.899938][ T28] audit: type=1400 audit(680.806:1329): avc: denied { write } for pid=8222 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.389119][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.389688][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.165834][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.166418][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.269704][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.271823][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.330805][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.715'. [ 703.384631][ T8291] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 703.406908][ T8291] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 704.024953][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.029684][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.624718][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.625352][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.177518][ T28] audit: type=1400 audit(717.086:1330): avc: denied { allowed } for pid=8327 comm="syz.6.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 720.452543][ T28] audit: type=1400 audit(721.356:1331): avc: denied { bind } for pid=8353 comm="syz.7.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 720.593364][ T28] audit: type=1400 audit(721.486:1332): avc: denied { listen } for pid=8353 comm="syz.7.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 726.947599][ T28] audit: type=1400 audit(727.856:1333): avc: denied { create } for pid=8352 comm="syz.6.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 726.978789][ T28] audit: type=1400 audit(727.886:1334): avc: denied { getopt } for pid=8352 comm="syz.6.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 727.066030][ T28] audit: type=1400 audit(727.976:1335): avc: denied { mounton } for pid=8352 comm="syz.6.738" path="/70/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 727.801874][ T28] audit: type=1400 audit(728.706:1336): avc: denied { write } for pid=8352 comm="syz.6.738" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 728.054646][ T28] audit: type=1400 audit(728.966:1337): avc: denied { setattr } for pid=8352 comm="syz.6.738" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 735.746342][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.747004][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.840037][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.840444][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.136585][ T28] audit: type=1400 audit(745.046:1338): avc: denied { relabelfrom } for pid=8461 comm="syz.7.774" name="" dev="pipefs" ino=12093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 748.144916][ T28] audit: type=1400 audit(749.056:1339): avc: denied { read } for pid=8483 comm="syz.6.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 749.646474][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.788'. [ 749.807257][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.808631][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.754572][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.756232][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.188242][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.190641][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.270655][ T8544] af_packet: tpacket_rcv: packet too big, clamped from 131 to 4294967286. macoff=82 [ 758.657863][ T8548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8548 comm=syz.6.806 [ 758.658033][ T8548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8548 comm=syz.6.806 [ 762.292707][ T8547] syzkaller0: entered promiscuous mode [ 762.310308][ T8547] syzkaller0: entered allmulticast mode [ 762.641848][ T8564] tap0: tun_chr_ioctl cmd 35108 [ 768.101633][ T8605] 8<--- cut here --- [ 768.101758][ T8605] Unable to handle kernel paging request at virtual address fee02f03 when write [ 768.101862][ T8605] [fee02f03] *pgd=80000080007003, *pmd=00000000 [ 768.102877][ T8605] Internal error: Oops: a06 [#1] SMP ARM [ 768.106628][ T8605] Modules linked in: [ 768.108304][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.6.825 Tainted: G L syzkaller #0 PREEMPT [ 768.109933][ T8605] Tainted: [L]=SOFTLOCKUP [ 768.110490][ T8605] Hardware name: ARM-Versatile Express [ 768.111063][ T8605] PC is at subdev_8255_io+0x60/0x6c [ 768.111671][ T8605] LR is at subdev_8255_io+0x4c/0x6c [ 768.112132][ T8605] pc : [<814e3ff4>] lr : [<814e3fe0>] psr: 60000013 [ 768.112699][ T8605] sp : e011dcb8 ip : e011dcb8 fp : e011dcd4 [ 768.113043][ T8605] r10: 00002f00 r9 : 00000004 r8 : e011dda4 [ 768.113437][ T8605] r7 : 00000000 r6 : 0000009b r5 : 8426f180 r4 : 00002f03 [ 768.113858][ T8605] r3 : 0000009b r2 : fee02f03 r1 : 00000001 r0 : 8426f180 [ 768.114365][ T8605] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 768.114945][ T8605] Control: 30c5387d Table: 876c6340 DAC: fffffffd [ 768.115621][ T8605] Register r0 information: slab kmalloc-192 start 8426f180 pointer offset 0 size 192 [ 768.117948][ T8605] Register r1 information: non-paged memory [ 768.118886][ T8605] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 768.120107][ T8605] Register r3 information: non-paged memory [ 768.120747][ T8605] Register r4 information: non-paged memory [ 768.121396][ T8605] Register r5 information: slab kmalloc-192 start 8426f180 pointer offset 0 size 192 [ 768.122483][ T8605] Register r6 information: non-paged memory [ 768.122868][ T8605] Register r7 information: NULL pointer [ 768.123290][ T8605] Register r8 information: 2-page vmalloc region starting at 0xe011c000 allocated at kernel_clone+0xc4/0x440 [ 768.123918][ T8605] Register r9 information: non-paged memory [ 768.124347][ T8605] Register r10 information: non-paged memory [ 768.124796][ T8605] Register r11 information: 2-page vmalloc region starting at 0xe011c000 allocated at kernel_clone+0xc4/0x440 [ 768.125784][ T8605] Register r12 information: 2-page vmalloc region starting at 0xe011c000 allocated at kernel_clone+0xc4/0x440 [ 768.126622][ T8605] Process syz.6.825 (pid: 8605, stack limit = 0xe011c000) [ 768.127160][ T8605] Stack: (0xe011dcb8 to 0xe011e000) [ 768.127539][ T8605] dca0: 814e3f94 00002f00 [ 768.128117][ T8605] dcc0: 8426f180 00000000 e011dcf4 e011dcd8 814e3cd0 814e3fa0 00002f00 8055881c [ 768.129307][ T8605] dce0: 86ee3800 86ee3800 e011dd14 e011dcf8 814e4088 814e3c84 8426f180 00000000 [ 768.129874][ T8605] dd00: 86ee3800 00000000 e011dd54 e011dd18 814e4238 814e400c ffffffff 00000004 [ 768.130458][ T8605] dd20: 82a1e300 00000000 00000000 82bd917c 8426f180 00000000 e011dd90 8426f180 [ 768.131224][ T8605] dd40: 00000000 82d317a0 e011dd8c e011dd58 814d2bc0 814e41d0 40946400 00000000 [ 768.131738][ T8605] dd60: e011dd7c 20000300 8426f180 b5403587 40946400 00000001 00000003 84ed2580 [ 768.132268][ T8605] dd80: e011de4c e011dd90 814ce3c4 814d2ac4 35353238 00000000 00000000 00000000 [ 768.132920][ T8605] dda0: 00000000 00002f00 00000005 0000d09a ffffffff 00000005 fffffffe 20000004 [ 768.135210][ T8605] ddc0: 00000000 00000ffe 7fffffff 00000005 00000002 00000004 00000008 0000fffc [ 768.143301][ T8605] dde0: 00000006 00000005 000007ff 00100830 00000008 00010000 00000009 00000c4f [ 768.143793][ T8605] de00: 00000101 00000002 00008001 00000004 00000003 00000000 00000002 00000006 [ 768.144390][ T8605] de20: 00000000 ad201928 00000000 87477800 8426f180 20000300 40946400 00000001 [ 768.145001][ T8605] de40: e011df14 e011de50 814cf6ec 814ce304 00000000 ad201928 00000000 00000000 [ 768.145545][ T8605] de60: 8252884c e011dea4 0000005f 847ec408 00000064 8426f1b0 e011dee4 e011de88 [ 768.146172][ T8605] de80: 80828c50 8081efdc 00000064 00000001 00000000 e011dea4 866e3710 8343baa0 [ 768.146897][ T8605] dea0: 00006400 0000000b e011de98 00000000 00000000 ad201928 00000000 87477800 [ 768.147433][ T8605] dec0: 40946400 20000300 20000300 87477800 00000003 84ed2580 e011def4 e011dee8 [ 768.148004][ T8605] dee0: 80828d84 ad201928 e011df14 00000000 87477801 40946400 20000300 87477800 [ 768.148658][ T8605] df00: 00000003 84ed2580 e011dfa4 e011df18 805d0efc 814cf3a4 ecac8b10 84ed2580 [ 768.149392][ T8605] df20: e011df3c e011df30 81bacbc0 81baca8c e011df54 e011df40 8025b9d4 8028f74c [ 768.150110][ T8605] df40: e011dfb0 40000000 e011df84 e011df58 80221bdc 8025b98c 00000000 82a1a04c [ 768.150872][ T8605] df60: e011dfb0 0013ec10 ecac8b10 80221b30 00000000 ad201928 e011dfac 00000000 [ 768.151446][ T8605] df80: 00000000 00356310 00000036 8020029c 84ed2580 00000036 00000000 e011dfa8 [ 768.152190][ T8605] dfa0: 80200060 805d0cc4 00000000 00000000 00000003 40946400 20000300 00000000 [ 768.152811][ T8605] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f420dc [ 768.153152][ T8605] dfe0: 76f41e88 76f41e78 00018fb8 00130a70 60000010 00000003 00000000 00000000 [ 768.153544][ T8605] Call trace: [ 768.153811][ T8605] [<814e3f94>] (subdev_8255_io) from [<814e3cd0>] (subdev_8255_do_config+0x58/0x60) [ 768.154398][ T8605] r7:00000000 r6:8426f180 r5:00002f00 r4:814e3f94 [ 768.154715][ T8605] [<814e3c78>] (subdev_8255_do_config) from [<814e4088>] (subdev_8255_io_init+0x88/0x98) [ 768.155324][ T8605] r4:86ee3800 [ 768.155558][ T8605] [<814e4000>] (subdev_8255_io_init) from [<814e4238>] (dev_8255_attach+0x74/0x138) [ 768.156161][ T8605] r7:00000000 r6:86ee3800 r5:00000000 r4:8426f180 [ 768.156445][ T8605] [<814e41c4>] (dev_8255_attach) from [<814d2bc0>] (comedi_device_attach+0x108/0x244) [ 768.157032][ T8605] r10:82d317a0 r9:00000000 r8:8426f180 r7:e011dd90 r6:00000000 r5:8426f180 [ 768.157588][ T8605] r4:82bd917c [ 768.157802][ T8605] [<814d2ab8>] (comedi_device_attach) from [<814ce3c4>] (do_devconfig_ioctl+0xcc/0x218) [ 768.158307][ T8605] r10:84ed2580 r9:00000003 r8:00000001 r7:40946400 r6:b5403587 r5:8426f180 [ 768.158747][ T8605] r4:20000300 [ 768.159012][ T8605] [<814ce2f8>] (do_devconfig_ioctl) from [<814cf6ec>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 768.159475][ T8605] r8:00000001 r7:40946400 r6:20000300 r5:8426f180 r4:87477800 [ 768.159850][ T8605] [<814cf398>] (comedi_unlocked_ioctl) from [<805d0efc>] (sys_ioctl+0x244/0xb5c) [ 768.160398][ T8605] r10:84ed2580 r9:00000003 r8:87477800 r7:20000300 r6:40946400 r5:87477801 [ 768.160973][ T8605] r4:00000000 [ 768.161275][ T8605] [<805d0cb8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 768.161861][ T8605] Exception stack(0xe011dfa8 to 0xe011dff0) [ 768.162381][ T8605] dfa0: 00000000 00000000 00000003 40946400 20000300 00000000 [ 768.162884][ T8605] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f420dc [ 768.163356][ T8605] dfe0: 76f41e88 76f41e78 00018fb8 00130a70 [ 768.163770][ T8605] r10:00000036 r9:84ed2580 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 768.164319][ T8605] r4:00000000 [ 768.164959][ T8605] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 768.169174][ T8605] ---[ end trace 0000000000000000 ]--- [ 768.211094][ T28] audit: type=1400 audit(769.116:1340): avc: denied { read } for pid=2918 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 768.263284][ T28] audit: type=1400 audit(769.166:1341): avc: denied { search } for pid=2918 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.263450][ T28] audit: type=1400 audit(769.166:1342): avc: denied { write search } for pid=2918 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.263508][ T28] audit: type=1400 audit(769.166:1343): avc: denied { add_name } for pid=2918 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.284724][ T8605] Kernel panic - not syncing: Fatal exception [ 768.286896][ T8605] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:30:36 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000017 R02=00000016 R03=00000001 R04=0000000e R05=81c01da0 R06=82c83d7c R07=00000000 R08=8230865c R09=82367250 R10=822f5c50 R11=e011da84 R12=e011da40 R13=e011da40 R14=80252108 R15=802520a4 PSR=00000193 ---- A S svc32 s00=05800305 s01=c42b0408 d00=c42b040805800305 s02=0009b803 s03=03019608 d01=030196080009b803 s04=08007098 s05=70a00308 d02=70a0030808007098 s06=ffffff02 s07=a80303ff d03=a80303ffffffff02 s08=00080070 s09=0070b003 d04=0070b00300080070 s10=67ec0008 s11=08060601 d05=0806060167ec0008 s12=01000004 s13=00708002 d06=0070800201000004 s14=84ae9008 s15=00010480 d07=0001048084ae9008 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=90030e08 s33=04800209 d16=0480020990030e08 s34=08048003 s35=d9919e38 d17=d9919e3808048003 s36=7cdc923a s37=8b65ff8f d18=8b65ff8f7cdc923a s38=a1e239b5 s39=924c5d48 d19=924c5d48a1e239b5 s40=e5dfa723 s41=fee2a238 d20=fee2a238e5dfa723 s42=099803a2 s43=03380800 d21=03380800099803a2 s44=800209a0 s45=08800308 d22=08800308800209a0 s46=00000a08 s47=03000000 d23=0300000000000a08 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=a3316ff3 s53=f9c512af d26=f9c512afa3316ff3 s54=6fafbbb7 s55=7d776891 d27=7d7768916fafbbb7 s56=e7e3469e s57=c5f0eceb d28=c5f0ecebe7e3469e s58=9d3e2856 s59=69363319 d29=693633199d3e2856 s60=9a3c5609 s61=edfdecd4 d30=edfdecd49a3c5609 s62=a5c0e51f s63=eddf186d d31=eddf186da5c0e51f FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=e3f0a000 R01=e828b000 R02=00000000 R03=802397d0 R04=82cd7460 R05=82cd80a4 R06=7f2a8000 R07=e828b000 R08=00000000 R09=00000001 R10=82a0b4d8 R11=df9c1dc4 R12=e828b000 R13=df9c1da0 R14=802306a4 R15=802397e8 PSR=80000013 N--- A S svc32 s00=5bde3131 s01=fba6fd8f d00=fba6fd8f5bde3131 s02=00080004 s03=000c0000 d01=000c000000080004 s04=000e0014 s05=00200000 d02=00200000000e0014 s06=00180000 s07=51400000 d03=5140000000180000 s08=000014cd s09=00720000 d04=00720000000014cd s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00020000 d06=0002000000000000 s14=00340000 s15=00140000 d07=0014000000340000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=ffffffff s33=656b01ff d16=656b01ffffffffff s34=6e697279 s35=80030067 d17=800300676e697279 s36=fff9083e s37=ffffffff d18=fffffffffff9083e s38=01ffffff s39=037a7973 d19=037a797301ffffff s40=82003e86 s41=80808080 d20=8080808082003e86 s42=88034401 s43=0002003e d21=0002003e88034401 s44=020a015a s45=80023d80 d22=80023d80020a015a s46=0008003e s47=06000800 d23=060008000008003e s48=234d16ee s49=9f5274bf d24=9f5274bf234d16ee s50=3705742c s51=187e4d6f d25=187e4d6f3705742c s52=74d89c88 s53=c7d1c4ba d26=c7d1c4ba74d89c88 s54=8f09020c s55=5b3744d7 d27=5b3744d78f09020c s56=5f7aafda s57=639d8ab8 d28=639d8ab85f7aafda s58=4602f47e s59=36edb36f d29=36edb36f4602f47e s60=b6882b58 s61=a8a73157 d30=a8a73157b6882b58 s62=f63d91e7 s63=8865acf0 d31=8865acf0f63d91e7 FPSCR: 00000000