last executing test programs: 21.019105031s ago: executing program 1 (id=100): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.601386122s ago: executing program 1 (id=106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004000000"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040007}, 0x4000050) 8.130629177s ago: executing program 1 (id=107): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) fchdir(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x2, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x5}}]}}]}, 0x40}}, 0x20000004) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000080), 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f00000000c0)={0xa, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/245, 0xf5}], 0x1, 0xc002a0, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES64=r5], 0x54}}, 0x4000010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r6) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="210225bd7000fcdbdf250b0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="e12e53934f76951b13e40251a9e4a3b4d6000bf10f67cf7226a56631dba0552f34a64062e2aa70f73424cedb0b10640c400bd62ca6392ce78bee74dccc4aaa4aa374cb0cd0709d3bb0f1cbbfa430073b8f0e00000000000000ac46378524281422c31f3cb0baa012ce19d6a6d3b222ad7bf029a012fbe4abaae1deb346125b0d5a482697a4dd37dc40ee2b1627d204da462afd01ad4304e805d8ce449026a31dc5c2e530885219d882a01dd1787ae4428a1944433523116ca42a6c44139360d44cb7eb87744dd0a9"], 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 7.557425433s ago: executing program 1 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r4, 0x42, 0x4000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 6.311598277s ago: executing program 1 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 5.681840801s ago: executing program 1 (id=110): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.262694857s ago: executing program 0 (id=116): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x1, r1}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x3, 0xe, @rand_addr, 0x1}, {0xa, 0xfffe, 0xfffffffc}, 0x0, {[0x3, 0x0, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x3]}}, 0x5c) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) 2.171254268s ago: executing program 0 (id=117): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000040), 0xfffffecc) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000014c0)={0x2, 0x1, 0xe, 0xc, 0x128, 0x0}) 2.112066405s ago: executing program 0 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) 1.890414651s ago: executing program 0 (id=119): r0 = socket(0x29, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x8000}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}}, 0x3c}}, 0x44804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, 0x0, 0x4000040) recvmsg(r2, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x102) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000001740)=0xc) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0xfffffffffffffe2c, 0x0, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1, 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB], &(0x7f0000001900)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a40), 0x8, 0x10, &(0x7f0000001a80), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001ac0)={r3, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xcfa42, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendfile(r4, r4, 0x0, 0x200000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) r5 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000100), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x9}}, 0x20) recvmmsg(r0, 0x0, 0x0, 0x2123, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.601312994s ago: executing program 0 (id=120): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 0 (id=121): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001c707af20d6124404e0c60102030109021200015b9e00080904"], 0x0) kernel console output (not intermixed with test programs): [ 40.598341][ T28] audit: type=1400 audit(40.510:88): avc: denied { write } for pid=3086 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.799689][ T28] audit: type=1400 audit(43.710:89): avc: denied { write } for pid=3090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.733237][ T28] audit: type=1400 audit(44.640:90): avc: denied { write } for pid=3095 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.812639][ T28] audit: type=1400 audit(44.720:91): avc: denied { read write } for pid=3092 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.813543][ T28] audit: type=1400 audit(44.720:92): avc: denied { open } for pid=3092 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:58348' (ED25519) to the list of known hosts. [ 64.787704][ T28] audit: type=1400 audit(64.690:93): avc: denied { name_bind } for pid=3100 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 66.435305][ T28] audit: type=1400 audit(66.340:94): avc: denied { execute } for pid=3101 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.438883][ T28] audit: type=1400 audit(66.350:95): avc: denied { execute_no_trans } for pid=3101 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 69.589555][ T28] audit: type=1400 audit(69.500:96): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 69.591988][ T28] audit: type=1400 audit(69.500:97): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.603263][ T3101] cgroup: Unknown subsys name 'net' [ 69.615536][ T28] audit: type=1400 audit(69.520:98): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.757372][ T3101] cgroup: Unknown subsys name 'cpuset' [ 69.762916][ T3101] cgroup: Unknown subsys name 'hugetlb' [ 69.763619][ T3101] cgroup: Unknown subsys name 'rlimit' [ 69.955954][ T28] audit: type=1400 audit(69.860:99): avc: denied { setattr } for pid=3101 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.960713][ T28] audit: type=1400 audit(69.870:100): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.961746][ T28] audit: type=1400 audit(69.870:101): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.175704][ T3103] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 70.183135][ T28] audit: type=1400 audit(70.080:102): avc: denied { relabelto } for pid=3103 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.183307][ T28] audit: type=1400 audit(70.090:103): avc: denied { write } for pid=3103 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 70.217746][ T28] audit: type=1400 audit(70.130:104): avc: denied { read } for pid=3101 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.217943][ T28] audit: type=1400 audit(70.130:105): avc: denied { open } for pid=3101 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.860328][ T3101] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.294255][ T28] audit: type=1400 audit(81.200:106): avc: denied { execmem } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.361647][ T28] audit: type=1400 audit(81.270:107): avc: denied { read } for pid=3106 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.365800][ T28] audit: type=1400 audit(81.270:108): avc: denied { open } for pid=3106 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.371599][ T28] audit: type=1400 audit(81.280:109): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.395349][ T28] audit: type=1400 audit(81.300:110): avc: denied { module_request } for pid=3106 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 81.482939][ T28] audit: type=1400 audit(81.390:111): avc: denied { sys_module } for pid=3106 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.009837][ T28] audit: type=1400 audit(81.920:112): avc: denied { create } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.073584][ T28] audit: type=1400 audit(81.980:113): avc: denied { write } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.184878][ T28] audit: type=1400 audit(82.090:114): avc: denied { read } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.345080][ T28] audit: type=1400 audit(82.250:115): avc: denied { ioctl } for pid=3106 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.915117][ T3107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.928874][ T3107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.025414][ T3106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.038904][ T3106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.853108][ T3107] hsr_slave_0: entered promiscuous mode [ 84.855425][ T3107] hsr_slave_1: entered promiscuous mode [ 84.928739][ T3106] hsr_slave_0: entered promiscuous mode [ 84.929996][ T3106] hsr_slave_1: entered promiscuous mode [ 84.930841][ T3106] debugfs: 'hsr0' already exists in 'hsr' [ 84.931178][ T3106] Cannot create hsr debugfs directory [ 85.363472][ T3107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.378563][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.395631][ T3107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.403608][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.414590][ T3107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.424950][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.428896][ T3107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.435950][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.545554][ T3106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.557424][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.560154][ T3106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.565547][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.578636][ T3106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.584849][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.590602][ T3106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.602086][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.310896][ T3107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.424084][ T3106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.424772][ T3106] veth0_vlan: entered promiscuous mode [ 89.457830][ T3106] veth1_vlan: entered promiscuous mode [ 89.535933][ T3106] veth0_macvtap: entered promiscuous mode [ 89.551991][ T3106] veth1_macvtap: entered promiscuous mode [ 89.641268][ T3107] veth0_vlan: entered promiscuous mode [ 89.718667][ T1348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.744656][ T3107] veth1_vlan: entered promiscuous mode [ 89.783067][ T2194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.783256][ T2194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.783329][ T2194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823644][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 89.823753][ T28] audit: type=1400 audit(89.730:121): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.829577][ T28] audit: type=1400 audit(89.740:122): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.yvnp6i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.844405][ T28] audit: type=1400 audit(89.750:123): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.857368][ T28] audit: type=1400 audit(89.760:124): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.yvnp6i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.859394][ T28] audit: type=1400 audit(89.770:125): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.yvnp6i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 89.874903][ T28] audit: type=1400 audit(89.780:126): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.882721][ T28] audit: type=1400 audit(89.790:127): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 89.882851][ T28] audit: type=1400 audit(89.790:128): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="gadgetfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.891724][ T28] audit: type=1400 audit(89.800:129): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.891875][ T28] audit: type=1400 audit(89.800:130): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 89.959420][ T3106] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.962672][ T3107] veth0_macvtap: entered promiscuous mode [ 89.982709][ T3107] veth1_macvtap: entered promiscuous mode [ 90.078022][ T2194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.111367][ T1348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.114687][ T1348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.170316][ T2194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.362621][ T725] hid-generic 0003:0006:1EA9.0001: reserved main item tag 0xe [ 93.362953][ T725] hid-generic 0003:0006:1EA9.0001: unknown main item tag 0x2 [ 93.363122][ T725] hid-generic 0003:0006:1EA9.0001: item fetching failed at offset 26/34 [ 93.363968][ T725] hid-generic 0003:0006:1EA9.0001: probe with driver hid-generic failed with error -22 [ 95.479178][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 95.479306][ T28] audit: type=1400 audit(95.390:138): avc: denied { allowed } for pid=3755 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.494883][ T28] audit: type=1400 audit(95.400:139): avc: denied { write } for pid=3761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.533380][ T28] audit: type=1400 audit(95.440:140): avc: denied { mount } for pid=3755 comm="syz.0.9" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.546665][ T28] audit: type=1400 audit(95.450:141): avc: denied { search } for pid=3755 comm="syz.0.9" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.548125][ T28] audit: type=1400 audit(95.460:142): avc: denied { read write } for pid=3755 comm="syz.0.9" name="set_event" dev="tracefs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 95.565719][ T28] audit: type=1400 audit(95.470:143): avc: denied { open } for pid=3755 comm="syz.0.9" path="/7/trace/set_event" dev="tracefs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 95.906757][ T28] audit: type=1400 audit(95.810:144): avc: denied { write } for pid=3769 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.909669][ T28] audit: type=1400 audit(95.820:145): avc: denied { map_create } for pid=3770 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.924158][ T28] audit: type=1400 audit(95.830:146): avc: denied { bpf } for pid=3770 comm="syz.1.12" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.128260][ T28] audit: type=1400 audit(96.040:147): avc: denied { mounton } for pid=3773 comm="syz.1.13" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.952453][ T3782] FAULT_INJECTION: forcing a failure. [ 98.952453][ T3782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.953383][ T3782] CPU: 0 UID: 0 PID: 3782 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT [ 98.953630][ T3782] Hardware name: ARM-Versatile Express [ 98.953838][ T3782] Call trace: [ 98.954417][ T3782] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 98.955483][ T3782] r7:60000013 r6:60000013 r5:82328334 r4:00000000 [ 98.955539][ T3782] [<80201ae4>] (show_stack) from [<8021e804>] (dump_stack_lvl+0x5c/0x70) [ 98.955576][ T3782] [<8021e7a8>] (dump_stack_lvl) from [<8021e830>] (dump_stack+0x18/0x1c) [ 98.955613][ T3782] r7:83483558 r6:00000000 r5:8570f080 r4:833525f8 [ 98.955621][ T3782] [<8021e818>] (dump_stack) from [<80a24428>] (should_fail_ex+0x1bc/0x21c) [ 98.955655][ T3782] [<80a2426c>] (should_fail_ex) from [<80a2449c>] (should_fail+0x14/0x18) [ 98.955694][ T3782] r8:8570f080 r7:83483558 r6:00001000 r5:ea475ef0 r4:00001000 [ 98.955702][ T3782] [<80a24488>] (should_fail) from [<80a244bc>] (should_fail_usercopy+0x1c/0x20) [ 98.955732][ T3782] [<80a244a0>] (should_fail_usercopy) from [<8095703c>] (copy_folio_from_iter_atomic+0x148/0xbc8) [ 98.955793][ T3782] [<80956ef4>] (copy_folio_from_iter_atomic) from [<804ad534>] (generic_perform_write+0x80/0x2c0) [ 98.955900][ T3782] r10:86e30508 r9:81c21cc0 r8:00001000 r7:00001000 r6:00001000 r5:00000000 [ 98.955926][ T3782] r4:00000000 [ 98.955934][ T3782] [<804ad4b4>] (generic_perform_write) from [<804de208>] (shmem_file_write_iter+0x7c/0x84) [ 98.955978][ T3782] r10:81c21f80 r9:8570f080 r8:86795b00 r7:ea475ef0 r6:86e30488 r5:ea475f08 [ 98.955988][ T3782] r4:00000000 [ 98.955995][ T3782] [<804de18c>] (shmem_file_write_iter) from [<805b6bc4>] (vfs_write+0x27c/0x42c) [ 98.956039][ T3782] r9:8570f080 r8:804de18c r7:ea475f68 r6:20000100 r5:86795b00 r4:0000fea7 [ 98.956047][ T3782] [<805b6948>] (vfs_write) from [<805b6ee8>] (ksys_write+0x74/0xec) [ 98.956086][ T3782] r10:00000004 r9:8570f080 r8:8020029c r7:00000000 r6:00000000 r5:86795b00 [ 98.956098][ T3782] r4:86795b03 [ 98.956116][ T3782] [<805b6e74>] (ksys_write) from [<805b6f70>] (sys_write+0x10/0x14) [ 98.956251][ T3782] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 98.956275][ T3782] [<805b6f60>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 98.956481][ T3782] Exception stack(0xea475fa8 to 0xea475ff0) [ 98.956632][ T3782] 5fa0: 00000000 00000000 00000004 20000100 0000fea7 00000000 [ 98.956712][ T3782] 5fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f9c0dc [ 98.956744][ T3782] 5fe0: 76f9be88 76f9be78 0001903c 00130cf0 [ 101.198244][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 101.198366][ T28] audit: type=1400 audit(101.110:158): avc: denied { ioctl } for pid=3791 comm="syz.1.20" path="socket:[3132]" dev="sockfs" ino=3132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.740407][ T28] audit: type=1400 audit(101.650:159): avc: denied { write } for pid=3791 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.298500][ T28] audit: type=1400 audit(102.210:160): avc: denied { create } for pid=3796 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.371480][ T28] audit: type=1400 audit(102.280:161): avc: denied { create } for pid=3796 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.808272][ T3052] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.997039][ T3052] usb 2-1: Using ep0 maxpacket: 32 [ 106.001851][ T3052] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 106.033423][ T3052] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 106.033594][ T3052] usb 2-1: config 0 has no interface number 0 [ 106.033917][ T3052] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 106.079724][ T3052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.079849][ T3052] usb 2-1: Product: syz [ 106.079881][ T3052] usb 2-1: Manufacturer: syz [ 106.079908][ T3052] usb 2-1: SerialNumber: syz [ 106.095173][ T3052] usb 2-1: config 0 descriptor?? [ 106.124950][ T3799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.377080][ T3799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.489657][ T28] audit: type=1400 audit(109.400:162): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 109.697633][ T28] audit: type=1400 audit(109.590:163): avc: denied { map_read map_write } for pid=3805 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.738873][ T28] audit: type=1400 audit(109.650:164): avc: denied { create } for pid=3805 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.161265][ T3052] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 110.161537][ T3052] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 110.162999][ T3052] asix 2-1:0.188: probe with driver asix failed with error -71 [ 110.175210][ T3052] usb 2-1: USB disconnect, device number 2 [ 111.305662][ T28] audit: type=1400 audit(111.210:165): avc: denied { mount } for pid=3822 comm="syz.0.27" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.414779][ T28] audit: type=1400 audit(111.320:166): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.758870][ T28] audit: type=1400 audit(111.670:167): avc: denied { ioctl } for pid=3816 comm="syz.1.25" path="socket:[2534]" dev="sockfs" ino=2534 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.821660][ T28] audit: type=1400 audit(111.730:168): avc: denied { create } for pid=3816 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.281525][ T3630] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.359404][ T28] audit: type=1400 audit(112.270:169): avc: denied { create } for pid=3828 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.527636][ T3630] usb 2-1: Using ep0 maxpacket: 32 [ 112.529801][ T3630] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 112.542346][ T3630] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.542554][ T3630] usb 2-1: config 0 has no interface number 0 [ 112.542641][ T3630] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 112.544946][ T3630] usb 2-1: config 0 interface 1 has no altsetting 0 [ 112.577274][ T3630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.577395][ T3630] usb 2-1: Product: syz [ 112.577429][ T3630] usb 2-1: Manufacturer: syz [ 112.577460][ T3630] usb 2-1: SerialNumber: syz [ 112.582498][ T3630] usb 2-1: config 0 descriptor?? [ 112.829221][ T3630] usb 2-1: USB disconnect, device number 3 [ 113.042848][ T28] audit: type=1400 audit(112.950:170): avc: denied { write } for pid=3846 comm="syz.1.31" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.057463][ T3848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 113.729351][ T28] audit: type=1400 audit(113.640:171): avc: denied { create } for pid=3853 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 114.993529][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 114.993650][ T28] audit: type=1400 audit(114.840:176): avc: denied { map } for pid=3859 comm="syz.1.33" path="socket:[2560]" dev="sockfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 118.287271][ T725] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.517284][ T725] usb 1-1: Using ep0 maxpacket: 16 [ 118.537017][ T725] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.550519][ T725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.550753][ T725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.550901][ T725] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.551037][ T725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.558716][ T725] usb 1-1: config 0 descriptor?? [ 119.210883][ T725] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input3 [ 119.297325][ T725] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 119.474379][ T3730] usb 1-1: USB disconnect, device number 2 [ 120.770596][ T28] audit: type=1400 audit(120.680:177): avc: denied { create } for pid=3916 comm="syz.0.46" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.802236][ T28] audit: type=1400 audit(120.710:178): avc: denied { mounton } for pid=3916 comm="syz.0.46" path="/23/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.935936][ T28] audit: type=1400 audit(120.840:179): avc: denied { create } for pid=3919 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.452084][ T28] audit: type=1400 audit(121.350:180): avc: denied { append } for pid=3919 comm="syz.1.47" name="uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 121.900081][ T28] audit: type=1400 audit(121.810:181): avc: denied { unlink } for pid=3106 comm="syz-executor" name="file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.710311][ T28] audit: type=1400 audit(122.620:182): avc: denied { create } for pid=3932 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.714722][ T28] audit: type=1400 audit(122.620:183): avc: denied { connect } for pid=3932 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.724727][ T28] audit: type=1400 audit(122.630:184): avc: denied { write } for pid=3932 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.740116][ T3933] Zero length message leads to an empty skb [ 124.515607][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.995037][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.001644][ T43] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 125.118662][ T43] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 125.118841][ T43] usb 1-1: config 114 has no interface number 0 [ 125.118914][ T43] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 125.119087][ T43] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 125.119162][ T43] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 125.119234][ T43] usb 1-1: config 114 interface 240 has no altsetting 0 [ 125.237079][ T43] usb 1-1: string descriptor 0 read error: -22 [ 125.237226][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.311310][ T3943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.311684][ T3943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.355474][ T43] ir_usb 1-1:114.240: IR Dongle converter detected [ 125.601388][ T43] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 125.847468][ T43] usb 1-1: USB disconnect, device number 3 [ 126.020908][ T43] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 126.023227][ T43] ir_usb 1-1:114.240: device disconnected [ 127.273429][ T28] audit: type=1400 audit(127.180:185): avc: denied { connect } for pid=3966 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.273647][ T28] audit: type=1400 audit(127.180:186): avc: denied { bind } for pid=3966 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.282950][ T28] audit: type=1400 audit(127.190:187): avc: denied { write } for pid=3966 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.257075][ T41] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.417730][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 128.423540][ T41] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.453180][ T41] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.453422][ T41] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.453477][ T41] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.453529][ T41] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.453574][ T41] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.453654][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.730238][ T41] usb 2-1: usb_control_msg returned -32 [ 128.730397][ T41] usbtmc 2-1:16.0: can't read capabilities [ 129.054609][ T3630] usb 2-1: USB disconnect, device number 4 [ 129.670576][ T28] audit: type=1400 audit(129.580:188): avc: denied { create } for pid=3989 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.696905][ T3630] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.888752][ T3630] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 130.904866][ T3630] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.905094][ T3630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.051387][ T28] audit: type=1400 audit(130.960:189): avc: denied { create } for pid=4001 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.058381][ T28] audit: type=1400 audit(130.960:190): avc: denied { setopt } for pid=4001 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.075601][ T28] audit: type=1400 audit(130.980:191): avc: denied { connect } for pid=4001 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.089176][ T28] audit: type=1400 audit(131.000:192): avc: denied { write } for pid=4001 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.160685][ T3630] usb 2-1: USB disconnect, device number 5 [ 131.484089][ T4015] comedi: valid board names for 8255 driver are: [ 131.484232][ T4015] 8255 [ 131.484276][ T4015] comedi: valid board names for vmk80xx driver are: [ 131.484296][ T4015] vmk80xx [ 131.484312][ T4015] comedi: valid board names for usbduxsigma driver are: [ 131.484328][ T4015] usbduxsigma [ 131.484343][ T4015] comedi: valid board names for usbduxfast driver are: [ 131.484359][ T4015] usbduxfast [ 131.484375][ T4015] comedi: valid board names for usbdux driver are: [ 131.484392][ T4015] usbdux [ 131.484406][ T4015] comedi: valid board names for ni6501 driver are: [ 131.484420][ T4015] ni6501 [ 131.484435][ T4015] comedi: valid board names for dt9812 driver are: [ 131.484452][ T4015] dt9812 [ 131.484466][ T4015] comedi: valid board names for ni_labpc_cs driver are: [ 131.484480][ T4015] ni_labpc_cs [ 131.484495][ T4015] comedi: valid board names for ni_daq_700 driver are: [ 131.484510][ T4015] ni_daq_700 [ 131.484524][ T4015] comedi: valid board names for labpc_pci driver are: [ 131.484538][ T4015] labpc_pci [ 131.484554][ T4015] comedi: valid board names for adl_pci9118 driver are: [ 131.484583][ T4015] pci9118dg [ 131.484621][ T4015] pci9118hg [ 131.484635][ T4015] pci9118hr [ 131.484648][ T4015] comedi: valid board names for 8255_pci driver are: [ 131.484665][ T4015] 8255_pci [ 131.484679][ T4015] comedi: valid board names for comedi_parport driver are: [ 131.484693][ T4015] comedi_parport [ 131.484720][ T4015] comedi: valid board names for comedi_test driver are: [ 131.484736][ T4015] comedi_test [ 131.484751][ T4015] comedi: valid board names for comedi_bond driver are: [ 131.484768][ T4015] comedi_bond [ 131.517974][ T4016] FAULT_INJECTION: forcing a failure. [ 131.517974][ T4016] name failslab, interval 1, probability 0, space 0, times 1 [ 131.518412][ T4016] CPU: 1 UID: 0 PID: 4016 Comm: syz.1.68 Tainted: G L syzkaller #0 PREEMPT [ 131.518500][ T4016] Tainted: [L]=SOFTLOCKUP [ 131.518516][ T4016] Hardware name: ARM-Versatile Express [ 131.518530][ T4016] Call trace: [ 131.518552][ T4016] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 131.518619][ T4016] r7:60000193 r6:60000193 r5:82328334 r4:00000000 [ 131.518629][ T4016] [<80201ae4>] (show_stack) from [<8021e804>] (dump_stack_lvl+0x5c/0x70) [ 131.518663][ T4016] [<8021e7a8>] (dump_stack_lvl) from [<8021e830>] (dump_stack+0x18/0x1c) [ 131.518703][ T4016] r7:841f3e80 r6:00000000 r5:841f3e80 r4:83315fdc [ 131.518711][ T4016] [<8021e818>] (dump_stack) from [<80a24428>] (should_fail_ex+0x1bc/0x21c) [ 131.518746][ T4016] [<80a2426c>] (should_fail_ex) from [<8057c790>] (should_failslab+0x6c/0x94) [ 131.518788][ T4016] r8:00000000 r7:841f3e80 r6:80265de0 r5:00000820 r4:838ff0c0 [ 131.518797][ T4016] [<8057c724>] (should_failslab) from [<8055a188>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 131.518859][ T4016] [<8055a12c>] (kmem_cache_alloc_noprof) from [<80265de0>] (__send_signal_locked+0x8c/0x510) [ 131.518929][ T4016] r10:00000000 r9:841f46e4 r8:0000000a r7:8321f620 r6:00000000 r5:0000000b [ 131.518940][ T4016] r4:841f3e80 [ 131.518948][ T4016] [<80265d54>] (__send_signal_locked) from [<802678d4>] (send_signal_locked+0x8c/0x1c4) [ 131.519053][ T4016] r10:00000000 r9:00015870 r8:841f3e80 r7:00000000 r6:0000000b r5:841f3e80 [ 131.519064][ T4016] r4:df9edec4 [ 131.519072][ T4016] [<80267848>] (send_signal_locked) from [<80268470>] (force_sig_info_to_task+0xe0/0x17c) [ 131.519116][ T4016] r9:00015870 r8:00000000 r7:0000000b r6:60000113 r5:df9edec4 r4:841f3e80 [ 131.519125][ T4016] [<80268390>] (force_sig_info_to_task) from [<80268774>] (force_sig_fault+0x54/0x78) [ 131.519172][ T4016] r10:00000007 r9:85733840 r8:00000038 r7:00000001 r6:00000207 r5:841f3e80 [ 131.519184][ T4016] r4:00000001 r3:0000000e [ 131.519192][ T4016] [<80268720>] (force_sig_fault) from [<80233c58>] (__do_user_fault+0x84/0xf0) [ 131.519224][ T4016] r4:0000000b [ 131.519231][ T4016] [<80233bd4>] (__do_user_fault) from [<80234148>] (do_page_fault+0x2d0/0x4d0) [ 131.519268][ T4016] r8:00000254 r7:00000000 r6:00000207 r5:00000038 r4:df9edfb0 [ 131.519276][ T4016] [<80233e78>] (do_page_fault) from [<80234514>] (do_DataAbort+0x38/0xfc) [ 131.519314][ T4016] r10:00000001 r9:00000000 r8:80233e78 r7:df9edfb0 r6:00000038 r5:00000207 [ 131.519324][ T4016] r4:8321a160 [ 131.519332][ T4016] [<802344dc>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 131.519358][ T4016] Exception stack(0xdf9edfb0 to 0xdf9edff8) [ 131.519378][ T4016] dfa0: 00000000 00000000 00000000 00000000 [ 131.519399][ T4016] dfc0: 000147a0 00000000 ffffffff 0018f5dc 003562d8 00000000 00000001 76f9c0dc [ 131.519417][ T4016] dfe0: 00000000 76f9be58 0001901c 000147d0 20000010 ffffffff [ 131.519436][ T4016] r8:830cc044 r7:841f3e80 r6:ffffffff r5:20000010 r4:000147d0 [ 131.655628][ T28] audit: type=1400 audit(131.560:193): avc: denied { write } for pid=4018 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.179180][ T28] audit: type=1400 audit(133.090:194): avc: denied { ioctl } for pid=4031 comm="syz.0.74" path="socket:[2713]" dev="sockfs" ino=2713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.930559][ T28] audit: type=1400 audit(135.840:195): avc: denied { create } for pid=4035 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.932361][ T28] audit: type=1400 audit(135.840:196): avc: denied { bind } for pid=4035 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.934686][ T28] audit: type=1400 audit(135.840:197): avc: denied { setopt } for pid=4035 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.949219][ T28] audit: type=1400 audit(135.840:198): avc: denied { accept } for pid=4035 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.451390][ T28] audit: type=1400 audit(136.360:199): avc: denied { mount } for pid=4035 comm="syz.0.76" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 137.932723][ T28] audit: type=1400 audit(137.840:200): avc: denied { append } for pid=4027 comm="syz.1.72" name="ttyS3" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.947595][ T28] audit: type=1400 audit(137.860:201): avc: denied { create } for pid=4027 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.719707][ T4040] capability: warning: `syz.1.72' uses 32-bit capabilities (legacy support in use) [ 146.732251][ T28] audit: type=1400 audit(146.640:202): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 148.422633][ T3630] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 148.423215][ T3630] wiimote 0005:057E:0306.0003: New device registered [ 148.677614][ T3630] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 148.880081][ T4051] wiimote 0005:057E:0306.0003: Unhandled report 0 size 103 [ 148.903715][ T4050] wiimote 0005:057E:0306.0003: Device removed [ 148.907030][ T3630] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.911103][ T3630] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.915580][ T3630] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 148.915730][ T3630] usb 2-1: can't read configurations, error -71 [ 149.447185][ T43] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 149.464219][ T43] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input5 [ 149.471803][ T43] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input6 [ 149.475684][ T43] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input4 [ 150.474883][ T28] audit: type=1400 audit(150.380:203): avc: denied { create } for pid=4043 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.693860][ T28] audit: type=1400 audit(150.600:204): avc: denied { setopt } for pid=4043 comm="syz.0.77" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.998710][ T28] audit: type=1400 audit(153.910:205): avc: denied { name_bind } for pid=4098 comm="syz.1.80" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 154.008476][ T28] audit: type=1400 audit(153.920:206): avc: denied { node_bind } for pid=4098 comm="syz.1.80" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 154.463609][ T28] audit: type=1400 audit(154.370:207): avc: denied { setopt } for pid=4102 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.376990][ T3053] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.536931][ T3053] usb 2-1: Using ep0 maxpacket: 32 [ 155.540506][ T3053] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 155.575097][ T3053] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 155.575214][ T3053] usb 2-1: config 0 has no interface number 0 [ 155.575279][ T3053] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 155.601701][ T3053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.601824][ T3053] usb 2-1: Product: syz [ 155.601860][ T3053] usb 2-1: Manufacturer: syz [ 155.601890][ T3053] usb 2-1: SerialNumber: syz [ 155.605343][ T3053] usb 2-1: config 0 descriptor?? [ 155.623627][ T4110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.870817][ T4110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.924561][ T3053] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 156.924810][ T3053] asix 2-1:0.188: probe with driver asix failed with error -32 [ 156.934257][ T3053] usb 2-1: USB disconnect, device number 8 [ 156.980198][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.139536][ T23] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 157.143014][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.143110][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 157.143196][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.175658][ T23] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 157.315556][ T4142] syzkaller0: entered promiscuous mode [ 157.315758][ T4142] syzkaller0: entered allmulticast mode [ 162.727791][ T4148] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 163.077485][ T3630] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.227112][ T3630] usb 2-1: Using ep0 maxpacket: 32 [ 163.229814][ T3630] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 163.233791][ T3630] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 163.233845][ T3630] usb 2-1: config 0 has no interface number 0 [ 163.233879][ T3630] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 163.244391][ T3630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.244503][ T3630] usb 2-1: Product: syz [ 163.244533][ T3630] usb 2-1: Manufacturer: syz [ 163.244562][ T3630] usb 2-1: SerialNumber: syz [ 163.250036][ T3630] usb 2-1: config 0 descriptor?? [ 163.252627][ T4160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.461493][ T4160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.518700][ T3630] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 164.519143][ T3630] asix 2-1:0.188: probe with driver asix failed with error -32 [ 164.530548][ T3630] usb 2-1: USB disconnect, device number 9 [ 166.207396][ T3053] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.357393][ T3053] usb 2-1: Using ep0 maxpacket: 32 [ 166.359635][ T3053] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 166.363265][ T3053] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 166.363389][ T3053] usb 2-1: config 0 has no interface number 0 [ 166.363451][ T3053] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 166.371636][ T3053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.371692][ T3053] usb 2-1: Product: syz [ 166.371708][ T3053] usb 2-1: Manufacturer: syz [ 166.371722][ T3053] usb 2-1: SerialNumber: syz [ 166.375484][ T3053] usb 2-1: config 0 descriptor?? [ 166.380692][ T4185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.586852][ T4185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.628607][ T3053] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 167.628862][ T3053] asix 2-1:0.188: probe with driver asix failed with error -32 [ 167.635229][ T3053] usb 2-1: USB disconnect, device number 10 [ 170.517687][ T28] audit: type=1400 audit(170.420:208): avc: denied { read } for pid=4203 comm="syz.1.98" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.518540][ T28] audit: type=1400 audit(170.430:209): avc: denied { open } for pid=4203 comm="syz.1.98" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.547957][ T28] audit: type=1400 audit(170.460:210): avc: denied { ioctl } for pid=4203 comm="syz.1.98" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.550862][ T4204] binder: 4203:4204 ioctl c0306201 200009c0 returned -14 [ 170.877356][ T3053] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 171.027062][ T3053] usb 2-1: Using ep0 maxpacket: 32 [ 171.035574][ T3053] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.035707][ T3053] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=f9.cc [ 171.047060][ T3053] usb 2-1: config 3 has an invalid interface number: 55 but max is 0 [ 171.047183][ T3053] usb 2-1: config 3 has no interface number 0 [ 171.047236][ T3053] usb 2-1: config 3 interface 55 has no altsetting 0 [ 171.063565][ T3053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.063679][ T3053] usb 2-1: Product: syz [ 171.063709][ T3053] usb 2-1: Manufacturer: syz [ 171.063734][ T3053] usb 2-1: SerialNumber: syz [ 171.300597][ T3053] usb 2-1: USB disconnect, device number 11 [ 171.715607][ T11] usb 1-1: USB disconnect, device number 4 [ 171.717176][ T3053] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 171.744125][ T11] idmouse 1-1:1.0: disconnected [ 172.037025][ T3053] usb 2-1: Using ep0 maxpacket: 32 [ 172.177084][ T3053] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 172.247090][ T3053] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 172.247222][ T3053] usb 2-1: config 0 has no interface number 0 [ 172.247295][ T3053] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 172.355073][ T3053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.355203][ T3053] usb 2-1: Product: syz [ 172.355239][ T3053] usb 2-1: Manufacturer: syz [ 172.355270][ T3053] usb 2-1: SerialNumber: syz [ 172.361425][ T3053] usb 2-1: config 0 descriptor?? [ 172.380715][ T4221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.464782][ T28] audit: type=1400 audit(172.370:211): avc: denied { accept } for pid=4239 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.612795][ T4221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.507113][ T3053] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 173.507317][ T3053] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 173.507653][ T3053] asix 2-1:0.188: probe with driver asix failed with error -61 [ 183.694660][ T11] usb 2-1: USB disconnect, device number 12 [ 185.717291][ T4270] syzkaller0: entered promiscuous mode [ 185.717407][ T4270] syzkaller0: entered allmulticast mode [ 187.177639][ T3730] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.326799][ T3730] usb 2-1: Using ep0 maxpacket: 32 [ 187.335275][ T3730] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 187.373593][ T3730] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 187.373708][ T3730] usb 2-1: config 0 has no interface number 0 [ 187.373781][ T3730] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 187.495919][ T3730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.496024][ T3730] usb 2-1: Product: syz [ 187.496051][ T3730] usb 2-1: Manufacturer: syz [ 187.496073][ T3730] usb 2-1: SerialNumber: syz [ 187.514717][ T3730] usb 2-1: config 0 descriptor?? [ 187.517495][ T4279] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.725293][ T4279] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.602622][ T3730] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 188.602749][ T3730] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 188.603063][ T3730] asix 2-1:0.188: probe with driver asix failed with error -61 [ 189.339637][ T3053] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 189.541374][ T3053] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 189.547323][ T3053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.765092][ C0] dln2 1-1:1.0: short response: 0 [ 189.768414][ T3053] dln2 1-1:1.0: USB write failed: -110 [ 189.768863][ T3053] dln2 1-1:1.0: failed to initialize hardware [ 189.775371][ T3053] dln2 1-1:1.0: probe with driver dln2 failed with error -110 [ 189.968950][ T3053] usb 1-1: USB disconnect, device number 5 [ 190.121622][ T28] audit: type=1400 audit(190.030:212): avc: denied { ioctl } for pid=4308 comm="syz.0.116" path="socket:[3585]" dev="sockfs" ino=3585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.124236][ T4309] syz_tun: entered allmulticast mode [ 190.135797][ T4308] syz_tun: left allmulticast mode [ 191.046922][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 191.202609][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 191.206071][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 191.208151][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 191.208232][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.240946][ T23] usb 1-1: probing VID:PID(0424:012C) [ 191.252680][ T23] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 191.252885][ T23] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 191.252938][ T23] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 191.252984][ T23] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 191.253094][ T23] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 191.678301][ T23] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 191.887689][ T23] usb 1-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 192.718829][ T23] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 192.737229][ T23] usb 1-1: USB disconnect, device number 6 [ 192.744585][ T23] USB vub300 remote SDIO host controller[0] now disconnected [ 192.977130][ C1] ODEBUG: object df805d04 is NOT on stack df864000, but annotated. [ 192.977380][ C1] ------------[ cut here ]------------ [ 192.977630][ C1] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0+0x180/0x1ec, CPU#1: swapper/1/0 [ 192.980554][ C1] Modules linked in: [ 192.981593][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.982846][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT [ 192.983340][ C1] Tainted: [L]=SOFTLOCKUP [ 192.983566][ C1] Hardware name: ARM-Versatile Express [ 192.983970][ C1] Call trace: frame pointer underflow [ 192.984530][ C1] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 192.985142][ C1] r7:8321c4bc r6:00000000 r5:82328334 r4:00000001 [ 192.985435][ C1] [<80201ae4>] (show_stack) from [<8021e804>] (dump_stack_lvl+0x5c/0x70) [ 192.985710][ C1] [<8021e7a8>] (dump_stack_lvl) from [<8021e830>] (dump_stack+0x18/0x1c) [ 192.985988][ C1] r7:8321c4bc r6:00000000 r5:8398e400 r4:83483d7c [ 192.986433][ C1] [<8021e818>] (dump_stack) from [<802026b8>] (vpanic+0x114/0x320) [ 192.986693][ C1] [<802025a4>] (vpanic) from [<802028f8>] (trace_suspend_resume+0x0/0x100) [ 192.987048][ C1] r7:8098e454 [ 192.987171][ C1] [<802028c4>] (panic) from [<80251bdc>] (get_taint+0x0/0x1c) [ 192.987432][ C1] r3:8320b188 r2:00000001 r1:8230dea4 r0:82315828 [ 192.987656][ C1] [<80251b64>] (check_panic_on_warn) from [<80251d58>] (__warn+0x98/0x1a4) [ 192.987974][ C1] [<80251cc0>] (__warn) from [<80251fdc>] (warn_slowpath_fmt+0x178/0x1f4) [ 192.988295][ C1] r8:00000009 r7:8238b378 r6:df805c1c r5:8398e400 r4:00000000 [ 192.988610][ C1] [<80251e68>] (warn_slowpath_fmt) from [<8098e454>] (lookup_object_or_alloc.part.0+0x180/0x1ec) [ 192.989074][ C1] r10:00000001 r9:81c04448 r8:df805d04 r7:00000000 r6:8351c080 r5:834fc714 [ 192.989352][ C1] r4:86e0c4b0 [ 192.989509][ C1] [<8098e2d4>] (lookup_object_or_alloc.part.0) from [<8098ea64>] (__debug_object_init+0x140/0x1d8) [ 192.989941][ C1] r10:0001f930 r9:834fc750 r8:00000001 r7:81c04448 r6:20000113 r5:8351c084 [ 192.990230][ C1] r4:df805d04 r3:00000001 [ 192.990407][ C1] [<8098e924>] (__debug_object_init) from [<8098eb50>] (debug_object_init_on_stack+0x28/0x2c) [ 192.990859][ C1] r10:df805eb0 r9:ffffd628 r8:00000101 r7:00000000 r6:ddde3f80 r5:833617b8 [ 192.991161][ C1] r4:00000000 [ 192.991303][ C1] [<8098eb28>] (debug_object_init_on_stack) from [<8030184c>] (init_rcu_head_on_stack+0x18/0x1c) [ 192.991658][ C1] [<80301834>] (init_rcu_head_on_stack) from [<80305830>] (__synchronize_srcu+0x7c/0xcc) [ 192.992171][ C1] [<803057b4>] (__synchronize_srcu) from [<8030591c>] (synchronize_srcu+0x78/0x14c) [ 192.992710][ C1] r5:60000113 r4:833617b8 [ 192.993038][ C1] [<803058a4>] (synchronize_srcu) from [<80c25a80>] (wakeup_source_unregister.part.0+0x64/0x1b4) [ 192.993650][ C1] r7:00000000 r6:86e83b80 r5:00000113 r4:86db7e80 [ 192.994025][ C1] [<80c25a1c>] (wakeup_source_unregister.part.0) from [<80c25be8>] (wakeup_source_unregister+0x18/0x1c) [ 192.994578][ C1] r7:00000000 r6:86e83b80 r5:869f2000 r4:869f2008 [ 192.994824][ C1] [<80c25bd0>] (wakeup_source_unregister) from [<8132fb08>] (mmc_host_classdev_release+0x1c/0x58) [ 192.995347][ C1] [<8132faec>] (mmc_host_classdev_release) from [<80c0238c>] (device_release+0x40/0xb0) [ 192.995737][ C1] r5:86edd780 r4:869f2008 [ 192.995909][ C1] [<80c0234c>] (device_release) from [<81b88910>] (kobject_put+0xa0/0x258) [ 192.996357][ C1] r5:81d5e160 r4:869f2008 [ 192.996527][ C1] [<81b88870>] (kobject_put) from [<80c02500>] (put_device+0x18/0x1c) [ 192.996922][ C1] r8:00000101 r7:8134e2f4 r6:869f2000 r5:00000000 r4:869f2000 [ 192.997171][ C1] [<80c024e8>] (put_device) from [<8133026c>] (mmc_free_host+0x30/0x34) [ 192.997474][ C1] [<8133023c>] (mmc_free_host) from [<8134e454>] (vub300_inactivity_timer_expired+0x160/0x1b8) [ 192.997925][ C1] r5:00000000 r4:869f2aec [ 192.998099][ C1] [<8134e2f4>] (vub300_inactivity_timer_expired) from [<803311c8>] (call_timer_fn+0x30/0x268) [ 192.998473][ C1] r7:8134e2f4 r6:8398e400 r5:869f2aec r4:869f2aec [ 192.998713][ C1] [<80331198>] (call_timer_fn) from [<8033169c>] (__run_timers+0x29c/0x420) [ 192.999106][ C1] r10:df805eb0 r9:ffffd628 r8:00000000 r7:8134e2f4 r6:8320b194 r5:869f2aec [ 192.999426][ C1] r4:ddddb000 [ 192.999569][ C1] [<80331400>] (__run_timers) from [<80331888>] (run_timer_base+0x68/0x78) [ 192.999974][ C1] r10:8398e400 r9:00000082 r8:00000101 r7:00000004 r6:00000002 r5:00000001 [ 193.000301][ C1] r4:ddddb000 [ 193.000463][ C1] [<80331820>] (run_timer_base) from [<803318b4>] (run_timer_softirq+0x1c/0x34) [ 193.000872][ C1] r4:83203084 [ 193.001023][ C1] [<80331898>] (run_timer_softirq) from [<8025b344>] (handle_softirqs+0x160/0x4e8) [ 193.001436][ C1] [<8025b1e4>] (handle_softirqs) from [<8025b868>] (__irq_exit_rcu+0x150/0x1d4) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 193.001806][ C1] r10:824e5f68 r9:8398e400 r8:00000000 r7:df865f18 r6:824e5f68 r5:8252076c [ 193.002516][ C1] r4:8398e400 [ 193.002752][ C1] [<8025b718>] (__irq_exit_rcu) from [<8025bbb0>] (irq_exit+0x10/0x18) [ 193.003138][ C1] r5:8252076c r4:830d70ec [ 193.003342][ C1] [<8025bba0>] (irq_exit) from [<81bb0c1c>] (generic_handle_arch_irq+0x7c/0x80) [ 193.003702][ C1] [<81bb0ba0>] (generic_handle_arch_irq) from [<81b7dc38>] (call_with_stack+0x1c/0x20) [ 193.004095][ C1] r9:8398e400 r8:00000000 r7:df865f4c r6:ffffffff r5:20000013 r4:81bb2490 [ 193.004367][ C1] [<81b7dc1c>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc) [ 193.004790][ C1] Exception stack(0xdf865f18 to 0xdf865f60) [ 193.005185][ C1] 5f00: 00000001 82328334 [ 193.005520][ C1] 5f20: 000a917c 00000001 8398e400 00000001 00000000 830d62f0 00000000 8320b20c [ 193.005945][ C1] 5f40: 824e5f68 df865f84 df865f58 df865f68 81bb18c0 81bb2490 20000013 ffffffff [ 193.006436][ C1] [<81bb2444>] (default_idle_call) from [<802b8a60>] (do_idle+0x240/0x3c0) [ 193.006926][ C1] r7:830d62f0 r6:00000000 r5:8320b1e8 r4:8398e400 [ 193.007188][ C1] [<802b8820>] (do_idle) from [<802b8ef0>] (cpu_startup_entry+0x30/0x34) [ 193.007533][ C1] r10:00000000 r9:414fc0f0 r8:80003000 r7:834834e4 r6:30c0387d r5:00000001 [ 193.007835][ C1] r4:0000008f [ 193.007993][ C1] [<802b8ec0>] (cpu_startup_entry) from [<8022fc34>] (secondary_start_kernel+0x12c/0x198) [ 193.008521][ C1] [<8022fb08>] (secondary_start_kernel) from [<80220094>] (__enable_mmu+0x0/0xc) [ 193.009028][ C1] r5:00000000 r4:838fd140 [ 193.011735][ C1] Rebooting in 86400 seconds..