last executing test programs: 24.894953627s ago: executing program 0 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 24.78281156s ago: executing program 0 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 24.544251268s ago: executing program 0 (id=100): socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="b2c8204cf6a54b26", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001b00)="80", 0x1}], 0x1}}], 0x2, 0x0) 22.808913409s ago: executing program 0 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 22.134676767s ago: executing program 0 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 20.532808723s ago: executing program 0 (id=103): mkdir(&(0x7f0000000140)='./cgroup/../file0\x00', 0x61) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 20.532613343s ago: executing program 32 (id=103): mkdir(&(0x7f0000000140)='./cgroup/../file0\x00', 0x61) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 4.273222835s ago: executing program 1 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 3.36839399s ago: executing program 1 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000406050800000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000000000500050000000000050001000600"], 0x5c}}, 0x0) 2.634446725s ago: executing program 2 (id=175): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x6) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000280)={0x800, 0xffff7fff, 0xa, 0xf7ff, 0x3, "dfe790060000c0c033d40fa1ba00000100", 0x7, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) 2.242603681s ago: executing program 2 (id=176): mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x3e, 0x2006, 0x8, 0x0, 0x5}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 2.039203054s ago: executing program 1 (id=177): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x3, 0x4, 0x4, 0x10, 0x3e7, 0x20, 0x1, 0x20, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0}) 1.584314197s ago: executing program 2 (id=178): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.584047227s ago: executing program 1 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 1.342851025s ago: executing program 1 (id=180): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x203, 0xa0402) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000380)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.046791249s ago: executing program 2 (id=181): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f0000010740)={0x2020}, 0x2020) 883.335258ms ago: executing program 2 (id=182): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002700)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x16}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 880.719128ms ago: executing program 1 (id=183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xb0, &(0x7f0000001400)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @cc={0x1, 0x0, 0x0, 0x3, 0x4, 0x1, 0x1, [@ipv6=@esp={0xe, 0x6, "4dab46", 0x44, 0x32, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x62, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}], {0x4d5, 0x0, @cc={0x1, 0x0, 0x4812, 0x4, 0x5, 0x6, 0x6}, "e466", 0x2}}}]}}}}}}, 0x0) 0s ago: executing program 2 (id=184): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x8001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'comedi_parport\x00', [0x100, 0xc1, 0x7ff, 0xe1, 0xe, 0x1, 0x69, 0x10010000, 0x8, 0xfffffffc, 0x9, 0x5, 0x7, 0x1, 0x1, 0xfd, 0x3, 0x107ff, 0x0, 0x4, 0x88, 0x7ff, 0x80000, 0x20001e58, 0x801, 0xf39d, 0x6, 0x8, 0xa4b5, 0x0, 0x3]}) kernel console output (not intermixed with test programs): syzkaller login: [ 41.729878][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 41.730018][ T28] audit: type=1400 audit(41.620:87): avc: denied { write } for pid=3086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.998751][ T28] audit: type=1400 audit(41.890:88): avc: denied { write } for pid=3090 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.082704][ T28] audit: type=1400 audit(42.970:89): avc: denied { write } for pid=3094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.491164][ T28] audit: type=1400 audit(43.380:90): avc: denied { read write } for pid=3095 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.512454][ T28] audit: type=1400 audit(43.400:91): avc: denied { open } for pid=3095 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.527937][ T28] audit: type=1400 audit(43.420:92): avc: denied { write } for pid=3098 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:36384' (ED25519) to the list of known hosts. [ 67.044239][ T28] audit: type=1400 audit(66.930:93): avc: denied { name_bind } for pid=3103 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.354622][ T28] audit: type=1400 audit(68.250:94): avc: denied { execute } for pid=3104 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.358292][ T28] audit: type=1400 audit(68.250:95): avc: denied { execute_no_trans } for pid=3104 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.055048][ T28] audit: type=1400 audit(71.950:96): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.057741][ T28] audit: type=1400 audit(71.950:97): avc: denied { mount } for pid=3104 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.073401][ T3104] cgroup: Unknown subsys name 'net' [ 72.081443][ T28] audit: type=1400 audit(71.970:98): avc: denied { unmount } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.279563][ T3104] cgroup: Unknown subsys name 'cpuset' [ 72.286975][ T3104] cgroup: Unknown subsys name 'hugetlb' [ 72.287745][ T3104] cgroup: Unknown subsys name 'rlimit' [ 72.509885][ T28] audit: type=1400 audit(72.400:99): avc: denied { setattr } for pid=3104 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.511598][ T28] audit: type=1400 audit(72.400:100): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.515215][ T28] audit: type=1400 audit(72.410:101): avc: denied { mount } for pid=3104 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.725614][ T3106] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.727246][ T28] audit: type=1400 audit(72.620:102): avc: denied { relabelto } for pid=3106 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.731198][ T28] audit: type=1400 audit(72.620:103): avc: denied { write } for pid=3106 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 72.776324][ T28] audit: type=1400 audit(72.670:104): avc: denied { read } for pid=3104 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.778585][ T28] audit: type=1400 audit(72.670:105): avc: denied { open } for pid=3104 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 81.179367][ T3104] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.520374][ T28] audit: type=1400 audit(83.410:106): avc: denied { execmem } for pid=3107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.609160][ T28] audit: type=1400 audit(83.500:107): avc: denied { read } for pid=3109 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.612647][ T28] audit: type=1400 audit(83.500:108): avc: denied { open } for pid=3109 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.623883][ T28] audit: type=1400 audit(83.510:109): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 83.655257][ T28] audit: type=1400 audit(83.550:110): avc: denied { module_request } for pid=3109 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 83.753495][ T28] audit: type=1400 audit(83.650:111): avc: denied { sys_module } for pid=3110 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.437116][ T28] audit: type=1400 audit(84.330:112): avc: denied { ioctl } for pid=3109 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.460601][ T3109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.469116][ T3109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.614269][ T3110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.620334][ T3110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.329091][ T3109] hsr_slave_0: entered promiscuous mode [ 86.331511][ T3109] hsr_slave_1: entered promiscuous mode [ 86.514473][ T3110] hsr_slave_0: entered promiscuous mode [ 86.515677][ T3110] hsr_slave_1: entered promiscuous mode [ 86.516409][ T3110] debugfs: 'hsr0' already exists in 'hsr' [ 86.516816][ T3110] Cannot create hsr debugfs directory [ 86.778515][ T28] audit: type=1400 audit(86.670:113): avc: denied { create } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.778652][ T28] audit: type=1400 audit(86.670:114): avc: denied { write } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.778715][ T28] audit: type=1400 audit(86.670:115): avc: denied { read } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.780992][ T3109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.807232][ T3109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.820928][ T3109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.829445][ T3109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.837213][ T3109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.847261][ T3109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.850144][ T3109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.861147][ T3109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.206970][ T3110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.218923][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.225473][ T3110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.231118][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.244357][ T3110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.250409][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.257222][ T3110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.274555][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.854497][ T3109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.151547][ T3110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.154056][ T3109] veth0_vlan: entered promiscuous mode [ 91.177691][ T3109] veth1_vlan: entered promiscuous mode [ 91.250061][ T3109] veth0_macvtap: entered promiscuous mode [ 91.267106][ T3109] veth1_macvtap: entered promiscuous mode [ 91.443273][ T927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.443988][ T927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.444077][ T927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.444196][ T927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.531655][ T28] audit: type=1400 audit(91.420:116): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.539387][ T28] audit: type=1400 audit(91.430:117): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/syzkaller.zc4AIA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.551380][ T28] audit: type=1400 audit(91.440:118): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.563165][ T28] audit: type=1400 audit(91.450:119): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/syzkaller.zc4AIA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 91.566386][ T28] audit: type=1400 audit(91.460:120): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/syzkaller.zc4AIA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 91.602907][ T28] audit: type=1400 audit(91.490:121): avc: denied { unmount } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.618995][ T28] audit: type=1400 audit(91.510:122): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 91.619157][ T28] audit: type=1400 audit(91.510:123): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="gadgetfs" ino=2434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.636007][ T28] audit: type=1400 audit(91.530:124): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.638028][ T28] audit: type=1400 audit(91.530:125): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 91.719411][ T3109] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.809024][ T3110] veth0_vlan: entered promiscuous mode [ 91.838370][ T3110] veth1_vlan: entered promiscuous mode [ 91.926233][ T3110] veth0_macvtap: entered promiscuous mode [ 91.937826][ T3110] veth1_macvtap: entered promiscuous mode [ 92.088198][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.088809][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.088857][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.088918][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.548230][ T3717] Zero length message leads to an empty skb [ 92.737107][ T3720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=3720 comm=syz.0.3 [ 92.833627][ T3720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=3720 comm=syz.0.3 [ 92.853073][ T3720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3720 comm=syz.0.3 [ 93.808474][ T3729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=3729 comm=syz.0.6 [ 95.533159][ T713] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.693353][ T713] usb 1-1: device descriptor read/64, error -71 [ 95.953453][ T713] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.132999][ T713] usb 1-1: device descriptor read/64, error -71 [ 96.245215][ T713] usb usb1-port1: attempt power cycle [ 96.303083][ T3059] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.433680][ T3059] usb 2-1: device descriptor read/64, error -71 [ 96.583225][ T713] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.605122][ T713] usb 1-1: device descriptor read/8, error -71 [ 96.692773][ T3059] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.833339][ T3059] usb 2-1: device descriptor read/64, error -71 [ 96.852614][ T713] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.885672][ T713] usb 1-1: device descriptor read/8, error -71 [ 96.943228][ T3059] usb usb2-port1: attempt power cycle [ 96.994279][ T713] usb usb1-port1: unable to enumerate USB device [ 97.282910][ T3059] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.317122][ T3059] usb 2-1: device descriptor read/8, error -71 [ 97.553018][ T3059] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.585197][ T3059] usb 2-1: device descriptor read/8, error -71 [ 97.693799][ T3059] usb usb2-port1: unable to enumerate USB device [ 105.489165][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 105.489292][ T28] audit: type=1400 audit(105.380:151): avc: denied { name_bind } for pid=3770 comm="syz.0.20" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.489400][ T28] audit: type=1400 audit(105.380:152): avc: denied { node_bind } for pid=3770 comm="syz.0.20" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.360450][ T28] audit: type=1400 audit(106.250:153): avc: denied { write } for pid=3772 comm="syz.0.21" name="ip_mr_cache" dev="proc" ino=4026532680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.226695][ T28] audit: type=1400 audit(107.120:154): avc: denied { create } for pid=3784 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.239513][ T28] audit: type=1400 audit(107.130:155): avc: denied { ioctl } for pid=3784 comm="syz.1.24" path="socket:[3149]" dev="sockfs" ino=3149 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.281636][ T28] audit: type=1400 audit(107.170:156): avc: denied { getopt } for pid=3784 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.579177][ T28] audit: type=1400 audit(107.470:157): avc: denied { map_create } for pid=3786 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.383828][ T3795] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure [ 108.982350][ T28] audit: type=1400 audit(108.870:158): avc: denied { append } for pid=3798 comm="syz.0.30" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.155689][ T28] audit: type=1400 audit(109.050:159): avc: denied { map } for pid=3798 comm="syz.0.30" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.346316][ T28] audit: type=1400 audit(111.240:160): avc: denied { create } for pid=3802 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 111.349136][ T28] audit: type=1400 audit(111.240:161): avc: denied { write } for pid=3802 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 111.383136][ T3803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3803 comm=syz.0.32 [ 112.513183][ T28] audit: type=1400 audit(112.410:162): avc: denied { ioctl } for pid=3802 comm="syz.0.32" path="socket:[3183]" dev="sockfs" ino=3183 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.523132][ T28] audit: type=1400 audit(112.420:163): avc: denied { bind } for pid=3802 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.520688][ T28] audit: type=1400 audit(116.410:164): avc: denied { read } for pid=3807 comm="syz.0.34" name="transactions" dev="binder" ino=1048589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.521717][ T28] audit: type=1400 audit(116.410:165): avc: denied { open } for pid=3807 comm="syz.0.34" path="/dev/binderfs/binder_logs/transactions" dev="binder" ino=1048589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.846257][ T3817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=3817 comm=syz.0.37 [ 117.055748][ T28] audit: type=1400 audit(116.950:166): avc: denied { create } for pid=3818 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.856742][ T3828] dlm: plock device version mismatch: kernel (1.2.0), user (64.637.67123456) [ 118.113395][ T28] audit: type=1400 audit(118.000:167): avc: denied { execute } for pid=3827 comm="syz.1.41" path="/13/blkio.bfq.io_wait_time_recursive" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.645176][ T28] audit: type=1400 audit(121.540:168): avc: denied { getattr } for pid=3839 comm="syz.0.43" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.717367][ T28] audit: type=1400 audit(121.610:169): avc: denied { ioctl } for pid=3839 comm="syz.0.43" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2643 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.732854][ T28] audit: type=1400 audit(123.620:170): avc: denied { getopt } for pid=3842 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.491805][ T3846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3846 comm=syz.0.45 [ 125.358482][ T28] audit: type=1400 audit(125.250:171): avc: denied { create } for pid=3849 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.374250][ T28] audit: type=1400 audit(125.270:172): avc: denied { read write } for pid=3849 comm="syz.0.47" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.374890][ T28] audit: type=1400 audit(125.270:173): avc: denied { open } for pid=3849 comm="syz.0.47" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.753795][ T28] audit: type=1400 audit(127.650:174): avc: denied { bind } for pid=3852 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.775294][ T28] audit: type=1400 audit(127.670:175): avc: denied { accept } for pid=3852 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.779636][ T28] audit: type=1400 audit(127.670:176): avc: denied { write } for pid=3852 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.426284][ T3855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=3855 comm=syz.0.49 [ 128.462903][ T3855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=3855 comm=syz.0.49 [ 128.783641][ T28] audit: type=1400 audit(128.680:177): avc: denied { ioctl } for pid=3856 comm="syz.0.50" path="socket:[2664]" dev="sockfs" ino=2664 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.146040][ T28] audit: type=1400 audit(130.040:178): avc: denied { map } for pid=3860 comm="syz.0.52" path="socket:[3300]" dev="sockfs" ino=3300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 130.668195][ T3870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=3870 comm=syz.0.54 [ 130.724532][ T3870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=3870 comm=syz.0.54 [ 131.015482][ T28] audit: type=1400 audit(130.910:179): avc: denied { write } for pid=3872 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.297063][ T28] audit: type=1400 audit(131.190:180): avc: denied { setopt } for pid=3878 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.107195][ T28] audit: type=1400 audit(132.000:181): avc: denied { create } for pid=3892 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.145636][ T28] audit: type=1400 audit(132.040:182): avc: denied { connect } for pid=3892 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.255574][ T3893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 132.256173][ T3893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 132.256472][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 132.384389][ T28] audit: type=1400 audit(132.280:183): avc: denied { watch watch_reads } for pid=3897 comm="syz.1.64" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 132.773627][ T3905] ======================================================= [ 132.773627][ T3905] WARNING: The mand mount option has been deprecated and [ 132.773627][ T3905] and is ignored by this kernel. Remove the mand [ 132.773627][ T3905] option from the mount to silence this warning. [ 132.773627][ T3905] ======================================================= [ 132.780033][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 132.780144][ T28] audit: type=1400 audit(132.670:199): avc: denied { mount } for pid=3904 comm="syz.0.66" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 132.797056][ T28] audit: type=1400 audit(132.690:200): avc: denied { mounton } for pid=3904 comm="syz.0.66" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 132.830299][ T28] audit: type=1400 audit(132.720:201): avc: denied { unmount } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.315685][ T28] audit: type=1400 audit(133.200:202): avc: denied { prog_load } for pid=3911 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.315876][ T28] audit: type=1400 audit(133.210:203): avc: denied { bpf } for pid=3911 comm="syz.0.69" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.324993][ T28] audit: type=1400 audit(133.220:204): avc: denied { perfmon } for pid=3911 comm="syz.0.69" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.395211][ T28] audit: type=1400 audit(133.290:205): avc: denied { prog_run } for pid=3911 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.561381][ T28] audit: type=1400 audit(133.450:206): avc: denied { create } for pid=3914 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.589733][ T28] audit: type=1400 audit(133.480:207): avc: denied { write } for pid=3914 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.590817][ T28] audit: type=1400 audit(133.480:208): avc: denied { nlmsg_write } for pid=3914 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.090291][ T3918] FAULT_INJECTION: forcing a failure. [ 134.090291][ T3918] name failslab, interval 1, probability 0, space 0, times 1 [ 134.091202][ T3918] CPU: 0 UID: 0 PID: 3918 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT [ 134.091420][ T3918] Hardware name: ARM-Versatile Express [ 134.091684][ T3918] Call trace: [ 134.092165][ T3918] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 134.097233][ T3918] r7:60000013 r6:60000013 r5:823282c0 r4:00000000 [ 134.097410][ T3918] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 134.097511][ T3918] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 134.097578][ T3918] r7:841abe80 r6:00000000 r5:841abe80 r4:83315fdc [ 134.097597][ T3918] [<8021e850>] (dump_stack) from [<80a24428>] (should_fail_ex+0x1bc/0x21c) [ 134.097676][ T3918] [<80a2426c>] (should_fail_ex) from [<8057c788>] (should_failslab+0x6c/0x94) [ 134.097757][ T3918] r8:00000000 r7:841abe80 r6:83801240 r5:00000dc0 r4:00000020 [ 134.097781][ T3918] [<8057c71c>] (should_failslab) from [<8055b154>] (__kmalloc_noprof+0xa8/0x3c8) [ 134.097842][ T3918] [<8055b0ac>] (__kmalloc_noprof) from [<8194eb28>] (xfrm_hash_alloc+0x38/0x3c) [ 134.098421][ T3918] r10:00000000 r9:86539080 r8:ea971e98 r7:833e52e8 r6:00000000 r5:86f01280 [ 134.100950][ T3918] r4:86539000 [ 134.101828][ T3918] [<8194eaf0>] (xfrm_hash_alloc) from [<8194e81c>] (xfrm_state_init+0x60/0x1c4) [ 134.101964][ T3918] [<8194e7bc>] (xfrm_state_init) from [<81940ca0>] (xfrm_net_init+0x88/0x2e8) [ 134.102038][ T3918] r8:ea971e98 r7:833e52e8 r6:00000000 r5:00000000 r4:86539000 [ 134.102059][ T3918] [<81940c18>] (xfrm_net_init) from [<8168e6b0>] (ops_init+0xb0/0x100) [ 134.102136][ T3918] r9:86539080 r8:ea971e98 r7:833e52e8 r6:86539000 r5:00000000 r4:833f61ac [ 134.102189][ T3918] [<8168e600>] (ops_init) from [<8168e790>] (setup_net+0x90/0x170) [ 134.102267][ T3918] r9:86539080 r8:ea971e98 r7:833e52e8 r6:833e5314 r5:86539000 r4:833f61ac [ 134.102319][ T3918] [<8168e700>] (setup_net) from [<816904c4>] (copy_net_ns+0x140/0x3a8) [ 134.102397][ T3918] r10:83484734 r9:8321e300 r8:86539080 r7:8321f620 r6:00000000 r5:8321e300 [ 134.102421][ T3918] r4:86539000 [ 134.102439][ T3918] [<81690384>] (copy_net_ns) from [<80283624>] (create_new_namespaces+0x12c/0x454) [ 134.102561][ T3918] r9:8321e300 r8:40000000 r7:00000000 r6:841abe80 r5:86d81cd0 r4:8405f900 [ 134.102581][ T3918] [<802834f8>] (create_new_namespaces) from [<80283de0>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 134.102694][ T3918] r10:00000151 r9:841abe80 r8:00000000 r7:8321e300 r6:ea971f68 r5:8528de00 [ 134.102716][ T3918] r4:40000000 [ 134.102734][ T3918] [<80283d5c>] (unshare_nsproxy_namespaces) from [<80250bf4>] (ksys_unshare+0x17c/0x480) [ 134.102844][ T3918] r7:00000000 r6:00000000 r5:841abe80 r4:40000000 [ 134.102865][ T3918] [<80250a78>] (ksys_unshare) from [<80250f08>] (sys_unshare+0x10/0x14) [ 134.103015][ T3918] r8:8020029c r7:00000151 r6:00356308 r5:00000000 r4:00000000 [ 134.103041][ T3918] [<80250ef8>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 134.103222][ T3918] Exception stack(0xea971fa8 to 0xea971ff0) [ 134.103469][ T3918] 1fa0: 00000000 00000000 40000000 00000000 00000000 00000000 [ 134.103533][ T3918] 1fc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76f0d0dc [ 134.103565][ T3918] 1fe0: 76f0ce88 76f0ce78 00019004 00130ac0 [ 135.048365][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 137.067430][ T3936] netlink: 104 bytes leftover after parsing attributes in process `syz.0.81'. [ 140.059099][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 140.059203][ T28] audit: type=1400 audit(139.950:216): avc: denied { map_read map_write } for pid=3953 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 140.472851][ T28] audit: type=1400 audit(140.360:217): avc: denied { mount } for pid=3955 comm="syz.0.89" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.969530][ T28] audit: type=1400 audit(143.860:218): avc: denied { unmount } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 145.298196][ T3973] ubi0: attaching mtd0 [ 145.335840][ T3973] ubi0: scanning is finished [ 145.336697][ T3973] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 145.349975][ T3973] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 148.119435][ T28] audit: type=1400 audit(148.010:219): avc: denied { unmount } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.745140][ T28] audit: type=1400 audit(149.640:220): avc: denied { unmount } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 150.382637][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.536342][ T43] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 150.546676][ T43] usb 2-1: config 0 has no interfaces? [ 150.546970][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.555771][ T43] usb 2-1: config 0 descriptor?? [ 150.830042][ T43] usb 2-1: USB disconnect, device number 6 [ 151.955192][ T3987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.959528][ T3987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.024514][ T1598] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.185904][ T1598] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.194904][ T1598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.195112][ T1598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.195309][ T1598] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.195409][ T1598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.199213][ T1598] usb 2-1: config 0 descriptor?? [ 152.642548][ T1598] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 152.774121][ T3987] hsr_slave_0: entered promiscuous mode [ 152.774905][ T3987] hsr_slave_1: entered promiscuous mode [ 152.775333][ T3987] debugfs: 'hsr0' already exists in 'hsr' [ 152.775368][ T3987] Cannot create hsr debugfs directory [ 153.084411][ T3987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.088561][ T3987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.098896][ T3987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.108167][ T3987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.111310][ T3987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.119331][ T3987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.127034][ T3987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.140314][ T3987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.965334][ T3987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.263140][ T4310] syz.1.115 uses obsolete (PF_INET,SOCK_PACKET) [ 154.264622][ T28] audit: type=1400 audit(154.160:221): avc: denied { create } for pid=4308 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.271626][ T28] audit: type=1400 audit(154.160:222): avc: denied { ioctl } for pid=4308 comm="syz.1.115" path="socket:[3016]" dev="sockfs" ino=3016 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.625016][ T28] audit: type=1400 audit(154.520:223): avc: denied { mount } for pid=4320 comm="syz.1.117" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.646920][ T28] audit: type=1400 audit(154.540:224): avc: denied { search } for pid=4320 comm="syz.1.117" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.647112][ T28] audit: type=1400 audit(154.540:225): avc: denied { search } for pid=4320 comm="syz.1.117" name="instances" dev="tracefs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.652996][ T28] audit: type=1400 audit(154.540:226): avc: denied { write search } for pid=4320 comm="syz.1.117" name="instances" dev="tracefs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.653156][ T28] audit: type=1400 audit(154.540:227): avc: denied { add_name } for pid=4320 comm="syz.1.117" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.653211][ T28] audit: type=1400 audit(154.540:228): avc: denied { create } for pid=4320 comm="syz.1.117" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 154.686144][ T23] usb 2-1: USB disconnect, device number 7 [ 154.847659][ T28] audit: type=1400 audit(154.740:229): avc: denied { search } for pid=4320 comm="syz.1.117" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.847815][ T28] audit: type=1400 audit(154.740:230): avc: denied { search } for pid=4320 comm="syz.1.117" name="instances" dev="tracefs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 156.847445][ T3987] veth0_vlan: entered promiscuous mode [ 156.869939][ T3987] veth1_vlan: entered promiscuous mode [ 156.933693][ T3987] veth0_macvtap: entered promiscuous mode [ 156.942286][ T3987] veth1_macvtap: entered promiscuous mode [ 157.013744][ T927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.123381][ T292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.123493][ T292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.123576][ T292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.451748][ C0] vcan0: j1939_tp_rxtimer: 0x874ad800: rx timeout, send abort [ 157.455517][ C0] vcan0: j1939_xtp_rx_abort_one: 0x874ad800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.274562][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 160.274690][ T28] audit: type=1400 audit(160.170:245): avc: denied { write } for pid=4426 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.874152][ T4431] FAULT_INJECTION: forcing a failure. [ 160.874152][ T4431] name failslab, interval 1, probability 0, space 0, times 0 [ 160.875246][ T4431] CPU: 1 UID: 0 PID: 4431 Comm: syz.1.152 Not tainted syzkaller #0 PREEMPT [ 160.875423][ T4431] Hardware name: ARM-Versatile Express [ 160.875650][ T4431] Call trace: [ 160.876614][ T4431] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 160.877976][ T4431] r7:60000013 r6:60000013 r5:823282c0 r4:00000000 [ 160.878076][ T4431] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 160.878143][ T4431] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 160.878210][ T4431] r7:000002d0 r6:00000000 r5:848e4b00 r4:83315fdc [ 160.878229][ T4431] [<8021e850>] (dump_stack) from [<80a24428>] (should_fail_ex+0x1bc/0x21c) [ 160.878294][ T4431] [<80a2426c>] (should_fail_ex) from [<8057c788>] (should_failslab+0x6c/0x94) [ 160.878369][ T4431] r8:848e4b00 r7:000002d0 r6:81580910 r5:00000dc0 r4:83801540 [ 160.878388][ T4431] [<8057c71c>] (should_failslab) from [<8055c1ec>] (__kmalloc_cache_noprof+0x58/0x338) [ 160.878446][ T4431] [<8055c194>] (__kmalloc_cache_noprof) from [<81580910>] (snd_pcm_attach_substream+0x160/0x348) [ 160.878544][ T4431] r10:86f06280 r9:851cfc00 r8:86f06280 r7:00000000 r6:ea761c50 r5:851cfc00 [ 160.878576][ T4431] r4:84bb7c00 [ 160.878594][ T4431] [<815807b0>] (snd_pcm_attach_substream) from [<815866bc>] (snd_pcm_open_substream+0x38/0x908) [ 160.878668][ T4431] r10:86f06280 r9:851cfc00 r8:ea761ccc r7:00000000 r6:00000000 r5:ea761cb4 [ 160.878705][ T4431] r4:851cfc00 r3:ea761c50 [ 160.878724][ T4431] [<81586684>] (snd_pcm_open_substream) from [<8159d99c>] (snd_pcm_oss_open+0x240/0x540) [ 160.878796][ T4431] r10:86f06280 r9:851cfc00 r8:ea761ccc r7:00000000 r6:00000000 r5:04000003 [ 160.878819][ T4431] r4:851cfc00 [ 160.878834][ T4431] [<8159d75c>] (snd_pcm_oss_open) from [<8156ce80>] (soundcore_open+0x17c/0x1e4) [ 160.878903][ T4431] r10:81e3d668 r9:0000000c r8:84db92c8 r7:00000003 r6:8363710c r5:86f06280 [ 160.878923][ T4431] r4:00000003 [ 160.878939][ T4431] [<8156cd04>] (soundcore_open) from [<805be5f4>] (chrdev_open+0xbc/0x234) [ 160.879009][ T4431] r10:00000000 r9:86f06280 r8:86f062a8 r7:81e3b99c r6:86f06280 r5:84db92c8 [ 160.879034][ T4431] r4:84010700 r3:8156cd04 [ 160.879050][ T4431] [<805be538>] (chrdev_open) from [<805b0f70>] (do_dentry_open+0x138/0x50c) [ 160.879122][ T4431] r9:86f06280 r8:86f062a8 r7:805be538 r6:84db92c8 r5:00000000 r4:86f06280 [ 160.879141][ T4431] [<805b0e38>] (do_dentry_open) from [<805b2af0>] (vfs_open+0x2c/0xe8) [ 160.879216][ T4431] r9:86f06280 r8:848e4b00 r7:ea761f20 r6:86f062a8 r5:8331d194 r4:86f06280 [ 160.879235][ T4431] [<805b2ac4>] (vfs_open) from [<805cf460>] (path_openat+0x430/0xa3c) [ 160.879300][ T4431] r6:00000000 r5:8331d194 r4:ea761e58 [ 160.879320][ T4431] [<805cf030>] (path_openat) from [<805cfb24>] (do_file_open+0xb8/0x150) [ 160.879389][ T4431] r10:00000142 r9:848e4b00 r8:00000001 r7:ffffff9c r6:ea761f20 r5:848e4b00 [ 160.879412][ T4431] r4:840919c0 [ 160.879429][ T4431] [<805cfa6c>] (do_file_open) from [<805b2fdc>] (do_sys_openat2+0x8c/0xf0) [ 160.879496][ T4431] r8:8020029c r7:20000040 r6:ffffff9c r5:840919c0 r4:00000005 [ 160.879516][ T4431] [<805b2f50>] (do_sys_openat2) from [<805b34f4>] (sys_openat+0x88/0xd8) [ 160.879621][ T4431] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 160.879641][ T4431] [<805b346c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 160.879792][ T4431] Exception stack(0xea761fa8 to 0xea761ff0) [ 160.879977][ T4431] 1fa0: 00000000 00000000 ffffff9c 20000040 00000042 00000000 [ 160.880110][ T4431] 1fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76faf0dc [ 160.880149][ T4431] 1fe0: 76faee88 76faee78 00019004 00130ac0 [ 160.880223][ T4431] r5:00000000 r4:00000000 [ 161.635344][ T28] audit: type=1400 audit(161.530:246): avc: denied { name_bind } for pid=4436 comm="syz.2.154" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 161.900138][ T28] audit: type=1400 audit(161.790:247): avc: denied { ioctl } for pid=4438 comm="syz.1.155" path="pid:[4026532651]" dev="nsfs" ino=4026532651 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 162.723313][ T4442] comedi: valid board names for 8255 driver are: [ 162.723448][ T4442] 8255 [ 162.723492][ T4442] comedi: valid board names for vmk80xx driver are: [ 162.723514][ T4442] vmk80xx [ 162.723530][ T4442] comedi: valid board names for usbduxsigma driver are: [ 162.723545][ T4442] usbduxsigma [ 162.723560][ T4442] comedi: valid board names for usbduxfast driver are: [ 162.723577][ T4442] usbduxfast [ 162.723592][ T4442] comedi: valid board names for usbdux driver are: [ 162.723608][ T4442] usbdux [ 162.723623][ T4442] comedi: valid board names for ni6501 driver are: [ 162.723638][ T4442] ni6501 [ 162.723651][ T4442] comedi: valid board names for dt9812 driver are: [ 162.723666][ T4442] dt9812 [ 162.723679][ T4442] comedi: valid board names for ni_labpc_cs driver are: [ 162.723695][ T4442] ni_labpc_cs [ 162.723709][ T4442] comedi: valid board names for ni_daq_700 driver are: [ 162.723723][ T4442] ni_daq_700 [ 162.723738][ T4442] comedi: valid board names for labpc_pci driver are: [ 162.723754][ T4442] labpc_pci [ 162.723776][ T4442] comedi: valid board names for adl_pci9118 driver are: [ 162.723806][ T4442] pci9118dg [ 162.723845][ T4442] pci9118hg [ 162.723863][ T4442] pci9118hr [ 162.723878][ T4442] comedi: valid board names for 8255_pci driver are: [ 162.723895][ T4442] 8255_pci [ 162.723912][ T4442] comedi: valid board names for comedi_parport driver are: [ 162.723930][ T4442] comedi_parport [ 162.723947][ T4442] comedi: valid board names for comedi_test driver are: [ 162.723965][ T4442] comedi_test [ 162.723989][ T4442] comedi: valid board names for comedi_bond driver are: [ 162.724006][ T4442] comedi_bond [ 163.728790][ T4453] FAULT_INJECTION: forcing a failure. [ 163.728790][ T4453] name failslab, interval 1, probability 0, space 0, times 0 [ 163.728987][ T4453] CPU: 1 UID: 0 PID: 4453 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT [ 163.729091][ T4453] Hardware name: ARM-Versatile Express [ 163.729108][ T4453] Call trace: [ 163.729147][ T4453] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 163.729261][ T4453] r7:60000013 r6:60000013 r5:823282c0 r4:00000000 [ 163.729275][ T4453] [<80201ae4>] (show_stack) from [<8021e83c>] (dump_stack_lvl+0x5c/0x70) [ 163.729327][ T4453] [<8021e7e0>] (dump_stack_lvl) from [<8021e868>] (dump_stack+0x18/0x1c) [ 163.729402][ T4453] r7:85cc5780 r6:00000000 r5:85cc5780 r4:83315fdc [ 163.729418][ T4453] [<8021e850>] (dump_stack) from [<80a24428>] (should_fail_ex+0x1bc/0x21c) [ 163.729459][ T4453] [<80a2426c>] (should_fail_ex) from [<8057c788>] (should_failslab+0x6c/0x94) [ 163.729534][ T4453] r8:00000000 r7:85cc5780 r6:805d7ea8 r5:00000cc0 r4:838bab40 [ 163.729564][ T4453] [<8057c71c>] (should_failslab) from [<8055a564>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 163.729618][ T4453] [<8055a504>] (kmem_cache_alloc_lru_noprof) from [<805d7ea8>] (__d_alloc+0x30/0x220) [ 163.729670][ T4453] r10:83bac800 r9:8253d928 r8:81e66900 r7:83bac800 r6:8405b310 r5:ea519ef0 [ 163.729692][ T4453] r4:833f147c [ 163.729710][ T4453] [<805d7e78>] (__d_alloc) from [<805db534>] (d_alloc_pseudo+0x10/0x3c) [ 163.729793][ T4453] r9:85cc5780 r8:81e66900 r7:00000002 r6:8405b310 r5:8581e840 r4:833f147c [ 163.729804][ T4453] [<805db524>] (d_alloc_pseudo) from [<805b8ba0>] (alloc_file_pseudo+0x7c/0x154) [ 163.729845][ T4453] [<805b8b24>] (alloc_file_pseudo) from [<81669770>] (sock_alloc_file+0x48/0xc4) [ 163.729938][ T4453] r10:00000119 r9:85cc5780 r8:8020029c r7:00000119 r6:8581e840 r5:8581e7c0 [ 163.729961][ T4453] r4:00000000 [ 163.729976][ T4453] [<81669728>] (sock_alloc_file) from [<8166cf14>] (__sys_socket+0xd4/0x118) [ 163.730057][ T4453] r6:8581e7c0 r5:00000004 r4:00000000 [ 163.730073][ T4453] [<8166ce40>] (__sys_socket) from [<8166cf68>] (sys_socket+0x10/0x14) [ 163.730133][ T4453] r6:00356310 r5:00000000 r4:00000000 [ 163.730148][ T4453] [<8166cf58>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 163.730195][ T4453] Exception stack(0xea519fa8 to 0xea519ff0) [ 163.730231][ T4453] 9fa0: 00000000 00000000 00000010 00000003 00000010 00000000 [ 163.730264][ T4453] 9fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76faf0dc [ 163.730289][ T4453] 9fe0: 76faee88 76faee78 00019004 00130ac0 [ 164.010905][ T4457] bond0: (slave bond_slave_0): Releasing backup interface [ 164.530248][ T28] audit: type=1400 audit(164.420:248): avc: denied { setopt } for pid=4462 comm="syz.2.165" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.760121][ T3569] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 165.003181][ T3569] usb 2-1: Using ep0 maxpacket: 32 [ 165.013910][ T3569] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 165.074238][ T3569] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 165.074354][ T3569] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 165.074391][ T3569] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.074416][ T3569] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 165.081391][ T3569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.081461][ T3569] usb 2-1: Product: syz [ 165.081477][ T3569] usb 2-1: Manufacturer: syz [ 165.081490][ T3569] usb 2-1: SerialNumber: syz [ 165.107297][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 165.110637][ T3569] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input5 [ 165.383111][ T3569] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 165.383595][ T3569] (id 0x00) [ 165.573115][ T28] audit: type=1804 audit(165.460:249): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.167" name="/newroot/21/file0" dev="tmpfs" ino=128 res=1 errno=0 [ 165.734541][ T3569] rc_core: IR keymap rc-imon-pad not found [ 165.734793][ T3569] Registered IR keymap rc-empty [ 165.737216][ T3569] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 165.738621][ T3569] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 165.796742][ T3569] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 165.797589][ T3569] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input6 [ 165.866322][ T3569] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:8> initialized [ 166.001660][ T713] usb 2-1: USB disconnect, device number 8 [ 166.158058][ T28] audit: type=1400 audit(166.050:250): avc: denied { block_suspend } for pid=4492 comm="syz.2.169" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.305412][ T28] audit: type=1400 audit(168.200:251): avc: denied { create } for pid=4522 comm="syz.2.176" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 168.315555][ T28] audit: type=1400 audit(168.210:252): avc: denied { write } for pid=4522 comm="syz.2.176" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 168.316553][ T28] audit: type=1400 audit(168.210:253): avc: denied { open } for pid=4522 comm="syz.2.176" path="/28/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 168.643136][ T28] audit: type=1400 audit(168.500:254): avc: denied { unlink } for pid=3987 comm="syz-executor" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.470217][ T4546] 8<--- cut here --- [ 170.470401][ T4546] Unable to handle kernel paging request at virtual address fee00100 when write [ 170.470524][ T4546] [fee00100] *pgd=80000080007003, *pmd=00000000 [ 170.471579][ T4546] Internal error: Oops: a06 [#1] SMP ARM [ 170.478203][ T4546] Modules linked in: [ 170.479080][ T4546] CPU: 1 UID: 0 PID: 4546 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT [ 170.479362][ T4546] Hardware name: ARM-Versatile Express [ 170.479530][ T4546] PC is at parport_attach+0x5c/0x1e8 [ 170.479760][ T4546] LR is at parport_attach+0x50/0x1e8 [ 170.479902][ T4546] pc : [<814da0e8>] lr : [<814da0dc>] psr: 60000013 [ 170.480047][ T4546] sp : dffedd30 ip : dffedd30 fp : dffedd54 [ 170.480240][ T4546] r10: 835316e8 r9 : 00000003 r8 : 84020600 [ 170.480772][ T4546] r7 : dffedd90 r6 : dffedd90 r5 : 84020600 r4 : 00000000 [ 170.481085][ T4546] r3 : fee00100 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 170.481540][ T4546] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 170.481884][ T4546] Control: 30c5387d Table: 871241c0 DAC: 00000000 [ 170.482228][ T4546] Register r0 information: NULL pointer [ 170.482833][ T4546] Register r1 information: NULL pointer [ 170.483067][ T4546] Register r2 information: NULL pointer [ 170.483310][ T4546] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 170.483818][ T4546] Register r4 information: NULL pointer [ 170.484071][ T4546] Register r5 information: slab kmalloc-192 start 84020600 pointer offset 0 size 192 [ 170.484855][ T4546] Register r6 information: 2-page vmalloc region starting at 0xdffec000 allocated at kernel_clone+0xc4/0x440 [ 170.485245][ T4546] Register r7 information: 2-page vmalloc region starting at 0xdffec000 allocated at kernel_clone+0xc4/0x440 [ 170.485714][ T4546] Register r8 information: slab kmalloc-192 start 84020600 pointer offset 0 size 192 [ 170.486093][ T4546] Register r9 information: non-paged memory [ 170.486400][ T4546] Register r10 information: non-slab/vmalloc memory [ 170.486756][ T4546] Register r11 information: 2-page vmalloc region starting at 0xdffec000 allocated at kernel_clone+0xc4/0x440 [ 170.487170][ T4546] Register r12 information: 2-page vmalloc region starting at 0xdffec000 allocated at kernel_clone+0xc4/0x440 [ 170.487587][ T4546] Process syz.2.184 (pid: 4546, stack limit = 0xdffec000) [ 170.487886][ T4546] Stack: (0xdffedd30 to 0xdffee000) [ 170.488092][ T4546] dd20: ffffffff 00000004 833d88c0 81e33128 [ 170.488409][ T4546] dd40: 00000000 dffedd90 dffedd8c dffedd58 814d5d78 814da098 40946400 00000000 [ 170.488699][ T4546] dd60: dffedd7c 200001c0 84020600 b5403587 40946400 00000000 00000003 85cc2580 [ 170.488982][ T4546] dd80: dffede4c dffedd90 814d157c 814d5c7c 656d6f63 705f6964 6f707261 00007472 [ 170.489257][ T4546] dda0: 00000000 00000100 000000c1 000007ff 000000e1 0000000e 00000001 00000069 [ 170.489533][ T4546] ddc0: 10010000 00000008 fffffffc 00000009 00000005 00000007 00000001 00000001 [ 170.489814][ T4546] dde0: 000000fd 00000003 000107ff 00000000 00000004 00000088 000007ff 00080000 [ 170.490235][ T4546] de00: 20001e58 00000801 0000f39d 00000006 00000008 0000a4b5 00000000 00000003 [ 170.490550][ T4546] de20: 00000000 0f31e99a 00000000 86f05f80 84020600 200001c0 40946400 00000000 [ 170.490843][ T4546] de40: dffedf14 dffede50 814d28a4 814d14bc 00000000 0f31e99a 00000000 00000000 [ 170.491159][ T4546] de60: 82548874 dffedea4 0000005f 851ccb68 00000064 84020630 dffedee4 dffede88 [ 170.491545][ T4546] de80: 8082c7a4 80822b30 00000064 00000001 00000000 dffedea4 842e1d10 83ce4bb0 [ 170.492047][ T4546] dea0: 00006400 0000000b dffede98 00000000 00000000 0f31e99a 00000000 86f05f80 [ 170.492360][ T4546] dec0: 40946400 200001c0 200001c0 86f05f80 00000003 85cc2580 dffedef4 dffedee8 [ 170.492895][ T4546] dee0: 8082c8d8 0f31e99a dffedf14 00000000 86f05f81 40946400 200001c0 86f05f80 [ 170.493254][ T4546] df00: 00000003 85cc2580 dffedfa4 dffedf18 805d380c 814d255c ecac8b10 85cc2580 [ 170.493596][ T4546] df20: dffedf3c dffedf30 81bb1800 81bb16cc dffedf54 dffedf40 8025ba20 8028f504 [ 170.493906][ T4546] df40: dffedfb0 40000000 dffedf84 dffedf58 80221bdc 8025b9d8 00000000 8321a04c [ 170.494188][ T4546] df60: dffedfb0 0013ec60 ecac8b10 80221b30 00000000 0f31e99a dffedfac 00000000 [ 170.494527][ T4546] df80: 00000000 00356310 00000036 8020029c 85cc2580 00000036 00000000 dffedfa8 [ 170.494830][ T4546] dfa0: 80200060 805d35d4 00000000 00000000 00000003 40946400 200001c0 00000000 [ 170.495174][ T4546] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76ff30dc [ 170.495507][ T4546] dfe0: 76ff2e88 76ff2e78 00019004 00130ac0 60000010 00000003 00000000 00000000 [ 170.495821][ T4546] Call trace: [ 170.496035][ T4546] [<814da08c>] (parport_attach) from [<814d5d78>] (comedi_device_attach+0x108/0x244) [ 170.496476][ T4546] r7:dffedd90 r6:00000000 r5:81e33128 r4:833d88c0 [ 170.496786][ T4546] [<814d5c70>] (comedi_device_attach) from [<814d157c>] (do_devconfig_ioctl+0xcc/0x218) [ 170.497217][ T4546] r10:85cc2580 r9:00000003 r8:00000000 r7:40946400 r6:b5403587 r5:84020600 [ 170.497495][ T4546] r4:200001c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.497643][ T4546] [<814d14b0>] (do_devconfig_ioctl) from [<814d28a4>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 170.498678][ T4546] r8:00000000 r7:40946400 r6:200001c0 r5:84020600 r4:86f05f80 [ 170.499074][ T4546] [<814d2550>] (comedi_unlocked_ioctl) from [<805d380c>] (sys_ioctl+0x244/0xb5c) [ 170.499533][ T4546] r10:85cc2580 r9:00000003 r8:86f05f80 r7:200001c0 r6:40946400 r5:86f05f81 [ 170.499870][ T4546] r4:00000000 [ 170.500066][ T4546] [<805d35c8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 170.501586][ T4546] Exception stack(0xdffedfa8 to 0xdffedff0) [ 170.502336][ T4546] dfa0: 00000000 00000000 00000003 40946400 200001c0 00000000 [ 170.503743][ T4546] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76ff30dc [ 170.504114][ T4546] dfe0: 76ff2e88 76ff2e78 00019004 00130ac0 [ 170.504616][ T4546] r10:00000036 r9:85cc2580 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 170.505014][ T4546] r4:00000000 [ 170.505481][ T4546] Code: ebb56edb e5953064 e7f33053 e2433612 (e5c34000) [ 170.513559][ T4546] ---[ end trace 0000000000000000 ]--- [ 170.701857][ T4546] Kernel panic - not syncing: Fatal exception [ 170.704227][ T4546] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:27:23 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=823282c0 R02=5acfa000 R03=81bb20c0 R04=00000006 R05=832f5288 R06=85ccd780 R07=832f5280 R08=85ccd780 R09=832f5288 R10=00000000 R11=df801f24 R12=df801f28 R13=df801f18 R14=8034c91c R15=81bb20d0 PSR=20000193 --C- A S svc32 s00=62696c2f s01=646f6d2f d00=646f6d2f62696c2f s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=85133040 R01=00000020 R02=eb0db000 R03=00000000 R04=85d0a002 R05=85133040 R06=80b36298 R07=85d0a029 R08=00000000 R09=00000000 R10=000004d0 R11=dffed9b4 R12=00000002 R13=dffed9a8 R14=8335c0f4 R15=80b362f0 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000