last executing test programs: 2m42.216018146s ago: executing program 0 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x8) r1 = openat(r0, 0x0, 0x2, 0xa7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r2, &(0x7f0000000180), 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sched/sched_switch/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x1) syz_genetlink_get_family_id$devlink(0x0, r1) nanosleep(&(0x7f0000000240)={0x0, 0xf4240}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) 2m40.371469212s ago: executing program 0 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x405, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 2m39.913885226s ago: executing program 0 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./config/cluster/ocfs2/heartbeat/region1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/cluster/ocfs2/heartbeat/region1/block_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000001600)='5', 0x1) 2m39.188881833s ago: executing program 0 (id=234): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) syz_open_dev$mtd(&(0x7f0000000080), 0x1, 0x0) 2m36.624182336s ago: executing program 0 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='30000\n', 0x6) syz_clone(0x11, &(0x7f0000001000), 0x2000, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x13, 0x0, 0x0) write(r0, &(0x7f0000000300)='30001,0x7f0000200000,0x7f000040', 0x1f) 2m35.302095378s ago: executing program 0 (id=236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e300c060a2b06010401823702020a0000", 0xa4, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000048fe534d424000010000000000010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) 1m48.94352611s ago: executing program 32 (id=236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e300c060a2b06010401823702020a0000", 0xa4, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000048fe534d424000010000000000010001000100000000000000010000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) 7.155043516s ago: executing program 2 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000120000000000000000000000791220000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.509831131s ago: executing program 1 (id=368): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.509632522s ago: executing program 2 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsmount(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) 5.374688032s ago: executing program 1 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x18, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) 4.533815309s ago: executing program 2 (id=371): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x80) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r4, r7, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128, 0x0, r3}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e, 0x0, r2}}], 0x4, 0x0, 0x0) 3.649675827s ago: executing program 1 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 3.424100449s ago: executing program 2 (id=373): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008084, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0x2, @thr={0x0, 0x0}}) 2.421722548s ago: executing program 2 (id=374): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010528"], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 2.418209828s ago: executing program 1 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsmount(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) 1.423095887s ago: executing program 2 (id=376): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) 1.0410094s ago: executing program 1 (id=377): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x80) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r4, r7, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128, 0x0, r3}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e, 0x0, r2}}], 0x4, 0x0, 0x0) 0s ago: executing program 1 (id=378): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000206050d00000000000000000200000005000100070000000900020073797a300000000011000300686173683a69702c706f72740000000005000400000000000500050002"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) kernel console output (not intermixed with test programs): [ 219.918508][ T29] audit: type=1400 audit(219.490:79): avc: denied { write } for pid=3350 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.822920][ T29] audit: type=1400 audit(221.390:80): avc: denied { write } for pid=3356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.803501][ T29] audit: type=1400 audit(222.370:81): avc: denied { write } for pid=3362 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.447408][ T29] audit: type=1400 audit(225.020:82): avc: denied { write } for pid=3366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.348532][ T29] audit: type=1400 audit(225.920:83): avc: denied { write } for pid=3370 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:9193' (ED25519) to the list of known hosts. [ 264.979688][ T29] audit: type=1400 audit(264.550:84): avc: denied { name_bind } for pid=3375 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 265.447843][ T29] audit: type=1400 audit(265.020:85): avc: denied { execute } for pid=3376 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 265.459643][ T29] audit: type=1400 audit(265.030:86): avc: denied { execute_no_trans } for pid=3376 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 273.949461][ T29] audit: type=1400 audit(273.520:87): avc: denied { mounton } for pid=3376 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 273.999041][ T29] audit: type=1400 audit(273.570:88): avc: denied { mount } for pid=3376 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 274.037292][ T3376] cgroup: Unknown subsys name 'net' [ 274.059939][ T29] audit: type=1400 audit(273.630:89): avc: denied { unmount } for pid=3376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 274.335417][ T3376] cgroup: Unknown subsys name 'cpuset' [ 274.398443][ T3376] cgroup: Unknown subsys name 'rlimit' [ 274.709782][ T29] audit: type=1400 audit(274.280:90): avc: denied { setattr } for pid=3376 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.309558][ T3378] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 275.318989][ T29] audit: type=1400 audit(274.890:91): avc: denied { relabelto } for pid=3378 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 275.329342][ T29] audit: type=1400 audit(274.900:92): avc: denied { write } for pid=3378 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 275.456749][ T29] audit: type=1400 audit(275.030:93): avc: denied { read } for pid=3376 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 275.460906][ T29] audit: type=1400 audit(275.030:94): avc: denied { open } for pid=3376 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 275.503232][ T3376] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 297.649046][ T29] audit: type=1400 audit(297.200:95): avc: denied { execmem } for pid=3380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 297.698708][ T29] audit: type=1400 audit(297.270:96): avc: denied { read } for pid=3381 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 297.704944][ T29] audit: type=1400 audit(297.270:97): avc: denied { open } for pid=3381 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 297.722576][ T29] audit: type=1400 audit(297.290:98): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 297.783951][ T29] audit: type=1400 audit(297.360:99): avc: denied { module_request } for pid=3381 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 297.967787][ T29] audit: type=1400 audit(297.540:100): avc: denied { sys_module } for pid=3381 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 307.024485][ T3381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.075070][ T3382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.098442][ T3382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.118155][ T3381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.127357][ T3381] hsr_slave_0: entered promiscuous mode [ 311.142709][ T3381] hsr_slave_1: entered promiscuous mode [ 311.777493][ T3382] hsr_slave_0: entered promiscuous mode [ 311.790047][ T3382] hsr_slave_1: entered promiscuous mode [ 311.803594][ T3382] debugfs: 'hsr0' already exists in 'hsr' [ 311.805704][ T3382] Cannot create hsr debugfs directory [ 314.676736][ T29] audit: type=1400 audit(314.250:101): avc: denied { create } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.683908][ T29] audit: type=1400 audit(314.250:102): avc: denied { write } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.698385][ T29] audit: type=1400 audit(314.260:103): avc: denied { read } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.707977][ T3381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.857500][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.898571][ T3381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.989330][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.016637][ T3381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.076564][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.174662][ T3381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.224945][ T3381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.810408][ T3382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.880877][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.904849][ T3382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.965455][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.984784][ T3382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.035940][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.083187][ T3382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.135641][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.893238][ T3381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.018134][ T3382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.016278][ T3381] veth0_vlan: entered promiscuous mode [ 333.206011][ T3381] veth1_vlan: entered promiscuous mode [ 333.767560][ T3381] veth0_macvtap: entered promiscuous mode [ 333.879863][ T3381] veth1_macvtap: entered promiscuous mode [ 334.350919][ T3382] veth0_vlan: entered promiscuous mode [ 334.690193][ T3382] veth1_vlan: entered promiscuous mode [ 334.727772][ T1283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.730064][ T1283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.730436][ T1283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.730760][ T1283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.535220][ T29] audit: type=1400 audit(335.100:104): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzkaller.NP7emI/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 335.549754][ T29] audit: type=1400 audit(335.120:105): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 335.588966][ T29] audit: type=1400 audit(335.160:106): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzkaller.NP7emI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 335.620662][ T29] audit: type=1400 audit(335.190:107): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 335.801185][ T29] audit: type=1400 audit(335.360:108): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzkaller.NP7emI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 335.813825][ T29] audit: type=1400 audit(335.380:109): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzkaller.NP7emI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 335.876890][ T3382] veth0_macvtap: entered promiscuous mode [ 335.884667][ T29] audit: type=1400 audit(335.450:110): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 335.956136][ T29] audit: type=1400 audit(335.510:111): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 335.992878][ T29] audit: type=1400 audit(335.550:112): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="gadgetfs" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 336.127992][ T29] audit: type=1400 audit(335.700:113): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 336.176053][ T3382] veth1_macvtap: entered promiscuous mode [ 336.735271][ T3381] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 336.976663][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.993122][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.125071][ T1283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.127044][ T1283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.992859][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 340.995077][ T29] audit: type=1400 audit(340.560:122): avc: denied { write } for pid=3531 comm="syz.0.1" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.025933][ T29] audit: type=1400 audit(340.570:123): avc: denied { open } for pid=3531 comm="syz.0.1" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.280772][ T29] audit: type=1400 audit(340.850:124): avc: denied { create } for pid=3534 comm="syz.1.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 341.414693][ T29] audit: type=1400 audit(340.930:125): avc: denied { ioctl } for pid=3531 comm="syz.0.1" path="/dev/uinput" dev="devtmpfs" ino=709 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.587097][ T3535] input: syz1 as /devices/virtual/input/input1 [ 341.878105][ T3538] netlink: 'syz.1.3': attribute type 12 has an invalid length. [ 341.953322][ T29] audit: type=1400 audit(341.520:126): avc: denied { ioctl } for pid=3534 comm="syz.1.3" path="socket:[3915]" dev="sockfs" ino=3915 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 343.872778][ T29] audit: type=1400 audit(343.440:127): avc: denied { read write } for pid=3542 comm="syz.1.5" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.900957][ T29] audit: type=1400 audit(343.470:128): avc: denied { open } for pid=3542 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.965740][ T29] audit: type=1400 audit(343.510:129): avc: denied { ioctl } for pid=3542 comm="syz.1.5" path="/dev/raw-gadget" dev="devtmpfs" ino=704 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.038161][ T3544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.084039][ T29] audit: type=1400 audit(343.650:130): avc: denied { create } for pid=3543 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.171098][ T3544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.183186][ T29] audit: type=1400 audit(343.750:131): avc: denied { setopt } for pid=3543 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 346.270141][ T3552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.333949][ T3552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.729569][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 347.739264][ T29] audit: type=1400 audit(347.300:136): avc: denied { mount } for pid=3553 comm="syz.0.9" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 347.907485][ T29] audit: type=1400 audit(347.470:137): avc: denied { search } for pid=3553 comm="syz.0.9" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.960780][ T29] audit: type=1400 audit(347.520:138): avc: denied { read } for pid=3553 comm="syz.0.9" name="trace" dev="tracefs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 347.979911][ T29] audit: type=1400 audit(347.540:139): avc: denied { open } for pid=3553 comm="syz.0.9" path="/4/trace/trace" dev="tracefs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 348.499484][ T29] audit: type=1400 audit(348.070:140): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 349.622645][ T29] audit: type=1400 audit(349.180:141): avc: denied { map_create } for pid=3561 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.630073][ T29] audit: type=1400 audit(349.200:142): avc: denied { bpf } for pid=3561 comm="syz.1.13" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.757228][ T29] audit: type=1400 audit(349.240:143): avc: denied { map_read map_write } for pid=3561 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.812437][ T29] audit: type=1400 audit(349.380:144): avc: denied { prog_load } for pid=3561 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.937590][ T29] audit: type=1400 audit(349.490:145): avc: denied { perfmon } for pid=3561 comm="syz.1.13" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.217143][ T3562] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 351.537187][ T3565] ======================================================= [ 351.537187][ T3565] WARNING: The mand mount option has been deprecated and [ 351.537187][ T3565] and is ignored by this kernel. Remove the mand [ 351.537187][ T3565] option from the mount to silence this warning. [ 351.537187][ T3565] ======================================================= [ 353.017232][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 353.018749][ T29] audit: type=1400 audit(352.590:151): avc: denied { name_bind } for pid=3571 comm="syz.1.18" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 353.080310][ T29] audit: type=1400 audit(352.650:152): avc: denied { node_bind } for pid=3571 comm="syz.1.18" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 353.436254][ T29] audit: type=1400 audit(353.010:153): avc: denied { mount } for pid=3572 comm="syz.0.19" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 353.846209][ T29] audit: type=1400 audit(353.380:154): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 356.986531][ T29] audit: type=1400 audit(356.560:155): avc: denied { create } for pid=3582 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 356.993567][ T29] audit: type=1400 audit(356.560:156): avc: denied { write } for pid=3582 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.288250][ T29] audit: type=1400 audit(356.860:157): avc: denied { mount } for pid=3584 comm="syz.0.24" name="/" dev="configfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 357.297893][ T29] audit: type=1400 audit(356.870:158): avc: denied { search } for pid=3584 comm="syz.0.24" name="/" dev="configfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 357.316421][ T29] audit: type=1400 audit(356.890:159): avc: denied { search } for pid=3584 comm="syz.0.24" name="usb_gadget" dev="configfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 357.418706][ T29] audit: type=1400 audit(356.990:160): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 359.682576][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 359.683501][ T29] audit: type=1400 audit(359.240:162): avc: denied { view } for pid=3595 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 360.383438][ T29] audit: type=1400 audit(359.950:163): avc: denied { read } for pid=3598 comm="syz.1.30" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 361.380000][ T29] audit: type=1400 audit(360.950:164): avc: denied { read write } for pid=3603 comm="syz.1.31" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 361.384946][ T29] audit: type=1400 audit(360.960:165): avc: denied { open } for pid=3603 comm="syz.1.31" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 363.054899][ T29] audit: type=1400 audit(362.630:166): avc: denied { read write } for pid=3382 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.060594][ T29] audit: type=1400 audit(362.630:167): avc: denied { open } for pid=3382 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.095579][ T29] audit: type=1400 audit(362.630:168): avc: denied { ioctl } for pid=3382 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.489230][ T29] audit: type=1400 audit(363.060:169): avc: denied { read } for pid=3607 comm="syz.0.32" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 363.493174][ T29] audit: type=1400 audit(363.060:170): avc: denied { open } for pid=3607 comm="syz.0.32" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 363.552325][ T29] audit: type=1400 audit(363.120:171): avc: denied { ioctl } for pid=3607 comm="syz.0.32" path="/dev/dri/card1" dev="devtmpfs" ino=619 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 365.055685][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 365.056431][ T29] audit: type=1400 audit(364.630:173): avc: denied { allowed } for pid=3612 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 365.138971][ T29] audit: type=1400 audit(364.700:174): avc: denied { create } for pid=3612 comm="syz.1.34" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 365.177021][ T29] audit: type=1400 audit(364.750:175): avc: denied { map } for pid=3612 comm="syz.1.34" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 365.207900][ T29] audit: type=1400 audit(364.750:176): avc: denied { read write } for pid=3612 comm="syz.1.34" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 365.447677][ T29] audit: type=1400 audit(365.000:177): avc: denied { mount } for pid=3612 comm="syz.1.34" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 365.605336][ T29] audit: type=1400 audit(365.160:178): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 366.214549][ T29] audit: type=1400 audit(365.790:179): avc: denied { mount } for pid=3619 comm="syz.1.36" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 366.315785][ T3472] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 366.603568][ T3472] usb 1-1: Using ep0 maxpacket: 16 [ 366.609884][ T29] audit: type=1400 audit(366.180:180): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 366.664364][ T3472] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.693128][ T3472] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.695608][ T3472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.698377][ T3472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 366.700981][ T3472] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 366.703562][ T3472] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.834555][ T3472] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.838762][ T3472] usb 1-1: Manufacturer: syz [ 366.916221][ T3472] usb 1-1: config 0 descriptor?? [ 375.586443][ T3635] Zero length message leads to an empty skb [ 376.039572][ T29] audit: type=1400 audit(375.610:181): avc: denied { read } for pid=3636 comm="syz.1.42" name="loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 376.053226][ T29] audit: type=1400 audit(375.620:182): avc: denied { open } for pid=3636 comm="syz.1.42" path="/dev/loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 376.075220][ T29] audit: type=1400 audit(375.640:183): avc: denied { ioctl } for pid=3636 comm="syz.1.42" path="/dev/loop-control" dev="devtmpfs" ino=637 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 376.449550][ T29] audit: type=1400 audit(376.020:184): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 377.079948][ T29] audit: type=1400 audit(376.650:185): avc: denied { write } for pid=3639 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 380.924490][ T53] usb 1-1: USB disconnect, device number 2 [ 381.853458][ T29] audit: type=1400 audit(381.420:186): avc: denied { create } for pid=3651 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.915535][ T29] audit: type=1400 audit(381.480:187): avc: denied { bind } for pid=3651 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 382.045310][ T29] audit: type=1400 audit(381.610:188): avc: denied { write } for pid=3651 comm="syz.0.48" path="socket:[4093]" dev="sockfs" ino=4093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.750947][ T3656] bonding: bond0 is being deleted... [ 384.098313][ T3656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.189323][ T3656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.259066][ T3656] bond0 (unregistering): Released all slaves [ 386.756212][ T29] audit: type=1400 audit(386.330:189): avc: denied { create } for pid=3662 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.128972][ T29] audit: type=1400 audit(386.700:190): avc: denied { read append } for pid=3665 comm="syz.1.54" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 387.148450][ T29] audit: type=1400 audit(386.720:191): avc: denied { ioctl open } for pid=3665 comm="syz.1.54" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 389.633791][ T29] audit: type=1400 audit(389.190:192): avc: denied { name_bind } for pid=3679 comm="syz.0.60" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 390.335376][ T29] audit: type=1400 audit(389.900:193): avc: denied { mount } for pid=3682 comm="syz.0.61" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 390.346465][ T29] audit: type=1400 audit(389.920:194): avc: denied { search } for pid=3682 comm="syz.0.61" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 393.267168][ T29] audit: type=1400 audit(392.840:195): avc: denied { read } for pid=3692 comm="syz.1.66" name="usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.283095][ T29] audit: type=1400 audit(392.840:196): avc: denied { open } for pid=3692 comm="syz.1.66" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.393021][ T29] audit: type=1400 audit(392.960:197): avc: denied { ioctl } for pid=3692 comm="syz.1.66" path="/dev/usbmon0" dev="devtmpfs" ino=698 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.462412][ T29] audit: type=1400 audit(393.030:198): avc: denied { create } for pid=3694 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 393.490784][ T29] audit: type=1400 audit(393.060:199): avc: denied { setopt } for pid=3694 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 393.510081][ T29] audit: type=1400 audit(393.080:200): avc: denied { bind } for pid=3694 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 393.528345][ T29] audit: type=1400 audit(393.100:201): avc: denied { write } for pid=3694 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 393.606440][ T29] audit: type=1400 audit(393.170:202): avc: denied { read } for pid=3694 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 393.870221][ T29] audit: type=1400 audit(393.440:203): avc: denied { mount } for pid=3697 comm="syz.0.68" name="/" dev="hugetlbfs" ino=4407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 394.444424][ T29] audit: type=1400 audit(394.020:204): avc: denied { create } for pid=3699 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.819110][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 398.826073][ T29] audit: type=1400 audit(398.390:211): avc: denied { read write } for pid=3717 comm="syz.0.78" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 398.827062][ T29] audit: type=1400 audit(398.400:212): avc: denied { open } for pid=3717 comm="syz.0.78" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 401.018280][ T29] audit: type=1400 audit(400.580:213): avc: denied { mount } for pid=3729 comm="syz.0.84" name="/" dev="ramfs" ino=4469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 402.988911][ T29] audit: type=1400 audit(402.560:214): avc: denied { mounton } for pid=3736 comm="syz.0.87" path="/43/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 405.573495][ T29] audit: type=1400 audit(405.140:215): avc: denied { ioctl } for pid=3748 comm="syz.1.93" path="/dev/fuse" dev="devtmpfs" ino=92 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 406.455394][ T29] audit: type=1400 audit(406.020:216): avc: denied { mount } for pid=3753 comm="syz.0.96" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 406.618847][ T29] audit: type=1400 audit(406.190:217): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 410.563225][ T29] audit: type=1400 audit(410.130:218): avc: denied { write } for pid=3773 comm="syz.1.105" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 415.659565][ T1283] nvmet: connect request for invalid subsystem te! [ 415.688168][ T3791] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 417.437741][ T29] audit: type=1400 audit(417.000:219): avc: denied { read } for pid=3798 comm="syz.0.117" name="/" dev="configfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 417.446381][ T29] audit: type=1400 audit(417.020:220): avc: denied { read open } for pid=3798 comm="syz.0.117" path="/" dev="configfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.855698][ T3805] FAULT_INJECTION: forcing a failure. [ 418.855698][ T3805] name failslab, interval 1, probability 0, space 0, times 0 [ 418.861086][ T3805] CPU: 1 UID: 0 PID: 3805 Comm: syz.1.119 Tainted: G W syzkaller #0 PREEMPT [ 418.861346][ T3805] Tainted: [W]=WARN [ 418.861405][ T3805] Hardware name: linux,dummy-virt (DT) [ 418.861500][ T3805] Call trace: [ 418.861646][ T3805] show_stack+0x18/0x24 (C) [ 418.861847][ T3805] dump_stack_lvl+0x7c/0xb0 [ 418.862028][ T3805] dump_stack+0x1c/0x28 [ 418.862146][ T3805] should_fail_ex+0x6b4/0x6c4 [ 418.862296][ T3805] should_failslab+0xbc/0x120 [ 418.862434][ T3805] __kmalloc_noprof+0x4dc/0x74c [ 418.862555][ T3805] lsm_blob_alloc+0x60/0x80 [ 418.862673][ T3805] security_key_alloc+0x3c/0x268 [ 418.862792][ T3805] key_alloc+0x688/0xf44 [ 418.862903][ T3805] keyring_alloc+0x58/0xc0 [ 418.863014][ T3805] look_up_user_keyrings+0x338/0x580 [ 418.863131][ T3805] lookup_user_key+0x8dc/0xc4c [ 418.863276][ T3805] __arm64_sys_add_key+0x1e0/0x398 [ 418.863422][ T3805] invoke_syscall+0x74/0x240 [ 418.863537][ T3805] el0_svc_common.constprop.0+0xac/0x230 [ 418.863652][ T3805] do_el0_svc+0x40/0x58 [ 418.863769][ T3805] el0_svc+0x58/0x2a4 [ 418.863895][ T3805] el0t_64_sync_handler+0xa0/0xe4 [ 418.864018][ T3805] el0t_64_sync+0x198/0x19c [ 419.433751][ T29] audit: type=1400 audit(419.000:221): avc: denied { create } for pid=3806 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.455630][ T29] audit: type=1400 audit(419.030:222): avc: denied { bind } for pid=3806 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.470447][ T29] audit: type=1400 audit(419.040:223): avc: denied { setopt } for pid=3806 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.491015][ T29] audit: type=1400 audit(419.060:224): avc: denied { accept } for pid=3806 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.503859][ T29] audit: type=1400 audit(419.070:225): avc: denied { read } for pid=3806 comm="syz.1.120" path="socket:[4603]" dev="sockfs" ino=4603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 420.032124][ T29] audit: type=1400 audit(419.600:226): avc: denied { write } for pid=3806 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 421.847684][ T29] audit: type=1400 audit(421.410:227): avc: denied { read } for pid=3812 comm="syz.1.122" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.858385][ T29] audit: type=1400 audit(421.430:228): avc: denied { open } for pid=3812 comm="syz.1.122" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.984751][ T3814] binder: 3812:3814 tried to acquire reference to desc 0, got 1 instead [ 421.998040][ T3814] binder: 3812:3814 got transaction with too large buffer [ 422.005039][ T3814] binder: 3812:3814 transaction call to 3812:0 failed 5/29201/-22, code 0 size 88-24 line 3682 [ 422.016827][ T30] binder: undelivered TRANSACTION_ERROR: 29201 [ 424.368063][ T3828] gadgetfs: bound to dummy_udc driver [ 425.180778][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 425.186730][ T29] audit: type=1400 audit(424.750:233): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 427.694215][ T29] audit: type=1400 audit(427.260:234): avc: denied { create } for pid=3842 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 427.733810][ T29] audit: type=1400 audit(427.300:235): avc: denied { ioctl } for pid=3842 comm="syz.0.136" path="socket:[5464]" dev="sockfs" ino=5464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.014966][ T29] audit: type=1400 audit(428.580:236): avc: denied { name_bind } for pid=3847 comm="syz.0.137" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 429.265437][ T29] audit: type=1400 audit(428.840:237): avc: denied { write } for pid=3847 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 429.281294][ T29] audit: type=1400 audit(428.840:238): avc: denied { nlmsg_write } for pid=3847 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 432.220124][ T3859] FAULT_INJECTION: forcing a failure. [ 432.220124][ T3859] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 432.220636][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.1.142 Tainted: G W syzkaller #0 PREEMPT [ 432.220728][ T3859] Tainted: [W]=WARN [ 432.220789][ T3859] Hardware name: linux,dummy-virt (DT) [ 432.220840][ T3859] Call trace: [ 432.220870][ T3859] show_stack+0x18/0x24 (C) [ 432.220993][ T3859] dump_stack_lvl+0x7c/0xb0 [ 432.221053][ T3859] dump_stack+0x1c/0x28 [ 432.221109][ T3859] should_fail_ex+0x6b4/0x6c4 [ 432.221172][ T3859] should_fail_alloc_page+0x70/0xc0 [ 432.221232][ T3859] prepare_alloc_pages+0x1cc/0x578 [ 432.221338][ T3859] __alloc_frozen_pages_noprof+0x1a4/0x3498 [ 432.221396][ T3859] alloc_pages_mpol+0xf8/0x41c [ 432.221536][ T3859] folio_alloc_mpol_noprof+0x18/0x18c [ 432.221796][ T3859] vma_alloc_folio_noprof+0x108/0x1c0 [ 432.222199][ T3859] vma_alloc_zeroed_movable_folio+0x4c/0x68 [ 432.222819][ T3859] do_anonymous_page+0x8b8/0x1928 [ 432.222965][ T3859] __handle_mm_fault+0x10e0/0x1b60 [ 432.223072][ T3859] handle_mm_fault+0x1e8/0x8ac [ 432.223175][ T3859] do_page_fault+0x48c/0xf50 [ 432.223282][ T3859] do_translation_fault+0xac/0xec [ 432.223435][ T3859] do_mem_abort+0x64/0x1a0 [ 432.223541][ T3859] el0_da+0x70/0x284 [ 432.223710][ T3859] el0t_64_sync_handler+0xd0/0xe4 [ 432.223821][ T3859] el0t_64_sync+0x198/0x19c [ 432.258192][ T3859] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 434.046829][ T3873] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 436.325423][ T29] audit: type=1400 audit(435.890:239): avc: denied { write } for pid=3884 comm="syz.1.150" name="usb_gadget" dev="configfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.343366][ T29] audit: type=1400 audit(435.910:240): avc: denied { add_name } for pid=3884 comm="syz.1.150" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.364271][ T29] audit: type=1400 audit(435.930:241): avc: denied { create } for pid=3884 comm="syz.1.150" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 436.444950][ T29] audit: type=1400 audit(436.020:242): avc: denied { write } for pid=3884 comm="syz.1.150" name="configs" dev="configfs" ino=4736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.460111][ T29] audit: type=1400 audit(436.030:243): avc: denied { write } for pid=3884 comm="syz.1.150" name="functions" dev="configfs" ino=4735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.492612][ T29] audit: type=1400 audit(436.060:244): avc: denied { write } for pid=3884 comm="syz.1.150" name="c.1" dev="configfs" ino=4740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.516807][ T29] audit: type=1400 audit(436.090:245): avc: denied { create } for pid=3884 comm="syz.1.150" name="uac2.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 436.523552][ T29] audit: type=1400 audit(436.090:246): avc: denied { write } for pid=3884 comm="syz.1.150" name="c.1" dev="configfs" ino=4740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.684870][ T29] audit: type=1400 audit(436.250:247): avc: denied { read write } for pid=3884 comm="syz.1.150" name="UDC" dev="configfs" ino=4743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 436.693858][ T29] audit: type=1400 audit(436.260:248): avc: denied { open } for pid=3884 comm="syz.1.150" path="/78/config/usb_gadget/g1/UDC" dev="configfs" ino=4743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 436.744838][ T3885] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 436.757425][ T3885] udc dummy_udc.0: failed to start g1: -19 [ 436.786921][ T3885] UDC core: g1: couldn't find an available UDC or it's busy [ 439.177493][ T3896] can0: slcan on ptm0. [ 439.729741][ T3894] can0 (unregistered): slcan off ptm0. [ 441.094643][ T3472] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 441.336025][ T3472] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 441.434082][ T3472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.436791][ T3472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.438958][ T3472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.520062][ T3472] usb 1-1: config 0 descriptor?? [ 441.666447][ T3903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 441.996936][ T3472] usbhid 1-1:0.0: can't add hid device: -71 [ 441.999261][ T3472] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 442.262437][ T3472] usb 1-1: USB disconnect, device number 3 [ 443.175125][ T3472] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 443.490441][ T3472] usb 1-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 443.538600][ T3472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.539482][ T3472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.540308][ T3472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.626791][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 443.627855][ T29] audit: type=1400 audit(443.190:253): avc: denied { connect } for pid=3907 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 443.638032][ T3908] FAULT_INJECTION: forcing a failure. [ 443.638032][ T3908] name failslab, interval 1, probability 0, space 0, times 0 [ 443.639012][ T3908] CPU: 1 UID: 0 PID: 3908 Comm: syz.1.161 Tainted: G W L syzkaller #0 PREEMPT [ 443.639164][ T3908] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 443.639236][ T3908] Hardware name: linux,dummy-virt (DT) [ 443.639399][ T3908] Call trace: [ 443.639466][ T3908] show_stack+0x18/0x24 (C) [ 443.639647][ T3908] dump_stack_lvl+0x7c/0xb0 [ 443.639830][ T3908] dump_stack+0x1c/0x28 [ 443.639958][ T3908] should_fail_ex+0x6b4/0x6c4 [ 443.640096][ T3908] should_failslab+0xbc/0x120 [ 443.640237][ T3908] __kmalloc_cache_noprof+0x3ec/0x628 [ 443.640352][ T3908] alloc_workqueue_attrs_noprof+0x40/0x1c4 [ 443.640472][ T3908] __alloc_workqueue+0xb4/0x1248 [ 443.640603][ T3908] alloc_workqueue_noprof+0xb8/0x110 [ 443.640731][ T3908] __rds_conn_create+0xcb4/0x1930 [ 443.640853][ T3908] rds_conn_create_outgoing+0x24/0x30 [ 443.640957][ T3908] rds_sendmsg+0x75c/0x2840 [ 443.641059][ T3908] __sock_sendmsg+0xc8/0x1a4 [ 443.641164][ T3908] __sys_sendto+0x1d0/0x270 [ 443.641336][ T3908] __arm64_sys_sendto+0xc4/0x140 [ 443.641478][ T3908] invoke_syscall+0x74/0x240 [ 443.641608][ T3908] el0_svc_common.constprop.0+0xac/0x230 [ 443.641726][ T3908] do_el0_svc+0x40/0x58 [ 443.641833][ T3908] el0_svc+0x58/0x2a4 [ 443.641949][ T3908] el0t_64_sync_handler+0xa0/0xe4 [ 443.642061][ T3908] el0t_64_sync+0x198/0x19c [ 443.669166][ T3472] usb 1-1: config 0 descriptor?? [ 444.429810][ T3472] hid-generic 0003:047F:3333.0001: hidraw0: USB HID v0.00 Device [HID 047f:3333] on usb-dummy_hcd.0-1/input0 [ 444.593624][ T3472] usb 1-1: USB disconnect, device number 4 [ 446.435245][ T3918] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 448.782907][ T29] audit: type=1400 audit(448.340:254): avc: denied { open } for pid=3927 comm="syz.1.171" path="/dev/ptyq7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 448.822949][ T29] audit: type=1400 audit(448.390:255): avc: denied { ioctl } for pid=3927 comm="syz.1.171" path="/dev/ptyq7" dev="devtmpfs" ino=119 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 450.599215][ T3932] netlink: 'syz.0.172': attribute type 10 has an invalid length. [ 451.138817][ T3928] fido_id[3928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 453.634668][ T29] audit: type=1400 audit(453.200:256): avc: denied { setopt } for pid=3941 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.655796][ T29] audit: type=1400 audit(453.230:257): avc: denied { bind } for pid=3941 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.659292][ T29] audit: type=1400 audit(453.230:258): avc: denied { node_bind } for pid=3941 comm="syz.1.175" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 453.676433][ T29] audit: type=1400 audit(453.250:259): avc: denied { connect } for pid=3941 comm="syz.1.175" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.806372][ T29] audit: type=1400 audit(454.380:260): avc: denied { write } for pid=3941 comm="syz.1.175" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.767757][ T3932] syz_tun: entered promiscuous mode [ 455.835354][ T55] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.838281][ T55] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.847687][ T55] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.848249][ T55] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.042964][ T3954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 458.223810][ T29] audit: type=1400 audit(457.790:261): avc: denied { write } for pid=3952 comm="syz.0.179" name="functions" dev="configfs" ino=4735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 458.407667][ T29] audit: type=1400 audit(457.970:262): avc: denied { write } for pid=3952 comm="syz.0.179" name="c.1" dev="configfs" ino=4740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 458.458042][ T29] audit: type=1400 audit(457.980:263): avc: denied { write } for pid=3952 comm="syz.0.179" name="c.1" dev="configfs" ino=4740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 460.041091][ T29] audit: type=1400 audit(459.610:264): avc: denied { ioctl } for pid=3960 comm="syz.1.182" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 460.380522][ T3963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 460.748204][ T3963] md: could not open device unknown-block(1,0). [ 461.715860][ T3963] md/raid1:md0: active with 1 out of 2 mirrors [ 461.737167][ T3963] md: invalid array_size 10 > default size 0 [ 464.657098][ T3979] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 464.658827][ T3979] udc dummy_udc.0: failed to start g1: -19 [ 464.687531][ T3979] UDC core: g1: couldn't find an available UDC or it's busy [ 465.524950][ T30] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 465.729654][ T30] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 465.750661][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.753846][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.993642][ T30] pegasus 1-1:1.0: Missing or invalid endpoints [ 466.203956][ T30] usb 1-1: USB disconnect, device number 5 [ 466.936720][ T29] audit: type=1400 audit(466.500:265): avc: denied { write } for pid=3985 comm="syz.0.193" name="renderD128" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 468.395909][ T3990] can0: slcan on ptm0. [ 469.097725][ T3989] can0 (unregistered): slcan off ptm0. [ 469.476195][ T3992] macvlan2: entered promiscuous mode [ 469.477871][ T3992] dummy0: entered promiscuous mode [ 469.495022][ T3992] macvlan2: entered allmulticast mode [ 469.496416][ T3992] dummy0: entered allmulticast mode [ 473.023510][ T29] audit: type=1400 audit(472.560:266): avc: denied { write } for pid=4003 comm="syz.1.201" name="vlan0" dev="proc" ino=4026532879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 477.265965][ T4020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 482.202691][ T29] audit: type=1400 audit(481.770:267): avc: denied { write } for pid=4029 comm="syz.0.213" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 488.509521][ T4052] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 488.540041][ T4052] udc dummy_udc.0: failed to start g1: -19 [ 488.614845][ T4052] UDC core: g1: couldn't find an available UDC or it's busy [ 489.683101][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 489.900275][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.940958][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.943185][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.945230][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.947176][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.952247][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.009122][ T10] usb 1-1: config 0 descriptor?? [ 490.739435][ T10] hid-generic 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 490.780835][ T10] hid-generic 0003:047F:FFFF.0002: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 491.005237][ T53] usb 1-1: USB disconnect, device number 6 [ 491.752778][ T4064] FAULT_INJECTION: forcing a failure. [ 491.752778][ T4064] name failslab, interval 1, probability 0, space 0, times 0 [ 491.753334][ T4064] CPU: 1 UID: 0 PID: 4064 Comm: syz.1.227 Tainted: G W L syzkaller #0 PREEMPT [ 491.753429][ T4064] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 491.753458][ T4064] Hardware name: linux,dummy-virt (DT) [ 491.753492][ T4064] Call trace: [ 491.753540][ T4064] show_stack+0x18/0x24 (C) [ 491.753742][ T4064] dump_stack_lvl+0x7c/0xb0 [ 491.753833][ T4064] dump_stack+0x1c/0x28 [ 491.753887][ T4064] should_fail_ex+0x6b4/0x6c4 [ 491.753949][ T4064] should_failslab+0xbc/0x120 [ 491.754017][ T4064] __kmalloc_cache_noprof+0x3ec/0x628 [ 491.754072][ T4064] __arm64_sys_mincore+0x1d8/0x6e0 [ 491.754126][ T4064] invoke_syscall+0x74/0x240 [ 491.754194][ T4064] el0_svc_common.constprop.0+0xac/0x230 [ 491.754305][ T4064] do_el0_svc+0x40/0x58 [ 491.754362][ T4064] el0_svc+0x58/0x2a4 [ 491.754423][ T4064] el0t_64_sync_handler+0xa0/0xe4 [ 491.754474][ T4064] el0t_64_sync+0x198/0x19c [ 492.300978][ T29] audit: type=1400 audit(491.860:268): avc: denied { write } for pid=4063 comm="syz.0.228" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 493.245529][ T4061] fido_id[4061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 494.639082][ T4075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 494.733934][ T4075] lo: entered promiscuous mode [ 494.858923][ T4075] tunl0: entered promiscuous mode [ 494.978061][ T4075] gre0: entered promiscuous mode [ 495.081051][ T4075] gretap0: entered promiscuous mode [ 495.098561][ T29] audit: type=1400 audit(494.660:269): avc: denied { write } for pid=4076 comm="syz.0.234" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 495.116113][ T29] audit: type=1400 audit(494.680:270): avc: denied { open } for pid=4076 comm="syz.0.234" path="/dev/mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 495.162918][ T29] audit: type=1400 audit(494.730:271): avc: denied { ioctl } for pid=4076 comm="syz.0.234" path="/dev/mtd0" dev="devtmpfs" ino=683 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 495.175945][ T4075] erspan0: entered promiscuous mode [ 495.178455][ T4077] 0x000000000000-0x000008000000 : "" [ 495.256277][ T4075] ip_vti0: entered promiscuous mode [ 495.280429][ T4075] ip6_vti0: entered promiscuous mode [ 495.367596][ T4075] sit0: entered promiscuous mode [ 495.415442][ T4077] ftl_cs: FTL header not found. [ 495.544487][ T4075] ip6tnl0: entered promiscuous mode [ 495.673885][ T4075] ip6gre0: entered promiscuous mode [ 495.794031][ T29] audit: type=1400 audit(495.360:272): avc: denied { read } for pid=4076 comm="syz.0.234" name="mtd1" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 495.948471][ T4075] syz_tun: entered promiscuous mode [ 496.187454][ T4075] ip6gretap0: entered promiscuous mode [ 496.337690][ T4075] vcan0: entered promiscuous mode [ 496.454465][ T4075] bond0: entered promiscuous mode [ 496.457265][ T4075] bond_slave_0: entered promiscuous mode [ 496.466234][ T4075] bond_slave_1: entered promiscuous mode [ 496.587801][ T4075] dummy0: entered promiscuous mode [ 496.744850][ T4075] nlmon0: entered promiscuous mode [ 496.867394][ T4075] vxcan0: entered promiscuous mode [ 496.944792][ T4075] vxcan1: entered promiscuous mode [ 497.006980][ T4075] veth0: entered promiscuous mode [ 497.107609][ T4075] veth1: entered promiscuous mode [ 497.259703][ T4075] wg0: entered promiscuous mode [ 497.400245][ T4075] wg1: entered promiscuous mode [ 497.560066][ T4075] wg2: entered promiscuous mode [ 497.589050][ T29] audit: type=1400 audit(497.140:273): avc: denied { checkpoint_restore } for pid=4080 comm="syz.0.235" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.636382][ T4075] veth0_to_bridge: entered promiscuous mode [ 497.689383][ T4075] bridge_slave_0: entered promiscuous mode [ 497.736280][ T4075] veth1_to_bridge: entered promiscuous mode [ 497.806736][ T4075] bridge_slave_1: entered promiscuous mode [ 497.828660][ T4075] veth0_to_bond: entered promiscuous mode [ 497.882541][ T4075] veth1_to_bond: entered promiscuous mode [ 497.969594][ T4075] veth0_to_team: entered promiscuous mode [ 498.006847][ T4075] team_slave_0: entered promiscuous mode [ 498.040780][ T4075] veth1_to_team: entered promiscuous mode [ 498.098451][ T4075] team_slave_1: entered promiscuous mode [ 498.180417][ T4075] veth0_to_batadv: entered promiscuous mode [ 498.236893][ T4075] batadv_slave_0: entered promiscuous mode [ 498.355084][ T4075] veth1_to_batadv: entered promiscuous mode [ 498.458620][ T4075] batadv_slave_1: entered promiscuous mode [ 498.579566][ T4075] xfrm0: entered promiscuous mode [ 498.653714][ T4075] veth0_to_hsr: entered promiscuous mode [ 498.778278][ T4075] veth1_to_hsr: entered promiscuous mode [ 498.920243][ T4075] hsr0: entered promiscuous mode [ 499.006424][ T4075] veth1_virt_wifi: entered promiscuous mode [ 499.061164][ T4075] veth0_virt_wifi: entered promiscuous mode [ 499.230093][ T4075] vlan0: entered promiscuous mode [ 499.286838][ T4075] vlan1: entered promiscuous mode [ 499.365201][ T4075] macvlan0: entered promiscuous mode [ 499.455713][ T4075] macvlan1: entered promiscuous mode [ 499.559795][ T4075] ipvlan0: entered promiscuous mode [ 499.591305][ T4075] ipvlan1: entered promiscuous mode [ 499.769390][ T4075] macvtap0: entered promiscuous mode [ 499.827608][ T4075] macsec0: entered promiscuous mode [ 499.876795][ T4075] geneve0: entered promiscuous mode [ 499.941184][ T4075] geneve1: entered promiscuous mode [ 500.064471][ T4075] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 500.130432][ T4075] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 500.214600][ T4075] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 500.288828][ T4075] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 500.353568][ T3946] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.355616][ T3946] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.363011][ T3946] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.364358][ T3946] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.689857][ T29] audit: type=1400 audit(501.260:274): avc: denied { write } for pid=4085 comm="syz.1.238" name="functions" dev="configfs" ino=4735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 502.581192][ T4088] binder: 4087:4088 tried to acquire reference to desc 0, got 1 instead [ 502.615280][ T29] audit: type=1400 audit(502.180:275): avc: denied { transfer } for pid=4087 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 502.634674][ T4088] binder: 4087:4088 unknown command 0 [ 502.643861][ T4088] binder: 4087:4088 ioctl c0306201 20004a40 returned -22 [ 502.652703][ T10] binder: release 4087:4088 transaction 10 out, still active [ 502.653792][ T10] binder: undelivered TRANSACTION_COMPLETE [ 502.823057][ T3472] binder: send failed reply for transaction 10, target dead [ 506.293020][ T4092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.519502][ T29] audit: type=1400 audit(514.090:276): avc: denied { map_create } for pid=4108 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 514.535620][ T29] audit: type=1400 audit(514.100:277): avc: denied { map_read map_write } for pid=4108 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 514.806885][ T4109] Failed to initialize the IGMP autojoin socket (err -12) [ 516.613757][ T4113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 516.855422][ T4113] md: could not open device unknown-block(1,0). [ 516.915011][ T4113] md: could not open device unknown-block(1,1). [ 517.621214][ T4113] md/raid1:md0: active with 1 out of 2 mirrors [ 517.627082][ T4113] md: invalid array_size 10 > default size 0 [ 521.605778][ T29] audit: type=1400 audit(521.180:278): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 528.254115][ T29] audit: type=1400 audit(527.820:279): avc: denied { create } for pid=4143 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 528.306361][ T29] audit: type=1400 audit(527.880:280): avc: denied { setopt } for pid=4143 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 528.311213][ T29] audit: type=1400 audit(527.880:281): avc: denied { write } for pid=4143 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 528.746392][ T29] audit: type=1400 audit(528.320:282): avc: denied { node_bind } for pid=4145 comm="syz.1.265" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 535.737344][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 537.268049][ T29] audit: type=1400 audit(536.840:283): avc: denied { prog_load } for pid=4165 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 538.509039][ T4170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.276'. [ 538.537294][ T4170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.276'. [ 543.316998][ T29] audit: type=1400 audit(542.890:284): avc: denied { search } for pid=4185 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.329725][ T29] audit: type=1400 audit(542.900:285): avc: denied { search } for pid=4185 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=829 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.330809][ T29] audit: type=1400 audit(542.900:286): avc: denied { search } for pid=4185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.331240][ T29] audit: type=1400 audit(542.900:287): avc: denied { search } for pid=4185 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.414665][ T29] audit: type=1400 audit(542.980:288): avc: denied { read } for pid=4186 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.418069][ T29] audit: type=1400 audit(542.980:289): avc: denied { read open } for pid=4186 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.421387][ T29] audit: type=1400 audit(542.980:290): avc: denied { getattr } for pid=4186 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.596003][ T29] audit: type=1400 audit(543.170:291): avc: denied { write } for pid=4185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.597140][ T29] audit: type=1400 audit(543.170:292): avc: denied { add_name } for pid=4185 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.618480][ T29] audit: type=1400 audit(543.190:293): avc: denied { create } for pid=4185 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 548.403226][ T4199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 548.404079][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 548.404540][ T4199] netlink: 'syz.1.284': attribute type 14 has an invalid length. [ 548.404674][ T4199] netlink: 'syz.1.284': attribute type 12 has an invalid length. [ 550.969822][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 550.980060][ T29] audit: type=1326 audit(550.520:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.025436][ T29] audit: type=1326 audit(550.580:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.026529][ T29] audit: type=1326 audit(550.560:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.045234][ T29] audit: type=1326 audit(550.610:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.050862][ T29] audit: type=1326 audit(550.620:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.063670][ T29] audit: type=1326 audit(550.620:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.095052][ T29] audit: type=1326 audit(550.650:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.119973][ T29] audit: type=1326 audit(550.690:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.134952][ T29] audit: type=1326 audit(550.700:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 551.148440][ T29] audit: type=1326 audit(550.710:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.1.288" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbaf792a8 code=0x7ffc0000 [ 561.699103][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.775771][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.960529][ T4189] hsr_slave_0: entered promiscuous mode [ 567.979714][ T4189] hsr_slave_1: entered promiscuous mode [ 567.990079][ T4189] debugfs: 'hsr0' already exists in 'hsr' [ 567.998716][ T4189] Cannot create hsr debugfs directory [ 570.846771][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 570.885722][ T4189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.905170][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 570.940394][ T4189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.955926][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 571.005344][ T29] audit: type=1400 audit(570.580:313): avc: denied { prog_run } for pid=4259 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 571.008795][ T4189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.030134][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.069252][ T4189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.828432][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.192577][ T4288] netlink: 'syz.1.301': attribute type 10 has an invalid length. [ 577.210697][ T4288] veth1_to_bridge: left promiscuous mode [ 588.130720][ T4189] veth0_vlan: entered promiscuous mode [ 588.244022][ T4189] veth1_vlan: entered promiscuous mode [ 588.646581][ T4189] veth0_macvtap: entered promiscuous mode [ 588.715088][ T4189] veth1_macvtap: entered promiscuous mode [ 589.207311][ T25] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.208614][ T25] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.274331][ T3946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.344523][ T3946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.923437][ T29] audit: type=1400 audit(589.490:314): avc: denied { mounton } for pid=4189 comm="syz-executor" path="/syzkaller.AmhMTb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 595.963540][ T29] audit: type=1400 audit(595.530:315): avc: denied { relabelfrom } for pid=4342 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 595.985603][ T29] audit: type=1400 audit(595.550:316): avc: denied { relabelto } for pid=4342 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 602.910209][ T29] audit: type=1400 audit(602.480:317): avc: denied { create } for pid=4359 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 602.939995][ T29] audit: type=1400 audit(602.510:318): avc: denied { write } for pid=4359 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 604.719042][ T29] audit: type=1400 audit(604.290:319): avc: denied { write } for pid=4369 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 605.093857][ T29] audit: type=1400 audit(604.660:320): avc: denied { mount } for pid=4370 comm="syz.1.325" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 605.312619][ T29] audit: type=1400 audit(604.870:321): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 605.695378][ T4375] bonding: bond is being created... [ 609.188309][ T29] audit: type=1400 audit(608.760:322): avc: denied { create } for pid=4390 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 609.228999][ T29] audit: type=1400 audit(608.800:323): avc: denied { ioctl } for pid=4390 comm="syz.2.334" path="socket:[7543]" dev="sockfs" ino=7543 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 609.270270][ T29] audit: type=1400 audit(608.840:324): avc: denied { write } for pid=4390 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 609.447070][ T29] audit: type=1400 audit(609.010:325): avc: denied { read } for pid=4390 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 613.508639][ T29] audit: type=1400 audit(613.080:326): avc: denied { remount } for pid=4408 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 613.778308][ T29] audit: type=1400 audit(613.350:327): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 620.490314][ T1283] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.506879][ T1283] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.509666][ T1283] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.510494][ T1283] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.196468][ T55] hsr_slave_0: left promiscuous mode [ 630.224191][ T55] hsr_slave_1: left promiscuous mode [ 630.258192][ T55] dummy0: left allmulticast mode [ 630.266286][ T55] dummy0: left promiscuous mode [ 634.188615][ T4436] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 638.183925][ T4456] syz_tun: entered allmulticast mode [ 642.197296][ T29] audit: type=1400 audit(641.770:328): avc: denied { write } for pid=4469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.678939][ T29] audit: type=1400 audit(643.240:329): avc: denied { write } for pid=4480 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.830429][ T3226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 646.046537][ T29] audit: type=1400 audit(645.620:330): avc: denied { allowed } for pid=4488 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 647.748258][ T4498] netlink: 'syz.1.368': attribute type 4 has an invalid length. [ 648.145137][ T4499] syz.2.369 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 648.146319][ T4499] CPU: 0 UID: 0 PID: 4499 Comm: syz.2.369 Tainted: G W L syzkaller #0 PREEMPT [ 648.146633][ T4499] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 648.146703][ T4499] Hardware name: linux,dummy-virt (DT) [ 648.146784][ T4499] Call trace: [ 648.146847][ T4499] show_stack+0x18/0x24 (C) [ 648.147042][ T4499] dump_stack_lvl+0x7c/0xb0 [ 648.147169][ T4499] dump_stack+0x1c/0x28 [ 648.147364][ T4499] dump_header+0x104/0x498 [ 648.147489][ T4499] oom_kill_process+0x49c/0x6ec [ 648.147620][ T4499] out_of_memory+0x244/0x1064 [ 648.147744][ T4499] mem_cgroup_out_of_memory+0x128/0x140 [ 648.147867][ T4499] try_charge_memcg+0x640/0xd1c [ 648.147990][ T4499] __memcg_slab_post_alloc_hook+0x394/0xdcc [ 648.148107][ T4499] kmem_cache_alloc_lru_noprof+0x57c/0x620 [ 648.148248][ T4499] __d_alloc+0x38/0x98c [ 648.148371][ T4499] d_alloc+0x34/0x184 [ 648.148661][ T4499] lookup_one_qstr_excl+0xf0/0x1a0 [ 648.148804][ T4499] filename_create+0x170/0x30c [ 648.148986][ T4499] filename_mkdirat+0xa8/0x408 [ 648.149137][ T4499] __arm64_sys_mkdirat+0x90/0xd4 [ 648.149317][ T4499] invoke_syscall+0x74/0x240 [ 648.149444][ T4499] el0_svc_common.constprop.0+0xac/0x230 [ 648.149605][ T4499] do_el0_svc+0x40/0x58 [ 648.149783][ T4499] el0_svc+0x58/0x2a4 [ 648.149982][ T4499] el0t_64_sync_handler+0xa0/0xe4 [ 648.150152][ T4499] el0t_64_sync+0x198/0x19c [ 648.179024][ T4499] memory: usage 0kB, limit 0kB, failcnt 21 [ 648.179910][ T4499] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 648.180233][ T4499] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 648.180335][ T4499] Memory cgroup stats for /syz2/test: [ 648.283479][ T4499] cache 0 [ 648.284225][ T4499] rss 0 [ 648.284421][ T4499] rss_huge 0 [ 648.284584][ T4499] shmem 0 [ 648.284657][ T4499] mapped_file 0 [ 648.284760][ T4499] dirty 0 [ 648.284834][ T4499] writeback 0 [ 648.284904][ T4499] workingset_refault_anon 0 [ 648.284970][ T4499] workingset_refault_file 0 [ 648.285037][ T4499] swap 0 [ 648.285102][ T4499] swapcached 0 [ 648.285168][ T4499] pgpgin 0 [ 648.285251][ T4499] pgpgout 0 [ 648.285322][ T4499] pgfault 6 [ 648.285418][ T4499] pgmajfault 0 [ 648.285492][ T4499] inactive_anon 0 [ 648.285560][ T4499] active_anon 0 [ 648.285626][ T4499] inactive_file 0 [ 648.285698][ T4499] active_file 0 [ 648.285808][ T4499] unevictable 0 [ 648.285891][ T4499] hierarchical_memory_limit 0 [ 648.285968][ T4499] hierarchical_memsw_limit 9223372036854771712 [ 648.286046][ T4499] total_cache 0 [ 648.286118][ T4499] total_rss 0 [ 648.286184][ T4499] total_rss_huge 0 [ 648.286260][ T4499] total_shmem 0 [ 648.286332][ T4499] total_mapped_file 0 [ 648.286399][ T4499] total_dirty 0 [ 648.286487][ T4499] total_writeback 0 [ 648.286563][ T4499] total_workingset_refault_anon 0 [ 648.286643][ T4499] total_workingset_refault_file 0 [ 648.286729][ T4499] total_swap 0 [ 648.286814][ T4499] total_swapcached 0 [ 648.286908][ T4499] total_pgpgin 0 [ 648.286979][ T4499] total_pgpgout 0 [ 648.287050][ T4499] total_pgfault 6 [ 648.287122][ T4499] total_pgmajfault 0 [ 648.287204][ T4499] total_inactive_anon 0 [ 648.287277][ T4499] total_active_anon 0 [ 648.287373][ T4499] total_inactive_file 0 [ 648.287444][ T4499] total_active_file 0 [ 648.287508][ T4499] total_unevictable 0 [ 648.287573][ T4499] anon_cost 0 [ 648.287655][ T4499] file_cost 0 [ 648.288086][ T4499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.369,pid=4497,uid=0 [ 648.297217][ T4499] Memory cgroup out of memory: Killed process 4497 (syz.2.369) total-vm:40652kB, anon-rss:1296kB, file-rss:1040kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 650.657418][ T29] audit: type=1400 audit(650.220:331): avc: denied { write } for pid=4502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.040743][ T29] audit: type=1400 audit(652.610:332): avc: denied { write } for pid=4518 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.840821][ T3226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 654.886229][ T4525] [ 654.886611][ T4525] ============================= [ 654.886802][ T4525] WARNING: suspicious RCU usage [ 654.887059][ T4525] syzkaller #0 Tainted: G W L [ 654.887444][ T4525] ----------------------------- [ 654.893861][ T4525] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 654.894295][ T4525] [ 654.894295][ T4525] other info that might help us debug this: [ 654.894295][ T4525] [ 654.894790][ T4525] [ 654.894790][ T4525] rcu_scheduler_active = 2, debug_locks = 1 [ 654.895306][ T4525] locks held by syz.2.376/4525: 1, last CPU#0: [ 654.895697][ T4525] #0: ffff000018113e50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x64/0x9c [ 654.897170][ T4525] [ 654.897170][ T4525] stack backtrace: [ 654.897534][ T4525] CPU: 0 UID: 0 PID: 4525 Comm: syz.2.376 Tainted: G W L syzkaller #0 PREEMPT [ 654.897986][ T4525] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 654.898242][ T4525] Hardware name: linux,dummy-virt (DT) [ 654.898512][ T4525] Call trace: [ 654.898717][ T4525] show_stack+0x18/0x24 (C) [ 654.899057][ T4525] dump_stack_lvl+0x7c/0xb0 [ 654.899461][ T4525] dump_stack+0x1c/0x28 [ 654.899784][ T4525] lockdep_rcu_suspicious+0x178/0x298 [ 654.900139][ T4525] xfrm_do_migrate_state+0x1720/0x2634 [ 654.900511][ T4525] xfrm_user_rcv_msg+0x2c4/0x80c [ 654.900851][ T4525] netlink_rcv_skb+0x1ac/0x360 [ 654.901100][ T4525] xfrm_netlink_rcv+0x74/0x9c [ 654.901456][ T4525] netlink_unicast+0x418/0x6e0 [ 654.901723][ T4525] netlink_sendmsg+0x638/0xa4c [ 654.902003][ T4525] __sock_sendmsg+0xc8/0x1a4 [ 654.902342][ T4525] ____sys_sendmsg+0x52c/0x76c [ 654.902621][ T4525] ___sys_sendmsg+0x124/0x1a4 [ 654.902883][ T4525] __sys_sendmsg+0x10c/0x198 [ 654.903155][ T4525] __arm64_sys_sendmsg+0x74/0xa4 [ 654.903448][ T4525] invoke_syscall+0x74/0x240 [ 654.903740][ T4525] el0_svc_common.constprop.0+0xac/0x230 [ 654.904021][ T4525] do_el0_svc+0x40/0x58 [ 654.904301][ T4525] el0_svc+0x58/0x2a4 [ 654.904552][ T4525] el0t_64_sync_handler+0xa0/0xe4 [ 654.904828][ T4525] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 656.453843][ T4189] syz_tun (unregistering): left allmulticast mode [ 659.737535][ T29] audit: type=1400 audit(659.310:333): avc: denied { write } for pid=4536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.951201][ T29] audit: type=1400 audit(661.520:334): avc: denied { write } for pid=4542 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.259405][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.335384][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.380935][ T169] bond0 (unregistering): Released all slaves [ 663.510482][ T3226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 669.905547][ T29] audit: type=1400 audit(669.480:335): avc: denied { write } for pid=4548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.703168][ T29] audit: type=1400 audit(670.270:336): avc: denied { write } for pid=4551 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.149054][ T3226] 8021q: adding VLAN 0 to HW filter on device eth4 [ 672.533390][ T29] audit: type=1400 audit(672.100:337): avc: denied { write } for pid=4555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.364708][ T29] audit: type=1400 audit(672.930:338): avc: denied { write } for pid=4558 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.896475][ T3226] 8021q: adding VLAN 0 to HW filter on device eth5 [ 675.532864][ T29] audit: type=1400 audit(675.100:339): avc: denied { write } for pid=4562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.118866][ T29] audit: type=1400 audit(675.690:340): avc: denied { write } for pid=4565 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.635735][ T3226] 8021q: adding VLAN 0 to HW filter on device eth6 [ 677.380844][ T29] audit: type=1400 audit(676.950:341): avc: denied { write } for pid=4567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.138588][ T29] audit: type=1400 audit(677.710:342): avc: denied { write } for pid=4570 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.341053][ T29] audit: type=1400 audit(679.910:343): avc: denied { write } for pid=4575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.168756][ T29] audit: type=1400 audit(680.740:344): avc: denied { write } for pid=4578 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.790496][ T3226] 8021q: adding VLAN 0 to HW filter on device eth8 [ 683.527625][ T29] audit: type=1400 audit(683.080:345): avc: denied { write } for pid=4582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.330633][ T29] audit: type=1400 audit(683.900:346): avc: denied { write } for pid=4585 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1