last executing test programs: 17.83791196s ago: executing program 1 (id=10): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000200)="757362300000000000000000000000000100"/40) 16.933509259s ago: executing program 0 (id=11): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170005007e05000006030000000000000000000005010905a10105091901290815002501950875018102c0"], 0x12f) nanosleep(&(0x7f0000000300)={0x1}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000000300300000"], 0x9) 15.087361205s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000250)='/dev/ram0,65536\x00', 0x10) r1 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000600)={0x0, 0x1000000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000400)="ffffffff0100"/24) 13.882560936s ago: executing program 0 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000500)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffff}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000700)="636570682076320a100001000000000000000100000000000000010128000000000000000000000000000000000000000000000000004996875b0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f2021222324252627287f152c0e", 0x66}) io_uring_enter(r1, 0x2, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x1ff) mount(&(0x7f0000000b00)=@filename='127.0.0.1:20000:/\x00', &(0x7f0000000a00)='./file0\x00', &(0x7f0000000c00)='ceph\x00', 0x0, 0x0) 11.422114648s ago: executing program 1 (id=14): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902290001010080320904000000ffffff000904000102ffffff000705810240000007050102400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="0100"/15) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 10.986080232s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/spaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/spaces/test\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/spaces/test/nodes\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/dlm/cluster/spaces/test/nodes/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/dlm-monitor\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/dlm-control\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)="0600000000000000020000000401000000000000000000007465737400"/128, 0x80) (async) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/dlm/test/event_done\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/kernel/dlm/test/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='1\x00', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/dlm_test\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)="06000000000000000200000001010000030400000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f000000000000000000000000000000000000000000000000000000000000000000000072657331", 0x7c) write(r5, &(0x7f0000000780)="060000000000000002000000020100000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00"/124, 0x78) write(r5, &(0x7f0000000800)="060000000000000002000000020100000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00"/124, 0x78) 9.544473555s ago: executing program 0 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) nanosleep(&(0x7f00000003c0)={0x0, 0x10000000}, 0x0) 9.143976929s ago: executing program 1 (id=17): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep2(r0, 0x82, 0x10, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0x8, 'BBBB', {0x3, 0x100, 0x0, 0x1, 0x100}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wlan0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x10}]}, 0x38}}, 0x0) 5.832489318s ago: executing program 1 (id=18): r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004024044e27000100000001090243000201008032090400000102020100052400100105240100010424020005240600010705810308001009040100020a0000000705820200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x19, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) syz_usb_control_io(r0, 0x0, 0x0) 4.315803432s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='dummy_udc.0\n', 0xc) 4.006641654s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./meta\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f00000011c0), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./data\x00', 0x42, 0x1b6) fallocate(r2, 0x0, 0x0, 0x1000000) r3 = syz_open_dev$loop(&(0x7f00000011c0), 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 0s ago: executing program 0 (id=21): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='./file0\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write(r6, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/delete_controller\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\x00', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40848' (ED25519) to the list of known hosts. [ 394.168884][ T30] audit: type=1400 audit(393.390:84): avc: denied { name_bind } for pid=3379 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 395.046157][ T30] audit: type=1400 audit(394.260:85): avc: denied { execute } for pid=3380 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 395.063657][ T30] audit: type=1400 audit(394.280:86): avc: denied { execute_no_trans } for pid=3380 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 410.033636][ T30] audit: type=1400 audit(409.250:87): avc: denied { mounton } for pid=3380 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 410.077345][ T30] audit: type=1400 audit(409.300:88): avc: denied { mount } for pid=3380 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 410.179454][ T3380] cgroup: Unknown subsys name 'net' [ 410.299746][ T30] audit: type=1400 audit(409.520:89): avc: denied { unmount } for pid=3380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 410.944045][ T3380] cgroup: Unknown subsys name 'cpuset' [ 411.191098][ T3380] cgroup: Unknown subsys name 'rlimit' [ 411.785210][ T30] audit: type=1400 audit(410.940:90): avc: denied { setattr } for pid=3380 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.974991][ T3384] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 412.995438][ T30] audit: type=1400 audit(412.210:91): avc: denied { relabelto } for pid=3384 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 413.019000][ T30] audit: type=1400 audit(412.240:92): avc: denied { write } for pid=3384 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 413.252826][ T30] audit: type=1400 audit(412.470:93): avc: denied { read } for pid=3380 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 413.254024][ T30] audit: type=1400 audit(412.470:94): avc: denied { open } for pid=3380 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 413.296079][ T3380] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 444.588553][ T30] audit: type=1400 audit(443.810:95): avc: denied { write } for pid=3385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.697345][ T30] audit: type=1400 audit(444.910:96): avc: denied { write } for pid=3388 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.637077][ T30] audit: type=1400 audit(480.860:97): avc: denied { execmem } for pid=3390 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 481.788310][ T30] audit: type=1400 audit(481.010:98): avc: denied { read } for pid=3392 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.842701][ T30] audit: type=1400 audit(481.030:99): avc: denied { open } for pid=3392 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.860925][ T30] audit: type=1400 audit(481.070:100): avc: denied { mounton } for pid=3392 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 481.990689][ T30] audit: type=1400 audit(481.210:101): avc: denied { module_request } for pid=3392 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 482.002758][ T30] audit: type=1400 audit(481.210:102): avc: denied { module_request } for pid=3393 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 482.473478][ T30] audit: type=1400 audit(481.690:103): avc: denied { sys_module } for pid=3392 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 491.425906][ T3393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.474504][ T3393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.200708][ T3392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.286879][ T3392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.130871][ T3393] hsr_slave_0: entered promiscuous mode [ 495.153286][ T3393] hsr_slave_1: entered promiscuous mode [ 497.123038][ T3392] hsr_slave_0: entered promiscuous mode [ 497.127952][ T3392] hsr_slave_1: entered promiscuous mode [ 497.136723][ T3392] debugfs: 'hsr0' already exists in 'hsr' [ 497.141072][ T3392] Cannot create hsr debugfs directory [ 499.197230][ T30] audit: type=1400 audit(498.420:104): avc: denied { create } for pid=3393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.203336][ T30] audit: type=1400 audit(498.420:105): avc: denied { write } for pid=3393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.223079][ T30] audit: type=1400 audit(498.440:106): avc: denied { read } for pid=3393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.290175][ T3393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 499.505395][ T3393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.539642][ T3393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 499.610935][ T3393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.646260][ T3393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 499.686268][ T3393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.710008][ T3393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.769116][ T3393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.484206][ T3392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.547409][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.569740][ T3392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.630612][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.660252][ T3392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.756639][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.793827][ T3392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.889899][ T3392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.617064][ T3393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.546311][ T3392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.355831][ T3393] veth0_vlan: entered promiscuous mode [ 519.535105][ T3393] veth1_vlan: entered promiscuous mode [ 520.126329][ T3393] veth0_macvtap: entered promiscuous mode [ 520.266147][ T3393] veth1_macvtap: entered promiscuous mode [ 520.580146][ T3392] veth0_vlan: entered promiscuous mode [ 520.863739][ T3392] veth1_vlan: entered promiscuous mode [ 521.055603][ T3454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.057836][ T3454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.058226][ T3454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.104187][ T834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.664302][ T30] audit: type=1400 audit(520.880:107): avc: denied { mounton } for pid=3393 comm="syz-executor" path="/syzkaller.t6FG2t/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 521.676721][ T30] audit: type=1400 audit(520.900:108): avc: denied { mount } for pid=3393 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 521.783709][ T30] audit: type=1400 audit(520.980:109): avc: denied { mounton } for pid=3393 comm="syz-executor" path="/syzkaller.t6FG2t/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 521.810396][ T30] audit: type=1400 audit(521.030:110): avc: denied { mount } for pid=3393 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 521.859715][ T30] audit: type=1400 audit(521.080:111): avc: denied { mounton } for pid=3393 comm="syz-executor" path="/syzkaller.t6FG2t/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 521.884737][ T30] audit: type=1400 audit(521.100:112): avc: denied { mounton } for pid=3393 comm="syz-executor" path="/syzkaller.t6FG2t/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 521.946132][ T30] audit: type=1400 audit(521.170:113): avc: denied { unmount } for pid=3393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 522.013296][ T30] audit: type=1400 audit(521.230:114): avc: denied { mounton } for pid=3393 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 522.034300][ T30] audit: type=1400 audit(521.250:115): avc: denied { mount } for pid=3393 comm="syz-executor" name="/" dev="gadgetfs" ino=3913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 522.193700][ T3392] veth0_macvtap: entered promiscuous mode [ 522.293317][ T30] audit: type=1400 audit(521.510:116): avc: denied { mount } for pid=3393 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 522.310542][ T3392] veth1_macvtap: entered promiscuous mode [ 522.703307][ T3393] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 523.014194][ T3453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.030087][ T3529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.030751][ T3529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.085534][ T3453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.464660][ T3545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.471186][ T3545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.153359][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 527.154181][ T30] audit: type=1400 audit(526.370:125): avc: denied { mount } for pid=3543 comm="syz.1.2" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 527.224305][ T30] audit: type=1400 audit(526.410:126): avc: denied { read } for pid=3544 comm="syz.0.1" name="loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.244048][ T30] audit: type=1400 audit(526.460:127): avc: denied { open } for pid=3544 comm="syz.0.1" path="/dev/loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.277787][ T30] audit: type=1400 audit(526.500:128): avc: denied { ioctl } for pid=3544 comm="syz.0.1" path="/dev/loop-control" dev="devtmpfs" ino=637 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 528.038193][ T30] audit: type=1400 audit(527.250:129): avc: denied { unmount } for pid=3393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 528.712196][ T30] audit: type=1400 audit(527.930:130): avc: denied { allowed } for pid=3549 comm="syz.1.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 528.773541][ T30] audit: type=1400 audit(527.990:131): avc: denied { create } for pid=3549 comm="syz.1.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 528.802949][ T30] audit: type=1400 audit(528.020:132): avc: denied { map } for pid=3549 comm="syz.1.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 528.809943][ T30] audit: type=1400 audit(528.030:133): avc: denied { read write } for pid=3549 comm="syz.1.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 528.862434][ T30] audit: type=1400 audit(528.080:134): avc: denied { cmd } for pid=3549 comm="syz.1.3" path="/dev/ublk-control" dev="devtmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 529.436455][ T3459] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 529.876844][ T3459] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 530.052850][ T3459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.053542][ T3459] usb 1-1: Product: syz [ 530.053996][ T3459] usb 1-1: Manufacturer: syz [ 530.054105][ T3459] usb 1-1: SerialNumber: syz [ 530.431230][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.535185][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.984334][ T3459] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 531.996066][ T3459] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 531.996881][ T3459] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 532.019066][ T3459] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 532.143790][ T3459] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 532.579767][ T3459] usb 1-1: USB disconnect, device number 2 [ 533.979175][ T3459] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 534.294948][ T3459] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 2.00 [ 534.586643][ T3459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.587531][ T3459] usb 1-1: Product: syz [ 534.588099][ T3459] usb 1-1: Manufacturer: syz [ 534.588344][ T3459] usb 1-1: SerialNumber: syz [ 535.095237][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 535.097893][ T30] audit: type=1400 audit(534.320:137): avc: denied { create } for pid=3581 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 535.136398][ T30] audit: type=1400 audit(534.360:138): avc: denied { write } for pid=3581 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 536.013058][ T30] audit: type=1400 audit(535.230:139): avc: denied { read write } for pid=3581 comm="syz.1.7" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 536.091202][ T30] audit: type=1400 audit(535.230:140): avc: denied { open } for pid=3581 comm="syz.1.7" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 536.650553][ T3459] gpiochip_add_data_with_key: GPIOs 0..-1 (usb_ljca.ljca-gpio.0) failed to register, -22 [ 536.653181][ T3459] gpio_ljca usb_ljca.ljca-gpio.0: probe with driver gpio_ljca failed with error -22 [ 536.883510][ T3459] ljca 1-1:1.0: enumerate I2C error [ 536.917316][ T3459] ljca 1-1:1.0: probe with driver ljca failed with error -110 [ 537.091145][ T3459] ljca 1-1:1.1: probe with driver ljca failed with error -71 [ 539.506113][ T3582] infiniband rxe0: set active [ 539.509167][ T3582] infiniband rxe0: added veth0 [ 540.104838][ T3582] RDS/IB: rxe0: added [ 540.117088][ T3582] smc: adding ib device rxe0 with port count 1 [ 540.119471][ T3582] smc: ib device rxe0 port 1 has no pnetid [ 545.394487][ T30] audit: type=1400 audit(544.610:141): avc: denied { node_bind } for pid=3590 comm="syz.1.8" src=6789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 546.196000][ T3594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.247730][ T3594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.720692][ T3596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.745855][ T3596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.087268][ T3541] usb 1-1: USB disconnect, device number 3 [ 549.013197][ T30] audit: type=1400 audit(548.230:142): avc: denied { read write } for pid=3601 comm="syz.0.11" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 549.013787][ T30] audit: type=1400 audit(548.230:143): avc: denied { open } for pid=3601 comm="syz.0.11" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 549.470908][ T3459] input: syz0 as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input1 [ 549.727601][ T3459] hid-generic 0005:057E:0306.0001: input,hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 551.436655][ T30] audit: type=1400 audit(550.660:144): avc: denied { read write } for pid=3606 comm="syz.1.12" name="mtd1" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 551.474847][ T30] audit: type=1400 audit(550.660:145): avc: denied { open } for pid=3606 comm="syz.1.12" path="/dev/mtd1" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 551.544367][ T30] audit: type=1400 audit(550.770:146): avc: denied { ioctl } for pid=3606 comm="syz.1.12" path="/dev/mtd1" dev="devtmpfs" ino=686 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 551.570949][ T3609] ubi0: attaching mtd1 [ 551.857122][ T3609] ubi0: scanning is finished [ 551.874697][ T3609] ubi0: empty MTD device detected [ 551.883050][ T3605] fido_id[3605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 552.076565][ T30] audit: type=1400 audit(551.300:147): avc: denied { name_bind } for pid=3610 comm="syz.0.13" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 552.119529][ T30] audit: type=1400 audit(551.340:148): avc: denied { sqpoll } for pid=3610 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 552.409353][ T3607] ftl_cs: FTL header not found. [ 552.924873][ T3609] ubi0: attached mtd1 (name "mtdram test device", size 0 MiB) [ 552.928600][ T3609] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 552.954938][ T3609] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 552.957346][ T3609] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 552.968822][ T3609] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 552.972954][ T3609] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 552.976027][ T3609] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 170621109 [ 553.006728][ T3609] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 553.020013][ T3614] ubi0: background thread "ubi_bgt0d" started, PID 3614 [ 553.648468][ T3607] block2mtd: mtd2: [/dev/ram0] erase_size = 64KiB [65536] [ 554.683078][ T3620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.695708][ T3620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.334503][ T30] audit: type=1400 audit(555.550:149): avc: denied { read write } for pid=3392 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.335659][ T30] audit: type=1400 audit(555.550:150): avc: denied { open } for pid=3392 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.403668][ T30] audit: type=1400 audit(555.550:151): avc: denied { ioctl } for pid=3392 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.636042][ T3627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.688219][ T3627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.535932][ T3641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.634961][ T3641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.680681][ T30] audit: type=1400 audit(560.900:152): avc: denied { mount } for pid=3643 comm="syz.0.19" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 561.737656][ T30] audit: type=1400 audit(560.960:153): avc: denied { search } for pid=3643 comm="syz.0.19" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.749139][ T30] audit: type=1400 audit(560.960:154): avc: denied { search } for pid=3643 comm="syz.0.19" name="usb_gadget" dev="configfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.813210][ T30] audit: type=1400 audit(561.010:155): avc: denied { write search } for pid=3643 comm="syz.0.19" name="usb_gadget" dev="configfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.842341][ T30] audit: type=1400 audit(561.040:156): avc: denied { add_name } for pid=3643 comm="syz.0.19" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.873161][ T30] audit: type=1400 audit(561.080:157): avc: denied { create } for pid=3643 comm="syz.0.19" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 561.913867][ T30] audit: type=1400 audit(561.140:158): avc: denied { search } for pid=3643 comm="syz.0.19" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.935769][ T30] audit: type=1400 audit(561.140:159): avc: denied { search } for pid=3643 comm="syz.0.19" name="usb_gadget" dev="configfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 561.968183][ T30] audit: type=1400 audit(561.160:160): avc: denied { search } for pid=3643 comm="syz.0.19" name="g1" dev="configfs" ino=4021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.030421][ T30] audit: type=1400 audit(561.250:161): avc: denied { mount } for pid=3645 comm="syz.1.20" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 565.080974][ T3383] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 565.337250][ T3383] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.02 [ 565.366150][ T3383] usb 1-1: Dual-Role OTG device on HNP port [ 565.376276][ T3383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.863684][ C0] Unable to handle kernel paging request at virtual address dfff8000000000e6 [ 565.864037][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 565.864126][ C0] Mem abort info: [ 565.864196][ C0] ESR = 0x0000000096000005 [ 565.864306][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 565.864382][ C0] SET = 0, FnV = 0 [ 565.864436][ C0] EA = 0, S1PTW = 0 [ 565.864504][ C0] FSC = 0x05: level 1 translation fault [ 565.864579][ C0] Data abort info: [ 565.864630][ C0] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 565.864692][ C0] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 565.864752][ C0] GCS = 0, Overlay = 0, DirtyBit = 0 [ 565.864872][ C0] [dfff8000000000e6] address between user and kernel address ranges [ 565.866620][ C0] Internal error: Oops: 0000000096000005 [#1] SMP [ 565.870830][ C0] Modules linked in: [ 565.871247][ C0] CPU: 0 UID: 0 PID: 3383 Comm: kworker/0:3 Tainted: G W syzkaller #0 PREEMPT [ 565.871744][ C0] Tainted: [W]=WARN [ 565.871950][ C0] Hardware name: linux,dummy-virt (DT) [ 565.872536][ C0] Workqueue: usb_hub_wq hub_event [ 565.873054][ C0] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 565.873371][ C0] pc : f_midi2_free_ep_reqs+0x4c/0x220 [ 565.873683][ C0] lr : f_midi2_set_alt+0x16c/0x49c [ 565.873926][ C0] sp : ffff80008db977f0 [ 565.874149][ C0] x29: ffff80008db977f0 x28: 0000000000000001 x27: 1ffff00011b72f9a [ 565.874669][ C0] x26: ffff000019a4c128 x25: 0000000000000000 x24: ffff000019a4c740 [ 565.875142][ C0] x23: ffff000019fae6c8 x22: 00000000000000e6 x21: ffff000019a4c128 [ 565.875561][ C0] x20: ffff000019a4c0f0 x19: ffff000019a4c000 x18: ffff00006bf7d268 [ 565.876010][ C0] x17: ffff800083969158 x16: ffff80008384d490 x15: ffff800083859964 [ 565.876449][ C0] x14: ffff800080a8f0d8 x13: ffff800089ec2ce0 x12: ffff80008d8206c0 [ 565.876911][ C0] x11: ffff800087763000 x10: 0000000000000168 x9 : 0000000000000080 [ 565.877358][ C0] x8 : ffff000017e29bf0 x7 : ffff8000800103d4 x6 : ffff8000800103d4 [ 565.877882][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 1fffe00002977ae1 [ 565.878486][ C0] x2 : 0000000000000730 x1 : 0000000000000003 x0 : dfff800000000000 [ 565.878980][ C0] Call trace: [ 565.879171][ C0] f_midi2_free_ep_reqs+0x4c/0x220 (P) [ 565.879502][ C0] f_midi2_set_alt+0x16c/0x49c [ 565.879753][ C0] composite_setup+0x11c8/0x7b98 [ 565.880038][ C0] configfs_composite_setup+0xd8/0x128 [ 565.880383][ C0] dummy_timer+0x1474/0x3614 [ 565.880668][ C0] __hrtimer_run_queues+0x2a0/0xaa0 [ 565.881003][ C0] hrtimer_run_softirq+0x168/0x2ac [ 565.882067][ C0] handle_softirqs+0x2d8/0x1048 [ 565.883025][ C0] __do_softirq+0x14/0x20 [ 565.883828][ C0] ____do_softirq+0x10/0x20 [ 565.884718][ C0] call_on_irq_stack+0x30/0x48 [ 565.886162][ C0] do_softirq_own_stack+0x1c/0x40 [ 565.887422][ C0] __irq_exit_rcu+0x470/0x598 [ 565.887822][ C0] irq_exit_rcu+0x14/0x80 [ 565.888619][ C0] el1_interrupt+0x40/0x60 [ 565.889156][ C0] el1h_64_irq_handler+0x18/0x30 [ 565.889555][ C0] el1h_64_irq+0x6c/0x70 [ 565.890116][ C0] _raw_spin_unlock_irqrestore+0x40/0xb4 (P) [ 565.890538][ C0] dummy_urb_enqueue+0x3cc/0x620 [ 565.890919][ C0] usb_hcd_submit_urb+0x1d8/0x1e9c [ 565.891382][ C0] usb_submit_urb+0x56c/0x1200 [ 565.891717][ C0] usb_start_wait_urb+0x108/0x430 [ 565.892041][ C0] usb_control_msg+0x2ac/0x3d0 [ 565.892359][ C0] usb_set_interface+0x418/0xb50 [ 565.892701][ C0] set_altset+0xc4/0x230 [ 565.893005][ C0] snd_usb_midi_v2_create+0x474/0x37f4 [ 565.893303][ C0] snd_usb_create_stream.isra.0+0x2b8/0x3f0 [ 565.893647][ C0] usb_audio_probe+0xab4/0x3080 [ 565.893996][ C0] usb_probe_interface+0x28c/0x980 [ 565.894311][ C0] really_probe+0x180/0x850 [ 565.894705][ C0] __driver_probe_device+0x2bc/0x3e8 [ 565.895112][ C0] driver_probe_device+0xe8/0x160 [ 565.895430][ C0] __device_attach_driver+0x16c/0x280 [ 565.895759][ C0] bus_for_each_drv+0x108/0x1a0 [ 565.896057][ C0] __device_attach+0x16c/0x37c [ 565.896480][ C0] device_initial_probe+0x8c/0xa0 [ 565.896931][ C0] bus_probe_device+0x4c/0x130 [ 565.897367][ C0] device_add+0xcc4/0x1380 [ 565.897683][ C0] usb_set_configuration+0xba8/0x16a0 [ 565.898012][ C0] usb_generic_driver_probe+0x7c/0xc8 [ 565.898372][ C0] usb_probe_device+0xa4/0x328 [ 565.898749][ C0] really_probe+0x180/0x850 [ 565.899112][ C0] __driver_probe_device+0x2bc/0x3e8 [ 565.899534][ C0] driver_probe_device+0xe8/0x160 [ 565.899918][ C0] __device_attach_driver+0x16c/0x280 [ 565.900314][ C0] bus_for_each_drv+0x108/0x1a0 [ 565.900671][ C0] __device_attach+0x16c/0x37c [ 565.901020][ C0] device_initial_probe+0x8c/0xa0 [ 565.901634][ C0] bus_probe_device+0x4c/0x130 [ 565.902090][ C0] device_add+0xcc4/0x1380 [ 565.902391][ C0] usb_new_device.part.0+0xae8/0x1130 [ 565.902803][ C0] hub_event+0x20f4/0x38c0 [ 565.903123][ C0] process_one_work+0x830/0x1c00 [ 565.903517][ C0] worker_thread+0x42c/0xc90 [ 565.903884][ C0] kthread+0x2ec/0x384 [ 565.904198][ C0] ret_from_fork+0x10/0x20 [ 565.905006][ C0] Code: 52800061 911cc322 f9003fe2 d343fc56 (38e06ac0) [ 565.906803][ C0] ---[ end trace 0000000000000000 ]--- [ 565.908079][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 565.909204][ C0] SMP: stopping secondary CPUs [ 565.910868][ C0] Kernel Offset: disabled [ 565.911301][ C0] CPU features: 0x0,40400002,00340020,00100000,0800821b [ 565.912015][ C0] Memory Limit: none [ 565.913640][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:16:45 Registers: info registers vcpu 0 CPU#0 PC=ffff800081ec5184 X00=0000000000000002 X01=0000000000000007 X02=0000000000000000 X03=1fffe00001e4b632 X04=0000000000000018 X05=1ffff00011b72e10 X06=ffff700011b72db2 X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011b72db2 X11=1ffff00011b72db2 X12=ffff700011b72db3 X13=205d304320202020 X14=2072657375206e65 X15=6e72656b20646e61 X16=6572646461206c65 X17=65676e6172207373 X18=ffff00006bf7d268 X19=ffff00000f25b080 X20=ffff80008db8d018 X21=ffff8000881215c0 X22=0000000000000043 X23=dfff800000000000 X24=ffff00000f262059 X25=0000000000000003 X26=dfff800000000000 X27=ffff8000881217e0 X28=ffff80008db97050 X29=ffff80008db96d90 X30=ffff800081ec593c SP=ffff80008db96d90 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=7269762f73656369:7665642f7379732f Q01=30706f6f6c2f6b63:6f6c622f6c617574 Q02=0000000000000401:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=3303330333033303:3303330333033303 Q05=bcbcbc00bcbcbcbc:bcbcbc00bcbcbcbc Q06=0000000000000073:0000aaab050d43c0 Q07=0000000000000074:0000aaab050d1600 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000fffffecf4780:0000fffffecf4780 Q17=ffffff80ffffffd8:0000fffffecf4750 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008096a10c X00=0000000000000000 X01=0000000000000007 X02=0000000000000000 X03=0000000000000400 X04=ffff00001f907000 X05=1fffe00003f20e72 X06=1fffe00003f20e70 X07=ffff00001f907398 X08=0000000000000003 X09=0000000000000003 X10=1fffe00003f20e71 X11=1fffe00003f20e73 X12=ffff80008dd3d000 X13=0000000000000000 X14=00000000000000a8 X15=ffff00001e3814dc X16=ffff8000a2427a30 X17=0000000000000000 X18=0000000000000001 X19=ffff000012e46624 X20=ffff000012e46624 X21=ffff00001f907000 X22=0000000000000014 X23=ffff000012e46600 X24=0000000000000026 X25=dfff800000000000 X26=0000000000000026 X27=0000000000000000 X28=0000000000000000 X29=ffff8000a2427260 X30=ffff8000809696fc SP=ffff8000a24272b0 PSTATE=600000c5 -ZC- EL1h FPCR=00000000 FPSR=00000000 Q00=0800000000000000:0800000000000000 Q01=0000000800000000:0000000000000000 Q02=0000000000000008:0000000000000000 Q03=00d000a800000000:0000000000000000 Q04=0000000000000001:0000000000000001 Q05=0000000000000009:0000000000000001 Q06=0000ffffb5bd65b0:0000ffffb5bd6590 Q07=0000ffffb5bd65a8:0000ffffb5bd6578 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=bb448243222c92da:e3914ed4e87380b0 Q23=43788d6f07084f17:4508b00c6052a10f Q24=b20fae707afde253:388e9c6c4fa85ca0 Q25=8e9f894b2581e79e:20c883c9819d5c97 Q26=57c93d417f4d0394:89cd11f6992873d1 Q27=6b69be1163cb6500:a4ac85c293540e63 Q28=6edc4d3a2914b135:d8e9c869e2695c88 Q29=0000000000000000:0009000700030001 Q30=ffffff80ffffffd8:0000fffff03780c0 Q31=0000000000000000:0000000000000000