last executing test programs: 1m58.111145598s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='offline\x00', 0x7) write(r0, &(0x7f0000000400)='online_movable\x00', 0xe) 1m56.393887402s ago: executing program 0 (id=8): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x7, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010900a101c0"}}, 0x111c) syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x7, ' \x00\x00\x00\x00\x00\x00'}}, 0x111c) 1m53.560036406s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='\nfile read /etc/passwd task.uid=0\n\x00', 0x2a) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/4096, 0x1000) 1m51.808930411s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:1f.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x2) 1m50.68629349s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='30000\n\x00', 0x6) mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x17) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, &(0x7f0000001000), 0x2000, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x13, 0x0, 0x0) write(r0, &(0x7f0000000300)='30001,0x7f0000200000,0x7f0000400000\x00', 0x24) 1m49.339862302s ago: executing program 0 (id=13): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080fa09040001040000000007058102400000070582024000000705010240000007050202400000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000300)={0xc0, 0x1, 0x1e, '\x00'/30}, &(0x7f000000020c)={0x0, 0xa, 0x1}, &(0x7f0000000216)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 1m21.565707845s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:00.0/label\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/index\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/label\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/index\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:02.0/label\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/256, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:02.0/index\x00', 0x0, 0x0) read(r5, &(0x7f0000000b00)=""/256, 0x100) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/devices/0000:00:03.0/label\x00', 0x0, 0x0) read(r6, &(0x7f0000000d00)=""/256, 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/index\x00', 0x0, 0x0) read(r7, &(0x7f0000000f00)=""/256, 0x100) 1m20.437812824s ago: executing program 1 (id=24): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x0, {}, 0x2}, 0x18) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x0, {}, 0x1}, 0x18) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r3}, 0x10) write(r1, &(0x7f0000000200)="0102ec98080000001000000000000000", 0x10) write(r1, &(0x7f0000000210)="0102ec98080000001100000000000000", 0x10) write(r1, &(0x7f0000000220)="0102ec98080000001300000000000000", 0x10) write(r1, &(0x7f0000000230)="0102ec9808000000ff00000000000000", 0x10) write(r1, &(0x7f0000000240)="01ffec98080000002000000000000000", 0x10) write(r1, &(0x7f0000000250)="0102c898080000001400000000000000", 0x10) write(r1, &(0x7f0000000260)="0102c898080000001500000000000000", 0x10) write(r1, &(0x7f0000000270)="0102c898080000001600000000000000", 0x10) write(r1, &(0x7f0000000280)="0102c898080000001700000000000000", 0x10) write(r1, &(0x7f0000000290)="0102c89808000000ff00000000000000", 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 1m19.061247785s ago: executing program 1 (id=25): syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004024044e27000100000001090243000201008032090400000102020100052400100105240100010424020205240600010705810308001009040100020a0000000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x2625a00}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x17}) 1m17.098827722s ago: executing program 1 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m16.15008727s ago: executing program 1 (id=27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369\x00', 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 1m14.087339418s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/256, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/local\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)="020052487f00000100"/256, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r4, &(0x7f00000004c0)="0600000000000000020000000400000000000000000000006c733100"/256, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r5, &(0x7f0000000540)=@in={0x2, 0x5248, @loopback}, 0x80) sendto$inet(r5, &(0x7f0000000580)="02000300000000000200000028000300050000000000000002000300000000000200000010000500"/64, 0x28, 0x0, 0x0, 0x0) 1m3.05146724s ago: executing program 32 (id=13): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080fa09040001040000000007058102400000070582024000000705010240000007050202400000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000300)={0xc0, 0x1, 0x1e, '\x00'/30}, &(0x7f000000020c)={0x0, 0xa, 0x1}, &(0x7f0000000216)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 28.55769255s ago: executing program 33 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/256, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/local\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)="020052487f00000100"/256, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r4, &(0x7f00000004c0)="0600000000000000020000000400000000000000000000006c733100"/256, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r5, &(0x7f0000000540)=@in={0x2, 0x5248, @loopback}, 0x80) sendto$inet(r5, &(0x7f0000000580)="02000300000000000200000028000300050000000000000002000300000000000200000010000500"/64, 0x28, 0x0, 0x0, 0x0) 13.690464554s ago: executing program 2 (id=31): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0102010401000000") (async) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="010401020000") (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000300)="0105010100") (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000400)="0108010401000000") (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0102010401000000") (async) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="010401020000") (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000300)="0105010100") (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000400)="0108010401000000") (async) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/spi_master/spi0/slave\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='spidev\x00', 0x7) 11.919856529s ago: executing program 2 (id=32): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000110)={0x0, 0x0, 0x3, {0x3, 0x0, '\x00'}}, &(0x7f0000000120)={0x0, 0x0, 0x3, @string={0x3, 0x0, '\x00'}}}, &(0x7f0000000200)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x40, '\x00'/64}, &(0x7f0000000210)={0x0, 0x0, 0x1}, &(0x7f0000000220)={0x0, 0x0, 0x1}, &(0x7f0000000230)={0x20, 0x81, 0x3, '\x00\x00\x00'}, &(0x7f0000000240)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000250)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000000260)={0x20, 0x84, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000000270)={0x20, 0x85, 0x3}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000310)={0x0, 0x0, 0x3, {0x3, 0x0, '\x00'}}, &(0x7f0000000320)={0x0, 0x0, 0x3, @string={0x3, 0x0, '\x00'}}, &(0x7f0000000330)={0x0, 0x0, 0x5, {0x5, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000350)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x40, '\x00'/64}, &(0x7f0000000410)={0x0, 0x0, 0x1}, &(0x7f0000000420)={0x0, 0x0, 0x1}, &(0x7f0000000430)={0x0, 0x0, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x4}, &(0x7f0000000450)={0x0, 0x0, 0x2}, &(0x7f0000000460)={0x0, 0x0, 0x1}, &(0x7f0000000470)={0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000000490)={0x0, 0x0, 0x6, @random}, &(0x7f00000004a0)={0x0, 0x0, 0x6, @random}, &(0x7f00000004b0)={0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x2}, &(0x7f00000004d0)={0x0, 0x0, 0x1}, &(0x7f00000004e0)={0x0, 0x0, 0x1}, &(0x7f00000004f0)={0x0, 0x0, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000310)={0x0, 0x0, 0x3, {0x3, 0x0, '\x00'}}, &(0x7f0000000320)={0x0, 0x0, 0x3, @string={0x3, 0x0, '\x00'}}, &(0x7f0000000330)={0x0, 0x0, 0x5, {0x5, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000350)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x40, '\x00'/64}, &(0x7f0000000410)={0x0, 0x0, 0x1}, &(0x7f0000000420)={0x0, 0x0, 0x1}, &(0x7f0000000430)={0x0, 0x0, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x4}, &(0x7f0000000450)={0x0, 0x0, 0x2}, &(0x7f0000000460)={0x0, 0x0, 0x1}, &(0x7f0000000470)={0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000000490)={0x0, 0x0, 0x6, @random}, &(0x7f00000004a0)={0x0, 0x0, 0x6, @random}, &(0x7f00000004b0)={0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x2}, &(0x7f00000004d0)={0x0, 0x0, 0x1}, &(0x7f00000004e0)={0x0, 0x0, 0x1}, &(0x7f00000004f0)={0x0, 0x0, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000310)={0x0, 0x0, 0x3, {0x3, 0x0, '\x00'}}, &(0x7f0000000320)={0x0, 0x0, 0x3, @string={0x3, 0x0, '\x00'}}, &(0x7f0000000330)={0x0, 0x0, 0x5, {0x5, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000350)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x40, '\x00'/64}, &(0x7f0000000410)={0x0, 0x0, 0x1}, &(0x7f0000000420)={0x0, 0x0, 0x1}, &(0x7f0000000430)={0x0, 0x0, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x4}, &(0x7f0000000450)={0x0, 0x0, 0x2}, &(0x7f0000000460)={0x0, 0x0, 0x1}, &(0x7f0000000470)={0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000000490)={0x0, 0x0, 0x6, @random}, &(0x7f00000004a0)={0x0, 0x0, 0x6, @random}, &(0x7f00000004b0)={0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x2}, &(0x7f00000004d0)={0x0, 0x0, 0x1}, &(0x7f00000004e0)={0x0, 0x0, 0x1}, &(0x7f00000004f0)={0x0, 0x0, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000310)={0x0, 0x0, 0x3, {0x3, 0x0, '\x00'}}, &(0x7f0000000320)={0x0, 0x0, 0x3, @string={0x3, 0x0, '\x00'}}, &(0x7f0000000330)={0x0, 0x0, 0x5, {0x5, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000350)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x40, '\x00'/64}, &(0x7f0000000410)={0x0, 0x0, 0x1}, &(0x7f0000000420)={0x0, 0x0, 0x1}, &(0x7f0000000430)={0x0, 0x0, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x4}, &(0x7f0000000450)={0x0, 0x0, 0x2}, &(0x7f0000000460)={0x0, 0x0, 0x1}, &(0x7f0000000470)={0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000000490)={0x0, 0x0, 0x6, @random}, &(0x7f00000004a0)={0x0, 0x0, 0x6, @random}, &(0x7f00000004b0)={0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x2}, &(0x7f00000004d0)={0x0, 0x0, 0x1}, &(0x7f00000004e0)={0x0, 0x0, 0x1}, &(0x7f00000004f0)={0x0, 0x0, 0x1}}) nanosleep(&(0x7f0000000600)={0x3}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 6.841016902s ago: executing program 2 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/local\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) 5.473218154s ago: executing program 2 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8913, &(0x7f0000000700)={'wlan0\x00', @ifru_flags}) 2.069727832s ago: executing program 2 (id=35): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902290001010080320904000000ffffff000904000102ffffff000705810240000007050102400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x1, &(0x7f0000000200)=""/1) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="0100"/15) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 2 (id=36): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='./file0\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write(r6, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\x00', 0x1) nanosleep(&(0x7f0000000380)={0x1}, 0x0) kernel console output (not intermixed with test programs): [ 225.176124][ T29] audit: type=1400 audit(224.700:82): avc: denied { write } for pid=3362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.328314][ T29] audit: type=1400 audit(226.880:83): avc: denied { write } for pid=3368 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:23757' (ED25519) to the list of known hosts. [ 265.211513][ T29] audit: type=1400 audit(264.760:84): avc: denied { name_bind } for pid=3376 comm="sshd-session" src=30004 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 265.611281][ T29] audit: type=1400 audit(265.170:85): avc: denied { execute } for pid=3377 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 265.616679][ T29] audit: type=1400 audit(265.170:86): avc: denied { execute_no_trans } for pid=3377 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 272.815014][ T29] audit: type=1400 audit(272.370:87): avc: denied { mounton } for pid=3377 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 272.866463][ T29] audit: type=1400 audit(272.420:88): avc: denied { mount } for pid=3377 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.911308][ T3377] cgroup: Unknown subsys name 'net' [ 272.978248][ T29] audit: type=1400 audit(272.530:89): avc: denied { unmount } for pid=3377 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 273.362764][ T3377] cgroup: Unknown subsys name 'cpuset' [ 273.436624][ T3377] cgroup: Unknown subsys name 'rlimit' [ 273.772430][ T29] audit: type=1400 audit(273.330:90): avc: denied { setattr } for pid=3377 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.479095][ T3379] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 274.486794][ T29] audit: type=1400 audit(274.040:91): avc: denied { relabelto } for pid=3379 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 274.493688][ T29] audit: type=1400 audit(274.050:92): avc: denied { write } for pid=3379 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 274.644067][ T29] audit: type=1400 audit(274.200:93): avc: denied { read } for pid=3377 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 274.654504][ T29] audit: type=1400 audit(274.200:94): avc: denied { open } for pid=3377 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 274.674209][ T3377] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 297.311826][ T29] audit: type=1400 audit(296.870:95): avc: denied { execmem } for pid=3380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 297.448535][ T29] audit: type=1400 audit(297.000:96): avc: denied { read } for pid=3382 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 297.452506][ T29] audit: type=1400 audit(297.010:97): avc: denied { open } for pid=3382 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 297.475705][ T29] audit: type=1400 audit(297.030:98): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 297.533972][ T29] audit: type=1400 audit(297.090:99): avc: denied { module_request } for pid=3383 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 297.534552][ T29] audit: type=1400 audit(297.090:100): avc: denied { module_request } for pid=3382 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 297.764598][ T29] audit: type=1400 audit(297.320:101): avc: denied { sys_module } for pid=3382 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 304.975855][ T3383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.045407][ T3383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.461646][ T29] audit: type=1400 audit(306.010:102): avc: denied { write } for pid=3425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.654065][ T3382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.716122][ T3382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.659655][ T29] audit: type=1400 audit(307.210:103): avc: denied { write } for pid=3434 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.074174][ T3383] hsr_slave_0: entered promiscuous mode [ 310.096870][ T3383] hsr_slave_1: entered promiscuous mode [ 311.735422][ T3382] hsr_slave_0: entered promiscuous mode [ 311.742078][ T3382] hsr_slave_1: entered promiscuous mode [ 311.747526][ T3382] debugfs: 'hsr0' already exists in 'hsr' [ 311.750217][ T3382] Cannot create hsr debugfs directory [ 313.578873][ T29] audit: type=1400 audit(313.130:104): avc: denied { create } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.583453][ T29] audit: type=1400 audit(313.130:105): avc: denied { write } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.596707][ T29] audit: type=1400 audit(313.150:106): avc: denied { read } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.681137][ T3383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.753454][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.860863][ T3383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.883092][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.894287][ T3383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.924475][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.980064][ T3383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.018764][ T3383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.089406][ T3382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.146822][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.164924][ T3382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.209749][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.223575][ T3382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.254538][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.283558][ T3382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.325464][ T3382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.866783][ T3383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.945909][ T3382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.307029][ T3383] veth0_vlan: entered promiscuous mode [ 331.389979][ T3383] veth1_vlan: entered promiscuous mode [ 331.871223][ T3383] veth0_macvtap: entered promiscuous mode [ 331.962107][ T3383] veth1_macvtap: entered promiscuous mode [ 332.616678][ T2162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.628823][ T2162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.742247][ T819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.743244][ T819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.324875][ T29] audit: type=1400 audit(332.850:107): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.Nj5Fju/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 333.379432][ T29] audit: type=1400 audit(332.930:108): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 333.456480][ T29] audit: type=1400 audit(333.010:109): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.Nj5Fju/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 333.489967][ T29] audit: type=1400 audit(333.040:110): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 333.528402][ T29] audit: type=1400 audit(333.080:111): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.Nj5Fju/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 333.546597][ T29] audit: type=1400 audit(333.100:112): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/syzkaller.Nj5Fju/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 333.625125][ T29] audit: type=1400 audit(333.180:113): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 333.665187][ T29] audit: type=1400 audit(333.220:114): avc: denied { mounton } for pid=3383 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 333.693244][ T29] audit: type=1400 audit(333.250:115): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="gadgetfs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 333.823735][ T3382] veth0_vlan: entered promiscuous mode [ 333.853379][ T29] audit: type=1400 audit(333.400:116): avc: denied { mount } for pid=3383 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 334.016190][ T3382] veth1_vlan: entered promiscuous mode [ 334.210596][ T3383] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 334.312108][ T3383] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 334.386963][ T3382] veth0_macvtap: entered promiscuous mode [ 334.394493][ T3383] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 334.493866][ T3382] veth1_macvtap: entered promiscuous mode [ 334.511821][ T3383] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 335.261776][ T25] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.275087][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.290281][ T25] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.331641][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.430927][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 338.431967][ T29] audit: type=1400 audit(337.970:123): avc: denied { write } for pid=3534 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 341.042392][ T29] audit: type=1400 audit(340.590:124): avc: denied { read write } for pid=3541 comm="syz.1.3" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.044047][ T29] audit: type=1400 audit(340.600:125): avc: denied { open } for pid=3541 comm="syz.1.3" path="/dev/raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.074622][ T29] audit: type=1400 audit(340.620:126): avc: denied { ioctl } for pid=3541 comm="syz.1.3" path="/dev/raw-gadget" dev="devtmpfs" ino=704 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.095098][ T3542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.108897][ T3542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.262106][ T29] audit: type=1400 audit(340.820:127): avc: denied { ioctl } for pid=3541 comm="syz.1.3" path="socket:[2923]" dev="sockfs" ino=2923 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.661962][ T3476] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 341.991817][ T3476] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 342.458314][ T3476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.470773][ T3476] usb 1-1: Product: syz [ 342.472785][ T3476] usb 1-1: Manufacturer: syz [ 342.474214][ T3476] usb 1-1: SerialNumber: syz [ 348.036914][ T3476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -ETIMEDOUT [ 348.052546][ T3476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -110 [ 348.054747][ T3476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 348.123320][ T3476] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -110 [ 348.680457][ T3476] usb 1-1: USB disconnect, device number 2 [ 348.994625][ T29] audit: type=1400 audit(348.550:128): avc: denied { create } for pid=3557 comm="syz.1.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 349.119269][ T29] audit: type=1400 audit(348.660:129): avc: denied { write } for pid=3557 comm="syz.1.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 349.639389][ T29] audit: type=1400 audit(349.190:130): avc: denied { read write } for pid=3557 comm="syz.1.4" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 349.674553][ T29] audit: type=1400 audit(349.230:131): avc: denied { open } for pid=3557 comm="syz.1.4" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 349.820478][ T3558] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 349.978614][ T3476] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 349.996646][ T3558] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 350.398202][ T3476] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 350.456291][ T3476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.091217][ T3476] usbhid 1-1:1.0: can't add hid device: -71 [ 352.094573][ T3476] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 352.496747][ T3476] usb 1-1: USB disconnect, device number 3 [ 353.812772][ T29] audit: type=1400 audit(353.370:132): avc: denied { mount } for pid=3566 comm="syz.0.6" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 354.130852][ T29] audit: type=1400 audit(353.670:133): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 355.682691][ T29] audit: type=1400 audit(355.240:134): avc: denied { read write } for pid=3573 comm="syz.0.8" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 355.714220][ T29] audit: type=1400 audit(355.260:135): avc: denied { open } for pid=3573 comm="syz.0.8" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 356.136193][ T3532] hid-generic 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 358.008801][ T29] audit: type=1400 audit(357.560:136): avc: denied { mount } for pid=3582 comm="syz.0.10" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 358.609815][ T29] audit: type=1400 audit(358.160:137): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 359.136256][ T3578] fido_id[3578]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.624634][ T29] audit: type=1400 audit(360.180:138): avc: denied { mount } for pid=3587 comm="syz.0.12" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 360.730512][ T29] audit: type=1400 audit(360.280:139): avc: denied { checkpoint_restore } for pid=3587 comm="syz.0.12" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.168580][ T29] audit: type=1400 audit(360.720:140): avc: denied { unmount } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 366.223283][ T3576] syz.1.9 (3576): drop_caches: 3 [ 366.449526][ T29] audit: type=1400 audit(366.000:141): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 368.013441][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.031119][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.034261][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.036174][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.039629][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.041610][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.043495][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.045527][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.049358][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.059984][ T1002] hid-generic 0000:0306:0000.0002: unknown main item tag 0x0 [ 368.473860][ T1002] hid-generic 0000:0306:0000.0002: hidraw0: HID v0.00 Device [syz0] on [ 369.364652][ T29] audit: type=1400 audit(368.880:142): avc: denied { name_bind } for pid=3594 comm="syz.1.15" src=4420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 369.380013][ T29] audit: type=1400 audit(368.920:143): avc: denied { node_bind } for pid=3594 comm="syz.1.15" saddr=127.0.0.1 src=4420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 371.770332][ T3595] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 374.211072][ T3599] fido_id[3599]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 375.636121][ T3605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.654712][ T3605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.472297][ T3612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.512203][ T3612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.319968][ T29] audit: type=1400 audit(389.870:144): avc: denied { create } for pid=3618 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.451116][ T29] audit: type=1400 audit(390.010:145): avc: denied { ioctl } for pid=3618 comm="syz.1.24" path="socket:[3024]" dev="sockfs" ino=3024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.473036][ T29] audit: type=1400 audit(390.030:146): avc: denied { bind } for pid=3618 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.593564][ T29] audit: type=1400 audit(390.150:147): avc: denied { write } for pid=3618 comm="syz.1.24" path="socket:[3024]" dev="sockfs" ino=3024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.703617][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 390.704433][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 391.724062][ T3621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.733844][ T3621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.030149][ T29] audit: type=1400 audit(393.590:148): avc: denied { map_create } for pid=3623 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 394.041494][ T29] audit: type=1400 audit(393.600:149): avc: denied { bpf } for pid=3623 comm="syz.1.26" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 394.088529][ T29] audit: type=1400 audit(393.640:150): avc: denied { map_read map_write } for pid=3623 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 394.169745][ T29] audit: type=1400 audit(393.730:151): avc: denied { prog_load } for pid=3623 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 394.174081][ T29] audit: type=1400 audit(393.730:152): avc: denied { perfmon } for pid=3623 comm="syz.1.26" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.739556][ T3626] nvme_tcp: queue 0: data digest mismatch host: disabled ctrl: enabled [ 396.766896][ T29] audit: type=1400 audit(396.320:153): avc: denied { mount } for pid=3629 comm="syz.1.28" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 396.779683][ T29] audit: type=1400 audit(396.340:154): avc: denied { search } for pid=3629 comm="syz.1.28" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.799352][ T29] audit: type=1400 audit(396.350:155): avc: denied { search } for pid=3629 comm="syz.1.28" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.799879][ T29] audit: type=1400 audit(396.350:156): avc: denied { search } for pid=3629 comm="syz.1.28" name="dlm" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.821398][ T29] audit: type=1400 audit(396.380:157): avc: denied { write search } for pid=3629 comm="syz.1.28" name="dlm" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.831315][ T29] audit: type=1400 audit(396.390:158): avc: denied { add_name } for pid=3629 comm="syz.1.28" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.853149][ T29] audit: type=1400 audit(396.410:159): avc: denied { create } for pid=3629 comm="syz.1.28" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 396.988807][ T29] audit: type=1400 audit(396.540:160): avc: denied { search } for pid=3629 comm="syz.1.28" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.004120][ T29] audit: type=1400 audit(396.560:161): avc: denied { search } for pid=3629 comm="syz.1.28" name="dlm" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.019755][ T29] audit: type=1400 audit(396.570:162): avc: denied { search } for pid=3629 comm="syz.1.28" name="cluster" dev="configfs" ino=3043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.591210][ T3630] dlm: Using TCP for communications [ 397.721885][ T3630] dlm: ls1: joining the lockspace group... [ 399.254938][ T3629] dlm: dlm user daemon left 1 lockspaces [ 407.509149][ T25] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.843279][ T25] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.193328][ T25] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.514219][ T25] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.383440][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 410.383996][ T29] audit: type=1400 audit(409.940:195): avc: denied { read } for pid=3226 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 412.714707][ T25] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.784272][ T25] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.839458][ T25] bond0 (unregistering): Released all slaves [ 412.994843][ T29] audit: type=1400 audit(412.550:196): avc: denied { read } for pid=3226 comm="dhcpcd" name="n18" dev="tmpfs" ino=1055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 412.996952][ T29] audit: type=1400 audit(412.550:197): avc: denied { open } for pid=3226 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=1055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 413.006912][ T29] audit: type=1400 audit(412.560:198): avc: denied { getattr } for pid=3226 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=1055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 413.299358][ T25] hsr_slave_0: left promiscuous mode [ 413.319306][ T25] hsr_slave_1: left promiscuous mode [ 413.423953][ T25] veth1_macvtap: left promiscuous mode [ 413.438210][ T25] veth0_macvtap: left promiscuous mode [ 413.439855][ T25] veth1_vlan: left promiscuous mode [ 413.441481][ T25] veth0_vlan: left promiscuous mode [ 419.833525][ T29] audit: type=1400 audit(419.370:199): avc: denied { write } for pid=3650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.856433][ T29] audit: type=1400 audit(419.390:200): avc: denied { create } for pid=3650 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 419.869941][ T29] audit: type=1400 audit(419.420:201): avc: denied { write } for pid=3650 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 419.871364][ T29] audit: type=1400 audit(419.430:202): avc: denied { append } for pid=3650 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.696047][ T29] audit: type=1400 audit(420.250:203): avc: denied { write } for pid=3656 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.698909][ T29] audit: type=1400 audit(420.250:204): avc: denied { unlink } for pid=3656 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 421.094487][ T3226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 423.755022][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.789012][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.888908][ T29] audit: type=1400 audit(423.430:205): avc: denied { write } for pid=3671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.873472][ T29] audit: type=1400 audit(424.430:206): avc: denied { write } for pid=3675 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.835524][ T3226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 427.982194][ T3635] hsr_slave_0: entered promiscuous mode [ 428.003436][ T3635] hsr_slave_1: entered promiscuous mode [ 428.006744][ T29] audit: type=1400 audit(427.560:207): avc: denied { write } for pid=3687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.014364][ T3635] debugfs: 'hsr0' already exists in 'hsr' [ 428.016200][ T3635] Cannot create hsr debugfs directory [ 428.775501][ T29] audit: type=1400 audit(428.330:208): avc: denied { write } for pid=3691 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.569219][ T3226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 430.496531][ T3635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 430.550371][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.569271][ T3635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 430.628689][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.659825][ T3635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 430.678827][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.685746][ T3635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 430.766181][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.874581][ T29] audit: type=1400 audit(431.430:209): avc: denied { write } for pid=3702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.931085][ T29] audit: type=1400 audit(432.490:210): avc: denied { write } for pid=3709 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.643960][ T3226] 8021q: adding VLAN 0 to HW filter on device eth4 [ 434.682083][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.253036][ T29] audit: type=1400 audit(439.810:211): avc: denied { write } for pid=3731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.473942][ T29] audit: type=1400 audit(441.030:212): avc: denied { write } for pid=3737 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.788509][ T29] audit: type=1400 audit(448.340:213): avc: denied { write } for pid=3767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.350854][ T3635] veth0_vlan: entered promiscuous mode [ 449.476294][ T3635] veth1_vlan: entered promiscuous mode [ 450.273101][ T3635] veth0_macvtap: entered promiscuous mode [ 450.319008][ T29] audit: type=1400 audit(449.870:214): avc: denied { write } for pid=3773 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.432128][ T3635] veth1_macvtap: entered promiscuous mode [ 451.009898][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.011749][ T25] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.012652][ T25] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.013420][ T25] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.746617][ T29] audit: type=1400 audit(452.300:215): avc: denied { read write } for pid=3635 comm="syz-executor" name="loop2" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.782979][ T29] audit: type=1400 audit(452.320:216): avc: denied { open } for pid=3635 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.800480][ T29] audit: type=1400 audit(452.320:217): avc: denied { ioctl } for pid=3635 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=640 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.471963][ T29] audit: type=1400 audit(453.020:218): avc: denied { write } for pid=3779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.693191][ T3785] lo speed is unknown, defaulting to 1000 [ 453.934504][ T3785] lo speed is unknown, defaulting to 1000 [ 453.963409][ T3785] lo speed is unknown, defaulting to 1000 [ 454.135505][ T3785] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 454.516911][ T3785] lo speed is unknown, defaulting to 1000 [ 454.608940][ T3785] lo speed is unknown, defaulting to 1000 [ 454.671642][ T3785] lo speed is unknown, defaulting to 1000 [ 455.763864][ T29] audit: type=1400 audit(455.310:219): avc: denied { write } for pid=3792 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.162243][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.172402][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.741208][ T3742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.838493][ T29] audit: type=1400 audit(457.390:220): avc: denied { mount } for pid=3798 comm="syz.2.31" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 457.914807][ T3742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.482901][ T29] audit: type=1400 audit(458.040:221): avc: denied { unmount } for pid=3635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 459.290531][ T29] audit: type=1400 audit(458.840:222): avc: denied { write } for pid=3802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.300340][ T3808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.307202][ T3808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.066567][ T29] audit: type=1400 audit(460.620:223): avc: denied { write } for pid=3810 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.830170][ T3819] dlm: dlm user daemon left 1 lockspaces [ 465.017690][ T29] audit: type=1400 audit(464.560:224): avc: denied { unmount } for pid=3635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 465.541238][ T3742] hsr_slave_0: entered promiscuous mode [ 465.554998][ T3742] hsr_slave_1: entered promiscuous mode [ 465.599037][ T3742] debugfs: 'hsr0' already exists in 'hsr' [ 465.601126][ T3742] Cannot create hsr debugfs directory [ 469.150546][ T3833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.183928][ T3833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.210302][ T29] audit: type=1400 audit(470.740:225): avc: denied { write } for pid=3836 comm="syz.2.36" name="subsystems" dev="configfs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 471.391151][ T29] audit: type=1400 audit(470.950:226): avc: denied { write } for pid=3836 comm="syz.2.36" name="namespaces" dev="configfs" ino=5616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 471.405573][ T3837] nvmet: adding nsid 1 to subsystem testnqn [ 471.459227][ T3742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.509725][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.542387][ T3742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.631732][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.654979][ T3742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 471.778775][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.803099][ T29] audit: type=1400 audit(471.360:227): avc: denied { write } for pid=3836 comm="syz.2.36" name="ports" dev="configfs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 471.814756][ T3742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 471.962454][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.966583][ T29] audit: type=1400 audit(471.510:228): avc: denied { write } for pid=3836 comm="syz.2.36" name="subsystems" dev="configfs" ino=5624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 471.971248][ T29] audit: type=1400 audit(471.530:229): avc: denied { create } for pid=3836 comm="syz.2.36" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 472.005173][ T29] audit: type=1400 audit(471.550:230): avc: denied { write } for pid=3836 comm="syz.2.36" name="subsystems" dev="configfs" ino=5624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 473.480592][ T819] Unable to handle kernel paging request at virtual address dfff80000000001c [ 473.480947][ T819] KASAN: null-ptr-deref in range [0x00000000000000e0-0x00000000000000e7] [ 473.481047][ T819] Mem abort info: [ 473.481111][ T819] ESR = 0x0000000096000005 [ 473.481235][ T819] EC = 0x25: DABT (current EL), IL = 32 bits [ 473.481325][ T819] SET = 0, FnV = 0 [ 473.481394][ T819] EA = 0, S1PTW = 0 [ 473.481486][ T819] FSC = 0x05: level 1 translation fault [ 473.481571][ T819] Data abort info: [ 473.481638][ T819] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 473.481722][ T819] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 473.481801][ T819] GCS = 0, Overlay = 0, DirtyBit = 0 [ 473.481943][ T819] [dfff80000000001c] address between user and kernel address ranges [ 473.483525][ T819] Internal error: Oops: 0000000096000005 [#1] SMP [ 473.488376][ T819] Modules linked in: [ 473.488857][ T819] CPU: 1 UID: 0 PID: 819 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT [ 473.489357][ T819] Tainted: [W]=WARN [ 473.489718][ T819] Hardware name: linux,dummy-virt (DT) [ 473.490328][ T819] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 473.490916][ T819] pstate: 100000c5 (nzcV daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 473.491297][ T819] pc : kasan_byte_accessible+0xc/0x20 [ 473.491622][ T819] lr : __kasan_check_byte+0x20/0x74 [ 473.491948][ T819] sp : ffff80008ee47960 [ 473.492211][ T819] x29: ffff80008ee47960 x28: ffff8000877c7ee0 x27: ffff8000877ca000 [ 473.492825][ T819] x26: 0000000000000000 x25: 0000000000000000 x24: ffff8000814fa524 [ 473.493427][ T819] x23: 0000000000000001 x22: ffff8000859d5c58 x21: ffff8000859d5c58 [ 473.494023][ T819] x20: 00000000000000e0 x19: 00000000000000e0 x18: 0000000000000000 [ 473.494684][ T819] x17: 1fffe000031c6093 x16: 1fffe000025a5093 x15: ffff8000877cb698 [ 473.495347][ T819] x14: ffff00000e6a1b80 x13: ffff800089ec65e8 x12: ffff600006a6baa1 [ 473.495985][ T819] x11: 1fffe00006a6baa0 x10: ffff600006a6baa0 x9 : dfff800000000000 [ 473.496774][ T819] x8 : ffff8000877c7000 x7 : ffff80008ee47a50 x6 : ffff8000814fa524 [ 473.497449][ T819] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 1fffe0000d7f5b5d [ 473.498064][ T819] x2 : 1fffe00002956001 x1 : dfff800000000000 x0 : 000000000000001c [ 473.498633][ T819] Call trace: [ 473.498868][ T819] kasan_byte_accessible+0xc/0x20 (P) [ 473.499252][ T819] lock_acquire+0x248/0x44c [ 473.499565][ T819] _raw_spin_lock_irqsave+0x58/0x80 [ 473.499902][ T819] blk_mq_quiesce_queue+0x24/0x160 [ 473.500251][ T819] nvme_quiesce_admin_queue+0x64/0xe0 [ 473.500591][ T819] nvme_loop_reset_ctrl_work+0x80/0x2f4 [ 473.500987][ T819] process_one_work+0x830/0x1c00 [ 473.501325][ T819] worker_thread+0x42c/0xc90 [ 473.501627][ T819] kthread+0x2ec/0x384 [ 473.501911][ T819] ret_from_fork+0x10/0x20 [ 473.502634][ T819] Code: d503201f d343fc00 d2d00001 f2fbffe1 (38616800) [ 473.504084][ T819] ---[ end trace 0000000000000000 ]--- [ 473.505121][ T819] Kernel panic - not syncing: Oops: Fatal exception [ 473.506075][ T819] SMP: stopping secondary CPUs [ 473.507836][ T819] Kernel Offset: disabled [ 473.508303][ T819] CPU features: 0x0,40400002,00340020,00100000,0800821b [ 473.509037][ T819] Memory Limit: none [ 473.510629][ T819] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:10:46 Registers: info registers vcpu 0 CPU#0 PC=ffff8000803b47ac X00=0000000000000000 X01=0000000000000000 X02=0000000000000003 X03=dfff800000000000 X04=1fffe000030623a1 X05=ffff80008db96620 X06=ffff700011b72cc4 X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011b72cc4 X11=1ffff00011b72cc4 X12=ffff700011b72cc5 X13=1fffe0000d7efa5d X14=1fffe0000d7efa4d X15=1850514944a4fba6 X16=ffff00006bf7cf10 X17=dba133e3a1df86a9 X18=ffff00006bf7d268 X19=ffff8000877ca000 X20=ffff00006bf8f0c0 X21=ffff00006bf8f120 X22=ffff00006bf8f108 X23=0000000000000088 X24=ffff0000104e4420 X25=ffff0000104e3a10 X26=ffff00006bf8f120 X27=0000000000000000 X28=1fffe0000209c74c X29=ffff80008db966a0 X30=ffff8000802f5000 SP=ffff80008db966a0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081ec5184 X00=0000000000000002 X01=0000000000000007 X02=0000000000000000 X03=1fffe00001db0632 X04=0000000000000018 X05=1ffff00011dc8e3e X06=ffff700011dc8de0 X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011dc8de0 X11=1ffff00011dc8de0 X12=ffff700011dc8de1 X13=205d393138542020 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff00000ed83080 X20=ffff80008db8d018 X21=ffff8000881215c0 X22=0000000000000072 X23=dfff800000000000 X24=ffff00000f244048 X25=0000000000000003 X26=dfff800000000000 X27=ffff8000881217e0 X28=ffff80008ee471c0 X29=ffff80008ee46f00 X30=ffff800081ec593c SP=ffff80008ee46f00 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000