last executing test programs: 5.144274622s ago: executing program 0 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="5000000001020100000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001"], 0x50}}, 0x4800) 4.357061947s ago: executing program 0 (id=969): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x20000100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0xf, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3503, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 3.68042562s ago: executing program 1 (id=970): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(r0, 0xfffffffffffffff5, 0x1) 3.195977042s ago: executing program 0 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r0, &(0x7f0000000600)='byd', 0x3) 2.867003544s ago: executing program 1 (id=972): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x1, 0x0, 0x1, 0x6, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x800000000000009, 0x3]}}) 2.276380908s ago: executing program 0 (id=973): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x280000a, 0x12, 0xffffffffffffffff, 0x3f756000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0xeac0) 1.7702587s ago: executing program 1 (id=974): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000700)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d41000000000000000290000000200000f", 0x30) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.606578241s ago: executing program 0 (id=975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 944.961755ms ago: executing program 1 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000004900010028bd7000fbdbdf250a", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044044) 936.349865ms ago: executing program 0 (id=977): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) read(r1, &(0x7f00000001c0)=""/4096, 0x1000) r2 = syz_open_pts(r1, 0x43902) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x2, 0x8, 0x405, 0x7, 0x5, "d20600"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) 569.865027ms ago: executing program 1 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xd, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x850) 0s ago: executing program 1 (id=979): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x180062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x16, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc14ad3300", [0x2002, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): [ 186.733395][ T29] audit: type=1400 audit(186.380:79): avc: denied { write } for pid=3352 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.003781][ T29] audit: type=1400 audit(188.640:80): avc: denied { write } for pid=3358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.385221][ T29] audit: type=1400 audit(190.040:81): avc: denied { write } for pid=3364 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.420656][ T29] audit: type=1400 audit(191.070:82): avc: denied { write } for pid=3368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.485209][ T29] audit: type=1400 audit(192.140:83): avc: denied { write } for pid=3372 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:40277' (ED25519) to the list of known hosts. [ 228.894726][ T29] audit: type=1400 audit(228.550:84): avc: denied { name_bind } for pid=3380 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 229.287916][ T29] audit: type=1400 audit(228.940:85): avc: denied { execute } for pid=3381 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 229.298778][ T29] audit: type=1400 audit(228.950:86): avc: denied { execute_no_trans } for pid=3381 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 236.569725][ T29] audit: type=1400 audit(236.220:87): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 236.635210][ T29] audit: type=1400 audit(236.280:88): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 236.674175][ T3381] cgroup: Unknown subsys name 'net' [ 236.730497][ T29] audit: type=1400 audit(236.380:89): avc: denied { unmount } for pid=3381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 237.108702][ T3381] cgroup: Unknown subsys name 'cpuset' [ 237.220819][ T3381] cgroup: Unknown subsys name 'rlimit' [ 237.683932][ T29] audit: type=1400 audit(237.330:90): avc: denied { setattr } for pid=3381 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.688672][ T29] audit: type=1400 audit(237.340:91): avc: denied { mounton } for pid=3381 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 237.696264][ T29] audit: type=1400 audit(237.340:92): avc: denied { mount } for pid=3381 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 238.444788][ T3384] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 238.450429][ T29] audit: type=1400 audit(238.100:93): avc: denied { relabelto } for pid=3384 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 238.457468][ T29] audit: type=1400 audit(238.110:94): avc: denied { write } for pid=3384 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 238.594603][ T29] audit: type=1400 audit(238.240:95): avc: denied { read } for pid=3381 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 238.602713][ T29] audit: type=1400 audit(238.250:96): avc: denied { open } for pid=3381 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 238.643017][ T3381] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 271.763321][ T29] audit: type=1400 audit(271.410:97): avc: denied { execmem } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 271.819274][ T29] audit: type=1400 audit(271.470:98): avc: denied { read } for pid=3387 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.827334][ T29] audit: type=1400 audit(271.480:99): avc: denied { open } for pid=3387 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.843532][ T29] audit: type=1400 audit(271.490:100): avc: denied { mounton } for pid=3387 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 271.895688][ T29] audit: type=1400 audit(271.540:101): avc: denied { module_request } for pid=3387 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 272.205653][ T29] audit: type=1400 audit(271.860:102): avc: denied { sys_module } for pid=3389 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 278.660268][ T3389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.710887][ T3389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.468402][ T3387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.489421][ T3387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.715023][ T3387] hsr_slave_0: entered promiscuous mode [ 282.735901][ T3387] hsr_slave_1: entered promiscuous mode [ 282.947970][ T3389] hsr_slave_0: entered promiscuous mode [ 282.960394][ T3389] hsr_slave_1: entered promiscuous mode [ 282.968112][ T3389] debugfs: 'hsr0' already exists in 'hsr' [ 282.969474][ T3389] Cannot create hsr debugfs directory [ 286.487615][ T29] audit: type=1400 audit(286.140:103): avc: denied { create } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.507373][ T29] audit: type=1400 audit(286.160:104): avc: denied { write } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.550112][ T29] audit: type=1400 audit(286.190:105): avc: denied { read } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.661252][ T3389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.885912][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.920665][ T3389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.020706][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.052815][ T3389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.082756][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.162815][ T3389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.185363][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.724428][ T3387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.779595][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.798325][ T3387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.848522][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.884611][ T3387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.936915][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.010196][ T3387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.088340][ T3387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.436418][ T3389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.460004][ T3387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.148276][ T3389] veth0_vlan: entered promiscuous mode [ 300.226688][ T3389] veth1_vlan: entered promiscuous mode [ 300.472930][ T3387] veth0_vlan: entered promiscuous mode [ 300.607729][ T3387] veth1_vlan: entered promiscuous mode [ 300.775668][ T3389] veth0_macvtap: entered promiscuous mode [ 300.856994][ T3389] veth1_macvtap: entered promiscuous mode [ 301.180026][ T3387] veth0_macvtap: entered promiscuous mode [ 301.320349][ T3387] veth1_macvtap: entered promiscuous mode [ 301.506732][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.642807][ T1574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.644498][ T1574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.648317][ T1574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.184550][ T29] audit: type=1400 audit(301.830:106): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/syzkaller.51gGIq/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 302.194776][ T29] audit: type=1400 audit(301.850:107): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.214515][ T29] audit: type=1400 audit(301.870:108): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/syzkaller.51gGIq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 302.222367][ T26] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.267795][ T29] audit: type=1400 audit(301.920:109): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 302.276375][ T1017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.285244][ T1574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.290212][ T1574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.313708][ T29] audit: type=1400 audit(301.960:110): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/syzkaller.51gGIq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 302.324599][ T29] audit: type=1400 audit(301.980:111): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/syzkaller.51gGIq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 302.392513][ T29] audit: type=1400 audit(302.040:112): avc: denied { unmount } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 302.420719][ T29] audit: type=1400 audit(302.070:113): avc: denied { mounton } for pid=3389 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 302.445591][ T29] audit: type=1400 audit(302.100:114): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="gadgetfs" ino=4475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 302.559904][ T29] audit: type=1400 audit(302.210:115): avc: denied { mount } for pid=3389 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 303.397254][ T3389] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 307.530724][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 307.538896][ T29] audit: type=1400 audit(307.180:138): avc: denied { read write } for pid=3545 comm="syz.0.5" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 307.562327][ T29] audit: type=1400 audit(307.190:139): avc: denied { open } for pid=3545 comm="syz.0.5" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 307.742390][ T3383] hid-generic 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 308.327717][ T29] audit: type=1400 audit(307.970:140): avc: denied { create } for pid=3548 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.347152][ T29] audit: type=1400 audit(308.000:141): avc: denied { setopt } for pid=3548 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.390912][ T29] audit: type=1400 audit(308.040:142): avc: denied { read write } for pid=3548 comm="syz.0.6" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.486805][ T29] audit: type=1400 audit(308.130:143): avc: denied { unmount } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 308.489280][ T29] audit: type=1400 audit(308.140:144): avc: denied { open } for pid=3548 comm="syz.0.6" path="/dev/raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.563172][ T29] audit: type=1400 audit(308.210:145): avc: denied { ioctl } for pid=3548 comm="syz.0.6" path="/dev/raw-gadget" dev="devtmpfs" ino=704 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.729559][ T3547] fido_id[3547]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 309.004379][ T805] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 309.244187][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 309.608146][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 309.610404][ T805] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 309.674893][ T805] usb 1-1: config 14 has an invalid interface number: 57 but max is 0 [ 309.675859][ T805] usb 1-1: config 14 has no interface number 0 [ 309.676954][ T805] usb 1-1: config 14 interface 57 has no altsetting 0 [ 309.798949][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.799857][ T805] usb 1-1: Product: syz [ 309.800445][ T805] usb 1-1: Manufacturer: syz [ 309.800565][ T805] usb 1-1: SerialNumber: syz [ 310.809696][ T29] audit: type=1400 audit(310.460:146): avc: denied { allowed } for pid=3548 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 311.035092][ T29] audit: type=1400 audit(310.680:147): avc: denied { create } for pid=3548 comm="syz.0.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 312.548874][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 312.553880][ T29] audit: type=1400 audit(312.180:154): avc: denied { append } for pid=3548 comm="syz.0.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 313.211158][ T805] legousbtower 1-1:14.57: interrupt endpoints not found [ 313.415081][ T805] usb 1-1: USB disconnect, device number 2 [ 313.513277][ T29] audit: type=1400 audit(313.160:155): avc: denied { ioctl } for pid=3559 comm="syz.1.9" path="socket:[3577]" dev="sockfs" ino=3577 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 313.529253][ T29] audit: type=1400 audit(313.180:156): avc: denied { bind } for pid=3559 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 313.556405][ T29] audit: type=1400 audit(313.210:157): avc: denied { connect } for pid=3559 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 313.566707][ T29] audit: type=1400 audit(313.210:158): avc: denied { write } for pid=3559 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.765061][ T29] audit: type=1400 audit(314.420:159): avc: denied { ioctl } for pid=3565 comm="syz.1.11" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3593 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 315.473640][ T29] audit: type=1400 audit(315.120:160): avc: denied { setattr } for pid=3565 comm="syz.1.11" name="[userfaultfd]" dev="anon_inodefs" ino=3593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 316.792961][ T29] audit: type=1400 audit(316.430:161): avc: denied { name_bind } for pid=3568 comm="syz.0.12" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 316.807756][ T29] audit: type=1400 audit(316.460:162): avc: denied { node_bind } for pid=3568 comm="syz.0.12" saddr=127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 317.750531][ T29] audit: type=1400 audit(317.400:163): avc: denied { create } for pid=3571 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 317.960705][ T29] audit: type=1400 audit(317.610:164): avc: denied { read write } for pid=3387 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.969210][ T29] audit: type=1400 audit(317.620:165): avc: denied { open } for pid=3387 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.978632][ T29] audit: type=1400 audit(317.630:166): avc: denied { ioctl } for pid=3387 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.336977][ T29] audit: type=1400 audit(317.990:167): avc: denied { create } for pid=3573 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 318.381025][ T29] audit: type=1400 audit(318.030:168): avc: denied { create } for pid=3573 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.408588][ T29] audit: type=1400 audit(318.060:169): avc: denied { bind } for pid=3573 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.474973][ T29] audit: type=1400 audit(318.130:170): avc: denied { listen } for pid=3573 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.479858][ T29] audit: type=1400 audit(318.130:171): avc: denied { connect } for pid=3573 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.540102][ T29] audit: type=1400 audit(318.190:172): avc: denied { read } for pid=3573 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.810172][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 323.823406][ T29] audit: type=1400 audit(323.460:176): avc: denied { create } for pid=3590 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 323.857206][ T29] audit: type=1400 audit(323.510:177): avc: denied { setopt } for pid=3590 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 323.892974][ T29] audit: type=1400 audit(323.540:178): avc: denied { connect } for pid=3590 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.407284][ T3593] fuse: Bad value for 'fd' [ 326.344646][ T31] atkbd serio0: keyboard reset failed on [ 331.046084][ T29] audit: type=1400 audit(330.690:179): avc: denied { read } for pid=3615 comm="syz.1.31" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.078513][ T29] audit: type=1400 audit(330.710:180): avc: denied { open } for pid=3615 comm="syz.1.31" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.213634][ T29] audit: type=1400 audit(330.860:181): avc: denied { ioctl } for pid=3615 comm="syz.1.31" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.295084][ T29] audit: type=1400 audit(330.940:182): avc: denied { set_context_mgr } for pid=3615 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 331.469407][ T29] audit: type=1400 audit(331.120:183): avc: denied { map } for pid=3615 comm="syz.1.31" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.558371][ T3617] binder: 3615:3617 tried to acquire reference to desc 0, got 1 instead [ 331.609586][ T29] audit: type=1400 audit(331.260:184): avc: denied { call } for pid=3615 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 331.712600][ T29] audit: type=1400 audit(331.360:185): avc: denied { transfer } for pid=3615 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 331.816437][ T3617] binder: 3615:3617 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 331.817671][ T3617] binder: 3617 RLIMIT_NICE not set [ 331.855214][ T3617] binder: undelivered transaction 5, put_user failed [ 331.857357][ T3617] binder: 3615:3617 ioctl c0306201 20000680 returned -14 [ 331.899378][ T53] binder: undelivered TRANSACTION_COMPLETE [ 336.127403][ T3626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.141235][ T3626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.984129][ T29] audit: type=1400 audit(336.630:186): avc: denied { create } for pid=3627 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.082651][ T29] audit: type=1400 audit(336.730:187): avc: denied { sqpoll } for pid=3628 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 337.633883][ T29] audit: type=1400 audit(337.270:188): avc: denied { write } for pid=3627 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.166157][ T29] audit: type=1400 audit(345.810:189): avc: denied { bpf } for pid=3644 comm="syz.1.39" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.189211][ T29] audit: type=1400 audit(345.840:190): avc: denied { perfmon } for pid=3644 comm="syz.1.39" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.294637][ T29] audit: type=1400 audit(345.950:191): avc: denied { prog_run } for pid=3644 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.452819][ T3645] netlink: 104 bytes leftover after parsing attributes in process `syz.1.39'. [ 346.516990][ T29] audit: type=1400 audit(346.170:192): avc: denied { mounton } for pid=3646 comm="syz.0.40" path="/20/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 346.645179][ T3645] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 347.857347][ T29] audit: type=1400 audit(347.510:193): avc: denied { setopt } for pid=3652 comm="syz.1.42" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.880190][ T29] audit: type=1400 audit(347.520:194): avc: denied { create } for pid=3652 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.887630][ T29] audit: type=1400 audit(347.540:195): avc: denied { write } for pid=3652 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.900835][ T29] audit: type=1400 audit(347.550:196): avc: denied { nlmsg_write } for pid=3652 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.950148][ T29] audit: type=1400 audit(347.600:197): avc: denied { write } for pid=3652 comm="syz.1.42" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.218487][ T3656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43'. [ 350.640729][ T3661] Zero length message leads to an empty skb [ 355.300264][ T29] audit: type=1400 audit(354.950:198): avc: denied { ioctl } for pid=3670 comm="syz.0.49" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 355.463908][ T29] audit: type=1400 audit(355.110:199): avc: denied { map_create } for pid=3673 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 358.346554][ T29] audit: type=1400 audit(358.000:200): avc: denied { create } for pid=3679 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 358.358054][ T29] audit: type=1400 audit(358.010:201): avc: denied { bind } for pid=3679 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 358.369507][ T29] audit: type=1400 audit(358.020:202): avc: denied { accept } for pid=3679 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 358.379229][ T29] audit: type=1400 audit(358.030:203): avc: denied { write } for pid=3679 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 359.695168][ T29] audit: type=1400 audit(359.350:204): avc: denied { bind } for pid=3686 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.612985][ T29] audit: type=1400 audit(360.260:205): avc: denied { block_suspend } for pid=3683 comm="syz.0.54" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.003671][ T29] audit: type=1400 audit(360.630:206): avc: denied { name_bind } for pid=3683 comm="syz.0.54" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 362.679298][ T29] audit: type=1326 audit(362.330:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 362.685322][ T29] audit: type=1326 audit(362.340:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 362.692025][ T29] audit: type=1326 audit(362.340:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 362.697340][ T29] audit: type=1326 audit(362.350:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 362.702323][ T29] audit: type=1326 audit(362.350:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000b7 syscall=13 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 362.708432][ T29] audit: type=1326 audit(362.360:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 362.712583][ T29] audit: type=1326 audit(362.360:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 363.450198][ T3696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 363.473450][ T3696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 363.874230][ T29] audit: type=1400 audit(363.530:214): avc: denied { read } for pid=3697 comm="syz.1.59" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 363.930924][ T3698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.937940][ T3698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.705819][ T3702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.720376][ T3702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.450937][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 370.455780][ T29] audit: type=1400 audit(370.100:217): avc: denied { create } for pid=3712 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.740368][ T29] audit: type=1400 audit(370.390:218): avc: denied { write } for pid=3712 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 370.815414][ T29] audit: type=1400 audit(370.460:219): avc: denied { setopt } for pid=3712 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 371.875258][ T29] audit: type=1400 audit(371.520:220): avc: denied { watch } for pid=3717 comm="syz.1.67" path="/proc/97" dev="proc" ino=4869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 374.314269][ T29] audit: type=1400 audit(373.960:221): avc: denied { write } for pid=3722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.315297][ T29] audit: type=1400 audit(373.970:222): avc: denied { create } for pid=3722 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.323466][ T29] audit: type=1400 audit(373.970:223): avc: denied { write open } for pid=3722 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=1199 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.372974][ T29] audit: type=1400 audit(374.020:224): avc: denied { append } for pid=3722 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1199 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.437132][ T29] audit: type=1400 audit(374.090:225): avc: denied { getattr } for pid=3722 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.149476][ T29] audit: type=1400 audit(374.800:226): avc: denied { read } for pid=3724 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.856436][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 376.263907][ T29] audit: type=1400 audit(375.900:227): avc: denied { write } for pid=3728 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.270339][ T29] audit: type=1400 audit(375.920:228): avc: denied { unlink } for pid=3728 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1199 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.932831][ T29] audit: type=1400 audit(376.580:229): avc: denied { watch watch_reads } for pid=3735 comm="syz.0.73" path="pipe:[966]" dev="pipefs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 377.044727][ T29] audit: type=1400 audit(376.700:230): avc: denied { name_bind } for pid=3732 comm="syz.1.72" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 377.304435][ T29] audit: type=1400 audit(376.960:231): avc: denied { cmd } for pid=3735 comm="iou-wrk-3736" path="socket:[3892]" dev="sockfs" ino=3892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 382.850643][ T29] audit: type=1400 audit(382.500:232): avc: denied { ioctl } for pid=3750 comm="syz.1.76" path="socket:[3913]" dev="sockfs" ino=3913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 384.826274][ T29] audit: type=1400 audit(384.480:233): avc: denied { read } for pid=3758 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.626985][ T3532] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 385.812851][ T3532] usb 1-1: Using ep0 maxpacket: 8 [ 385.823449][ T3532] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.844487][ T3532] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 385.845216][ T3532] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 385.845996][ T3532] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.846408][ T3532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.085738][ T3532] usbtmc 1-1:16.0: bulk endpoints not found [ 387.577161][ T29] audit: type=1400 audit(387.230:234): avc: denied { name_bind } for pid=3764 comm="syz.1.81" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 389.919182][ T3451] usb 1-1: USB disconnect, device number 3 [ 391.203326][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.223914][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.765190][ T29] audit: type=1400 audit(395.410:235): avc: denied { bind } for pid=3789 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.845904][ T29] audit: type=1400 audit(395.490:236): avc: denied { setopt } for pid=3789 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.995761][ T3790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.045171][ T3790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.075553][ T3790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 396.196788][ T29] audit: type=1400 audit(395.850:237): avc: denied { override_creds } for pid=3789 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 396.208490][ T29] audit: type=1400 audit(395.860:238): avc: denied { cmd } for pid=3789 comm="syz.1.90" path="/dev/ublk-control" dev="devtmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 397.424360][ T29] audit: type=1400 audit(397.070:239): avc: denied { getopt } for pid=3796 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.434016][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 398.709278][ T11] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.719657][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.725217][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.727510][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.729955][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.786046][ T11] usb 1-1: config 0 descriptor?? [ 399.046566][ T29] audit: type=1400 audit(398.700:240): avc: denied { write } for pid=3800 comm="syz.0.95" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 399.049351][ T29] audit: type=1400 audit(398.700:241): avc: denied { open } for pid=3800 comm="syz.0.95" path="/dev/mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 399.067216][ T29] audit: type=1400 audit(398.720:242): avc: denied { read write } for pid=3800 comm="syz.0.95" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 399.069540][ T29] audit: type=1400 audit(398.720:243): avc: denied { open } for pid=3800 comm="syz.0.95" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 399.090969][ T29] audit: type=1400 audit(398.740:244): avc: denied { ioctl } for pid=3800 comm="syz.0.95" path="/dev/mtd0" dev="devtmpfs" ino=683 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 404.210734][ T11] usbhid 1-1:0.0: can't add hid device: -32 [ 404.216765][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 405.954508][ T29] audit: type=1400 audit(405.590:245): avc: denied { map_read map_write } for pid=3815 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.785443][ T29] audit: type=1400 audit(406.440:246): avc: denied { write } for pid=3817 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 410.108881][ T3451] usb 1-1: USB disconnect, device number 4 [ 413.996761][ T3831] syzkaller0: entered promiscuous mode [ 414.007057][ T3831] syzkaller0: entered allmulticast mode [ 414.049301][ T3831] 0: reclassify loop, rule prio 0, protocol 700 [ 415.047277][ T3834] syzkaller0: entered promiscuous mode [ 415.049522][ T3834] syzkaller0: entered allmulticast mode [ 432.604583][ T11] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 437.865773][ T11] usb 1-1: device descriptor read/64, error -110 [ 440.579476][ T3901] netlink: 92 bytes leftover after parsing attributes in process `syz.0.134'. [ 452.043453][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 452.294532][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 452.295104][ T31] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 452.324035][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 452.389647][ T31] usb 1-1: string descriptor 0 read error: -22 [ 452.391035][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.097237][ T31] usbhid 1-1:1.0: can't add hid device: -32 [ 453.099232][ T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 455.962448][ T53] usb 1-1: USB disconnect, device number 7 [ 457.659697][ T29] audit: type=1400 audit(457.310:247): avc: denied { create } for pid=3949 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 457.669213][ T29] audit: type=1400 audit(457.320:248): avc: denied { write } for pid=3949 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 457.884094][ T29] audit: type=1400 audit(457.520:249): avc: denied { read write } for pid=3946 comm="syz.0.154" name="vhost-vsock" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 457.910784][ T29] audit: type=1400 audit(457.560:250): avc: denied { open } for pid=3946 comm="syz.0.154" path="/dev/vhost-vsock" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 457.978394][ T29] audit: type=1400 audit(457.630:251): avc: denied { ioctl } for pid=3946 comm="syz.0.154" path="/dev/vhost-vsock" dev="devtmpfs" ino=717 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 458.439366][ T3676] hid-generic 0005:057E:0306.0002: unknown main item tag 0x0 [ 458.486644][ T3676] hid-generic 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 458.684252][ T11] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 459.003689][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 459.114541][ T11] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 459.191814][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.192314][ T11] usb 1-1: Product: syz [ 459.195394][ T11] usb 1-1: Manufacturer: syz [ 459.196001][ T11] usb 1-1: SerialNumber: syz [ 459.734903][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.735996][ T11] usb 1-1: MIDIStreaming interface descriptor not found [ 460.859683][ T11] usb 1-1: USB disconnect, device number 8 [ 461.302383][ T3957] fido_id[3957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 463.233482][ T3970] fuse: Bad value for 'fd' [ 463.533127][ T3973] fuse: Bad value for 'fd' [ 464.406234][ T3975] capability: warning: `syz.1.164' uses deprecated v2 capabilities in a way that may be insecure [ 464.915064][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 465.145743][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 465.317124][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 465.318577][ T9] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 465.529372][ T9] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 465.530017][ T9] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 465.530684][ T9] usb 1-1: config 14 has no interface number 0 [ 465.530958][ T9] usb 1-1: config 14 has no interface number 1 [ 465.543557][ T9] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 465.544378][ T9] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 465.544663][ T9] usb 1-1: config 14 interface 57 has no altsetting 0 [ 465.544926][ T9] usb 1-1: config 14 interface 228 has no altsetting 0 [ 465.725751][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.726509][ T9] usb 1-1: Product: syz [ 465.727042][ T9] usb 1-1: Manufacturer: syz [ 465.727208][ T9] usb 1-1: SerialNumber: syz [ 466.587206][ T9] legousbtower 1-1:14.57: interrupt endpoints not found [ 467.181097][ T3981] udevd[3981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.898204][ T3986] fuse: Bad value for 'fd' [ 467.920877][ T9] legousbtower 1-1:14.228: interrupt endpoints not found [ 468.140123][ T29] audit: type=1400 audit(467.790:252): avc: denied { accept } for pid=3976 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.686705][ T29] audit: type=1400 audit(474.340:253): avc: denied { create } for pid=4002 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.746710][ T29] audit: type=1400 audit(474.400:254): avc: denied { write } for pid=4002 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.767374][ T29] audit: type=1400 audit(474.410:255): avc: denied { nlmsg_write } for pid=4002 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.796302][ T4003] netlink: 104 bytes leftover after parsing attributes in process `syz.1.175'. [ 475.498272][ T4006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.547978][ T4006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.586578][ T4008] netlink: 'syz.1.177': attribute type 15 has an invalid length. [ 476.588864][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'. [ 479.454457][ T3676] usb 1-1: USB disconnect, device number 9 [ 486.534694][ T4037] syzkaller0: entered promiscuous mode [ 486.538194][ T4037] syzkaller0: entered allmulticast mode [ 494.243728][ T29] audit: type=1400 audit(493.890:256): avc: denied { ioctl } for pid=4073 comm="syz.0.199" path="socket:[6524]" dev="sockfs" ino=6524 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 494.249579][ T4074] syzkaller1: entered allmulticast mode [ 495.848476][ T3451] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 496.065483][ T3451] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.089648][ T3451] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.090725][ T3451] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.090993][ T3451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.722566][ T3451] usb 1-1: usb_control_msg returned -32 [ 496.723096][ T3451] usbtmc 1-1:16.0: can't read capabilities [ 497.050377][ T3451] usb 1-1: USB disconnect, device number 10 [ 501.348685][ T29] audit: type=1400 audit(501.000:257): avc: denied { write } for pid=4096 comm="syz.0.208" name="event0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 501.359088][ T29] audit: type=1400 audit(501.010:258): avc: denied { open } for pid=4096 comm="syz.0.208" path="/dev/input/event0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 506.082684][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 506.308679][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 506.319262][ T31] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 506.369407][ T31] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.370211][ T31] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.374793][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 506.375029][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.409491][ T31] usb 1-1: config 0 descriptor?? [ 506.960533][ T31] hid-generic 0003:6666:8804.0003: unknown main item tag 0x2 [ 506.961172][ T31] hid-generic 0003:6666:8804.0003: item fetching failed at offset 4/5 [ 506.974011][ T31] hid-generic 0003:6666:8804.0003: probe with driver hid-generic failed with error -22 [ 507.145878][ T29] audit: type=1400 audit(506.800:259): avc: denied { ioctl } for pid=4096 comm="syz.0.208" path="/dev/input/event0" dev="devtmpfs" ino=750 ioctlcmd=0x4506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 507.168775][ T31] usb 1-1: USB disconnect, device number 11 [ 509.063850][ T29] audit: type=1400 audit(508.710:260): avc: denied { name_bind } for pid=4104 comm="syz.1.209" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 509.857789][ T29] audit: type=1400 audit(509.510:261): avc: denied { read } for pid=4106 comm="syz.1.210" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 511.233963][ T3532] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 511.429932][ T29] audit: type=1400 audit(511.080:262): avc: denied { read write } for pid=4114 comm="syz.1.214" name="vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 511.438842][ T29] audit: type=1400 audit(511.080:263): avc: denied { open } for pid=4114 comm="syz.1.214" path="/dev/vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 511.460643][ T3532] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.488116][ T3532] usb 1-1: config 0 has no interfaces? [ 511.489290][ T3532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.537779][ T4115] syzkaller0: entered promiscuous mode [ 511.563156][ T4115] syzkaller0: entered allmulticast mode [ 511.590542][ T3532] usb 1-1: config 0 descriptor?? [ 511.925517][ T4113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.945298][ T4113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.172692][ T3676] usb 1-1: USB disconnect, device number 12 [ 516.333170][ T29] audit: type=1400 audit(515.980:264): avc: denied { append } for pid=4133 comm="syz.1.221" name="001" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 518.540529][ T29] audit: type=1400 audit(518.190:265): avc: denied { node_bind } for pid=4141 comm="syz.0.224" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 522.467139][ T4153] gre1: entered promiscuous mode [ 522.468394][ T4153] gre1: entered allmulticast mode [ 525.794444][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.824116][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.165702][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.218777][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.437665][ T29] audit: type=1400 audit(527.090:266): avc: denied { create } for pid=4160 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.120791][ T4169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4169 comm=syz.1.231 [ 528.130403][ T3676] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 528.157580][ T3676] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 528.159100][ T3676] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 528.159415][ T3676] hid-generic 0005:0010:10000.0004: item fetching failed at offset 8/37 [ 528.185873][ T3676] hid-generic 0005:0010:10000.0004: probe with driver hid-generic failed with error -22 [ 528.495051][ T29] audit: type=1400 audit(528.140:267): avc: denied { mount } for pid=4170 comm="syz.0.233" name="/" dev="ramfs" ino=5572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 529.423548][ T29] audit: type=1400 audit(529.070:268): avc: denied { ioctl } for pid=4175 comm="syz.0.236" path="socket:[5579]" dev="sockfs" ino=5579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 529.430202][ T29] audit: type=1400 audit(529.080:269): avc: denied { bind } for pid=4175 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 535.619380][ T4203] netlink: 132 bytes leftover after parsing attributes in process `syz.0.245'. [ 536.133737][ T3676] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 536.362094][ T3676] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 536.397183][ T3676] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 536.399490][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 536.403366][ T3676] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 536.405378][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 536.407064][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 536.420507][ T3676] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 536.423543][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 536.425261][ T3676] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 536.426905][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 536.428783][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 536.450625][ T3676] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 536.453838][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 536.455969][ T3676] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 536.465192][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 536.468458][ T3676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 536.528878][ T3676] usb 1-1: string descriptor 0 read error: -22 [ 536.533137][ T3676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.805028][ T3676] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 542.479355][ T805] usb 1-1: USB disconnect, device number 13 [ 543.590950][ T29] audit: type=1400 audit(543.240:270): avc: denied { create } for pid=4221 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 543.638965][ T29] audit: type=1400 audit(543.290:271): avc: denied { sys_admin } for pid=4221 comm="syz.1.252" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 545.234712][ T4232] syzkaller0: entered promiscuous mode [ 545.237040][ T4232] syzkaller0: entered allmulticast mode [ 546.215098][ T4238] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 546.406332][ T4238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.675237][ T29] audit: type=1400 audit(546.330:272): avc: denied { create } for pid=4236 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 546.679202][ T29] audit: type=1400 audit(546.330:273): avc: denied { write } for pid=4236 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 546.752518][ T4238] bond1 (unregistering): Released all slaves [ 549.466899][ T4249] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 553.107915][ T4269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.156387][ T4269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.359068][ T4271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.374995][ T4271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.652325][ T29] audit: type=1400 audit(557.300:274): avc: denied { read } for pid=4284 comm="syz.1.277" name="card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 557.654577][ T29] audit: type=1400 audit(557.300:275): avc: denied { open } for pid=4284 comm="syz.1.277" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 557.696779][ T29] audit: type=1400 audit(557.350:276): avc: denied { ioctl } for pid=4284 comm="syz.1.277" path="/dev/dri/card0" dev="devtmpfs" ino=618 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 557.908049][ T3532] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 558.172690][ T3532] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.173628][ T3532] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.40 [ 558.205120][ T3532] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 558.207697][ T3532] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 558.212321][ T3532] usb 1-1: config 1 interface 0 has no altsetting 0 [ 558.267845][ T3532] usb 1-1: string descriptor 0 read error: -22 [ 558.269347][ T3532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.336925][ T4285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 558.744216][ T3532] usbhid 1-1:1.0: can't add hid device: -71 [ 558.747548][ T3532] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 559.043919][ T3532] usb 1-1: USB disconnect, device number 14 [ 561.274503][ T29] audit: type=1400 audit(560.920:277): avc: denied { append } for pid=4297 comm="syz.0.282" name="card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 561.330068][ T29] audit: type=1400 audit(560.970:278): avc: denied { map } for pid=4297 comm="syz.0.282" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 561.343089][ T29] audit: type=1400 audit(560.980:279): avc: denied { execute } for pid=4297 comm="syz.0.282" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 562.651096][ T4307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'. [ 564.140636][ T29] audit: type=1400 audit(563.790:280): avc: denied { getopt } for pid=4316 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 564.296034][ T29] audit: type=1400 audit(563.950:281): avc: denied { setopt } for pid=4313 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.422903][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 565.663449][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 565.697771][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 565.740707][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 565.741024][ T31] usb 1-1: config 0 has no interface number 0 [ 565.812576][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.813578][ T31] usb 1-1: Product: syz [ 565.814648][ T31] usb 1-1: Manufacturer: syz [ 565.815735][ T31] usb 1-1: SerialNumber: syz [ 565.856796][ T31] usb 1-1: config 0 descriptor?? [ 566.496806][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 566.505759][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 572.366416][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 572.412801][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -110 [ 573.528535][ T4342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.567749][ T4342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.408549][ T29] audit: type=1400 audit(574.060:282): avc: denied { execute } for pid=4344 comm="syz.1.294" path=2F6D656D66643A76A6F5686A362C72AFE8102FEC67EDE36880B82110202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 574.818003][ T29] audit: type=1400 audit(574.470:283): avc: denied { write } for pid=4346 comm="syz.1.295" name="vlan0" dev="proc" ino=4026532885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 575.978979][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.018533][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.055503][ T29] audit: type=1400 audit(575.700:284): avc: denied { read } for pid=4350 comm="syz.1.297" name="mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 576.075528][ T29] audit: type=1400 audit(575.730:285): avc: denied { open } for pid=4350 comm="syz.1.297" path="/dev/input/mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 576.450513][ T29] audit: type=1400 audit(576.100:286): avc: denied { prog_load } for pid=4352 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 578.398161][ T4356] netlink: 'syz.1.299': attribute type 2 has an invalid length. [ 579.572685][ T3676] usb 1-1: USB disconnect, device number 15 [ 580.220170][ T29] audit: type=1400 audit(579.870:287): avc: denied { create } for pid=4368 comm="syz.1.305" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 580.255235][ T29] audit: type=1400 audit(579.870:288): avc: denied { map } for pid=4368 comm="syz.1.305" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 580.266862][ T29] audit: type=1400 audit(579.920:289): avc: denied { read write } for pid=4368 comm="syz.1.305" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 581.623570][ T4376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.626633][ T4376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.680148][ T29] audit: type=1400 audit(581.330:290): avc: denied { setattr } for pid=4375 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 581.809145][ T29] audit: type=1326 audit(581.460:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.1.308" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 581.809660][ T29] audit: type=1326 audit(581.460:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.1.308" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 581.824026][ T29] audit: type=1326 audit(581.480:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.1.308" exe="/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 581.914220][ T29] audit: type=1326 audit(581.560:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.1.308" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 581.930035][ T29] audit: type=1326 audit(581.560:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.1.308" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 581.939206][ T29] audit: type=1326 audit(581.580:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.1.308" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 586.957056][ T4394] bond0: (slave bond_slave_0): Releasing backup interface [ 587.156576][ T4394] bond0: (slave bond_slave_1): Releasing backup interface [ 587.360383][ T4394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 588.907812][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 588.923205][ T29] audit: type=1400 audit(588.560:341): avc: denied { ioctl } for pid=4401 comm="syz.1.315" path="socket:[5887]" dev="sockfs" ino=5887 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.007165][ T29] audit: type=1400 audit(588.660:342): avc: denied { setopt } for pid=4401 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 589.080277][ T4402] tc action pedit offset must be on 32 bit boundaries [ 589.715036][ T29] audit: type=1326 audit(589.360:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93979368 code=0x7ffc0000 [ 589.718991][ T29] audit: type=1326 audit(589.370:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93979368 code=0x7ffc0000 [ 589.740202][ T29] audit: type=1326 audit(589.390:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff93979368 code=0x7ffc0000 [ 589.746508][ T29] audit: type=1326 audit(589.390:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93979368 code=0x7ffc0000 [ 589.772380][ T29] audit: type=1326 audit(589.410:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=262 compat=0 ip=0xffff93979368 code=0x7ffc0000 [ 589.775607][ T29] audit: type=1326 audit(589.410:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93979368 code=0x7ffc0000 [ 589.784129][ T29] audit: type=1326 audit(589.420:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93979368 code=0x7ffc0000 [ 590.295009][ T29] audit: type=1400 audit(589.950:350): avc: denied { name_bind } for pid=4406 comm="syz.1.318" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 591.421021][ T4412] netlink: 104 bytes leftover after parsing attributes in process `syz.0.319'. [ 594.123443][ T4421] syz.1.323 uses obsolete (PF_INET,SOCK_PACKET) [ 604.487737][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.519004][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.696186][ T4473] netlink: 164 bytes leftover after parsing attributes in process `syz.1.341'. [ 610.920216][ T4494] netlink: 'syz.1.347': attribute type 2 has an invalid length. [ 613.284553][ T4501] syzkaller0: entered promiscuous mode [ 613.285402][ T4501] syzkaller0: entered allmulticast mode [ 614.808966][ T4506] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 622.847582][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 622.848060][ T29] audit: type=1400 audit(622.500:356): avc: denied { write } for pid=4545 comm="syz.0.361" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 622.860337][ T29] audit: type=1400 audit(622.510:357): avc: denied { open } for pid=4545 comm="syz.0.361" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 622.864963][ T4546] random: crng reseeded on system resumption [ 627.498007][ T4560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4560 comm=syz.0.365 [ 629.528251][ T29] audit: type=1400 audit(629.180:358): avc: denied { append } for pid=4563 comm="syz.1.367" name="loop5" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.896477][ T29] audit: type=1400 audit(633.550:359): avc: denied { ioctl } for pid=4576 comm="syz.0.372" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6107 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 638.530564][ T4595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.539253][ T4595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.005583][ T4597] fuse: Unknown parameter 'grou00000000000000000000' [ 640.270827][ T4603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 641.116871][ T4605] fuse: Unknown parameter 'grou00000000000000000000' [ 642.204250][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.243577][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.116844][ T29] audit: type=1400 audit(642.770:360): avc: denied { create } for pid=4609 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 643.162832][ T4610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.175951][ T4610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.235110][ T4610] netlink: 'syz.1.386': attribute type 11 has an invalid length. [ 644.837967][ T4617] fuse: Unknown parameter 'grou00000000000000000000' [ 645.506685][ T4621] fuse: Unknown parameter 'grou00000000000000000000' [ 647.110150][ T4629] fuse: Unknown parameter 'grou00000000000000000000' [ 647.678993][ T4633] fuse: Unknown parameter 'group_i00000000000000000000' [ 648.114064][ T29] audit: type=1400 audit(647.760:361): avc: denied { create } for pid=4635 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 648.145210][ T29] audit: type=1400 audit(647.790:362): avc: denied { setopt } for pid=4635 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 648.661217][ T29] audit: type=1400 audit(648.310:363): avc: denied { bind } for pid=4635 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 648.669353][ T29] audit: type=1400 audit(648.320:364): avc: denied { getopt } for pid=4635 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 649.163179][ T4643] fuse: Unknown parameter 'group_i00000000000000000000' [ 649.895365][ T31] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 650.114238][ T31] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 650.130557][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.135836][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 650.142640][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 650.224922][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.231320][ T31] usb 1-1: Product: syz [ 650.233436][ T31] usb 1-1: Manufacturer: syz [ 650.234714][ T31] usb 1-1: SerialNumber: syz [ 650.313853][ T31] usb 1-1: config 0 descriptor?? [ 650.374090][ T4647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 650.703857][ T53] usb 1-1: USB disconnect, device number 16 [ 654.939996][ T4672] fuse: Unknown parameter 'group_i00000000000000000000' [ 655.828784][ T29] audit: type=1400 audit(655.480:365): avc: denied { create } for pid=4674 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 655.925532][ T29] audit: type=1400 audit(655.570:366): avc: denied { write } for pid=4674 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 656.080307][ T29] audit: type=1400 audit(655.730:367): avc: denied { unmount } for pid=4673 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 656.110226][ T4676] netlink: 'syz.1.407': attribute type 16 has an invalid length. [ 656.110692][ T4676] netlink: 'syz.1.407': attribute type 17 has an invalid length. [ 657.736034][ T29] audit: type=1400 audit(657.390:368): avc: denied { map_create } for pid=4680 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.775314][ T4676] gre1: left promiscuous mode [ 657.777604][ T4676] gre1: left allmulticast mode [ 657.789320][ T29] audit: type=1400 audit(657.410:369): avc: denied { map_read map_write } for pid=4680 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.534439][ T29] audit: type=1400 audit(658.180:370): avc: denied { prog_run } for pid=4680 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.796076][ T4686] fuse: Unknown parameter 'group_i00000000000000000000' [ 660.906124][ T29] audit: type=1400 audit(660.550:371): avc: denied { bind } for pid=4691 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.026581][ T29] audit: type=1400 audit(660.650:372): avc: denied { map } for pid=4691 comm="syz.0.413" path="socket:[7465]" dev="sockfs" ino=7465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.027914][ T29] audit: type=1400 audit(660.680:373): avc: denied { read } for pid=4691 comm="syz.0.413" path="socket:[7465]" dev="sockfs" ino=7465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 665.257029][ T4701] fuse: fd is not a fuse device [ 668.416521][ T4716] fuse: fd is not a fuse device [ 674.537569][ T4730] fuse: fd is not a fuse device [ 676.458058][ T4740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.428'. [ 677.359154][ T4746] fuse: fd is not a fuse device [ 680.729843][ T4757] fuse: fd is not a fuse device [ 681.078814][ T29] audit: type=1400 audit(680.730:374): avc: denied { watch_mount watch_reads } for pid=4758 comm="syz.0.437" path="/190" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 685.469985][ T4768] fuse: fd is not a fuse device [ 686.289615][ T4772] syz_tun: entered allmulticast mode [ 686.446416][ T29] audit: type=1400 audit(686.090:375): avc: denied { write } for pid=4769 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 688.245557][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.248768][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.740441][ T4782] fuse: Bad value for 'fd' [ 690.515917][ T29] audit: type=1400 audit(690.170:376): avc: denied { create } for pid=4793 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 691.103724][ T29] audit: type=1400 audit(690.730:377): avc: denied { allowed } for pid=4793 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 692.400202][ T4807] netlink: 84 bytes leftover after parsing attributes in process `syz.0.455'. [ 695.159452][ T29] audit: type=1400 audit(694.810:378): avc: denied { setopt } for pid=4821 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 706.313167][ T29] audit: type=1400 audit(705.940:379): avc: denied { mount } for pid=4835 comm="syz.1.465" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 706.639105][ T29] audit: type=1400 audit(706.290:380): avc: denied { unmount } for pid=3389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 712.536305][ T4850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.471'. [ 716.249474][ T4853] netlink: 180 bytes leftover after parsing attributes in process `syz.1.472'. [ 722.475778][ T4875] fuse: Bad value for 'fd' [ 724.051047][ T4887] fuse: fd is not a fuse device [ 725.519705][ T4898] fuse: Invalid rootmode [ 727.464945][ T4912] fuse: fd is not a fuse device [ 728.876716][ T4921] fuse: Bad value for 'rootmode' [ 731.960177][ T4942] fuse: Bad value for 'rootmode' [ 735.389255][ T4960] fuse: Bad value for 'rootmode' [ 740.836306][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.855017][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.181099][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.185835][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.487241][ T5035] bond1: entered allmulticast mode [ 750.496077][ T5035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.656415][ T5035] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 750.689459][ T5035] macvlan2: entered allmulticast mode [ 750.691303][ T5035] bond0: entered allmulticast mode [ 750.694092][ T5035] bond_slave_0: entered allmulticast mode [ 750.695498][ T5035] bond_slave_1: entered allmulticast mode [ 750.697635][ T5035] bond_slave_0: entered promiscuous mode [ 750.698277][ T5035] bond_slave_1: entered promiscuous mode [ 750.708243][ T5035] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 750.729092][ T5035] netlink: 14 bytes leftover after parsing attributes in process `syz.1.546'. [ 760.281147][ T29] audit: type=1400 audit(759.920:381): avc: denied { sys_nice } for pid=5050 comm="syz.1.552" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 761.235866][ T5054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.553'. [ 761.274738][ T5054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.553'. [ 761.292964][ T5054] netlink: 'syz.1.553': attribute type 4 has an invalid length. [ 761.293422][ T5054] netlink: 152 bytes leftover after parsing attributes in process `syz.1.553'. [ 766.777182][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.795668][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.113189][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.186471][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.698415][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.724390][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.699012][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 775.685386][ T5104] fuse: fd is not a fuse device [ 778.333025][ T5118] fuse: Bad value for 'fd' [ 778.967682][ T5113] netlink: 'syz.1.576': attribute type 12 has an invalid length. [ 779.050580][ T5113] ======================================================= [ 779.050580][ T5113] WARNING: The mand mount option has been deprecated and [ 779.050580][ T5113] and is ignored by this kernel. Remove the mand [ 779.050580][ T5113] option from the mount to silence this warning. [ 779.050580][ T5113] ======================================================= [ 779.787296][ T5124] fuse: fd is not a fuse device [ 782.260867][ T5130] fuse: fd is not a fuse device [ 783.498825][ T29] audit: type=1400 audit(783.150:382): avc: denied { create } for pid=5136 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 784.288377][ T5142] fuse: Invalid rootmode [ 786.669375][ T5154] block device autoloading is deprecated and will be removed. [ 787.281122][ T5159] fuse: Invalid rootmode [ 788.476969][ T5166] netlink: 'syz.0.597': attribute type 3 has an invalid length. [ 788.483256][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 802.188404][ T5203] syzkaller0: entered promiscuous mode [ 802.191233][ T5203] syzkaller0: entered allmulticast mode [ 803.139264][ T5207] fuse: Bad value for 'fd' [ 805.480302][ T5218] fuse: Unknown parameter '00000000000000000003' [ 806.298480][ T5220] netlink: 'syz.0.614': attribute type 13 has an invalid length. [ 809.117209][ T5230] fuse: Unknown parameter '00000000000000000003' [ 809.773173][ T29] audit: type=1400 audit(809.420:383): avc: denied { read } for pid=5232 comm="syz.1.619" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 815.974226][ T5245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.980878][ T5245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.777439][ T5248] fuse: Unknown parameter '00000000000000000003' [ 823.446826][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.476825][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.736825][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.768788][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.435523][ T5268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.627'. [ 824.579203][ T5268] veth1_to_batadv: entered promiscuous mode [ 825.375032][ T5270] fuse: Unknown parameter '00000000000000000003' [ 827.485423][ T5284] fuse: Unknown parameter '00000000000000000003' [ 828.559787][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 831.960085][ T5303] netlink: 64 bytes leftover after parsing attributes in process `syz.1.642'. [ 832.144609][ T5303] syzkaller1: entered promiscuous mode [ 832.145365][ T5303] syzkaller1: entered allmulticast mode [ 832.154951][ T5305] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 836.654685][ T5317] fuse: Unknown parameter 'fd00000000000000000003' [ 849.124321][ T5339] fuse: Unknown parameter 'fd00000000000000000003' [ 850.945191][ T29] audit: type=1400 audit(850.600:384): avc: denied { setopt } for pid=5342 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 859.207754][ T5357] fuse: Unknown parameter 'fd00000000000000000003' [ 866.807054][ T5379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.810380][ T5379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.878868][ T29] audit: type=1400 audit(866.530:385): avc: denied { nlmsg_read } for pid=5378 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 869.145926][ T5386] process 'syz.0.672' launched './file2' with NULL argv: empty string added [ 869.157398][ T29] audit: type=1400 audit(868.800:386): avc: denied { execute_no_trans } for pid=5385 comm="syz.0.672" path="/308/file2" dev="tmpfs" ino=1608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 872.300222][ T5402] fuse: fd is not a fuse device [ 888.030575][ T5474] Illegal XDP return value 4294967294 on prog (id 19) dev N/A, expect packet loss! [ 889.788852][ T5484] fuse: fd is not a fuse device [ 891.905665][ T5495] fuse: fd is not a fuse device [ 907.197288][ T5577] fuse: fd is not a fuse device [ 907.766913][ T5581] fuse: fd is not a fuse device [ 911.106640][ T5597] fuse: fd is not a fuse device [ 912.807657][ T5605] binder: 5603:5605 tried to acquire reference to desc 0, got 1 instead [ 912.820952][ T5605] binder_alloc: 5603: binder_alloc_buf size 65536 failed, no address space [ 912.844404][ T5605] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 912.845408][ T5605] binder: cannot allocate buffer: no space left [ 912.846947][ T5605] binder: 5603:5605 transaction call to 5603:0 failed 14/29201/-28, code 0 size 65532-0 line 3408 [ 912.861126][ T3383] binder: undelivered TRANSACTION_ERROR: 29201 [ 926.080604][ T5637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.785'. [ 926.373296][ T5639] fuse: fd is not a fuse device [ 933.199509][ T5666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 933.285675][ T5666] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 940.569504][ T29] audit: type=1400 audit(940.210:387): avc: denied { mmap_zero } for pid=5674 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 940.622882][ T29] audit: type=1400 audit(940.270:388): avc: denied { mount } for pid=5674 comm="syz.0.796" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 940.660809][ T5675] FAULT_INJECTION: forcing a failure. [ 940.660809][ T5675] name failslab, interval 1, probability 0, space 0, times 1 [ 940.666684][ T5675] CPU: 1 UID: 0 PID: 5675 Comm: syz.0.796 Tainted: G W L syzkaller #0 PREEMPT [ 940.666832][ T5675] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 940.666862][ T5675] Hardware name: linux,dummy-virt (DT) [ 940.666945][ T5675] Call trace: [ 940.667055][ T5675] show_stack+0x18/0x24 (C) [ 940.667237][ T5675] dump_stack_lvl+0x7c/0xb0 [ 940.667300][ T5675] dump_stack+0x1c/0x28 [ 940.667355][ T5675] should_fail_ex+0x6b4/0x6c4 [ 940.667419][ T5675] should_failslab+0xbc/0x120 [ 940.667481][ T5675] __kmalloc_noprof+0x4dc/0x74c [ 940.667538][ T5675] lsm_blob_alloc+0x60/0x80 [ 940.667596][ T5675] security_key_alloc+0x3c/0x268 [ 940.667783][ T5675] key_alloc+0x688/0xf44 [ 940.667964][ T5675] request_key_auth_new+0x454/0x778 [ 940.668142][ T5675] request_key_and_link+0xb68/0xd20 [ 940.668236][ T5675] __arm64_sys_request_key+0x1bc/0x300 [ 940.668443][ T5675] invoke_syscall+0x74/0x240 [ 940.668654][ T5675] el0_svc_common.constprop.0+0xac/0x230 [ 940.668772][ T5675] do_el0_svc+0x40/0x58 [ 940.668879][ T5675] el0_svc+0x58/0x2a4 [ 940.669040][ T5675] el0t_64_sync_handler+0xa0/0xe4 [ 940.669155][ T5675] el0t_64_sync+0x198/0x19c [ 940.794515][ T29] audit: type=1400 audit(940.450:389): avc: denied { unmount } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 941.024453][ T5678] fuse: fd is not a fuse device [ 955.615846][ T29] audit: type=1400 audit(955.260:390): avc: denied { search } for pid=5708 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.650539][ T29] audit: type=1400 audit(955.290:391): avc: denied { search } for pid=5708 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=928 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.670841][ T29] audit: type=1400 audit(955.310:392): avc: denied { search } for pid=5708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.694409][ T29] audit: type=1400 audit(955.340:393): avc: denied { search } for pid=5708 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.904176][ T29] audit: type=1400 audit(955.540:394): avc: denied { read } for pid=5715 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.923310][ T29] audit: type=1400 audit(955.560:395): avc: denied { read open } for pid=5715 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.934927][ T29] audit: type=1400 audit(955.560:396): avc: denied { getattr } for pid=5715 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.602793][ T29] audit: type=1400 audit(956.250:397): avc: denied { write } for pid=5708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.634125][ T29] audit: type=1400 audit(956.280:398): avc: denied { add_name } for pid=5708 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.164180][ T5720] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 958.577579][ T5720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.808'. [ 958.610816][ T5720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.332952][ T29] audit: type=1400 audit(958.980:399): avc: denied { write } for pid=5722 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.896081][ T5726] fuse: fd is not a fuse device [ 964.935457][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.810'. [ 970.247264][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 971.343470][ T5735] mmap: syz.0.812 (5735) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 987.924255][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 987.926540][ T29] audit: type=1400 audit(987.560:401): avc: denied { create } for pid=5758 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 988.019012][ T29] audit: type=1400 audit(987.670:402): avc: denied { bind } for pid=5758 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 990.187604][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.239728][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.468848][ T29] audit: type=1400 audit(991.120:403): avc: denied { write } for pid=5771 comm="syz.1.822" name="001" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 991.814885][ T29] audit: type=1400 audit(991.470:404): avc: denied { read } for pid=5771 comm="syz.1.822" path="socket:[11006]" dev="sockfs" ino=11006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 992.567074][ T5775] FAULT_INJECTION: forcing a failure. [ 992.567074][ T5775] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 992.582914][ T5775] CPU: 1 UID: 0 PID: 5775 Comm: syz.1.822 Tainted: G W L syzkaller #0 PREEMPT [ 992.583242][ T5775] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 992.583299][ T5775] Hardware name: linux,dummy-virt (DT) [ 992.583361][ T5775] Call trace: [ 992.583412][ T5775] show_stack+0x18/0x24 (C) [ 992.583597][ T5775] dump_stack_lvl+0x7c/0xb0 [ 992.583709][ T5775] dump_stack+0x1c/0x28 [ 992.583809][ T5775] should_fail_ex+0x6b4/0x6c4 [ 992.583924][ T5775] should_fail_alloc_page+0x70/0xc0 [ 992.584035][ T5775] prepare_alloc_pages+0x1cc/0x578 [ 992.584146][ T5775] __alloc_frozen_pages_noprof+0x1a4/0x3498 [ 992.584259][ T5775] alloc_pages_mpol+0xf8/0x41c [ 992.584365][ T5775] folio_alloc_mpol_noprof+0x18/0x18c [ 992.584466][ T5775] shmem_alloc_folio+0x160/0x1cc [ 992.584572][ T5775] shmem_alloc_and_add_folio+0x210/0xdac [ 992.584678][ T5775] shmem_get_folio_gfp+0x204/0x1174 [ 992.584783][ T5775] shmem_fault+0x1a8/0x7c0 [ 992.584885][ T5775] __do_fault+0xc8/0x3d8 [ 992.585007][ T5775] do_fault+0x6cc/0xe28 [ 992.585112][ T5775] __handle_mm_fault+0x7c8/0x1b60 [ 992.585215][ T5775] handle_mm_fault+0x1e8/0x8ac [ 992.585314][ T5775] do_page_fault+0x36c/0xf50 [ 992.585416][ T5775] do_translation_fault+0xac/0xec [ 992.585524][ T5775] do_mem_abort+0x64/0x1a0 [ 992.585626][ T5775] el1_abort+0x50/0x80 [ 992.585737][ T5775] el1h_64_sync_handler+0x54/0xb0 [ 992.585839][ T5775] el1h_64_sync+0x6c/0x70 [ 992.586064][ T5775] strncpy_from_user+0xe8/0x2e0 (P) [ 992.586198][ T5775] do_getname+0x70/0x290 [ 992.586308][ T5775] __arm64_sys_mkdirat+0x7c/0xd4 [ 992.586410][ T5775] invoke_syscall+0x74/0x240 [ 992.586511][ T5775] el0_svc_common.constprop.0+0xac/0x230 [ 992.586615][ T5775] do_el0_svc+0x40/0x58 [ 992.586720][ T5775] el0_svc+0x58/0x2a4 [ 992.586864][ T5775] el0t_64_sync_handler+0xa0/0xe4 [ 992.586967][ T5775] el0t_64_sync+0x198/0x19c [ 996.852231][ T29] audit: type=1400 audit(996.500:405): avc: denied { setopt } for pid=5789 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1027.155365][ T5838] fuse: fd is not a fuse device [ 1029.772674][ T5850] fuse: fd is not a fuse device [ 1035.099896][ T5858] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 1035.405689][ T5858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1035.896298][ T5858] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1036.844699][ T29] audit: type=1400 audit(1292.482:406): avc: denied { create } for pid=5862 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1036.890627][ T29] audit: type=1400 audit(1292.532:407): avc: denied { bind } for pid=5862 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1036.910028][ T29] audit: type=1400 audit(1292.552:408): avc: denied { listen } for pid=5862 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1036.937732][ T29] audit: type=1400 audit(1292.582:409): avc: denied { connect } for pid=5862 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1036.973354][ T29] audit: type=1400 audit(1292.612:410): avc: denied { write } for pid=5862 comm="syz.1.846" path="socket:[11106]" dev="sockfs" ino=11106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1037.009506][ T29] audit: type=1400 audit(1292.652:411): avc: denied { accept } for pid=5862 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1037.031195][ T29] audit: type=1400 audit(1292.672:412): avc: denied { read } for pid=5862 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1037.709899][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.746729][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.358228][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.374074][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.408173][ T29] audit: type=1400 audit(1294.052:413): avc: denied { mount } for pid=5869 comm="syz.1.849" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1060.080325][ T29] audit: type=1400 audit(1315.602:414): avc: denied { mount } for pid=5891 comm="syz.1.857" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1063.077388][ T29] audit: type=1400 audit(1318.712:415): avc: denied { unmount } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1063.527592][ T29] audit: type=1400 audit(1319.172:416): avc: denied { bind } for pid=5908 comm="syz.0.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1063.535381][ T5909] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1063.539844][ T29] audit: type=1400 audit(1319.182:417): avc: denied { write } for pid=5908 comm="syz.0.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1063.807582][ T5909] syz.0.861 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1063.824713][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.0.861 Tainted: G W L syzkaller #0 PREEMPT [ 1063.824831][ T5909] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1063.824859][ T5909] Hardware name: linux,dummy-virt (DT) [ 1063.824893][ T5909] Call trace: [ 1063.824922][ T5909] show_stack+0x18/0x24 (C) [ 1063.825018][ T5909] dump_stack_lvl+0x7c/0xb0 [ 1063.825077][ T5909] dump_stack+0x1c/0x28 [ 1063.825131][ T5909] dump_header+0x104/0x498 [ 1063.825185][ T5909] oom_kill_process+0x49c/0x6ec [ 1063.825243][ T5909] out_of_memory+0x244/0x1064 [ 1063.825297][ T5909] mem_cgroup_out_of_memory+0x128/0x140 [ 1063.825356][ T5909] try_charge_memcg+0x640/0xd1c [ 1063.825413][ T5909] __memcg_slab_post_alloc_hook+0x394/0xdcc [ 1063.825470][ T5909] __kmalloc_cache_noprof+0x584/0x628 [ 1063.825529][ T5909] alloc_mnt_ns+0xb8/0x400 [ 1063.825598][ T5909] create_new_namespace+0x190/0x8c0 [ 1063.825652][ T5909] vfs_open_tree+0x620/0x7ac [ 1063.825705][ T5909] __arm64_sys_open_tree+0x8c/0x108 [ 1063.825761][ T5909] invoke_syscall+0x74/0x240 [ 1063.825818][ T5909] el0_svc_common.constprop.0+0xac/0x230 [ 1063.825875][ T5909] do_el0_svc+0x40/0x58 [ 1063.825930][ T5909] el0_svc+0x58/0x2a4 [ 1063.825991][ T5909] el0t_64_sync_handler+0xa0/0xe4 [ 1063.826046][ T5909] el0t_64_sync+0x198/0x19c [ 1063.848014][ T5909] memory: usage 0kB, limit 0kB, failcnt 19 [ 1063.848415][ T5909] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1063.848594][ T5909] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1063.849012][ T5909] Memory cgroup stats for /syz0/test: [ 1063.867297][ T5909] cache 0 [ 1063.872365][ T5909] rss 0 [ 1063.873282][ T5909] rss_huge 0 [ 1063.877746][ T5909] shmem 0 [ 1063.878170][ T5909] mapped_file 0 [ 1063.878319][ T5909] dirty 0 [ 1063.878441][ T5909] writeback 0 [ 1063.878588][ T5909] workingset_refault_anon 0 [ 1063.878694][ T5909] workingset_refault_file 0 [ 1063.878780][ T5909] swap 0 [ 1063.878865][ T5909] swapcached 0 [ 1063.878950][ T5909] pgpgin 0 [ 1063.879078][ T5909] pgpgout 0 [ 1063.879526][ T5909] pgfault 0 [ 1063.879632][ T5909] pgmajfault 0 [ 1063.879719][ T5909] inactive_anon 0 [ 1063.879804][ T5909] active_anon 0 [ 1063.879889][ T5909] inactive_file 0 [ 1063.879975][ T5909] active_file 0 [ 1063.880128][ T5909] unevictable 0 [ 1063.880293][ T5909] hierarchical_memory_limit 0 [ 1063.880385][ T5909] hierarchical_memsw_limit 9223372036854771712 [ 1063.880472][ T5909] total_cache 0 [ 1063.880560][ T5909] total_rss 0 [ 1063.880650][ T5909] total_rss_huge 0 [ 1063.880735][ T5909] total_shmem 0 [ 1063.880869][ T5909] total_mapped_file 0 [ 1063.880958][ T5909] total_dirty 0 [ 1063.881043][ T5909] total_writeback 0 [ 1063.881137][ T5909] total_workingset_refault_anon 0 [ 1063.881227][ T5909] total_workingset_refault_file 0 [ 1063.916010][ T5909] total_swap 0 [ 1063.916422][ T5909] total_swapcached 0 [ 1063.916530][ T5909] total_pgpgin 0 [ 1063.916650][ T5909] total_pgpgout 0 [ 1063.916772][ T5909] total_pgfault 0 [ 1063.916861][ T5909] total_pgmajfault 0 [ 1063.916948][ T5909] total_inactive_anon 0 [ 1063.917033][ T5909] total_active_anon 0 [ 1063.917145][ T5909] total_inactive_file 0 [ 1063.917276][ T5909] total_active_file 0 [ 1063.917364][ T5909] total_unevictable 0 [ 1063.917516][ T5909] anon_cost 0 [ 1063.917636][ T5909] file_cost 0 [ 1063.917968][ T5909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.861,pid=5908,uid=0 [ 1063.926066][ T5909] Memory cgroup out of memory: Killed process 5908 (syz.0.861) total-vm:40652kB, anon-rss:1308kB, file-rss:1004kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1076.608788][ T29] audit: type=1400 audit(1332.252:418): avc: denied { read } for pid=3231 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1079.078776][ T29] audit: type=1400 audit(1334.722:419): avc: denied { mount } for pid=5934 comm="syz.0.869" name="/" dev="autofs" ino=11573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1079.427230][ T29] audit: type=1400 audit(1335.072:420): avc: denied { unmount } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1082.739444][ T5941] No such timeout policy "syz1" [ 1088.985886][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.989767][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.329396][ T5952] fuse: fd is not a fuse device [ 1097.734340][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.746838][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.041223][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.074851][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.316541][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.354582][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.790560][ T29] audit: type=1326 audit(1378.432:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.1.895" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x0 [ 1127.973368][ T29] audit: type=1400 audit(1383.612:422): avc: denied { read write } for pid=6038 comm="syz.0.901" name="control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1127.979073][ T29] audit: type=1400 audit(1383.622:423): avc: denied { open } for pid=6038 comm="syz.0.901" path="/455/dev/mapper/control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1127.996056][ T29] audit: type=1400 audit(1383.642:424): avc: denied { ioctl } for pid=6038 comm="syz.0.901" path="/455/dev/mapper/control" dev="devtmpfs" ino=712 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1128.057570][ T6039] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1128.428747][ T29] audit: type=1400 audit(1384.062:425): avc: denied { mount } for pid=6041 comm="syz.0.902" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1128.439794][ T29] audit: type=1400 audit(1384.082:426): avc: denied { search } for pid=6041 comm="syz.0.902" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1129.235321][ T29] audit: type=1326 audit(1384.882:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.903" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93979368 code=0x0 [ 1132.827522][ T29] audit: type=1400 audit(1388.472:428): avc: denied { setopt } for pid=6053 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1133.730458][ T6058] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 1134.308656][ T6058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1134.381310][ T6058] bond3: (slave bond4): making interface the new active one [ 1134.426253][ T6058] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1134.488829][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.908'. [ 1134.493727][ T6058] bond3: entered promiscuous mode [ 1134.494229][ T6058] bond4: entered promiscuous mode [ 1134.502814][ T6058] bond3: entered allmulticast mode [ 1134.503302][ T6058] bond4: entered allmulticast mode [ 1134.515963][ T6058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1150.114567][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.119857][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.636255][ T6096] netlink: 104 bytes leftover after parsing attributes in process `syz.1.921'. [ 1159.215200][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.221107][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.676779][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.689499][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.670323][ T29] audit: type=1400 audit(1418.302:429): avc: denied { setopt } for pid=6147 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1163.683774][ T6150] FAULT_INJECTION: forcing a failure. [ 1163.683774][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.684499][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz.1.941 Tainted: G W L syzkaller #0 PREEMPT [ 1163.684594][ T6150] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1163.684627][ T6150] Hardware name: linux,dummy-virt (DT) [ 1163.684661][ T6150] Call trace: [ 1163.684689][ T6150] show_stack+0x18/0x24 (C) [ 1163.684836][ T6150] dump_stack_lvl+0x7c/0xb0 [ 1163.684945][ T6150] dump_stack+0x1c/0x28 [ 1163.685015][ T6150] should_fail_ex+0x6b4/0x6c4 [ 1163.685169][ T6150] should_failslab+0xbc/0x120 [ 1163.685275][ T6150] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1163.685384][ T6150] create_new_namespaces+0x3c/0x7f4 [ 1163.685499][ T6150] unshare_nsproxy_namespaces+0x88/0x184 [ 1163.685557][ T6150] ksys_unshare+0x2ac/0x6e0 [ 1163.685642][ T6150] __arm64_sys_unshare+0x34/0x50 [ 1163.685738][ T6150] invoke_syscall+0x74/0x240 [ 1163.685931][ T6150] el0_svc_common.constprop.0+0xac/0x230 [ 1163.686099][ T6150] do_el0_svc+0x40/0x58 [ 1163.686196][ T6150] el0_svc+0x58/0x2a4 [ 1163.686290][ T6150] el0t_64_sync_handler+0xa0/0xe4 [ 1163.686346][ T6150] el0t_64_sync+0x198/0x19c [ 1166.735202][ T29] audit: type=1400 audit(1422.382:430): avc: denied { getattr } for pid=6157 comm="syz.1.945" name="/" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1173.263871][ T29] audit: type=1400 audit(1428.902:431): avc: denied { accept } for pid=6189 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1177.527450][ T6205] netlink: 'syz.0.963': attribute type 32 has an invalid length. [ 1181.085684][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 1182.364437][ T29] audit: type=1400 audit(1437.992:432): avc: denied { view } for pid=6221 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1184.939221][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'. [ 1186.238554][ T6240] loop9: detected capacity change from 0 to 7 [ 1186.303547][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.305463][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.325388][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.326025][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.334680][ T6240] loop9: unable to read partition table [ 1186.355905][ T6240] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1186.468459][ T6240] [ 1186.468845][ T6240] ====================================================== [ 1186.469217][ T6240] WARNING: possible circular locking dependency detected [ 1186.469587][ T6240] syzkaller #0 Tainted: G W L [ 1186.470097][ T6240] ------------------------------------------------------ [ 1186.470490][ T6240] syz.1.979/6240 is trying to acquire lock: [ 1186.470798][ T6240] ffff00000e668210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x88/0xfc [ 1186.471899][ T6240] [ 1186.471899][ T6240] but task is already holding lock: [ 1186.472155][ T6240] ffff000014b7caa0 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x18/0x30 [ 1186.472700][ T6240] [ 1186.472700][ T6240] which lock already depends on the new lock. [ 1186.472700][ T6240] [ 1186.473065][ T6240] [ 1186.473065][ T6240] the existing dependency chain (in reverse order) is: [ 1186.473384][ T6240] [ 1186.473384][ T6240] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 1186.474084][ T6240] lock_acquire+0x3d0/0x44c [ 1186.474328][ T6240] blk_alloc_queue+0x4e0/0x640 [ 1186.474551][ T6240] blk_mq_alloc_queue+0x148/0x224 [ 1186.474918][ T6240] __blk_mq_alloc_disk+0x20/0x120 [ 1186.475172][ T6240] loop_add+0x3ac/0x96c [ 1186.475418][ T6240] loop_init+0x108/0x12c [ 1186.475693][ T6240] do_one_initcall+0x134/0xb20 [ 1186.475894][ T6240] kernel_init_freeable+0x5ec/0x670 [ 1186.476117][ T6240] kernel_init+0x2c/0x14c [ 1186.476333][ T6240] ret_from_fork+0x10/0x20 [ 1186.476623][ T6240] [ 1186.476623][ T6240] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1186.477025][ T6240] lock_acquire+0x3d0/0x44c [ 1186.477263][ T6240] fs_reclaim_acquire+0x130/0x158 [ 1186.477511][ T6240] kmem_cache_alloc_noprof+0x64/0x610 [ 1186.477826][ T6240] __kernfs_iattrs+0x114/0x380 [ 1186.478020][ T6240] __kernfs_setattr+0x4c/0x2a0 [ 1186.478220][ T6240] kernfs_iop_setattr+0xc0/0xfc [ 1186.478510][ T6240] notify_change+0x6e8/0xbe8 [ 1186.478709][ T6240] do_truncate+0x188/0x1d0 [ 1186.478932][ T6240] path_openat+0x13e8/0x1e40 [ 1186.479201][ T6240] do_file_open+0x18c/0x380 [ 1186.479391][ T6240] do_sys_openat2+0xdc/0x180 [ 1186.479594][ T6240] __arm64_sys_openat+0x134/0x1e0 [ 1186.479840][ T6240] invoke_syscall+0x74/0x240 [ 1186.480049][ T6240] el0_svc_common.constprop.0+0xac/0x230 [ 1186.480290][ T6240] do_el0_svc+0x40/0x58 [ 1186.480514][ T6240] el0_svc+0x58/0x2a4 [ 1186.480707][ T6240] el0t_64_sync_handler+0xa0/0xe4 [ 1186.480958][ T6240] el0t_64_sync+0x198/0x19c [ 1186.481255][ T6240] [ 1186.481255][ T6240] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1186.481617][ T6240] check_prev_add+0x114/0xca0 [ 1186.481848][ T6240] __lock_acquire+0x13f4/0x1a5c [ 1186.482088][ T6240] lock_acquire+0x3d0/0x44c [ 1186.482286][ T6240] down_read+0xb8/0x31c [ 1186.482524][ T6240] kernfs_iop_getattr+0x88/0xfc [ 1186.482729][ T6240] vfs_getattr_nosec+0x220/0x380 [ 1186.482963][ T6240] vfs_getattr+0x40/0x60 [ 1186.483191][ T6240] loop_update_dio_alignment+0x11c/0x340 [ 1186.483404][ T6240] lo_ioctl+0xf0c/0x1760 [ 1186.483587][ T6240] blkdev_ioctl+0x3bc/0x7f0 [ 1186.483783][ T6240] __arm64_sys_ioctl+0x128/0x1a8 [ 1186.483988][ T6240] invoke_syscall+0x74/0x240 [ 1186.484204][ T6240] el0_svc_common.constprop.0+0xac/0x230 [ 1186.484587][ T6240] do_el0_svc+0x40/0x58 [ 1186.484797][ T6240] el0_svc+0x58/0x2a4 [ 1186.485004][ T6240] el0t_64_sync_handler+0xa0/0xe4 [ 1186.485257][ T6240] el0t_64_sync+0x198/0x19c [ 1186.485476][ T6240] [ 1186.485476][ T6240] other info that might help us debug this: [ 1186.485476][ T6240] [ 1186.485941][ T6240] Chain exists of: [ 1186.485941][ T6240] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 1186.485941][ T6240] [ 1186.486704][ T6240] Possible unsafe locking scenario: [ 1186.486704][ T6240] [ 1186.486994][ T6240] CPU0 CPU1 [ 1186.487290][ T6240] ---- ---- [ 1186.487609][ T6240] lock(&q->q_usage_counter(io)#26); [ 1186.487963][ T6240] lock(fs_reclaim); [ 1186.488334][ T6240] lock(&q->q_usage_counter(io)#26); [ 1186.488784][ T6240] rlock(&root->kernfs_iattr_rwsem); [ 1186.489125][ T6240] [ 1186.489125][ T6240] *** DEADLOCK *** [ 1186.489125][ T6240] [ 1186.489528][ T6240] locks held by syz.1.979/6240: 3, last CPU#0: [ 1186.489961][ T6240] #0: ffff000014b58430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x28/0xb8 [ 1186.490696][ T6240] #1: ffff000014b7caa0 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x18/0x30 [ 1186.491475][ T6240] #2: ffff000014b7cad8 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x18/0x30 [ 1186.492200][ T6240] [ 1186.492200][ T6240] stack backtrace: [ 1186.492540][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.1.979 Tainted: G W L syzkaller #0 PREEMPT [ 1186.492817][ T6240] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1186.492954][ T6240] Hardware name: linux,dummy-virt (DT) [ 1186.493126][ T6240] Call trace: [ 1186.493326][ T6240] show_stack+0x18/0x24 (C) [ 1186.493491][ T6240] dump_stack_lvl+0x7c/0xb0 [ 1186.493671][ T6240] dump_stack+0x1c/0x28 [ 1186.493816][ T6240] print_circular_bug+0x23c/0x284 [ 1186.494090][ T6240] check_noncircular+0x174/0x194 [ 1186.494268][ T6240] check_prev_add+0x114/0xca0 [ 1186.494437][ T6240] __lock_acquire+0x13f4/0x1a5c [ 1186.494588][ T6240] lock_acquire+0x3d0/0x44c [ 1186.494812][ T6240] down_read+0xb8/0x31c [ 1186.495044][ T6240] kernfs_iop_getattr+0x88/0xfc [ 1186.495272][ T6240] vfs_getattr_nosec+0x220/0x380 [ 1186.495436][ T6240] vfs_getattr+0x40/0x60 [ 1186.495577][ T6240] loop_update_dio_alignment+0x11c/0x340 [ 1186.495750][ T6240] lo_ioctl+0xf0c/0x1760 [ 1186.495911][ T6240] blkdev_ioctl+0x3bc/0x7f0 [ 1186.496056][ T6240] __arm64_sys_ioctl+0x128/0x1a8 [ 1186.496216][ T6240] invoke_syscall+0x74/0x240 [ 1186.496363][ T6240] el0_svc_common.constprop.0+0xac/0x230 [ 1186.496527][ T6240] do_el0_svc+0x40/0x58 [ 1186.496741][ T6240] el0_svc+0x58/0x2a4 [ 1186.497075][ T6240] el0t_64_sync_handler+0xa0/0xe4 [ 1186.497351][ T6240] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1186.598936][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.599576][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.600732][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.600934][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.601165][ T6240] loop9: unable to read partition table [ 1186.602596][ T6240] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1186.626801][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.627572][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.636891][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.637402][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.650726][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.651218][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.666149][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.666680][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.698321][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1186.698833][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1187.204789][ T6236] syz_tun (unregistering): left allmulticast mode [ 1187.574898][ T1657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.910937][ T1657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.087566][ T1657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.332919][ T1657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.222759][ T1657] bond0 (unregistering): Released all slaves [ 1190.278750][ T1657] bond1 (unregistering): Released all slaves [ 1190.386191][ T1657] bond2 (unregistering): (slave veth3): Releasing active interface [ 1190.435231][ T1657] bond2 (unregistering): Released all slaves [ 1190.533708][ T1657] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1190.536755][ T1657] bond4 (unregistering): left promiscuous mode [ 1190.550645][ T1657] bond4 (unregistering): left allmulticast mode [ 1190.578592][ T1657] bond3 (unregistering): Released all slaves [ 1190.664803][ T1657] bond4 (unregistering): Released all slaves [ 1190.989657][ T1657] hsr_slave_0: left promiscuous mode [ 1191.008090][ T1657] hsr_slave_1: left promiscuous mode [ 1191.049219][ T1657] veth1_macvtap: left promiscuous mode [ 1191.049818][ T1657] veth0_macvtap: left promiscuous mode [ 1191.055678][ T1657] veth1_vlan: left promiscuous mode [ 1191.056984][ T1657] veth0_vlan: left promiscuous mode [ 1193.978900][ T29] audit: type=1400 audit(1449.622:433): avc: denied { write } for pid=6244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.370263][ T29] audit: type=1400 audit(1450.012:434): avc: denied { write } for pid=6247 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.756125][ T3231] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1195.648346][ T29] audit: type=1400 audit(1451.292:435): avc: denied { write } for pid=6251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1196.080539][ T29] audit: type=1400 audit(1451.722:436): avc: denied { write } for pid=6254 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1196.480565][ T3231] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1197.776048][ T29] audit: type=1400 audit(1453.422:437): avc: denied { write } for pid=6259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1198.077187][ T29] audit: type=1400 audit(1453.722:438): avc: denied { write } for pid=6262 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1198.325524][ T3231] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1199.065748][ T29] audit: type=1400 audit(1454.712:439): avc: denied { write } for pid=6267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.386032][ T29] audit: type=1400 audit(1455.032:440): avc: denied { write } for pid=6270 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.702558][ T3231] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1207.420040][ T29] audit: type=1400 audit(1463.062:441): avc: denied { write } for pid=6282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1207.840471][ T29] audit: type=1400 audit(1463.482:442): avc: denied { write } for pid=6285 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.690505][ T29] audit: type=1400 audit(1464.332:443): avc: denied { write } for pid=6287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1209.085096][ T29] audit: type=1400 audit(1464.732:444): avc: denied { write } for pid=6290 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1211.848217][ T29] audit: type=1400 audit(1467.492:445): avc: denied { write } for pid=6293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1212.297598][ T29] audit: type=1400 audit(1467.942:446): avc: denied { write } for pid=6296 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.056699][ T29] audit: type=1400 audit(1468.702:447): avc: denied { write } for pid=6299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.509048][ T29] audit: type=1400 audit(1469.142:448): avc: denied { write } for pid=6302 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1214.278879][ T29] audit: type=1400 audit(1469.922:449): avc: denied { write } for pid=6305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1214.679739][ T29] audit: type=1400 audit(1470.322:450): avc: denied { write } for pid=6308 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1