last executing test programs: 13m6.991084264s ago: executing program 1 (id=661): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000400)=0x1) 13m5.218435299s ago: executing program 1 (id=662): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x234, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13m4.110850408s ago: executing program 1 (id=663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x14, 0x0, 0x1, 0x70bd2d, 0xa000000}, 0x14}, 0x1, 0x2000000}, 0x0) 13m2.337255023s ago: executing program 1 (id=664): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 13m0.170466021s ago: executing program 1 (id=665): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x8, 0x13, r0, 0x0) 12m59.465880246s ago: executing program 1 (id=667): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x234, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12m12.818102711s ago: executing program 32 (id=667): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x234, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.020437808s ago: executing program 2 (id=1320): r0 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @loopback}, 0x1c) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 8.989394566s ago: executing program 2 (id=1321): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x40000102, 0x1}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="04"], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 8.4881664s ago: executing program 0 (id=1322): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f00280000002800000005000000030000000000000c020000000000"], 0x0, 0x45, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) 8.330050021s ago: executing program 2 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0x6d2, 0x0) 7.864361325s ago: executing program 0 (id=1324): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0) 7.479153308s ago: executing program 2 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000300)=""/248, &(0x7f0000000400)=0xf8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) 7.127044521s ago: executing program 0 (id=1326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000024c0)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x880) 5.765610032s ago: executing program 0 (id=1327): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.681863051s ago: executing program 0 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000600), 0x100, 0x3f00) sendmsg$NFT_BATCH(r0, 0x0, 0x24004854) 3.011171895s ago: executing program 2 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0xc00) 219.528188ms ago: executing program 0 (id=1330): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140), 0x0) close(r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 0s ago: executing program 2 (id=1331): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ket permissive=1 [ 260.604343][ T29] audit: type=1400 audit(260.300:151): avc: denied { execute } for pid=3598 comm="syz.1.29" path="/16/memory.events" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.218746][ T3610] netlink: 'syz.0.34': attribute type 1 has an invalid length. [ 261.222954][ T3610] nbd: couldn't find a device at index 131080 [ 261.415069][ T29] audit: type=1400 audit(261.110:152): avc: denied { map_create } for pid=3611 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.427885][ T29] audit: type=1400 audit(261.120:153): avc: denied { map_read map_write } for pid=3611 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.078886][ T3617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 263.129346][ T2192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.135152][ T2192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.143353][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.212168][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.175105][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 266.178259][ T29] audit: type=1400 audit(265.870:156): avc: denied { create } for pid=3636 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.251442][ T29] audit: type=1400 audit(265.940:157): avc: denied { setopt } for pid=3636 comm="syz.0.47" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.016461][ T29] audit: type=1400 audit(266.710:158): avc: denied { ioctl } for pid=3638 comm="syz.1.48" path="socket:[5297]" dev="sockfs" ino=5297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.412074][ T29] audit: type=1400 audit(269.110:159): avc: denied { create } for pid=3655 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.431470][ T29] audit: type=1400 audit(269.120:160): avc: denied { write } for pid=3655 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.431997][ T29] audit: type=1400 audit(269.120:161): avc: denied { nlmsg_write } for pid=3655 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.176930][ T29] audit: type=1400 audit(270.870:162): avc: denied { connect } for pid=3661 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.501773][ T3672] ip_tables: iptables: counters copy to user failed while replacing table [ 278.292163][ T29] audit: type=1400 audit(277.980:163): avc: denied { create } for pid=3685 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.324321][ T29] audit: type=1400 audit(278.020:164): avc: denied { bind } for pid=3685 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.345264][ T29] audit: type=1400 audit(278.040:165): avc: denied { write } for pid=3685 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.406148][ T29] audit: type=1400 audit(278.100:166): avc: denied { read } for pid=3685 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 279.201847][ T29] audit: type=1400 audit(278.900:167): avc: denied { ioctl } for pid=3689 comm="syz.0.68" path="socket:[5402]" dev="sockfs" ino=5402 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.210870][ T29] audit: type=1400 audit(278.900:168): avc: denied { write } for pid=3689 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.132138][ T29] audit: type=1400 audit(281.830:169): avc: denied { read write } for pid=3699 comm="syz.0.71" name="virtual_nci" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.135655][ T29] audit: type=1400 audit(281.830:170): avc: denied { open } for pid=3699 comm="syz.0.71" path="/dev/virtual_nci" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.241100][ T29] audit: type=1400 audit(281.930:171): avc: denied { ioctl } for pid=3699 comm="syz.0.71" path="/dev/virtual_nci" dev="devtmpfs" ino=674 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.847367][ T29] audit: type=1400 audit(282.530:172): avc: denied { create } for pid=3699 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.492148][ T29] audit: type=1400 audit(283.180:173): avc: denied { read write } for pid=3386 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.498932][ T29] audit: type=1400 audit(283.190:174): avc: denied { open } for pid=3386 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.528371][ T29] audit: type=1400 audit(283.190:175): avc: denied { ioctl } for pid=3386 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.645991][ T29] audit: type=1400 audit(285.340:176): avc: denied { create } for pid=3718 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.650395][ T29] audit: type=1400 audit(285.340:177): avc: denied { connect } for pid=3718 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.789232][ T29] audit: type=1400 audit(285.480:178): avc: denied { bind } for pid=3718 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.796727][ T29] audit: type=1400 audit(285.490:179): avc: denied { write } for pid=3718 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.825692][ T29] audit: type=1400 audit(285.520:180): avc: denied { bind } for pid=3718 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.835464][ T29] audit: type=1400 audit(285.530:181): avc: denied { node_bind } for pid=3718 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 285.857128][ T29] audit: type=1400 audit(285.550:182): avc: denied { getopt } for pid=3718 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 286.263582][ T3721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.77'. [ 290.139388][ T29] audit: type=1400 audit(289.830:183): avc: denied { create } for pid=3735 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.147845][ T29] audit: type=1400 audit(289.840:184): avc: denied { accept } for pid=3735 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 292.927216][ T29] audit: type=1400 audit(292.620:185): avc: denied { read } for pid=3748 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 292.934324][ T29] audit: type=1400 audit(292.630:186): avc: denied { create } for pid=3748 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.942781][ T29] audit: type=1400 audit(292.630:187): avc: denied { write } for pid=3748 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 294.081447][ T29] audit: type=1400 audit(293.770:188): avc: denied { write } for pid=3758 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.434454][ T29] audit: type=1400 audit(300.130:189): avc: denied { create } for pid=3771 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 300.446326][ T29] audit: type=1400 audit(300.140:190): avc: denied { write } for pid=3771 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.822601][ T29] audit: type=1400 audit(302.520:191): avc: denied { create } for pid=3783 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 305.692606][ T3802] ..ãc¤±: renamed from hsr0 (while UP) [ 305.918995][ T29] audit: type=1400 audit(305.600:192): avc: denied { create } for pid=3803 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 310.325933][ T3830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 310.327000][ T3830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.120'. [ 313.421368][ T29] audit: type=1400 audit(313.110:193): avc: denied { write } for pid=3849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.421972][ T29] audit: type=1400 audit(313.110:194): avc: denied { create } for pid=3849 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.422137][ T29] audit: type=1400 audit(313.110:195): avc: denied { write open } for pid=3849 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=1324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.422297][ T29] audit: type=1400 audit(313.110:196): avc: denied { append } for pid=3849 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.454797][ T29] audit: type=1400 audit(313.150:197): avc: denied { getattr } for pid=3849 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.904415][ T29] audit: type=1400 audit(313.600:198): avc: denied { read } for pid=3857 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.467726][ T29] audit: type=1400 audit(314.160:199): avc: denied { write } for pid=3859 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.491242][ T29] audit: type=1400 audit(314.180:200): avc: denied { unlink } for pid=3859 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 315.417187][ T3866] netlink: 'syz.1.134': attribute type 9 has an invalid length. [ 315.417612][ T3866] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 318.594698][ T29] audit: type=1400 audit(318.290:201): avc: denied { bind } for pid=3869 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.601866][ T29] audit: type=1400 audit(318.300:202): avc: denied { listen } for pid=3869 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.622066][ T29] audit: type=1400 audit(318.320:203): avc: denied { accept } for pid=3869 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.715342][ T3893] netlink: 'syz.1.145': attribute type 9 has an invalid length. [ 323.716886][ T3893] netlink: 'syz.1.145': attribute type 2 has an invalid length. [ 331.355068][ T29] audit: type=1400 audit(331.050:204): avc: denied { read append } for pid=3909 comm="syz.0.154" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.359207][ T29] audit: type=1400 audit(331.050:205): avc: denied { open } for pid=3909 comm="syz.0.154" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.411371][ T29] audit: type=1400 audit(331.100:206): avc: denied { ioctl } for pid=3909 comm="syz.0.154" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.032211][ T29] audit: type=1400 audit(335.720:207): avc: denied { read } for pid=3923 comm="syz.1.158" name="card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.033342][ T29] audit: type=1400 audit(335.720:208): avc: denied { open } for pid=3923 comm="syz.1.158" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.053638][ T29] audit: type=1400 audit(335.740:209): avc: denied { map } for pid=3923 comm="syz.1.158" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 339.072845][ T3942] loop3: detected capacity change from 0 to 7 [ 340.469241][ T29] audit: type=1400 audit(340.160:210): avc: denied { name_bind } for pid=3949 comm="syz.0.171" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 342.111454][ T29] audit: type=1400 audit(341.800:211): avc: denied { write } for pid=3947 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 345.484276][ T29] audit: type=1400 audit(345.180:212): avc: denied { create } for pid=3980 comm="syz.0.181" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.562818][ T29] audit: type=1400 audit(345.260:213): avc: denied { connect } for pid=3980 comm="syz.0.181" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.595472][ T29] audit: type=1400 audit(345.280:214): avc: denied { connect } for pid=3980 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.646381][ T29] audit: type=1400 audit(345.340:215): avc: denied { read } for pid=3980 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.186369][ T29] audit: type=1400 audit(345.880:216): avc: denied { shutdown } for pid=3980 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.447928][ T29] audit: type=1400 audit(346.140:217): avc: denied { unlink } for pid=3386 comm="syz-executor" name="file0" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 349.604530][ T3995] syz.0.187 uses obsolete (PF_INET,SOCK_PACKET) [ 355.057627][ T4016] capability: warning: `syz.1.195' uses deprecated v2 capabilities in a way that may be insecure [ 355.158194][ T4016] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 355.161374][ T29] audit: type=1400 audit(354.850:218): avc: denied { ioctl } for pid=4010 comm="syz.1.195" path="/dev/dri/card0" dev="devtmpfs" ino=618 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 359.205486][ T29] audit: type=1400 audit(358.900:219): avc: denied { write } for pid=4044 comm="syz.1.209" name="igmp" dev="proc" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 359.251409][ T4045] ALSA: mixer_oss: invalid OSS volume '' [ 359.252661][ T4045] ALSA: mixer_oss: invalid OSS volume '1' [ 359.253650][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.254775][ T4045] ALSA: mixer_oss: invalid OSS volume '2' [ 359.256736][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.257797][ T4045] ALSA: mixer_oss: invalid OSS volume '3' [ 359.258606][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.259615][ T4045] ALSA: mixer_oss: invalid OSS volume '4' [ 359.261394][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.262223][ T4045] ALSA: mixer_oss: invalid OSS volume '5' [ 359.263083][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.263922][ T4045] ALSA: mixer_oss: invalid OSS volume '6' [ 359.264677][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.265433][ T4045] ALSA: mixer_oss: invalid OSS volume '7' [ 359.266299][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.268335][ T4045] ALSA: mixer_oss: invalid OSS volume '8' [ 359.269415][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.271117][ T4045] ALSA: mixer_oss: invalid OSS volume '9' [ 359.272247][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.273149][ T4045] ALSA: mixer_oss: invalid OSS volume '10' [ 359.273892][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.274701][ T4045] ALSA: mixer_oss: invalid OSS volume '11' [ 359.275408][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.276111][ T4045] ALSA: mixer_oss: invalid OSS volume '12' [ 359.276863][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.277669][ T4045] ALSA: mixer_oss: invalid OSS volume '13' [ 359.279552][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.281651][ T4045] ALSA: mixer_oss: invalid OSS volume '14' [ 359.282400][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.283202][ T4045] ALSA: mixer_oss: invalid OSS volume '15' [ 359.283939][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.284747][ T4045] ALSA: mixer_oss: invalid OSS volume '16' [ 359.285484][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.286206][ T4045] ALSA: mixer_oss: invalid OSS volume '17' [ 359.287037][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.287901][ T4045] ALSA: mixer_oss: invalid OSS volume '18' [ 359.288610][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.290971][ T4045] ALSA: mixer_oss: invalid OSS volume '19' [ 359.291982][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.292746][ T4045] ALSA: mixer_oss: invalid OSS volume '20' [ 359.293432][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.294265][ T4045] ALSA: mixer_oss: invalid OSS volume '21' [ 359.295117][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.295968][ T4045] ALSA: mixer_oss: invalid OSS volume '22' [ 359.296780][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.297548][ T4045] ALSA: mixer_oss: invalid OSS volume '23' [ 359.298369][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.299218][ T4045] ALSA: mixer_oss: invalid OSS volume '24' [ 359.313804][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.314678][ T4045] ALSA: mixer_oss: invalid OSS volume '25' [ 359.314892][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.315090][ T4045] ALSA: mixer_oss: invalid OSS volume '26' [ 359.315277][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.315460][ T4045] ALSA: mixer_oss: invalid OSS volume '27' [ 359.315639][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.315713][ T4045] ALSA: mixer_oss: invalid OSS volume '28' [ 359.315783][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.315884][ T4045] ALSA: mixer_oss: invalid OSS volume '29' [ 359.315959][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.316025][ T4045] ALSA: mixer_oss: invalid OSS volume '30' [ 359.316097][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.316164][ T4045] ALSA: mixer_oss: invalid OSS volume '31' [ 359.316244][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.316313][ T4045] ALSA: mixer_oss: invalid OSS volume '32' [ 359.316381][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.316448][ T4045] ALSA: mixer_oss: invalid OSS volume '34' [ 359.316514][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.316590][ T4045] ALSA: mixer_oss: invalid OSS volume '36' [ 359.316662][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.316741][ T4045] ALSA: mixer_oss: invalid OSS volume '37' [ 359.316810][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.316881][ T4045] ALSA: mixer_oss: invalid OSS volume '38' [ 359.316955][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.317028][ T4045] ALSA: mixer_oss: invalid OSS volume '39' [ 359.317120][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.317193][ T4045] ALSA: mixer_oss: invalid OSS volume '40' [ 359.317268][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.317341][ T4045] ALSA: mixer_oss: invalid OSS volume '41' [ 359.317413][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.317485][ T4045] ALSA: mixer_oss: invalid OSS volume '42' [ 359.317556][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.317629][ T4045] ALSA: mixer_oss: invalid OSS volume '43' [ 359.317708][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.317779][ T4045] ALSA: mixer_oss: invalid OSS volume '44' [ 359.317848][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.317914][ T4045] ALSA: mixer_oss: invalid OSS volume '45' [ 359.317979][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.318051][ T4045] ALSA: mixer_oss: invalid OSS volume '46' [ 359.318138][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.318242][ T4045] ALSA: mixer_oss: invalid OSS volume '47' [ 359.318329][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.318399][ T4045] ALSA: mixer_oss: invalid OSS volume '48' [ 359.318470][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.318539][ T4045] ALSA: mixer_oss: invalid OSS volume '49' [ 359.318652][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.318726][ T4045] ALSA: mixer_oss: invalid OSS volume '50' [ 359.318800][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.318867][ T4045] ALSA: mixer_oss: invalid OSS volume '51' [ 359.318949][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.319026][ T4045] ALSA: mixer_oss: invalid OSS volume '52' [ 359.319115][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.319242][ T4045] ALSA: mixer_oss: invalid OSS volume '53' [ 359.319321][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.319421][ T4045] ALSA: mixer_oss: invalid OSS volume '56' [ 359.319494][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.385199][ T4045] ALSA: mixer_oss: invalid OSS volume '57' [ 359.385489][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.385569][ T4045] ALSA: mixer_oss: invalid OSS volume '58' [ 359.385642][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.385714][ T4045] ALSA: mixer_oss: invalid OSS volume '59' [ 359.385786][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.385853][ T4045] ALSA: mixer_oss: invalid OSS volume '60' [ 359.385949][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.386027][ T4045] ALSA: mixer_oss: invalid OSS volume '61' [ 359.386113][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.386187][ T4045] ALSA: mixer_oss: invalid OSS volume '62' [ 359.386259][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.386327][ T4045] ALSA: mixer_oss: invalid OSS volume '63' [ 359.386395][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.386465][ T4045] ALSA: mixer_oss: invalid OSS volume '64' [ 359.386550][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.386659][ T4045] ALSA: mixer_oss: invalid OSS volume '65' [ 359.386742][ T4045] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 359.386987][ T4045] ALSA: mixer_oss: invalid OSS volume '' [ 361.524760][ T29] audit: type=1400 audit(361.220:220): avc: denied { name_bind } for pid=4054 comm="syz.1.214" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 365.791546][ T29] audit: type=1400 audit(365.480:221): avc: denied { getopt } for pid=4058 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 368.266729][ T29] audit: type=1400 audit(367.960:222): avc: denied { read write } for pid=4071 comm="syz.0.219" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 368.272458][ T29] audit: type=1400 audit(367.960:223): avc: denied { open } for pid=4071 comm="syz.0.219" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 369.627353][ T29] audit: type=1400 audit(369.320:224): avc: denied { unmount } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 378.082567][ T805] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 378.477009][ T805] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 378.484875][ T805] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 378.530665][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.534213][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.539503][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.566467][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.571323][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.572792][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.599230][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.607948][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.608929][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.656735][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.658641][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.662077][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.678687][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.680380][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.681733][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.713396][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.714658][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.715946][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.755098][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.756308][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.759022][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.777870][ T805] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.779132][ T805] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.781530][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.818781][ T805] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 378.821365][ T805] usb 1-1: Product: syz [ 378.823133][ T805] usb 1-1: Manufacturer: syz [ 378.823993][ T805] usb 1-1: SerialNumber: syz [ 378.896313][ T805] usb 1-1: config 0 descriptor?? [ 379.207232][ T805] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 379.565107][ T805] usb 1-1: USB disconnect, device number 2 [ 379.659535][ T805] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 380.017130][ T4106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 380.406177][ T4106] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 381.281424][ T29] audit: type=1400 audit(380.970:225): avc: denied { create } for pid=4113 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 381.313023][ T4114] mmap: syz.0.232 (4114) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 382.378840][ T4123] xt_hashlimit: size too large, truncated to 1048576 [ 385.081716][ T29] audit: type=1400 audit(384.770:226): avc: denied { allowed } for pid=4136 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 385.097429][ T29] audit: type=1400 audit(384.790:227): avc: denied { create } for pid=4136 comm="syz.1.241" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 385.108242][ T29] audit: type=1400 audit(384.800:228): avc: denied { map } for pid=4136 comm="syz.1.241" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 385.108884][ T29] audit: type=1400 audit(384.800:229): avc: denied { read write } for pid=4136 comm="syz.1.241" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 391.286952][ T4163] xt_hashlimit: size too large, truncated to 1048576 [ 391.304068][ T4163] xt_hashlimit: max too large, truncated to 1048576 [ 391.306838][ T4163] xt_hashlimit: Unknown mode mask B2F8C501, kernel too old? [ 391.848858][ T4165] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 399.576239][ T4185] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 400.002941][ T4185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.177638][ T4185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.179627][ T4185] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 400.192080][ T4185] bond2: (slave gre1): Error -95 calling set_mac_address [ 400.952068][ T1971] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 401.227193][ T1971] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 401.263764][ T1971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.392248][ T1971] usb 1-1: config 0 descriptor?? [ 401.922354][ T1971] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 402.118641][ T4185] loop7: detected capacity change from 0 to 16384 [ 405.440812][ T1971] [drm:udl_init] *ERROR* Selecting channel failed [ 405.491932][ T1971] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 405.493169][ T1971] [drm] Initialized udl on minor 2 [ 405.501526][ T1971] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 405.508763][ T1971] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 405.526880][ T1971] usb 1-1: USB disconnect, device number 3 [ 405.547735][ T805] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 413.011251][ T29] audit: type=1400 audit(412.700:230): avc: denied { read } for pid=4192 comm="syz.0.262" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 413.062253][ T29] audit: type=1400 audit(412.750:231): avc: denied { open } for pid=4192 comm="syz.0.262" path="/dev/mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 413.082952][ T29] audit: type=1400 audit(412.780:232): avc: denied { ioctl } for pid=4192 comm="syz.0.262" path="/dev/mtd0" dev="devtmpfs" ino=683 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 428.256859][ T4229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.307645][ T4229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.705215][ T29] audit: type=1400 audit(433.400:233): avc: denied { bind } for pid=4251 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 443.006205][ T4272] ALSA: mixer_oss: invalid OSS volume '' [ 448.391358][ T29] audit: type=1400 audit(448.080:234): avc: denied { create } for pid=4283 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 448.453017][ T29] audit: type=1400 audit(448.140:235): avc: denied { write } for pid=4283 comm="syz.1.301" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 451.133652][ T29] audit: type=1400 audit(450.830:236): avc: denied { block_suspend } for pid=4292 comm="syz.1.303" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 463.878497][ T29] audit: type=1400 audit(463.570:237): avc: denied { ioctl } for pid=4325 comm="syz.0.314" path="socket:[7618]" dev="sockfs" ino=7618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 466.706332][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.318'. [ 469.477251][ T4342] process 'syz.0.321' launched '/dev/fd/6' with NULL argv: empty string added [ 469.512090][ T29] audit: type=1400 audit(469.190:238): avc: denied { execute_no_trans } for pid=4339 comm="syz.0.321" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 469.735890][ T29] audit: type=1400 audit(469.430:239): avc: denied { write } for pid=4339 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.746024][ T29] audit: type=1400 audit(469.440:240): avc: denied { nlmsg_write } for pid=4339 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 471.253160][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 473.086377][ T29] audit: type=1400 audit(472.780:241): avc: denied { map } for pid=4345 comm="syz.1.323" path="socket:[7686]" dev="sockfs" ino=7686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 483.328893][ T29] audit: type=1400 audit(483.020:242): avc: denied { read write } for pid=4358 comm="syz.0.327" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.353543][ T29] audit: type=1400 audit(483.050:243): avc: denied { open } for pid=4358 comm="syz.0.327" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 488.858186][ T29] audit: type=1400 audit(488.550:244): avc: denied { ioctl } for pid=4377 comm="syz.0.334" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7785 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 489.859110][ T29] audit: type=1400 audit(489.550:245): avc: denied { write } for pid=4379 comm="syz.0.335" name="renderD128" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 500.625696][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 500.810805][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 500.818026][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.848230][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 500.848938][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 500.849103][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 500.854779][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 500.855252][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 500.855559][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.855780][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.235871][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 501.236571][ T9] usbtmc 1-1:16.0: can't read capabilities [ 501.531207][ T4102] usb 1-1: USB disconnect, device number 4 [ 503.658379][ T29] audit: type=1400 audit(503.350:246): avc: denied { write } for pid=4408 comm="syz.0.346" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 517.153939][ T4425] syzkaller0: entered promiscuous mode [ 517.154779][ T4425] syzkaller0: entered allmulticast mode [ 517.900355][ T29] audit: type=1400 audit(517.590:247): avc: denied { name_bind } for pid=4427 comm="syz.1.353" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 519.958111][ T29] audit: type=1400 audit(519.650:248): avc: denied { read write } for pid=4430 comm="syz.1.354" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 519.968257][ T29] audit: type=1400 audit(519.660:249): avc: denied { open } for pid=4430 comm="syz.1.354" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 520.004122][ T29] audit: type=1400 audit(519.690:250): avc: denied { ioctl } for pid=4430 comm="syz.1.354" path="/dev/uinput" dev="devtmpfs" ino=709 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 536.998368][ T4447] 8021q: adding VLAN 0 to HW filter on device eth0 [ 537.125293][ T4447] 8021q: adding VLAN 0 to HW filter on device eth1 [ 537.235690][ T4447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 537.299214][ T4447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 537.328361][ T4447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.391410][ T4447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.296990][ T29] audit: type=1400 audit(540.990:251): avc: denied { read write } for pid=4466 comm="syz.0.363" name="vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 541.304827][ T29] audit: type=1400 audit(540.990:252): avc: denied { open } for pid=4466 comm="syz.0.363" path="/dev/vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 541.375784][ T29] audit: type=1400 audit(541.070:253): avc: denied { ioctl } for pid=4466 comm="syz.0.363" path="/dev/vhost-net" dev="devtmpfs" ino=716 ioctlcmd=0xaf02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 544.858243][ T29] audit: type=1400 audit(544.550:254): avc: denied { read } for pid=4481 comm="syz.1.371" name="usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 544.891323][ T29] audit: type=1400 audit(544.580:255): avc: denied { open } for pid=4481 comm="syz.1.371" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 545.071861][ T29] audit: type=1400 audit(544.760:256): avc: denied { map } for pid=4481 comm="syz.1.371" path="/dev/usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 545.864596][ T4490] capability: warning: `syz.0.373' uses 32-bit capabilities (legacy support in use) [ 546.934905][ T29] audit: type=1400 audit(546.630:257): avc: denied { setopt } for pid=4481 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 550.907429][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 550.916577][ T29] audit: type=1400 audit(550.610:258): avc: denied { bind } for pid=4507 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 550.939173][ T29] audit: type=1400 audit(550.630:259): avc: denied { write } for pid=4507 comm="syz.0.379" name="001" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 551.758367][ T29] audit: type=1400 audit(551.450:260): avc: denied { mounton } for pid=4512 comm="syz.0.382" path="/212/file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 554.535079][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 555.101798][ T29] audit: type=1400 audit(554.790:261): avc: denied { create } for pid=4530 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 555.155903][ T29] audit: type=1400 audit(554.820:262): avc: denied { bind } for pid=4530 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 555.653149][ T4535] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 557.434185][ T4543] netlink: 100 bytes leftover after parsing attributes in process `syz.1.395'. [ 559.742979][ T29] audit: type=1400 audit(559.440:263): avc: denied { ioctl } for pid=4553 comm="syz.1.400" path="socket:[8261]" dev="sockfs" ino=8261 ioctlcmd=0x8970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 562.469105][ T29] audit: type=1400 audit(562.160:264): avc: denied { setopt } for pid=4565 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 567.277081][ T29] audit: type=1400 audit(566.970:265): avc: denied { read } for pid=4598 comm="syz.0.417" path="socket:[9244]" dev="sockfs" ino=9244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 573.288776][ T4624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'. [ 573.481147][ T29] audit: type=1400 audit(573.170:266): avc: denied { create } for pid=4625 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.388598][ T4632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 576.432942][ T29] audit: type=1400 audit(576.120:267): avc: denied { ioctl } for pid=4644 comm="syz.0.437" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 576.447448][ T29] audit: type=1400 audit(576.130:268): avc: denied { set_context_mgr } for pid=4644 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 576.555344][ T29] audit: type=1400 audit(576.250:269): avc: denied { map } for pid=4644 comm="syz.0.437" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 576.626809][ T4645] binder: 4644:4645 tried to acquire reference to desc 0, got 1 instead [ 576.699363][ T29] audit: type=1400 audit(576.390:270): avc: denied { call } for pid=4644 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 576.754101][ T4645] binder: 4644:4645 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 576.822865][ T4645] binder: 4645 RLIMIT_NICE not set [ 576.844424][ T4645] binder: 4645 RLIMIT_NICE not set [ 576.903627][ T4645] binder: 4645 RLIMIT_NICE not set [ 576.909113][ T4645] binder: 4644:4645 got reply with fd, 3, but target does not allow fds [ 576.925169][ T4645] binder: 4645:4644 translate fd failed [ 576.932542][ T4645] binder: 4644:4645 transaction reply to 4644:4645 failed 6/29201/-1, code 0 size 72-24 line 3593 [ 576.935954][ T4645] binder: send failed reply for transaction 5 to 4644:4645 [ 576.986555][ T1971] binder: undelivered TRANSACTION_COMPLETE [ 576.993751][ T1971] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.004869][ T1971] binder: undelivered TRANSACTION_ERROR: 29190 [ 577.772268][ T4652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.778831][ T4652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.645389][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 579.601244][ T4667] veth1_virt_wifi: entered allmulticast mode [ 581.173776][ T29] audit: type=1400 audit(580.870:271): avc: denied { cmd } for pid=4671 comm="iou-wrk-4672" path="socket:[8504]" dev="sockfs" ino=8504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 586.895829][ T29] audit: type=1400 audit(586.590:272): avc: denied { read } for pid=4686 comm="syz.1.453" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 586.914244][ T29] audit: type=1400 audit(586.610:273): avc: denied { open } for pid=4686 comm="syz.1.453" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 586.999165][ T4687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.005153][ T4687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.245441][ T4687] netlink: 10184 bytes leftover after parsing attributes in process `syz.1.453'. [ 587.247935][ T4687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 591.988111][ T29] audit: type=1400 audit(591.650:274): avc: denied { checkpoint_restore } for pid=4695 comm="syz.0.457" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 600.581283][ T29] audit: type=1400 audit(600.270:275): avc: denied { unmount } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 600.628239][ T29] audit: type=1400 audit(600.310:276): avc: denied { mount } for pid=4721 comm="syz.1.468" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 600.708927][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.736873][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.917132][ T29] audit: type=1400 audit(600.610:277): avc: denied { unmount } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 601.188911][ T4724] Illegal XDP return value 4294967283 on prog (id 25) dev N/A, expect packet loss! [ 602.328059][ T4734] syz.0.473 (4734): /proc/4733/oom_adj is deprecated, please use /proc/4733/oom_score_adj instead. [ 603.414787][ T4741] netlink: 108 bytes leftover after parsing attributes in process `syz.0.476'. [ 603.458972][ T4741] netlink: 108 bytes leftover after parsing attributes in process `syz.0.476'. [ 604.187998][ T4743] FAULT_INJECTION: forcing a failure. [ 604.187998][ T4743] name failslab, interval 1, probability 0, space 0, times 1 [ 604.188918][ T4743] CPU: 0 UID: 60928 PID: 4743 Comm: syz.0.477 Tainted: G W syzkaller #0 PREEMPT [ 604.189016][ T4743] Tainted: [W]=WARN [ 604.189044][ T4743] Hardware name: linux,dummy-virt (DT) [ 604.189096][ T4743] Call trace: [ 604.189189][ T4743] show_stack+0x18/0x24 (C) [ 604.189429][ T4743] dump_stack_lvl+0x7c/0xb0 [ 604.189609][ T4743] dump_stack+0x1c/0x28 [ 604.189724][ T4743] should_fail_ex+0x6b4/0x6c4 [ 604.189843][ T4743] should_failslab+0xbc/0x120 [ 604.189960][ T4743] __kmalloc_cache_noprof+0x3ec/0x628 [ 604.190079][ T4743] copy_time_ns+0xbc/0x470 [ 604.190203][ T4743] create_new_namespaces+0x33c/0x7f4 [ 604.190413][ T4743] unshare_nsproxy_namespaces+0x88/0x184 [ 604.190552][ T4743] ksys_unshare+0x2ac/0x6e0 [ 604.190701][ T4743] __arm64_sys_unshare+0x34/0x50 [ 604.190812][ T4743] invoke_syscall+0x74/0x240 [ 604.190920][ T4743] el0_svc_common.constprop.0+0xac/0x230 [ 604.191031][ T4743] do_el0_svc+0x40/0x58 [ 604.191144][ T4743] el0_svc+0x58/0x2a4 [ 604.191262][ T4743] el0t_64_sync_handler+0xa0/0xe4 [ 604.191373][ T4743] el0t_64_sync+0x198/0x19c [ 613.491955][ T29] audit: type=1400 audit(613.170:278): avc: denied { create } for pid=4790 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 613.592336][ T29] audit: type=1400 audit(613.280:279): avc: denied { write } for pid=4790 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 623.618111][ T4830] ip_tables: iptables: counters copy to user failed while replacing table [ 625.711671][ T29] audit: type=1400 audit(625.390:280): avc: denied { mount } for pid=4835 comm="syz.1.511" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 645.250642][ T4872] binder: 4871:4872 ioctl 40046205 0 returned -22 [ 645.262227][ T4872] binder: 4871:4872 ioctl 80087601 0 returned -22 [ 648.572127][ T4888] binder: 4886:4888 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 648.576431][ T4888] binder: 4886:4888 ioctl c0306201 0 returned -14 [ 648.904999][ T4889] FAULT_INJECTION: forcing a failure. [ 648.904999][ T4889] name failslab, interval 1, probability 0, space 0, times 0 [ 648.911476][ T4889] CPU: 0 UID: 0 PID: 4889 Comm: syz.1.532 Tainted: G W syzkaller #0 PREEMPT [ 648.911714][ T4889] Tainted: [W]=WARN [ 648.911772][ T4889] Hardware name: linux,dummy-virt (DT) [ 648.911843][ T4889] Call trace: [ 648.911909][ T4889] show_stack+0x18/0x24 (C) [ 648.912099][ T4889] dump_stack_lvl+0x7c/0xb0 [ 648.912239][ T4889] dump_stack+0x1c/0x28 [ 648.912352][ T4889] should_fail_ex+0x6b4/0x6c4 [ 648.912484][ T4889] should_failslab+0xbc/0x120 [ 648.912610][ T4889] __kmalloc_node_track_caller_noprof+0xe8/0x754 [ 648.912735][ T4889] kmemdup_noprof+0x34/0x60 [ 648.912862][ T4889] sidtab_sid2str_get+0x11c/0x350 [ 648.912990][ T4889] sidtab_entry_to_string+0x40/0x120 [ 648.913109][ T4889] security_sid_to_context_core+0x250/0x430 [ 648.913236][ T4889] security_sid_to_context+0x18/0x24 [ 648.913352][ T4889] avc_audit_post_callback+0xf8/0x9e4 [ 648.913472][ T4889] common_lsm_audit+0x188/0x240 [ 648.913586][ T4889] slow_avc_audit+0xf0/0x16c [ 648.913700][ T4889] avc_has_perm+0x144/0x168 [ 648.913810][ T4889] selinux_mmap_addr+0xb0/0xe0 [ 648.913923][ T4889] security_mmap_addr+0x74/0x148 [ 648.914047][ T4889] __get_unmapped_area+0x134/0x280 [ 648.914180][ T4889] do_mmap+0x368/0x13a0 [ 648.914297][ T4889] vm_mmap_pgoff+0x1f4/0x348 [ 648.914404][ T4889] ksys_mmap_pgoff+0x50/0x684 [ 648.914523][ T4889] __arm64_sys_mmap+0xd0/0x148 [ 648.914692][ T4889] invoke_syscall+0x74/0x240 [ 648.914816][ T4889] el0_svc_common.constprop.0+0xac/0x230 [ 648.914933][ T4889] do_el0_svc+0x40/0x58 [ 648.915039][ T4889] el0_svc+0x58/0x2a4 [ 648.915172][ T4889] el0t_64_sync_handler+0xa0/0xe4 [ 648.915282][ T4889] el0t_64_sync+0x198/0x19c [ 648.961277][ T29] audit: type=1400 audit(648.600:281): avc: denied { mmap_zero } for pid=4887 comm="syz.1.532" ssid=133 tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 649.864817][ T29] audit: type=1400 audit(649.560:282): avc: denied { nlmsg_write } for pid=4895 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 651.041040][ T29] audit: type=1400 audit(650.730:283): avc: denied { create } for pid=4900 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 651.280432][ T4904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.286591][ T4904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.604139][ T29] audit: type=1400 audit(652.300:284): avc: denied { setopt } for pid=4913 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 655.793850][ T4925] binder: 4924:4925 ioctl 40046205 0 returned -22 [ 658.768701][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.788770][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.038311][ T4942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.554'. [ 659.039177][ T4942] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 659.039384][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 660.501804][ T4952] FAULT_INJECTION: forcing a failure. [ 660.501804][ T4952] name failslab, interval 1, probability 0, space 0, times 0 [ 660.504928][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: syz.1.559 Tainted: G W syzkaller #0 PREEMPT [ 660.505029][ T4952] Tainted: [W]=WARN [ 660.505057][ T4952] Hardware name: linux,dummy-virt (DT) [ 660.505101][ T4952] Call trace: [ 660.505133][ T4952] show_stack+0x18/0x24 (C) [ 660.505229][ T4952] dump_stack_lvl+0x7c/0xb0 [ 660.505286][ T4952] dump_stack+0x1c/0x28 [ 660.505338][ T4952] should_fail_ex+0x6b4/0x6c4 [ 660.505399][ T4952] should_failslab+0xbc/0x120 [ 660.505457][ T4952] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 660.505513][ T4952] shmem_alloc_inode+0x20/0x40 [ 660.505567][ T4952] alloc_inode+0x58/0x1c0 [ 660.505629][ T4952] new_inode+0x14/0x160 [ 660.505680][ T4952] shmem_get_inode+0x1a4/0xc14 [ 660.505731][ T4952] __shmem_file_setup+0x254/0x354 [ 660.505782][ T4952] shmem_zero_setup+0x84/0x14c [ 660.505836][ T4952] __mmap_region+0x11f0/0x1c20 [ 660.505888][ T4952] mmap_region+0x220/0x4d0 [ 660.505938][ T4952] do_mmap+0x9d0/0x13a0 [ 660.505993][ T4952] vm_mmap_pgoff+0x1f4/0x348 [ 660.506046][ T4952] ksys_mmap_pgoff+0x50/0x684 [ 660.506107][ T4952] __arm64_sys_mmap+0xd0/0x148 [ 660.506164][ T4952] invoke_syscall+0x74/0x240 [ 660.506219][ T4952] el0_svc_common.constprop.0+0xac/0x230 [ 660.506274][ T4952] do_el0_svc+0x40/0x58 [ 660.506325][ T4952] el0_svc+0x58/0x2a4 [ 660.506383][ T4952] el0t_64_sync_handler+0xa0/0xe4 [ 660.506435][ T4952] el0t_64_sync+0x198/0x19c [ 665.068350][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.085989][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.108708][ T5051] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 675.851309][ T5061] FAULT_INJECTION: forcing a failure. [ 675.851309][ T5061] name failslab, interval 1, probability 0, space 0, times 0 [ 675.852007][ T5061] CPU: 0 UID: 0 PID: 5061 Comm: syz.1.580 Tainted: G W syzkaller #0 PREEMPT [ 675.852104][ T5061] Tainted: [W]=WARN [ 675.852133][ T5061] Hardware name: linux,dummy-virt (DT) [ 675.852167][ T5061] Call trace: [ 675.852197][ T5061] show_stack+0x18/0x24 (C) [ 675.852296][ T5061] dump_stack_lvl+0x7c/0xb0 [ 675.852399][ T5061] dump_stack+0x1c/0x28 [ 675.852454][ T5061] should_fail_ex+0x6b4/0x6c4 [ 675.852517][ T5061] should_failslab+0xbc/0x120 [ 675.852591][ T5061] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 675.852650][ T5061] __d_alloc+0x38/0x98c [ 675.852707][ T5061] d_alloc_pseudo+0x14/0xb8 [ 675.852760][ T5061] alloc_file_pseudo+0xf4/0x23c [ 675.852817][ T5061] __shmem_file_setup+0x2d8/0x354 [ 675.852873][ T5061] shmem_zero_setup+0x84/0x14c [ 675.852926][ T5061] __mmap_region+0x11f0/0x1c20 [ 675.852978][ T5061] mmap_region+0x220/0x4d0 [ 675.853027][ T5061] do_mmap+0x9d0/0x13a0 [ 675.853088][ T5061] vm_mmap_pgoff+0x1f4/0x348 [ 675.853142][ T5061] ksys_mmap_pgoff+0x50/0x684 [ 675.853195][ T5061] __arm64_sys_mmap+0xd0/0x148 [ 675.853248][ T5061] invoke_syscall+0x74/0x240 [ 675.853302][ T5061] el0_svc_common.constprop.0+0xac/0x230 [ 675.853355][ T5061] do_el0_svc+0x40/0x58 [ 675.853407][ T5061] el0_svc+0x58/0x2a4 [ 675.853487][ T5061] el0t_64_sync_handler+0xa0/0xe4 [ 675.853566][ T5061] el0t_64_sync+0x198/0x19c [ 677.607889][ T29] audit: type=1400 audit(677.300:285): avc: denied { mount } for pid=5066 comm="syz.1.582" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 677.731479][ T29] audit: type=1400 audit(677.420:286): avc: denied { unmount } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 677.988636][ T29] audit: type=1400 audit(677.680:287): avc: denied { map } for pid=5068 comm="syz.1.583" path="socket:[10089]" dev="sockfs" ino=10089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 677.995763][ T29] audit: type=1400 audit(677.690:288): avc: denied { read } for pid=5068 comm="syz.1.583" path="socket:[10089]" dev="sockfs" ino=10089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 678.762398][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.793350][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.161387][ T5074] FAULT_INJECTION: forcing a failure. [ 679.161387][ T5074] name failslab, interval 1, probability 0, space 0, times 0 [ 679.162896][ T5074] CPU: 0 UID: 0 PID: 5074 Comm: syz.1.585 Tainted: G W syzkaller #0 PREEMPT [ 679.162981][ T5074] Tainted: [W]=WARN [ 679.163009][ T5074] Hardware name: linux,dummy-virt (DT) [ 679.163041][ T5074] Call trace: [ 679.163069][ T5074] show_stack+0x18/0x24 (C) [ 679.163174][ T5074] dump_stack_lvl+0x7c/0xb0 [ 679.163230][ T5074] dump_stack+0x1c/0x28 [ 679.163282][ T5074] should_fail_ex+0x6b4/0x6c4 [ 679.163343][ T5074] should_failslab+0xbc/0x120 [ 679.163401][ T5074] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 679.163458][ T5074] __d_alloc+0x38/0x98c [ 679.163514][ T5074] d_alloc_pseudo+0x14/0xb8 [ 679.163568][ T5074] alloc_file_pseudo+0xf4/0x23c [ 679.163625][ T5074] __shmem_file_setup+0x2d8/0x354 [ 679.163680][ T5074] shmem_zero_setup+0x84/0x14c [ 679.163735][ T5074] __mmap_region+0x11f0/0x1c20 [ 679.163786][ T5074] mmap_region+0x220/0x4d0 [ 679.163835][ T5074] do_mmap+0x9d0/0x13a0 [ 679.163889][ T5074] vm_mmap_pgoff+0x1f4/0x348 [ 679.163942][ T5074] ksys_mmap_pgoff+0x50/0x684 [ 679.163996][ T5074] __arm64_sys_mmap+0xd0/0x148 [ 679.164050][ T5074] invoke_syscall+0x74/0x240 [ 679.164104][ T5074] el0_svc_common.constprop.0+0xac/0x230 [ 679.164165][ T5074] do_el0_svc+0x40/0x58 [ 679.164217][ T5074] el0_svc+0x58/0x2a4 [ 679.164276][ T5074] el0t_64_sync_handler+0xa0/0xe4 [ 679.164327][ T5074] el0t_64_sync+0x198/0x19c [ 680.587920][ T29] audit: type=1400 audit(680.280:289): avc: denied { mount } for pid=5079 comm="syz.1.588" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 680.603614][ T29] audit: type=1400 audit(680.290:290): avc: denied { search } for pid=5079 comm="syz.1.588" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 680.605767][ T29] audit: type=1400 audit(680.300:291): avc: denied { search } for pid=5079 comm="syz.1.588" name="usb_gadget" dev="configfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 680.704289][ T29] audit: type=1400 audit(680.380:292): avc: denied { unmount } for pid=3387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 685.207334][ T5088] FAULT_INJECTION: forcing a failure. [ 685.207334][ T5088] name failslab, interval 1, probability 0, space 0, times 0 [ 685.213570][ T5088] CPU: 0 UID: 0 PID: 5088 Comm: syz.0.590 Tainted: G W syzkaller #0 PREEMPT [ 685.213799][ T5088] Tainted: [W]=WARN [ 685.213858][ T5088] Hardware name: linux,dummy-virt (DT) [ 685.213923][ T5088] Call trace: [ 685.213982][ T5088] show_stack+0x18/0x24 (C) [ 685.214188][ T5088] dump_stack_lvl+0x7c/0xb0 [ 685.214318][ T5088] dump_stack+0x1c/0x28 [ 685.214454][ T5088] should_fail_ex+0x6b4/0x6c4 [ 685.214613][ T5088] should_failslab+0xbc/0x120 [ 685.214784][ T5088] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 685.214910][ T5088] __d_alloc+0x38/0x98c [ 685.215041][ T5088] d_alloc_pseudo+0x14/0xb8 [ 685.215249][ T5088] alloc_file_pseudo+0xf4/0x23c [ 685.215390][ T5088] __shmem_file_setup+0x2d8/0x354 [ 685.215531][ T5088] shmem_zero_setup+0x84/0x14c [ 685.215649][ T5088] __mmap_region+0x11f0/0x1c20 [ 685.215781][ T5088] mmap_region+0x220/0x4d0 [ 685.215901][ T5088] do_mmap+0x9d0/0x13a0 [ 685.216018][ T5088] vm_mmap_pgoff+0x1f4/0x348 [ 685.216127][ T5088] ksys_mmap_pgoff+0x50/0x684 [ 685.216235][ T5088] __arm64_sys_mmap+0xd0/0x148 [ 685.216348][ T5088] invoke_syscall+0x74/0x240 [ 685.216474][ T5088] el0_svc_common.constprop.0+0xac/0x230 [ 685.216586][ T5088] do_el0_svc+0x40/0x58 [ 685.216696][ T5088] el0_svc+0x58/0x2a4 [ 685.216813][ T5088] el0t_64_sync_handler+0xa0/0xe4 [ 685.216920][ T5088] el0t_64_sync+0x198/0x19c [ 687.725721][ T5096] netlink: 10 bytes leftover after parsing attributes in process `syz.1.592'. [ 695.777345][ T29] audit: type=1400 audit(695.470:293): avc: denied { map_create } for pid=5111 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 695.797357][ T29] audit: type=1400 audit(695.490:294): avc: denied { map_read map_write } for pid=5111 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 695.851996][ T29] audit: type=1400 audit(695.520:295): avc: denied { prog_load } for pid=5111 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 695.896943][ T29] audit: type=1400 audit(695.590:296): avc: denied { prog_run } for pid=5111 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 697.027501][ T5115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.036613][ T5115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.708597][ T29] audit: type=1326 audit(707.400:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 707.729120][ T29] audit: type=1326 audit(707.410:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 707.730693][ T29] audit: type=1326 audit(707.420:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 707.731020][ T29] audit: type=1326 audit(707.420:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 707.731283][ T29] audit: type=1326 audit(707.420:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 707.742859][ T29] audit: type=1326 audit(707.440:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 707.750879][ T29] audit: type=1326 audit(707.440:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 707.753097][ T29] audit: type=1326 audit(707.440:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5132 comm="syz.1.606" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 711.723309][ T29] audit: type=1400 audit(711.420:305): avc: denied { create } for pid=5146 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 711.727241][ T29] audit: type=1400 audit(711.420:306): avc: denied { setopt } for pid=5146 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.904729][ T29] audit: type=1400 audit(713.600:307): avc: denied { search } for pid=5150 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.913891][ T29] audit: type=1400 audit(713.600:308): avc: denied { search } for pid=5150 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=928 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.919512][ T29] audit: type=1400 audit(713.600:309): avc: denied { search } for pid=5150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.927777][ T29] audit: type=1400 audit(713.600:310): avc: denied { search } for pid=5150 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.111394][ T29] audit: type=1400 audit(713.800:311): avc: denied { read } for pid=5153 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.122401][ T29] audit: type=1400 audit(713.800:312): avc: denied { read open } for pid=5153 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.126238][ T29] audit: type=1400 audit(713.810:313): avc: denied { getattr } for pid=5153 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.459123][ T29] audit: type=1400 audit(714.150:314): avc: denied { write } for pid=5150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.474124][ T29] audit: type=1400 audit(714.150:315): avc: denied { add_name } for pid=5150 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.186907][ T29] audit: type=1326 audit(714.880:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.1.614" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb79368 code=0x7ffc0000 [ 718.243715][ T5172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.267251][ T5172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.216024][ T5178] loop0: detected capacity change from 0 to 32768 [ 719.288989][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 719.293784][ T29] audit: type=1400 audit(718.980:348): avc: denied { read write } for pid=5177 comm="syz.0.623" name="control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 719.309488][ T29] audit: type=1400 audit(719.000:349): avc: denied { open } for pid=5177 comm="syz.0.623" path="/303/dev/mapper/control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 719.331330][ T29] audit: type=1400 audit(719.020:350): avc: denied { ioctl } for pid=5177 comm="syz.0.623" path="/303/dev/mapper/control" dev="devtmpfs" ino=712 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 721.029411][ T29] audit: type=1400 audit(720.700:351): avc: denied { validate_trans } for pid=5192 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 721.785480][ T29] audit: type=1400 audit(721.470:352): avc: denied { allowed } for pid=5195 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 723.282902][ T29] audit: type=1400 audit(722.980:353): avc: denied { read write } for pid=5201 comm="syz.1.629" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 723.288698][ T29] audit: type=1400 audit(722.980:354): avc: denied { open } for pid=5201 comm="syz.1.629" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 723.560882][ T805] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 723.685161][ T805] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 741.656005][ T29] audit: type=1400 audit(741.350:355): avc: denied { read } for pid=5224 comm="syz.1.637" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 741.662302][ T29] audit: type=1400 audit(741.350:356): avc: denied { open } for pid=5224 comm="syz.1.637" path="/dev/rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 741.688738][ T29] audit: type=1400 audit(741.380:357): avc: denied { ioctl } for pid=5224 comm="syz.1.637" path="/dev/rtc0" dev="devtmpfs" ino=710 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 742.295587][ T867] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 742.366422][ T867] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 744.766081][ T5237] fuse: Bad value for 'fd' [ 746.805302][ T5241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.855055][ T5241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.461427][ T5248] fuse: Bad value for 'fd' [ 767.326239][ T805] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 767.494958][ T805] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 777.086399][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.139278][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.003315][ T29] audit: type=1400 audit(782.690:358): avc: denied { map } for pid=5296 comm="syz.1.665" path="/345" dev="tmpfs" ino=1781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 783.122662][ T29] audit: type=1400 audit(782.810:359): avc: denied { setattr } for pid=3387 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 798.728585][ T29] audit: type=1400 audit(798.420:360): avc: denied { mount } for pid=5309 comm="syz.0.671" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 798.928128][ T29] audit: type=1400 audit(798.610:361): avc: denied { unmount } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 799.914762][ T29] audit: type=1400 audit(799.610:362): avc: denied { node_bind } for pid=5314 comm="syz.0.673" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 829.843239][ T29] audit: type=1400 audit(829.530:363): avc: denied { execute } for pid=5342 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 829.866748][ T29] audit: type=1400 audit(829.560:364): avc: denied { execute_no_trans } for pid=5342 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 829.973789][ T4458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.366688][ T4458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.752800][ T4458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.156363][ T4458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.332064][ T29] audit: type=1400 audit(833.030:365): avc: denied { read } for pid=3231 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 836.123955][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.245866][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.311625][ T29] audit: type=1400 audit(836.010:366): avc: denied { read } for pid=5359 comm="syz.0.685" name="set_event" dev="tracefs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 836.328517][ T4458] bond0 (unregistering): Released all slaves [ 837.387560][ T4458] hsr_slave_0: left promiscuous mode [ 837.462001][ T4458] hsr_slave_1: left promiscuous mode [ 837.673050][ T4458] veth1_macvtap: left promiscuous mode [ 837.687984][ T4458] veth0_macvtap: left promiscuous mode [ 837.692705][ T4458] veth1_vlan: left promiscuous mode [ 837.706096][ T4458] veth0_vlan: left promiscuous mode [ 845.635818][ T29] audit: type=1400 audit(845.330:367): avc: denied { write } for pid=5368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.600735][ T29] audit: type=1400 audit(846.290:368): avc: denied { write } for pid=5375 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.677451][ T3231] 8021q: adding VLAN 0 to HW filter on device eth1 [ 851.791520][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.908767][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.330236][ T29] audit: type=1400 audit(853.020:369): avc: denied { write } for pid=5396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.690517][ T29] audit: type=1400 audit(854.370:370): avc: denied { write } for pid=5401 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.216422][ T3231] 8021q: adding VLAN 0 to HW filter on device eth2 [ 858.665121][ T5343] hsr_slave_0: entered promiscuous mode [ 858.677276][ T5343] hsr_slave_1: entered promiscuous mode [ 858.756112][ T29] audit: type=1400 audit(858.450:371): avc: denied { write } for pid=5415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.553677][ T29] audit: type=1400 audit(859.250:372): avc: denied { write } for pid=5419 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.102388][ T3231] 8021q: adding VLAN 0 to HW filter on device eth3 [ 860.949658][ T5343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 861.008111][ T5343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.018493][ T5343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 861.051753][ T5343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.058274][ T5343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 861.123937][ T5343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.139466][ T5343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 861.184850][ T5343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.112639][ T29] audit: type=1400 audit(861.800:373): avc: denied { write } for pid=5430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.512848][ T29] audit: type=1400 audit(863.190:374): avc: denied { write } for pid=5437 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.842516][ T3231] 8021q: adding VLAN 0 to HW filter on device eth4 [ 865.462315][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.548598][ T29] audit: type=1400 audit(868.230:375): avc: denied { create } for pid=5452 comm="syz.0.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 868.713606][ T29] audit: type=1400 audit(868.400:376): avc: denied { sys_admin } for pid=5452 comm="syz.0.692" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 874.878539][ T29] audit: type=1400 audit(874.570:377): avc: denied { write } for pid=5465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.297009][ T29] audit: type=1400 audit(876.990:378): avc: denied { write } for pid=5479 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.139591][ T29] audit: type=1400 audit(883.820:379): avc: denied { write } for pid=5499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.925521][ T5343] veth0_vlan: entered promiscuous mode [ 885.094808][ T5343] veth1_vlan: entered promiscuous mode [ 885.661850][ T5343] veth0_macvtap: entered promiscuous mode [ 885.825247][ T5343] veth1_macvtap: entered promiscuous mode [ 885.954726][ T29] audit: type=1400 audit(885.640:380): avc: denied { write } for pid=5505 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.228454][ T4458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.233842][ T4458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.285403][ T4458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.286837][ T4458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.191651][ T29] audit: type=1400 audit(887.880:381): avc: denied { mounton } for pid=5343 comm="syz-executor" path="/syzkaller.QGmo57/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 890.022797][ T5520] syz.2.682 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 890.093019][ T29] audit: type=1400 audit(889.780:382): avc: denied { write } for pid=5514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 892.386109][ T5528] FAULT_INJECTION: forcing a failure. [ 892.386109][ T5528] name failslab, interval 1, probability 0, space 0, times 0 [ 892.386989][ T5528] CPU: 1 UID: 0 PID: 5528 Comm: syz.0.703 Tainted: G W syzkaller #0 PREEMPT [ 892.387158][ T5528] Tainted: [W]=WARN [ 892.387220][ T5528] Hardware name: linux,dummy-virt (DT) [ 892.387292][ T5528] Call trace: [ 892.387350][ T5528] show_stack+0x18/0x24 (C) [ 892.387582][ T5528] dump_stack_lvl+0x7c/0xb0 [ 892.387703][ T5528] dump_stack+0x1c/0x28 [ 892.387810][ T5528] should_fail_ex+0x6b4/0x6c4 [ 892.387935][ T5528] should_failslab+0xbc/0x120 [ 892.388084][ T5528] __kmalloc_noprof+0x4dc/0x74c [ 892.388197][ T5528] load_msg+0xf0/0x3a0 [ 892.388477][ T5528] do_msgsnd+0x120/0xfa0 [ 892.388659][ T5528] ksys_msgsnd+0xa8/0x104 [ 892.388792][ T5528] __arm64_sys_msgsnd+0x8c/0xd8 [ 892.388927][ T5528] invoke_syscall+0x74/0x240 [ 892.389159][ T5528] el0_svc_common.constprop.0+0xac/0x230 [ 892.389330][ T5528] do_el0_svc+0x40/0x58 [ 892.389481][ T5528] el0_svc+0x58/0x2a4 [ 892.389686][ T5528] el0t_64_sync_handler+0xa0/0xe4 [ 892.389840][ T5528] el0t_64_sync+0x198/0x19c [ 893.272716][ T29] audit: type=1400 audit(892.960:383): avc: denied { write } for pid=5527 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.248109][ T29] audit: type=1400 audit(894.940:384): avc: denied { getopt } for pid=5535 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 900.071178][ T29] audit: type=1400 audit(899.760:385): avc: denied { write } for pid=5545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.030531][ T29] audit: type=1400 audit(902.630:386): avc: denied { setopt } for pid=5552 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 904.441871][ T29] audit: type=1400 audit(904.130:387): avc: denied { write } for pid=5559 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.194133][ T29] audit: type=1400 audit(916.890:388): avc: denied { write } for pid=5580 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 917.211624][ T29] audit: type=1400 audit(916.900:389): avc: denied { read } for pid=5580 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 923.143782][ T5600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.223242][ T5600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.263772][ T29] audit: type=1400 audit(922.950:390): avc: denied { kexec_image_load } for pid=5597 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 941.156016][ T29] audit: type=1400 audit(940.780:391): avc: denied { write } for pid=5624 comm="syz.2.728" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 941.186692][ T5625] 0.flash: buffer write error (status timeout) [ 952.048184][ T5640] netlink: 52 bytes leftover after parsing attributes in process `syz.2.733'. [ 953.612664][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'. [ 967.261424][ T5671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.305764][ T5671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.852715][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.874014][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.948973][ T29] audit: type=1400 audit(972.640:392): avc: denied { mount } for pid=5698 comm="syz.2.755" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 973.039525][ T29] audit: type=1400 audit(972.730:393): avc: denied { unmount } for pid=5343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 973.921391][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.936939][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.055948][ T5712] ip_tables: iptables: counters copy to user failed while replacing table [ 987.324045][ T3532] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 987.374903][ T3532] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 988.267560][ T5766] fido_id[5766]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 989.683838][ T1971] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 989.753824][ T1971] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 992.204802][ T5780] fido_id[5780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 993.064598][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 993.184605][ T805] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 995.374918][ T5791] fido_id[5791]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1011.705908][ T29] audit: type=1400 audit(1011.400:394): avc: denied { mounton } for pid=5839 comm="syz.0.816" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1011.743821][ T5841] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1013.908652][ T5850] fuse: Unknown parameter 'user_i00000000000000000000' [ 1014.865921][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.004302][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.451964][ T5868] syzkaller0: entered promiscuous mode [ 1017.452764][ T5868] syzkaller0: entered allmulticast mode [ 1026.972817][ T5887] syz.0.836 (5887): drop_caches: 2 [ 1029.480818][ T29] audit: type=1400 audit(1029.170:395): avc: denied { write } for pid=5889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.178725][ T29] audit: type=1400 audit(1029.870:396): avc: denied { write } for pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.844440][ T5898] xt_hashlimit: size too large, truncated to 1048576 [ 1031.845297][ T5898] xt_hashlimit: max too large, truncated to 1048576 [ 1060.689052][ T29] audit: type=1400 audit(1060.370:397): avc: denied { unmount } for pid=5343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1061.291592][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.296454][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.677580][ T29] audit: type=1400 audit(1061.370:398): avc: denied { ioctl } for pid=5940 comm="syz.0.846" path="socket:[14035]" dev="sockfs" ino=14035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1068.798162][ T5966] syz_tun: entered allmulticast mode [ 1068.813966][ T5966] syz_tun: left allmulticast mode [ 1070.388973][ T5973] FAULT_INJECTION: forcing a failure. [ 1070.388973][ T5973] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.392749][ T5973] CPU: 1 UID: 0 PID: 5973 Comm: syz.2.855 Tainted: G W syzkaller #0 PREEMPT [ 1070.392932][ T5973] Tainted: [W]=WARN [ 1070.392984][ T5973] Hardware name: linux,dummy-virt (DT) [ 1070.393051][ T5973] Call trace: [ 1070.393125][ T5973] show_stack+0x18/0x24 (C) [ 1070.393308][ T5973] dump_stack_lvl+0x7c/0xb0 [ 1070.393430][ T5973] dump_stack+0x1c/0x28 [ 1070.393549][ T5973] should_fail_ex+0x6b4/0x6c4 [ 1070.393687][ T5973] should_failslab+0xbc/0x120 [ 1070.393808][ T5973] __kvmalloc_node_noprof+0x61c/0x8b8 [ 1070.393926][ T5973] io_alloc_cache_init+0x3c/0x158 [ 1070.394046][ T5973] io_futex_cache_init+0x20/0x38 [ 1070.394161][ T5973] io_uring_setup+0x530/0x173c [ 1070.394275][ T5973] __arm64_sys_io_uring_setup+0x94/0x1c0 [ 1070.394390][ T5973] invoke_syscall+0x74/0x240 [ 1070.394506][ T5973] el0_svc_common.constprop.0+0xac/0x230 [ 1070.394684][ T5973] do_el0_svc+0x40/0x58 [ 1070.394798][ T5973] el0_svc+0x58/0x2a4 [ 1070.394930][ T5973] el0t_64_sync_handler+0xa0/0xe4 [ 1070.395043][ T5973] el0t_64_sync+0x198/0x19c [ 1071.728197][ T29] audit: type=1400 audit(1071.420:399): avc: denied { execute } for pid=5976 comm="syz.2.857" path="/dev/audio1" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1081.138355][ T29] audit: type=1400 audit(1080.550:400): avc: denied { cmd } for pid=5984 comm="syz.2.860" path="socket:[14504]" dev="sockfs" ino=14504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1089.497713][ T29] audit: type=1400 audit(1089.190:401): avc: denied { write } for pid=6013 comm="syz.0.867" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1089.503490][ T6014] random: crng reseeded on system resumption [ 1089.504930][ T29] audit: type=1400 audit(1089.190:402): avc: denied { open } for pid=6013 comm="syz.0.867" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1089.573457][ T6014] netlink: 256 bytes leftover after parsing attributes in process `syz.0.867'. [ 1090.797636][ T29] audit: type=1400 audit(1090.490:403): avc: denied { bind } for pid=6020 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1090.817932][ T29] audit: type=1400 audit(1090.510:404): avc: denied { write } for pid=6020 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1091.528841][ T29] audit: type=1400 audit(1091.210:405): avc: denied { create } for pid=6025 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1091.529438][ T29] audit: type=1400 audit(1091.220:406): avc: denied { write } for pid=6025 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1091.828783][ T6029] netlink: 88 bytes leftover after parsing attributes in process `syz.0.874'. [ 1098.642483][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.655268][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.640839][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.661156][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.524421][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.546937][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.551223][ T6099] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 1123.551776][ T6099] binder: 6098:6099 ioctl 4018620d 20004a80 returned -1 [ 1129.083443][ T29] audit: type=1400 audit(1128.680:407): avc: denied { remount } for pid=6100 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1137.187268][ T29] audit: type=1400 audit(1136.880:408): avc: denied { create } for pid=6116 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1137.235610][ T29] audit: type=1400 audit(1136.930:409): avc: denied { ioctl } for pid=6116 comm="syz.2.903" path="socket:[14740]" dev="sockfs" ino=14740 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1138.356299][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.395562][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.994206][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.007943][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.246738][ T6137] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 1151.054572][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 1157.328419][ T29] audit: type=1400 audit(1156.810:410): avc: denied { read write } for pid=6158 comm="syz.2.919" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1157.412820][ T29] audit: type=1400 audit(1156.850:411): avc: denied { open } for pid=6158 comm="syz.2.919" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1166.432474][ T6190] FAULT_INJECTION: forcing a failure. [ 1166.432474][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.436133][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.0.926 Tainted: G W L syzkaller #0 PREEMPT [ 1166.436241][ T6190] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1166.436269][ T6190] Hardware name: linux,dummy-virt (DT) [ 1166.436303][ T6190] Call trace: [ 1166.436334][ T6190] show_stack+0x18/0x24 (C) [ 1166.436428][ T6190] dump_stack_lvl+0x7c/0xb0 [ 1166.436485][ T6190] dump_stack+0x1c/0x28 [ 1166.436537][ T6190] should_fail_ex+0x6b4/0x6c4 [ 1166.436598][ T6190] should_failslab+0xbc/0x120 [ 1166.436664][ T6190] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1166.436722][ T6190] __kernfs_new_node+0xd0/0x7c0 [ 1166.436777][ T6190] kernfs_new_node+0xe0/0x118 [ 1166.436827][ T6190] __kernfs_create_file+0x38/0x2e0 [ 1166.436878][ T6190] sysfs_add_file_mode_ns+0x160/0x380 [ 1166.436931][ T6190] internal_create_group+0x3b0/0xba0 [ 1166.436983][ T6190] internal_create_groups+0x80/0x138 [ 1166.437036][ T6190] sysfs_create_groups+0x18/0x24 [ 1166.437090][ T6190] device_add+0xa74/0x1380 [ 1166.437158][ T6190] wakeup_source_device_create+0x1fc/0x280 [ 1166.437216][ T6190] wakeup_source_sysfs_add+0x18/0x60 [ 1166.437270][ T6190] wakeup_source_register+0x23c/0x350 [ 1166.437322][ T6190] ep_create_wakeup_source+0x194/0x240 [ 1166.437379][ T6190] do_epoll_ctl_file+0x1400/0x29cc [ 1166.437432][ T6190] do_epoll_ctl+0xd4/0x15c [ 1166.437485][ T6190] __arm64_sys_epoll_ctl+0x114/0x184 [ 1166.437540][ T6190] invoke_syscall+0x74/0x240 [ 1166.437594][ T6190] el0_svc_common.constprop.0+0xac/0x230 [ 1166.437648][ T6190] do_el0_svc+0x40/0x58 [ 1166.437699][ T6190] el0_svc+0x58/0x2a4 [ 1166.437777][ T6190] el0t_64_sync_handler+0xa0/0xe4 [ 1166.437830][ T6190] el0t_64_sync+0x198/0x19c [ 1175.704427][ T29] audit: type=1400 audit(1175.400:412): avc: denied { connect } for pid=6223 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1184.968316][ T29] audit: type=1400 audit(1184.660:413): avc: denied { write } for pid=6254 comm="syz.2.952" name="usb_gadget" dev="configfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1184.985508][ T29] audit: type=1400 audit(1184.680:414): avc: denied { add_name } for pid=6254 comm="syz.2.952" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1184.995358][ T29] audit: type=1400 audit(1184.690:415): avc: denied { create } for pid=6254 comm="syz.2.952" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1185.036727][ T29] audit: type=1400 audit(1184.730:416): avc: denied { write } for pid=6254 comm="syz.2.952" name="strings" dev="configfs" ino=15613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1193.801883][ T29] audit: type=1400 audit(1193.480:417): avc: denied { sqpoll } for pid=6282 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1198.366302][ T6295] veth0: entered promiscuous mode [ 1198.402362][ T29] audit: type=1400 audit(1198.030:418): avc: denied { ioctl } for pid=6291 comm="syz.2.965" path="socket:[15025]" dev="sockfs" ino=15025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1199.668416][ T6291] veth0: left promiscuous mode [ 1223.532301][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 1224.324355][ T29] audit: type=1400 audit(1224.020:419): avc: denied { name_bind } for pid=6351 comm="syz.0.985" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1226.025831][ T29] audit: type=1400 audit(1225.720:420): avc: denied { create } for pid=6359 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1226.087999][ T29] audit: type=1400 audit(1225.780:421): avc: denied { connect } for pid=6359 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1260.883765][ T6400] syz_tun: entered allmulticast mode [ 1261.005831][ T6399] syz_tun: left allmulticast mode [ 1264.392462][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.398311][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.671075][ T29] audit: type=1400 audit(1264.360:422): avc: denied { write } for pid=6408 comm="syz.2.1005" name="usbmon0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1265.291588][ T6413] MPI: mpi too large (113288 bits) [ 1265.786485][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.798826][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.696310][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.703698][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.332711][ T6424] input: syz1 as /devices/virtual/input/input3 [ 1286.152276][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 1287.096758][ T6478] xt_hashlimit: size too large, truncated to 1048576 [ 1287.241867][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 1288.199551][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.217740][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.964363][ T29] audit: type=1326 audit(1290.660:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz.0.1036" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f79368 code=0x0 [ 1293.959070][ T6504] FAULT_INJECTION: forcing a failure. [ 1293.959070][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.972864][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.1037 Tainted: G W L syzkaller #0 PREEMPT [ 1293.973159][ T6504] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1293.973223][ T6504] Hardware name: linux,dummy-virt (DT) [ 1293.973288][ T6504] Call trace: [ 1293.973346][ T6504] show_stack+0x18/0x24 (C) [ 1293.973542][ T6504] dump_stack_lvl+0x7c/0xb0 [ 1293.973668][ T6504] dump_stack+0x1c/0x28 [ 1293.973783][ T6504] should_fail_ex+0x6b4/0x6c4 [ 1293.973910][ T6504] should_failslab+0xbc/0x120 [ 1293.974025][ T6504] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1293.974149][ T6504] do_getname_kernel+0x4c/0x1f0 [ 1293.974267][ T6504] kern_path+0x20/0x60 [ 1293.974371][ T6504] tomoyo_realpath_nofollow+0x7c/0xf8 [ 1293.974490][ T6504] tomoyo_find_next_domain+0x20c/0x16b4 [ 1293.974653][ T6504] tomoyo_bprm_check_security+0x110/0x194 [ 1293.974776][ T6504] security_bprm_check+0x58/0x148 [ 1293.974895][ T6504] bprm_execve+0x5c8/0x1220 [ 1293.975002][ T6504] do_execveat_common.isra.0+0x370/0x460 [ 1293.975114][ T6504] __arm64_sys_execve+0x9c/0xe0 [ 1293.975227][ T6504] invoke_syscall+0x74/0x240 [ 1293.975342][ T6504] el0_svc_common.constprop.0+0xac/0x230 [ 1293.975451][ T6504] do_el0_svc+0x40/0x58 [ 1293.975558][ T6504] el0_svc+0x58/0x2a4 [ 1293.975681][ T6504] el0t_64_sync_handler+0xa0/0xe4 [ 1293.975789][ T6504] el0t_64_sync+0x198/0x19c [ 1294.676015][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 1294.685821][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 1298.665086][ T29] audit: type=1400 audit(1298.350:424): avc: denied { write } for pid=6527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1299.803648][ T29] audit: type=1400 audit(1299.490:425): avc: denied { write } for pid=6532 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.224130][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.227516][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.478734][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.488872][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.327055][ T6549] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1307.938183][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 1307.946353][ T6567] FAULT_INJECTION: forcing a failure. [ 1307.946353][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.947414][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.0.1057 Tainted: G W L syzkaller #0 PREEMPT [ 1307.947585][ T6567] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1307.947660][ T6567] Hardware name: linux,dummy-virt (DT) [ 1307.947732][ T6567] Call trace: [ 1307.947791][ T6567] show_stack+0x18/0x24 (C) [ 1307.947968][ T6567] dump_stack_lvl+0x7c/0xb0 [ 1307.948087][ T6567] dump_stack+0x1c/0x28 [ 1307.948208][ T6567] should_fail_ex+0x6b4/0x6c4 [ 1307.948337][ T6567] should_failslab+0xbc/0x120 [ 1307.948485][ T6567] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1307.948618][ T6567] security_inode_alloc+0x28/0x200 [ 1307.948759][ T6567] inode_init_always_gfp+0x984/0xd64 [ 1307.948883][ T6567] alloc_inode+0x70/0x1c0 [ 1307.949008][ T6567] new_inode+0x14/0x160 [ 1307.949129][ T6567] bdev_alloc+0x2c/0x37c [ 1307.949256][ T6567] __alloc_disk_node+0xdc/0x4bc [ 1307.949377][ T6567] __blk_alloc_disk+0xb8/0x160 [ 1307.949497][ T6567] dm_create+0x43c/0x1054 [ 1307.949693][ T6567] dev_create+0xc4/0x234 [ 1307.949820][ T6567] ctl_ioctl+0x438/0xbbc [ 1307.949932][ T6567] dm_ctl_ioctl+0x10/0x20 [ 1307.950046][ T6567] __arm64_sys_ioctl+0x128/0x1a8 [ 1307.950172][ T6567] invoke_syscall+0x74/0x240 [ 1307.950286][ T6567] el0_svc_common.constprop.0+0xac/0x230 [ 1307.950399][ T6567] do_el0_svc+0x40/0x58 [ 1307.950509][ T6567] el0_svc+0x58/0x2a4 [ 1307.950669][ T6567] el0t_64_sync_handler+0xa0/0xe4 [ 1307.950787][ T6567] el0t_64_sync+0x198/0x19c [ 1318.837819][ T6596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.843253][ T6596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.401497][ T6604] FAULT_INJECTION: forcing a failure. [ 1320.401497][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.409598][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.0.1073 Tainted: G W L syzkaller #0 PREEMPT [ 1320.409861][ T6604] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1320.409914][ T6604] Hardware name: linux,dummy-virt (DT) [ 1320.409973][ T6604] Call trace: [ 1320.410026][ T6604] show_stack+0x18/0x24 (C) [ 1320.410204][ T6604] dump_stack_lvl+0x7c/0xb0 [ 1320.410310][ T6604] dump_stack+0x1c/0x28 [ 1320.410459][ T6604] should_fail_ex+0x6b4/0x6c4 [ 1320.410648][ T6604] should_failslab+0xbc/0x120 [ 1320.410765][ T6604] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1320.410877][ T6604] do_epoll_ctl_file+0x5b4/0x29cc [ 1320.410997][ T6604] do_epoll_ctl+0xd4/0x15c [ 1320.411110][ T6604] __arm64_sys_epoll_ctl+0x114/0x184 [ 1320.411235][ T6604] invoke_syscall+0x74/0x240 [ 1320.411359][ T6604] el0_svc_common.constprop.0+0xac/0x230 [ 1320.411477][ T6604] do_el0_svc+0x40/0x58 [ 1320.411585][ T6604] el0_svc+0x58/0x2a4 [ 1320.411703][ T6604] el0t_64_sync_handler+0xa0/0xe4 [ 1320.411815][ T6604] el0t_64_sync+0x198/0x19c [ 1339.303258][ T6646] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 1339.307132][ T6646] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 1339.318763][ T6646] iwpm_send_hello: Unable to send a nlmsg [ 1342.516870][ T29] audit: type=1400 audit(1342.210:426): avc: denied { read } for pid=6656 comm="syz.0.1092" name="loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1342.524403][ T29] audit: type=1400 audit(1342.220:427): avc: denied { open } for pid=6656 comm="syz.0.1092" path="/dev/loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1342.569443][ T29] audit: type=1400 audit(1342.260:428): avc: denied { ioctl } for pid=6656 comm="syz.0.1092" path="/newroot/dev/loop-control" dev="devtmpfs" ino=637 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1348.982995][ T29] audit: type=1400 audit(1348.670:429): avc: denied { mounton } for pid=6672 comm="syz.2.1099" path="/215/file0" dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1348.986258][ T6675] fuse: Bad value for 'fd' [ 1354.622177][ T6688] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1367.631526][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.644044][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.001921][ T29] audit: type=1400 audit(1367.690:430): avc: denied { read write } for pid=6700 comm="syz.2.1108" name="mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1368.005446][ T29] audit: type=1400 audit(1367.700:431): avc: denied { open } for pid=6700 comm="syz.2.1108" path="/dev/mtd0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1368.016005][ T29] audit: type=1400 audit(1367.710:432): avc: denied { ioctl } for pid=6700 comm="syz.2.1108" path="/dev/mtd0" dev="devtmpfs" ino=683 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1368.024611][ T6701] 0x000000000000-0x000000000005 : "" [ 1368.029259][ T6701] mtd: partition "" doesn't end on an erase/write block -- force read-only [ 1368.233039][ T29] audit: type=1400 audit(1367.930:433): avc: denied { bind } for pid=6702 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1368.235383][ T6701] ftl_cs: FTL header corrupt! [ 1368.246677][ T29] audit: type=1400 audit(1367.940:434): avc: denied { listen } for pid=6702 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1368.264957][ T29] audit: type=1400 audit(1367.960:435): avc: denied { accept } for pid=6702 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1385.168613][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.246477][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.826641][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 1409.506091][ T6791] udevd[6791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1409.784560][ T6791] udevd[6791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1413.841734][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 1427.343809][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 1429.678456][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.746667][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.572113][ T29] audit: type=1400 audit(1431.250:436): avc: denied { write } for pid=6890 comm="syz.2.1182" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1431.672102][ T29] audit: type=1400 audit(1431.360:437): avc: denied { map } for pid=6890 comm="syz.2.1182" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1437.090988][ T29] audit: type=1400 audit(1436.780:438): avc: denied { execute } for pid=6902 comm="syz.2.1185" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1439.419543][ T6909] FAULT_INJECTION: forcing a failure. [ 1439.419543][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.439478][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.2.1187 Tainted: G W L syzkaller #0 PREEMPT [ 1439.439834][ T6909] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1439.439896][ T6909] Hardware name: linux,dummy-virt (DT) [ 1439.439975][ T6909] Call trace: [ 1439.440043][ T6909] show_stack+0x18/0x24 (C) [ 1439.440233][ T6909] dump_stack_lvl+0x7c/0xb0 [ 1439.440344][ T6909] dump_stack+0x1c/0x28 [ 1439.440451][ T6909] should_fail_ex+0x6b4/0x6c4 [ 1439.440651][ T6909] should_failslab+0xbc/0x120 [ 1439.440776][ T6909] __kmalloc_noprof+0x4dc/0x74c [ 1439.440889][ T6909] asymmetric_key_generate_id+0x48/0x158 [ 1439.440994][ T6909] x509_note_issuer+0xf8/0x1d0 [ 1439.441115][ T6909] asn1_ber_decoder+0x97c/0x1dc0 [ 1439.441234][ T6909] x509_cert_parse+0x180/0x6a8 [ 1439.441343][ T6909] x509_key_preparse+0x58/0x76c [ 1439.441458][ T6909] asymmetric_key_preparse+0x98/0x194 [ 1439.441588][ T6909] __key_create_or_update+0x2fc/0x93c [ 1439.441717][ T6909] key_create_or_update+0x14/0x20 [ 1439.441824][ T6909] __arm64_sys_add_key+0x20c/0x398 [ 1439.441948][ T6909] invoke_syscall+0x74/0x240 [ 1439.442075][ T6909] el0_svc_common.constprop.0+0xac/0x230 [ 1439.442195][ T6909] do_el0_svc+0x40/0x58 [ 1439.442304][ T6909] el0_svc+0x58/0x2a4 [ 1439.442438][ T6909] el0t_64_sync_handler+0xa0/0xe4 [ 1439.442561][ T6909] el0t_64_sync+0x198/0x19c [ 1444.495021][ T6933] ALSA: mixer_oss: invalid OSS volume 'Ø' šò' [ 1449.545440][ T29] audit: type=1400 audit(1449.240:439): avc: denied { write } for pid=6945 comm="syz.2.1205" name="functions" dev="configfs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1452.357187][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.368070][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.235538][ T29] audit: type=1400 audit(1460.930:440): avc: denied { mount } for pid=7004 comm="syz.0.1226" name="/" dev="ramfs" ino=18483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1461.343645][ T29] audit: type=1400 audit(1461.040:441): avc: denied { unmount } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1463.722780][ T7015] serio: Serial port ptm0 [ 1463.816896][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 1465.482738][ T7015] serio: Serial port ptm0 [ 1467.256126][ T29] audit: type=1400 audit(1466.950:442): avc: denied { read write } for pid=7034 comm="syz.2.1241" name="control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1467.267031][ T29] audit: type=1400 audit(1466.960:443): avc: denied { open } for pid=7034 comm="syz.2.1241" path="/302/dev/mapper/control" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1467.351240][ T29] audit: type=1400 audit(1467.040:444): avc: denied { ioctl } for pid=7034 comm="syz.2.1241" path="/302/dev/mapper/control" dev="devtmpfs" ino=712 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1467.372131][ T7035] FAULT_INJECTION: forcing a failure. [ 1467.372131][ T7035] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.372634][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.2.1241 Tainted: G W L syzkaller #0 PREEMPT [ 1467.372719][ T7035] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1467.372748][ T7035] Hardware name: linux,dummy-virt (DT) [ 1467.372781][ T7035] Call trace: [ 1467.372810][ T7035] show_stack+0x18/0x24 (C) [ 1467.372900][ T7035] dump_stack_lvl+0x7c/0xb0 [ 1467.372956][ T7035] dump_stack+0x1c/0x28 [ 1467.373016][ T7035] should_fail_ex+0x6b4/0x6c4 [ 1467.373081][ T7035] should_failslab+0xbc/0x120 [ 1467.373139][ T7035] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1467.373195][ T7035] mempool_alloc_slab+0x40/0x68 [ 1467.373304][ T7035] mempool_init_node+0x1e0/0x594 [ 1467.373433][ T7035] mempool_init_noprof+0x18/0x24 [ 1467.373562][ T7035] bioset_init+0x2f8/0x680 [ 1467.373707][ T7035] __alloc_disk_node+0x78/0x4bc [ 1467.373809][ T7035] __blk_alloc_disk+0xb8/0x160 [ 1467.373955][ T7035] dm_create+0x43c/0x1054 [ 1467.374067][ T7035] dev_create+0xc4/0x234 [ 1467.374197][ T7035] ctl_ioctl+0x438/0xbbc [ 1467.374309][ T7035] dm_ctl_ioctl+0x10/0x20 [ 1467.374392][ T7035] __arm64_sys_ioctl+0x128/0x1a8 [ 1467.374484][ T7035] invoke_syscall+0x74/0x240 [ 1467.374551][ T7035] el0_svc_common.constprop.0+0xac/0x230 [ 1467.374673][ T7035] do_el0_svc+0x40/0x58 [ 1467.374727][ T7035] el0_svc+0x58/0x2a4 [ 1467.374870][ T7035] el0t_64_sync_handler+0xa0/0xe4 [ 1467.374986][ T7035] el0t_64_sync+0x198/0x19c [ 1467.928136][ T29] audit: type=1400 audit(1467.620:445): avc: denied { write } for pid=7037 comm="syz.2.1242" name="core" dev="configfs" ino=1796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1467.968843][ T29] audit: type=1400 audit(1467.660:446): avc: denied { write } for pid=7037 comm="syz.2.1242" name="rd_mcp_0" dev="configfs" ino=18555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1468.053487][ T29] audit: type=1400 audit(1467.750:447): avc: denied { write } for pid=7037 comm="syz.2.1242" name="functions" dev="configfs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.526286][ T29] audit: type=1400 audit(1472.220:448): avc: denied { write } for pid=7051 comm="syz.0.1248" name="functions" dev="configfs" ino=15611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.559462][ T29] audit: type=1400 audit(1472.250:449): avc: denied { write } for pid=7051 comm="syz.0.1248" name="target" dev="configfs" ino=1795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.583752][ T29] audit: type=1400 audit(1472.270:450): avc: denied { write } for pid=7051 comm="syz.0.1248" name="usb_gadget" dev="configfs" ino=18087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.596875][ T29] audit: type=1400 audit(1472.290:451): avc: denied { write } for pid=7051 comm="syz.0.1248" name="naa.6001405c935d7912" dev="configfs" ino=18089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.635419][ T29] audit: type=1400 audit(1472.330:452): avc: denied { write } for pid=7051 comm="syz.0.1248" name="nexus" dev="configfs" ino=18099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1472.640591][ T29] audit: type=1400 audit(1472.330:453): avc: denied { open } for pid=7051 comm="syz.0.1248" path="/594/config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus" dev="configfs" ino=18099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1472.815980][ T29] audit: type=1400 audit(1472.480:454): avc: denied { write } for pid=7051 comm="syz.0.1248" name="lun" dev="configfs" ino=18093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.831355][ T29] audit: type=1400 audit(1472.530:455): avc: denied { write } for pid=7051 comm="syz.0.1248" name="lun_0" dev="configfs" ino=18100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.844482][ T29] audit: type=1400 audit(1472.530:456): avc: denied { create } for pid=7051 comm="syz.0.1248" name="virtual_scsi_port" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1480.672458][ T29] audit: type=1400 audit(1480.360:457): avc: denied { read } for pid=7077 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1480.685240][ T29] audit: type=1400 audit(1480.370:458): avc: denied { open } for pid=7077 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1481.239351][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 1481.245360][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 1481.527256][ T7083] ucma_write: process 734 (syz.2.1259) changed security contexts after opening file descriptor, this is not allowed. [ 1484.066548][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.083888][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.838504][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.871772][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.788739][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.834150][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.016660][ T7077] hsr_slave_0: entered promiscuous mode [ 1494.042514][ T7077] hsr_slave_1: entered promiscuous mode [ 1494.053950][ T7077] debugfs: 'hsr0' already exists in 'hsr' [ 1494.054454][ T7077] Cannot create hsr debugfs directory [ 1494.507394][ T7133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1269'. [ 1495.732610][ T7077] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.060662][ T7077] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.504249][ T7077] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.907677][ T7077] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.976176][ T7077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1498.006882][ T7077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.016753][ T7077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1498.038857][ T7077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.048275][ T7077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1498.085786][ T7077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.122429][ T7077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1498.176953][ T7077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1500.397696][ T29] audit: type=1400 audit(1500.090:459): avc: denied { ioctl } for pid=7170 comm="syz.2.1280" path="net:[4026532788]" dev="nsfs" ino=4026532788 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1501.478279][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.826877][ T6382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1504.882417][ T6382] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1514.914234][ T7077] veth0_vlan: entered promiscuous mode [ 1515.202405][ T7077] veth1_vlan: entered promiscuous mode [ 1515.839143][ T7077] veth0_macvtap: entered promiscuous mode [ 1515.908608][ T7077] veth1_macvtap: entered promiscuous mode [ 1516.561793][ T5026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.562369][ T5026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.562798][ T5026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.563045][ T5026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.707497][ T7251] tmpfs: Using encoding : utf8-12.1.0 [ 1526.825322][ T29] audit: type=1400 audit(1526.520:460): avc: denied { unmount } for pid=5343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1531.312441][ T29] audit: type=1400 audit(1531.000:461): avc: denied { write } for pid=7265 comm="syz.2.1301" name="rd_mcp_0" dev="configfs" ino=18555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1531.895487][ T7266] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1532.025729][ T29] audit: type=1400 audit(1531.720:462): avc: denied { mounton } for pid=7265 comm="syz.2.1301" path="/344/config" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1532.092871][ T29] audit: type=1400 audit(1531.780:463): avc: denied { write } for pid=7265 comm="syz.2.1301" name="configs" dev="configfs" ino=15612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1541.552296][ T7278] ip_tables: iptables: counters copy to user failed while replacing table [ 1543.517266][ T29] audit: type=1400 audit(1543.210:464): avc: denied { read } for pid=7282 comm="syz.2.1307" name="trace_pipe" dev="tracefs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1543.561337][ T29] audit: type=1400 audit(1543.250:465): avc: denied { open } for pid=7282 comm="syz.2.1307" path="/349/mnt/trace_pipe" dev="tracefs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1544.399394][ T7287] VFS: file-max limit 0 reached [ 1547.064965][ T7297] trusted_key: syz.2.1314 sent an empty control message without MSG_MORE. [ 1549.352540][ T7307] FAULT_INJECTION: forcing a failure. [ 1549.352540][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.355941][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.2.1318 Tainted: G W L syzkaller #0 PREEMPT [ 1549.356083][ T7307] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1549.356112][ T7307] Hardware name: linux,dummy-virt (DT) [ 1549.356144][ T7307] Call trace: [ 1549.356172][ T7307] show_stack+0x18/0x24 (C) [ 1549.356267][ T7307] dump_stack_lvl+0x7c/0xb0 [ 1549.356323][ T7307] dump_stack+0x1c/0x28 [ 1549.356377][ T7307] should_fail_ex+0x6b4/0x6c4 [ 1549.356438][ T7307] should_failslab+0xbc/0x120 [ 1549.356497][ T7307] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1549.356553][ T7307] new_userfaultfd+0x5c/0x350 [ 1549.356620][ T7307] __arm64_sys_userfaultfd+0x3c/0x100 [ 1549.356676][ T7307] invoke_syscall+0x74/0x240 [ 1549.356730][ T7307] el0_svc_common.constprop.0+0xac/0x230 [ 1549.356783][ T7307] do_el0_svc+0x40/0x58 [ 1549.356834][ T7307] el0_svc+0x58/0x2a4 [ 1549.356890][ T7307] el0t_64_sync_handler+0xa0/0xe4 [ 1549.356941][ T7307] el0t_64_sync+0x198/0x19c [ 1553.964990][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7317 comm=syz.2.1321 [ 1557.723552][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 1557.724109][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 1562.694804][ T29] audit: type=1400 audit(1562.390:466): avc: denied { read } for pid=7342 comm="syz.0.1330" name="control" dev="configfs" ino=19422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1562.731438][ T29] audit: type=1400 audit(1562.420:467): avc: denied { write } for pid=7342 comm="syz.0.1330" name="c.1" dev="configfs" ino=19283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1562.737154][ T29] audit: type=1400 audit(1562.430:468): avc: denied { write } for pid=7342 comm="syz.0.1330" name="c.1" dev="configfs" ino=19283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1562.737579][ T7343] [ 1562.738526][ T7343] ====================================================== [ 1562.738794][ T7343] WARNING: possible circular locking dependency detected [ 1562.739031][ T7343] syzkaller #0 Tainted: G W L [ 1562.739271][ T7343] ------------------------------------------------------ [ 1562.739630][ T7343] syz.0.1330/7343 is trying to acquire lock: [ 1562.739979][ T7343] ffff8000888c51c0 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x38/0x39c [ 1562.740896][ T7343] [ 1562.740896][ T7343] but task is already holding lock: [ 1562.741085][ T7343] ffff000021bac390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x4c/0x2a0 [ 1562.741481][ T7343] [ 1562.741481][ T7343] which lock already depends on the new lock. [ 1562.741481][ T7343] [ 1562.741748][ T7343] [ 1562.741748][ T7343] the existing dependency chain (in reverse order) is: [ 1562.742003][ T7343] [ 1562.742003][ T7343] -> #2 (&gi->lock){+.+.}-{4:4}: [ 1562.742457][ T7343] lock_acquire+0x3d0/0x44c [ 1562.742765][ T7343] __mutex_lock+0x150/0x1530 [ 1562.743002][ T7343] mutex_lock_nested+0x24/0x30 [ 1562.743245][ T7343] config_usb_cfg_link+0x4c/0x2a0 [ 1562.743455][ T7343] configfs_symlink+0x3d0/0xda0 [ 1562.743666][ T7343] vfs_symlink+0x10c/0x374 [ 1562.743888][ T7343] filename_symlinkat+0x20c/0x3dc [ 1562.744167][ T7343] __arm64_sys_symlinkat+0xa4/0xe8 [ 1562.744385][ T7343] invoke_syscall+0x74/0x240 [ 1562.744602][ T7343] el0_svc_common.constprop.0+0xac/0x230 [ 1562.744874][ T7343] do_el0_svc+0x40/0x58 [ 1562.745106][ T7343] el0_svc+0x58/0x2a4 [ 1562.745347][ T7343] el0t_64_sync_handler+0xa0/0xe4 [ 1562.745551][ T7343] el0t_64_sync+0x198/0x19c [ 1562.745860][ T7343] [ 1562.745860][ T7343] -> #1 (&sb->s_type->i_mutex_key#29){++++}-{4:4}: [ 1562.746375][ T7343] lock_acquire+0x3d0/0x44c [ 1562.746618][ T7343] down_write+0xb4/0x1ac [ 1562.746840][ T7343] configfs_depend_item_unlocked+0xac/0x500 [ 1562.747077][ T7343] usbg_make_tpg+0x1cc/0x47c [ 1562.747293][ T7343] target_fabric_make_tpg+0x84/0x738 [ 1562.747541][ T7343] configfs_mkdir+0x394/0xb78 [ 1562.747848][ T7343] vfs_mkdir+0x1dc/0x5bc [ 1562.748052][ T7343] filename_mkdirat+0x354/0x408 [ 1562.748300][ T7343] __arm64_sys_mkdirat+0x90/0xd4 [ 1562.748523][ T7343] invoke_syscall+0x74/0x240 [ 1562.748763][ T7343] el0_svc_common.constprop.0+0xac/0x230 [ 1562.748992][ T7343] do_el0_svc+0x40/0x58 [ 1562.749203][ T7343] el0_svc+0x58/0x2a4 [ 1562.749396][ T7343] el0t_64_sync_handler+0xa0/0xe4 [ 1562.749740][ T7343] el0t_64_sync+0x198/0x19c [ 1562.749970][ T7343] [ 1562.749970][ T7343] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 1562.750457][ T7343] check_prev_add+0x114/0xca0 [ 1562.750728][ T7343] __lock_acquire+0x13f4/0x1a5c [ 1562.750961][ T7343] lock_acquire+0x3d0/0x44c [ 1562.751127][ T7343] __mutex_lock+0x150/0x1530 [ 1562.751337][ T7343] mutex_lock_nested+0x24/0x30 [ 1562.751551][ T7343] tcm_alloc+0x38/0x39c [ 1562.751741][ T7343] usb_get_function+0x54/0xa8 [ 1562.751941][ T7343] config_usb_cfg_link+0x174/0x2a0 [ 1562.752154][ T7343] configfs_symlink+0x3d0/0xda0 [ 1562.752345][ T7343] vfs_symlink+0x10c/0x374 [ 1562.752504][ T7343] filename_symlinkat+0x20c/0x3dc [ 1562.752680][ T7343] __arm64_sys_symlinkat+0xa4/0xe8 [ 1562.752848][ T7343] invoke_syscall+0x74/0x240 [ 1562.753046][ T7343] el0_svc_common.constprop.0+0xac/0x230 [ 1562.753290][ T7343] do_el0_svc+0x40/0x58 [ 1562.753503][ T7343] el0_svc+0x58/0x2a4 [ 1562.753689][ T7343] el0t_64_sync_handler+0xa0/0xe4 [ 1562.753933][ T7343] el0t_64_sync+0x198/0x19c [ 1562.754119][ T7343] [ 1562.754119][ T7343] other info that might help us debug this: [ 1562.754119][ T7343] [ 1562.754399][ T7343] Chain exists of: [ 1562.754399][ T7343] tpg_instances_lock --> &sb->s_type->i_mutex_key#29 --> &gi->lock [ 1562.754399][ T7343] [ 1562.755041][ T7343] Possible unsafe locking scenario: [ 1562.755041][ T7343] [ 1562.755285][ T7343] CPU0 CPU1 [ 1562.755466][ T7343] ---- ---- [ 1562.755674][ T7343] lock(&gi->lock); [ 1562.755914][ T7343] lock(&sb->s_type->i_mutex_key#29); [ 1562.756244][ T7343] lock(&gi->lock); [ 1562.756525][ T7343] lock(tpg_instances_lock); [ 1562.756766][ T7343] [ 1562.756766][ T7343] *** DEADLOCK *** [ 1562.756766][ T7343] [ 1562.757077][ T7343] locks held by syz.0.1330/7343: 3, last CPU#0: [ 1562.757302][ T7343] #0: ffff00000feaa460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3c/0xb0 [ 1562.757889][ T7343] #1: ffff00001d182740 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: configfs_symlink+0x2b0/0xda0 [ 1562.758370][ T7343] #2: ffff000021bac390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x4c/0x2a0 [ 1562.758826][ T7343] [ 1562.758826][ T7343] stack backtrace: [ 1562.759074][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.0.1330 Tainted: G W L syzkaller #0 PREEMPT [ 1562.759364][ T7343] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1562.759520][ T7343] Hardware name: linux,dummy-virt (DT) [ 1562.759831][ T7343] Call trace: [ 1562.759991][ T7343] show_stack+0x18/0x24 (C) [ 1562.760236][ T7343] dump_stack_lvl+0x7c/0xb0 [ 1562.760436][ T7343] dump_stack+0x1c/0x28 [ 1562.760655][ T7343] print_circular_bug+0x23c/0x284 [ 1562.760919][ T7343] check_noncircular+0x174/0x194 [ 1562.761133][ T7343] check_prev_add+0x114/0xca0 [ 1562.761362][ T7343] __lock_acquire+0x13f4/0x1a5c [ 1562.761564][ T7343] lock_acquire+0x3d0/0x44c [ 1562.761759][ T7343] __mutex_lock+0x150/0x1530 [ 1562.761956][ T7343] mutex_lock_nested+0x24/0x30 [ 1562.762157][ T7343] tcm_alloc+0x38/0x39c [ 1562.762351][ T7343] usb_get_function+0x54/0xa8 [ 1562.762545][ T7343] config_usb_cfg_link+0x174/0x2a0 [ 1562.762783][ T7343] configfs_symlink+0x3d0/0xda0 [ 1562.762984][ T7343] vfs_symlink+0x10c/0x374 [ 1562.763196][ T7343] filename_symlinkat+0x20c/0x3dc [ 1562.763396][ T7343] __arm64_sys_symlinkat+0xa4/0xe8 [ 1562.763625][ T7343] invoke_syscall+0x74/0x240 [ 1562.763848][ T7343] el0_svc_common.constprop.0+0xac/0x230 [ 1562.764087][ T7343] do_el0_svc+0x40/0x58 [ 1562.764289][ T7343] el0_svc+0x58/0x2a4 [ 1562.764463][ T7343] el0t_64_sync_handler+0xa0/0xe4 [ 1562.764653][ T7343] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1563.687839][ T5017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.941943][ T5017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.108493][ T5017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.258943][ T5017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.792986][ T5017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.846972][ T5017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.908141][ T5017] bond0 (unregistering): Released all slaves [ 1566.118157][ T5017] hsr_slave_0: left promiscuous mode [ 1566.126872][ T5017] hsr_slave_1: left promiscuous mode [ 1566.153556][ T5017] veth1_macvtap: left promiscuous mode [ 1566.156148][ T5017] veth0_macvtap: left promiscuous mode [ 1566.160790][ T5017] veth1_vlan: left promiscuous mode [ 1566.162059][ T5017] veth0_vlan: left promiscuous mode [ 1568.706806][ T5017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.759303][ T29] audit: type=1400 audit(1568.450:469): avc: denied { write } for pid=7351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.875508][ T5017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.077030][ T5017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.242846][ T5017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.318912][ T29] audit: type=1400 audit(1569.010:470): avc: denied { write } for pid=7354 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1570.816615][ T5017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.869645][ T5017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.898487][ T5017] bond0 (unregistering): Released all slaves [ 1570.922298][ T3231] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1571.097239][ T5017] hsr_slave_0: left promiscuous mode [ 1571.111889][ T5017] hsr_slave_1: left promiscuous mode [ 1571.169308][ T5017] veth1_macvtap: left promiscuous mode [ 1571.170789][ T5017] veth0_macvtap: left promiscuous mode [ 1571.173994][ T5017] veth1_vlan: left promiscuous mode [ 1571.174669][ T5017] veth0_vlan: left promiscuous mode [ 1574.377892][ T29] audit: type=1400 audit(1574.070:471): avc: denied { write } for pid=7362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1574.872980][ T29] audit: type=1400 audit(1574.570:472): avc: denied { write } for pid=7365 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1575.233711][ T3231] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1576.126937][ T29] audit: type=1400 audit(1575.820:473): avc: denied { write } for pid=7369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.467649][ T29] audit: type=1400 audit(1576.160:474): avc: denied { write } for pid=7372 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.813700][ T3231] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1577.696081][ T29] audit: type=1400 audit(1577.390:475): avc: denied { write } for pid=7376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1578.184981][ T29] audit: type=1400 audit(1577.880:476): avc: denied { write } for pid=7379 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1578.595790][ T3231] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1579.426881][ T29] audit: type=1400 audit(1579.120:477): avc: denied { write } for pid=7383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1579.804638][ T29] audit: type=1400 audit(1579.500:478): avc: denied { write } for pid=7386 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1580.185695][ T3231] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1581.309579][ T29] audit: type=1400 audit(1581.000:479): avc: denied { write } for pid=7391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1581.778740][ T29] audit: type=1400 audit(1581.460:480): avc: denied { write } for pid=7394 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1582.082732][ T3231] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1582.948144][ T29] audit: type=1400 audit(1582.640:481): avc: denied { write } for pid=7398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.208025][ T29] audit: type=1400 audit(1582.900:482): avc: denied { write } for pid=7401 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.463916][ T3231] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1584.484398][ T29] audit: type=1400 audit(1584.180:483): avc: denied { write } for pid=7406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1584.945599][ T29] audit: type=1400 audit(1584.640:484): avc: denied { write } for pid=7409 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1585.327695][ T3231] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1586.927855][ T29] audit: type=1400 audit(1586.620:485): avc: denied { write } for pid=7415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1587.327025][ T29] audit: type=1400 audit(1587.020:486): avc: denied { write } for pid=7418 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1592.631077][ T29] audit: type=1400 audit(1592.310:487): avc: denied { write } for pid=7422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1