last executing test programs: 12.572434898s ago: executing program 0 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) 12.093941834s ago: executing program 0 (id=297): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 11.9759845s ago: executing program 0 (id=298): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000004c0)=""/55, 0x0, 0xeeee8000}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) close(0x3) 11.550844842s ago: executing program 0 (id=299): close(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3, 0x0, 0x0, r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)=r5) 11.270498077s ago: executing program 0 (id=300): r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x12, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x20}}], 0x2, 0x0) 11.101156525s ago: executing program 0 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0], 0x48) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x258, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'lo\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x370}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_UNLOCK(r9, 0x6406) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0xde187bfeedb11a59, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}}, 0x400c814) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r10, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0x40045010, &(0x7f0000000300)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r11) 4.320568512s ago: executing program 1 (id=312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) syz_extract_tcp_res(0x0, 0x0, 0xfff) syz_emit_ethernet(0x50, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000001a0600fe80000000000000ee869fe916b8752685"], 0x0) 3.582728281s ago: executing program 1 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 819.248576ms ago: executing program 1 (id=314): r0 = creat(0x0, 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r6) 503.128074ms ago: executing program 1 (id=315): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80041) write$sndseq(r0, &(0x7f0000000d00)=[{0xff, 0x3, 0x3, 0xff, @time={0x7, 0xe}, {0xc7, 0x4}, {0xb, 0xc}, @addr={0x0, 0xc}}], 0x1c) 221.687268ms ago: executing program 1 (id=316): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/181, 0xb5}], 0x4}, 0x0) 0s ago: executing program 1 (id=317): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x2, 0x395, 0x80000089, 0x0, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): [ 47.611777][ T31] audit: type=1400 audit(47.550:56): avc: denied { read write } for pid=3093 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.615498][ T31] audit: type=1400 audit(47.550:57): avc: denied { open } for pid=3093 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:18533' (ED25519) to the list of known hosts. [ 58.926588][ T31] audit: type=1400 audit(58.860:58): avc: denied { name_bind } for pid=3096 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.596356][ T31] audit: type=1400 audit(60.500:59): avc: denied { execute } for pid=3097 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.606495][ T31] audit: type=1400 audit(60.550:60): avc: denied { execute_no_trans } for pid=3097 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.488229][ T31] audit: type=1400 audit(63.430:61): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.491413][ T31] audit: type=1400 audit(63.430:62): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.511012][ T3097] cgroup: Unknown subsys name 'net' [ 63.522364][ T31] audit: type=1400 audit(63.460:63): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.684142][ T3097] cgroup: Unknown subsys name 'cpuset' [ 63.692448][ T3097] cgroup: Unknown subsys name 'hugetlb' [ 63.693807][ T3097] cgroup: Unknown subsys name 'rlimit' [ 63.891579][ T31] audit: type=1400 audit(63.830:64): avc: denied { setattr } for pid=3097 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.894013][ T31] audit: type=1400 audit(63.830:65): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.898182][ T31] audit: type=1400 audit(63.830:66): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.087071][ T3099] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.092879][ T31] audit: type=1400 audit(64.030:67): avc: denied { relabelto } for pid=3099 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.101696][ T31] audit: type=1400 audit(64.040:68): avc: denied { write } for pid=3099 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 64.140292][ T31] audit: type=1400 audit(64.080:69): avc: denied { read } for pid=3097 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.142448][ T31] audit: type=1400 audit(64.080:70): avc: denied { open } for pid=3097 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.208524][ T3097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.029212][ T31] audit: type=1400 audit(71.970:71): avc: denied { execmem } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.100942][ T31] audit: type=1400 audit(72.040:72): avc: denied { read } for pid=3102 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.101487][ T31] audit: type=1400 audit(72.040:73): avc: denied { open } for pid=3102 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.104977][ T31] audit: type=1400 audit(72.040:74): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.118842][ T31] audit: type=1400 audit(72.060:75): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.177997][ T31] audit: type=1400 audit(72.120:76): avc: denied { sys_module } for pid=3104 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.538398][ T31] audit: type=1400 audit(72.480:77): avc: denied { ioctl } for pid=3104 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.488006][ T3104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.494444][ T3104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.620173][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.629491][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.302661][ T3104] hsr_slave_0: entered promiscuous mode [ 74.309352][ T3104] hsr_slave_1: entered promiscuous mode [ 74.631854][ T3102] hsr_slave_0: entered promiscuous mode [ 74.634107][ T3102] hsr_slave_1: entered promiscuous mode [ 74.638592][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.639029][ T3102] Cannot create hsr debugfs directory [ 74.833198][ T31] audit: type=1400 audit(74.770:78): avc: denied { create } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.833788][ T31] audit: type=1400 audit(74.770:79): avc: denied { write } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.834143][ T31] audit: type=1400 audit(74.770:80): avc: denied { read } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.844963][ T3104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.859598][ T3104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.870922][ T3104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.904070][ T3104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.177593][ T3102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.193860][ T3102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.208077][ T3102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.218775][ T3102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.841993][ T3104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.012210][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.229922][ T3102] veth0_vlan: entered promiscuous mode [ 78.259425][ T3102] veth1_vlan: entered promiscuous mode [ 78.333365][ T3102] veth0_macvtap: entered promiscuous mode [ 78.349322][ T3102] veth1_macvtap: entered promiscuous mode [ 78.433811][ T3102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.434502][ T3102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.434610][ T3102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.434783][ T3102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.463126][ T3104] veth0_vlan: entered promiscuous mode [ 78.512663][ T3104] veth1_vlan: entered promiscuous mode [ 78.589964][ T3104] veth0_macvtap: entered promiscuous mode [ 78.612844][ T3104] veth1_macvtap: entered promiscuous mode [ 78.621047][ T31] audit: type=1400 audit(78.560:81): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.625116][ T31] audit: type=1400 audit(78.560:82): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.abbiVy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.631272][ T31] audit: type=1400 audit(78.570:83): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.644019][ T31] audit: type=1400 audit(78.580:84): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.abbiVy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.648704][ T31] audit: type=1400 audit(78.580:85): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.abbiVy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.663918][ T31] audit: type=1400 audit(78.600:86): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.676387][ T31] audit: type=1400 audit(78.610:87): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.676805][ T31] audit: type=1400 audit(78.610:88): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="gadgetfs" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.701601][ T31] audit: type=1400 audit(78.640:89): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.703877][ T31] audit: type=1400 audit(78.640:90): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 78.708430][ T3104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.709628][ T3104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.710672][ T3104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.711811][ T3104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.793503][ T3102] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.219953][ T3796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3796 comm=syz.1.2 [ 79.479179][ T3807] UHID_CREATE from different security context by process 4 (syz.1.5), this is not allowed. [ 80.385387][ T3832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3832 comm=syz.0.16 [ 80.422817][ T3832] Zero length message leads to an empty skb [ 80.539249][ T3839] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.984750][ T3850] FAULT_INJECTION: forcing a failure. [ 80.984750][ T3850] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.987233][ T3850] CPU: 1 UID: 0 PID: 3850 Comm: syz.0.24 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 80.987594][ T3850] Hardware name: ARM-Versatile Express [ 80.987882][ T3850] Call trace: [ 80.989550][ T3850] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 80.990838][ T3850] r7:200003c0 r6:00000000 r5:60000013 r4:8225b4e0 [ 80.990968][ T3850] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 80.991031][ T3850] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 80.991194][ T3850] r5:8594ec00 r4:82950610 [ 80.991217][ T3850] [<8021fe1c>] (dump_stack) from [<80964d5c>] (should_fail_ex+0x1c4/0x228) [ 80.991313][ T3850] [<80964b98>] (should_fail_ex) from [<80964dd4>] (should_fail+0x14/0x18) [ 80.991383][ T3850] r8:00000000 r7:200003c0 r6:8407db00 r5:00000000 r4:e0505f20 [ 80.991404][ T3850] [<80964dc0>] (should_fail) from [<80964df4>] (should_fail_usercopy+0x1c/0x20) [ 80.991457][ T3850] [<80964dd8>] (should_fail_usercopy) from [<808b4328>] (_copy_from_iter+0x6c/0x7c8) [ 80.991513][ T3850] [<808b42bc>] (_copy_from_iter) from [<81658558>] (netlink_sendmsg+0x18c/0x444) [ 80.991612][ T3850] r10:00000000 r9:00000000 r8:e0505f30 r7:855e1000 r6:00000014 r5:8566c180 [ 80.991683][ T3850] r4:e0505f20 [ 80.991707][ T3850] [<816583cc>] (netlink_sendmsg) from [<8152ad40>] (__sock_sendmsg+0x44/0x78) [ 80.991777][ T3850] r10:00000000 r9:e0505dc4 r8:e0505dc4 r7:00000000 r6:852da780 r5:e0505f20 [ 80.991798][ T3850] r4:00000000 [ 80.991816][ T3850] [<8152acfc>] (__sock_sendmsg) from [<8152b500>] (____sys_sendmsg+0x298/0x2cc) [ 80.991869][ T3850] r7:00000000 r6:852da780 r5:00002084 r4:e0505f20 [ 80.991888][ T3850] [<8152b268>] (____sys_sendmsg) from [<8152d30c>] (___sys_sendmsg+0x9c/0xd0) [ 80.991954][ T3850] r10:e0505e24 r9:200001c0 r8:00002084 r7:00000000 r6:852da780 r5:e0505f20 [ 80.991974][ T3850] r4:00000000 [ 80.991991][ T3850] [<8152d270>] (___sys_sendmsg) from [<8152d7a4>] (__sys_sendmsg+0x8c/0xe0) [ 80.992053][ T3850] r10:00000128 r9:8594ec00 r8:856f66c0 r7:00002084 r6:200001c0 r5:856f66c1 [ 80.992075][ T3850] r4:00000003 [ 80.992091][ T3850] [<8152d718>] (__sys_sendmsg) from [<8152d80c>] (sys_sendmsg+0x14/0x18) [ 80.992197][ T3850] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 80.992216][ T3850] [<8152d7f8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 80.992339][ T3850] Exception stack(0xe0505fa8 to 0xe0505ff0) [ 80.992518][ T3850] 5fa0: 00000000 00000000 00000003 200001c0 00002084 00000000 [ 80.992573][ T3850] 5fc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76bee0bc [ 80.992602][ T3850] 5fe0: 76bedec0 76bedeb0 000193a4 00131fc0 [ 81.297173][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.326287][ T3860] FAULT_INJECTION: forcing a failure. [ 81.326287][ T3860] name failslab, interval 1, probability 0, space 0, times 1 [ 81.331411][ T3860] CPU: 0 UID: 0 PID: 3860 Comm: syz.0.27 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 81.331695][ T3860] Hardware name: ARM-Versatile Express [ 81.331930][ T3860] Call trace: [ 81.332181][ T3860] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 81.333100][ T3860] r7:8594ec00 r6:00000000 r5:60000013 r4:8225b4e0 [ 81.333190][ T3860] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 81.333245][ T3860] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 81.333300][ T3860] r5:8594ec00 r4:82919a80 [ 81.333319][ T3860] [<8021fe1c>] (dump_stack) from [<80964d5c>] (should_fail_ex+0x1c4/0x228) [ 81.333395][ T3860] [<80964b98>] (should_fail_ex) from [<8051c21c>] (should_failslab+0x6c/0x94) [ 81.333468][ T3860] r8:00000000 r7:8594ec00 r6:00400cc0 r5:ffffffff r4:830adb40 [ 81.333486][ T3860] [<8051c1b0>] (should_failslab) from [<805005c0>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 81.333535][ T3860] [<80500570>] (kmem_cache_alloc_node_noprof) from [<81537fa4>] (__alloc_skb+0x138/0x160) [ 81.333693][ T3860] r10:e4645d1c r9:00000000 r8:00400cc0 r7:00000000 r6:830adb40 r5:ffffffff [ 81.333725][ T3860] r4:828060c0 [ 81.333743][ T3860] [<81537e6c>] (__alloc_skb) from [<81540548>] (alloc_skb_with_frags+0x44/0x1ec) [ 81.333802][ T3860] r8:802c5d70 r7:e4645cc4 r6:00000000 r5:00001000 r4:00000003 [ 81.333821][ T3860] [<81540504>] (alloc_skb_with_frags) from [<81530e4c>] (sock_alloc_send_pskb+0x1f4/0x228) [ 81.333940][ T3860] r10:e4645d1c r9:00000000 r8:802c5d70 r7:e4645cc4 r6:8594ec00 r5:7fffffff [ 81.333962][ T3860] r4:85975200 [ 81.333977][ T3860] [<81530c58>] (sock_alloc_send_pskb) from [<818033d8>] (unix_dgram_sendmsg+0x124/0x75c) [ 81.334050][ T3860] r10:00000000 r9:e4645dc4 r8:8594ec00 r7:85975200 r6:00000000 r5:00000000 [ 81.334069][ T3860] r4:e4645f20 [ 81.334084][ T3860] [<818032b4>] (unix_dgram_sendmsg) from [<81803a54>] (unix_seqpacket_sendmsg+0x44/0x84) [ 81.334146][ T3860] r10:00000000 r9:e4645dc4 r8:e4645dc4 r7:00000000 r6:852daf00 r5:e4645f20 [ 81.334164][ T3860] r4:00000000 [ 81.334179][ T3860] [<81803a10>] (unix_seqpacket_sendmsg) from [<8152ad40>] (__sock_sendmsg+0x44/0x78) [ 81.334233][ T3860] r5:e4645f20 r4:00000000 [ 81.334248][ T3860] [<8152acfc>] (__sock_sendmsg) from [<8152b500>] (____sys_sendmsg+0x298/0x2cc) [ 81.334299][ T3860] r7:00000000 r6:852daf00 r5:00004000 r4:e4645f20 [ 81.334318][ T3860] [<8152b268>] (____sys_sendmsg) from [<8152d30c>] (___sys_sendmsg+0x9c/0xd0) [ 81.334379][ T3860] r10:e4645e24 r9:20000440 r8:00004000 r7:00000000 r6:852daf00 r5:e4645f20 [ 81.334397][ T3860] r4:00000000 [ 81.334413][ T3860] [<8152d270>] (___sys_sendmsg) from [<8152d7a4>] (__sys_sendmsg+0x8c/0xe0) [ 81.334472][ T3860] r10:00000128 r9:8594ec00 r8:856f6180 r7:00004000 r6:20000440 r5:856f6181 [ 81.334492][ T3860] r4:00000003 [ 81.334508][ T3860] [<8152d718>] (__sys_sendmsg) from [<8152d80c>] (sys_sendmsg+0x14/0x18) [ 81.334595][ T3860] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 81.334611][ T3860] [<8152d7f8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 81.334727][ T3860] Exception stack(0xe4645fa8 to 0xe4645ff0) [ 81.334923][ T3860] 5fa0: 00000000 00000000 00000003 20000440 00004000 00000000 [ 81.334973][ T3860] 5fc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76bee0bc [ 81.334998][ T3860] 5fe0: 76bedec0 76bedeb0 000193a4 00131fc0 [ 81.466586][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 81.476949][ T44] usb 2-1: too many configurations: 95, using maximum allowed: 8 [ 81.490883][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.491978][ T44] usb 2-1: can't read configurations, error -61 [ 81.617186][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.766090][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 81.768490][ T44] usb 2-1: too many configurations: 95, using maximum allowed: 8 [ 81.774654][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 81.775853][ T44] usb 2-1: can't read configurations, error -61 [ 81.786217][ T44] usb usb2-port1: attempt power cycle [ 82.076396][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.129794][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.150060][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 82.153327][ T44] usb 2-1: too many configurations: 95, using maximum allowed: 8 [ 82.167272][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 82.168543][ T44] usb 2-1: can't read configurations, error -61 [ 82.256338][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 82.263030][ T11] usb 1-1: config 0 has no interfaces? [ 82.275156][ T11] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.276331][ T11] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.276625][ T11] usb 1-1: Product: syz [ 82.276829][ T11] usb 1-1: Manufacturer: syz [ 82.277024][ T11] usb 1-1: SerialNumber: syz [ 82.288448][ T11] usb 1-1: config 0 descriptor?? [ 82.298963][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.321322][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 82.328505][ T44] usb 2-1: too many configurations: 95, using maximum allowed: 8 [ 82.339968][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 82.341391][ T44] usb 2-1: can't read configurations, error -61 [ 82.343610][ T44] usb usb2-port1: unable to enumerate USB device [ 82.501044][ T3870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.503635][ T3870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.512670][ T44] usb 1-1: USB disconnect, device number 2 [ 82.976134][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.153978][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.154397][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.154668][ T9] usb 1-1: Product: syz [ 83.154883][ T9] usb 1-1: Manufacturer: syz [ 83.156457][ T9] usb 1-1: SerialNumber: syz [ 91.108533][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 91.108886][ T31] audit: type=1400 audit(91.050:102): avc: denied { unmount } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.786278][ T23] usb 1-1: USB disconnect, device number 3 [ 92.886189][ T31] audit: type=1400 audit(92.820:103): avc: denied { allowed } for pid=3903 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.819290][ T31] audit: type=1400 audit(93.750:104): avc: denied { create } for pid=3908 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.866362][ T31] audit: type=1400 audit(93.800:105): avc: denied { read } for pid=3908 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.241104][ T31] audit: type=1400 audit(94.170:106): avc: denied { create } for pid=3908 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.246360][ T31] audit: type=1400 audit(94.180:107): avc: denied { ioctl } for pid=3908 comm="syz.0.37" path="socket:[3144]" dev="sockfs" ino=3144 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.741059][ T31] audit: type=1400 audit(94.680:108): avc: denied { create } for pid=3921 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.706153][ T11] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 95.856791][ T11] usb 2-1: Invalid ep0 maxpacket: 64 [ 95.996469][ T11] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 96.146056][ T11] usb 2-1: Invalid ep0 maxpacket: 64 [ 96.147082][ T11] usb usb2-port1: attempt power cycle [ 96.486850][ T11] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 96.508763][ T11] usb 2-1: Invalid ep0 maxpacket: 64 [ 96.636383][ T11] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 96.660177][ T11] usb 2-1: Invalid ep0 maxpacket: 64 [ 96.671236][ T11] usb usb2-port1: unable to enumerate USB device [ 96.791555][ T3937] fuse: Bad value for 'group_id' [ 96.793703][ T3937] fuse: Bad value for 'group_id' [ 97.024213][ T31] audit: type=1400 audit(96.960:109): avc: denied { ioctl } for pid=3938 comm="syz.0.48" path="socket:[2475]" dev="sockfs" ino=2475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.030146][ T31] audit: type=1400 audit(96.970:110): avc: denied { bind } for pid=3938 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.038181][ T31] audit: type=1400 audit(96.980:111): avc: denied { write } for pid=3938 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.079480][ T3939] i2c i2c-0: readbytes: invalid block length (255) [ 99.646699][ T31] audit: type=1400 audit(99.580:112): avc: denied { create } for pid=3942 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.648770][ T31] audit: type=1400 audit(99.590:113): avc: denied { connect } for pid=3942 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.158571][ T31] audit: type=1400 audit(100.100:114): avc: denied { ioctl } for pid=3942 comm="syz.0.50" path="socket:[2489]" dev="sockfs" ino=2489 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.789735][ T31] audit: type=1400 audit(100.730:115): avc: denied { getopt } for pid=3942 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.068698][ T31] audit: type=1400 audit(106.010:116): avc: denied { setopt } for pid=3985 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.083495][ T31] audit: type=1400 audit(106.020:117): avc: denied { setattr } for pid=3985 comm="syz.0.57" name="NETLINK" dev="sockfs" ino=2534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.088070][ T3986] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 106.090952][ T31] audit: type=1400 audit(106.030:118): avc: denied { relabelfrom } for pid=3985 comm="syz.0.57" name="NETLINK" dev="sockfs" ino=2534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.093850][ T31] audit: type=1400 audit(106.030:119): avc: denied { relabelto } for pid=3985 comm="syz.0.57" name="NETLINK" dev="sockfs" ino=2534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 106.264493][ T31] audit: type=1400 audit(106.200:120): avc: denied { create } for pid=3991 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.269924][ T31] audit: type=1400 audit(106.210:121): avc: denied { write } for pid=3991 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.373854][ T3993] FAULT_INJECTION: forcing a failure. [ 106.373854][ T3993] name failslab, interval 1, probability 0, space 0, times 0 [ 106.376179][ T3993] CPU: 0 UID: 0 PID: 3993 Comm: syz.1.55 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 106.376286][ T3993] Hardware name: ARM-Versatile Express [ 106.376310][ T3993] Call trace: [ 106.376345][ T3993] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 106.376798][ T3993] r7:83a90000 r6:00000000 r5:60000013 r4:8225b4e0 [ 106.376813][ T3993] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 106.376854][ T3993] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 106.376899][ T3993] r5:83a90000 r4:82919a80 [ 106.376911][ T3993] [<8021fe1c>] (dump_stack) from [<80964d5c>] (should_fail_ex+0x1c4/0x228) [ 106.376959][ T3993] [<80964b98>] (should_fail_ex) from [<8051c21c>] (should_failslab+0x6c/0x94) [ 106.377013][ T3993] r8:00000000 r7:83a90000 r6:00400dc0 r5:00000001 r4:83002000 [ 106.377027][ T3993] [<8051c1b0>] (should_failslab) from [<804fffe0>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 106.377063][ T3993] [<804fff94>] (__kmalloc_cache_noprof) from [<80738d5c>] (fuse_alloc_forget+0x28/0x2c) [ 106.377112][ T3993] r10:00000000 r9:dfb3ddc4 r8:85b4cdc0 r7:855e3400 r6:8365e128 r5:00000001 [ 106.377128][ T3993] r4:dfb3ddc8 [ 106.377148][ T3993] [<80738d34>] (fuse_alloc_forget) from [<8072e4dc>] (fuse_lookup_name+0x6c/0x280) [ 106.377216][ T3993] [<8072e470>] (fuse_lookup_name) from [<8072e780>] (fuse_lookup+0x90/0x174) [ 106.377267][ T3993] r10:00000000 r9:00000001 r8:00000001 r7:00000000 r6:8365e110 r5:852f4000 [ 106.377283][ T3993] r4:8365e110 [ 106.377296][ T3993] [<8072e6f0>] (fuse_lookup) from [<8055c5c8>] (lookup_one_qstr_excl_raw.part.0+0x50/0x84) [ 106.377352][ T3993] r9:00000000 r8:00000000 r7:dfb3df20 r6:852f4000 r5:00000000 r4:8365e110 [ 106.377366][ T3993] [<8055c578>] (lookup_one_qstr_excl_raw.part.0) from [<8055d004>] (lookup_one_qstr_excl+0x34/0x70) [ 106.377419][ T3993] r7:dfb3df20 r6:8365eee0 r5:dfb3df10 r4:00000000 [ 106.377432][ T3993] [<8055cfd0>] (lookup_one_qstr_excl) from [<80565028>] (do_renameat2+0x2d0/0x560) [ 106.377480][ T3993] r7:dfb3df20 r6:8365eee0 r5:dfb3df10 r4:8365eee0 [ 106.377493][ T3993] [<80564d58>] (do_renameat2) from [<805653c0>] (sys_rename+0x48/0x50) [ 106.377540][ T3993] r10:00000026 r9:83a90000 r8:8020029c r7:00000026 r6:0012ff70 r5:200000c0 [ 106.377556][ T3993] r4:833b8000 [ 106.377568][ T3993] [<80565378>] (sys_rename) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 106.377603][ T3993] Exception stack(0xdfb3dfa8 to 0xdfb3dff0) [ 106.377635][ T3993] dfa0: 00000000 00000000 20000100 200000c0 00000000 00000000 [ 106.377663][ T3993] dfc0: 00000000 00000000 0012ff70 00000026 002e0000 00000000 00006364 76b020bc [ 106.377683][ T3993] dfe0: 76b01ec0 76b01eb0 000193a4 00131fc0 [ 106.377703][ T3993] r5:00000000 r4:00000000 [ 107.327327][ T4001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4001 comm=syz.0.62 [ 107.640021][ T4010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4010 comm=syz.0.65 [ 107.641915][ T31] audit: type=1400 audit(107.580:122): avc: denied { setopt } for pid=4009 comm="syz.0.65" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.728849][ T31] audit: type=1400 audit(107.670:123): avc: denied { ioctl } for pid=4011 comm="syz.0.66" path="socket:[3309]" dev="sockfs" ino=3309 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.171139][ T4020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.287787][ T31] audit: type=1400 audit(108.230:124): avc: denied { ioctl } for pid=4019 comm="syz.0.70" path="socket:[2573]" dev="sockfs" ino=2573 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.843437][ T31] audit: type=1400 audit(108.780:125): avc: denied { create } for pid=4026 comm="syz.1.72" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.233248][ T4039] FAULT_INJECTION: forcing a failure. [ 109.233248][ T4039] name failslab, interval 1, probability 0, space 0, times 0 [ 109.236834][ T4039] CPU: 0 UID: 0 PID: 4039 Comm: syz.0.75 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 109.236966][ T4039] Hardware name: ARM-Versatile Express [ 109.236997][ T4039] Call trace: [ 109.237046][ T4039] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 109.237163][ T4039] r7:85909800 r6:00000000 r5:60000013 r4:8225b4e0 [ 109.237180][ T4039] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 109.237228][ T4039] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 109.237280][ T4039] r5:85909800 r4:82919a80 [ 109.237295][ T4039] [<8021fe1c>] (dump_stack) from [<80964d5c>] (should_fail_ex+0x1c4/0x228) [ 109.237357][ T4039] [<80964b98>] (should_fail_ex) from [<8051c21c>] (should_failslab+0x6c/0x94) [ 109.237464][ T4039] r8:00000000 r7:85909800 r6:00400cc0 r5:ffffffff r4:830adb40 [ 109.237531][ T4039] [<8051c1b0>] (should_failslab) from [<805005c0>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 109.237587][ T4039] [<80500570>] (kmem_cache_alloc_node_noprof) from [<81537fa4>] (__alloc_skb+0x138/0x160) [ 109.237652][ T4039] r10:dfad1e0c r9:00000000 r8:00400cc0 r7:00000000 r6:830adb40 r5:ffffffff [ 109.237673][ T4039] r4:828060c0 [ 109.237690][ T4039] [<81537e6c>] (__alloc_skb) from [<81540548>] (alloc_skb_with_frags+0x44/0x1ec) [ 109.237749][ T4039] r8:802c5d70 r7:dfad1db4 r6:00000000 r5:00001000 r4:00000003 [ 109.237766][ T4039] [<81540504>] (alloc_skb_with_frags) from [<81530e4c>] (sock_alloc_send_pskb+0x1f4/0x228) [ 109.237825][ T4039] r10:dfad1e0c r9:00000000 r8:802c5d70 r7:dfad1db4 r6:85909800 r5:7fffffff [ 109.237843][ T4039] r4:85976400 [ 109.237859][ T4039] [<81530c58>] (sock_alloc_send_pskb) from [<818033d8>] (unix_dgram_sendmsg+0x124/0x75c) [ 109.237940][ T4039] r10:00000020 r9:856f6300 r8:85909800 r7:85976400 r6:00000020 r5:00000000 [ 109.237961][ T4039] r4:dfad1e98 [ 109.237977][ T4039] [<818032b4>] (unix_dgram_sendmsg) from [<81803a54>] (unix_seqpacket_sendmsg+0x44/0x84) [ 109.238045][ T4039] r10:00000122 r9:856f6300 r8:856f6301 r7:76bece1c r6:852daa00 r5:dfad1e98 [ 109.238065][ T4039] r4:00000000 [ 109.238081][ T4039] [<81803a10>] (unix_seqpacket_sendmsg) from [<8152ad40>] (__sock_sendmsg+0x44/0x78) [ 109.238138][ T4039] r5:dfad1e98 r4:00000000 [ 109.238156][ T4039] [<8152acfc>] (__sock_sendmsg) from [<8152cb00>] (__sys_sendto+0x110/0x160) [ 109.238208][ T4039] r7:76bece1c r6:852daa00 r5:00000000 r4:00000000 [ 109.238225][ T4039] [<8152c9f0>] (__sys_sendto) from [<8152cb6c>] (sys_sendto+0x1c/0x24) [ 109.238286][ T4039] r9:85909800 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bece1c [ 109.238303][ T4039] [<8152cb50>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 109.238348][ T4039] Exception stack(0xdfad1fa8 to 0xdfad1ff0) [ 109.238405][ T4039] 1fa0: 76bece1c 0000000c 00000003 76beceb0 00000020 00000000 [ 109.238442][ T4039] 1fc0: 76bece1c 0000000c 00000000 00000122 00000003 00000000 76beceb0 76bee0bc [ 109.238470][ T4039] 1fe0: 00000000 76becdf0 000d7df0 00134458 [ 109.573388][ T4048] FAULT_INJECTION: forcing a failure. [ 109.573388][ T4048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.574999][ T4048] CPU: 0 UID: 0 PID: 4048 Comm: syz.0.80 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 109.575128][ T4048] Hardware name: ARM-Versatile Express [ 109.575155][ T4048] Call trace: [ 109.575198][ T4048] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 109.575298][ T4048] r7:00000000 r6:00000000 r5:60000013 r4:8225b4e0 [ 109.575316][ T4048] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 109.575363][ T4048] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 109.575410][ T4048] r5:83a92400 r4:82950610 [ 109.575424][ T4048] [<8021fe1c>] (dump_stack) from [<80964d5c>] (should_fail_ex+0x1c4/0x228) [ 109.575622][ T4048] [<80964b98>] (should_fail_ex) from [<80964dd4>] (should_fail+0x14/0x18) [ 109.575711][ T4048] r8:76bedf30 r7:00000000 r6:00000000 r5:dfe21f68 r4:00000002 [ 109.575775][ T4048] [<80964dc0>] (should_fail) from [<80964df4>] (should_fail_usercopy+0x1c/0x20) [ 109.575827][ T4048] [<80964dd8>] (should_fail_usercopy) from [<805895f0>] (simple_read_from_buffer+0x80/0x13c) [ 109.575886][ T4048] [<80589570>] (simple_read_from_buffer) from [<80601854>] (proc_fail_nth_read+0xb8/0x100) [ 109.575954][ T4048] r10:00000001 r9:8060179c r8:00000002 r7:dfe21f68 r6:0000000f r5:76bedf30 [ 109.575980][ T4048] r4:83a92400 r3:dfe21e9f [ 109.575997][ T4048] [<8060179c>] (proc_fail_nth_read) from [<8054dc68>] (vfs_read+0x98/0x320) [ 109.576060][ T4048] r8:76bedf30 r7:dfe21f68 r6:83a92400 r5:0000000f r4:856f69c0 [ 109.576078][ T4048] [<8054dbd0>] (vfs_read) from [<8054e910>] (ksys_read+0x74/0xe8) [ 109.576145][ T4048] r10:00000003 r9:83a92400 r8:8020029c r7:00000000 r6:00000000 r5:856f69c0 [ 109.576165][ T4048] r4:856f69c3 [ 109.576182][ T4048] [<8054e89c>] (ksys_read) from [<8054e994>] (sys_read+0x10/0x14) [ 109.576235][ T4048] r7:00000003 r6:00000004 r5:76bedf30 r4:0000000f [ 109.576251][ T4048] [<8054e984>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 109.576296][ T4048] Exception stack(0xdfe21fa8 to 0xdfe21ff0) [ 109.576332][ T4048] 1fa0: 0000000f 76bedf30 00000004 76bedf30 0000000f 00000000 [ 109.576363][ T4048] 1fc0: 0000000f 76bedf30 00000004 00000003 002e0000 00000000 00006364 76bee0bc [ 109.576386][ T4048] 1fe0: 00000158 76beded0 000d7df0 0012fe94 [ 110.142396][ T4065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4065 comm=syz.1.86 [ 112.246735][ T4090] syz.0.94 uses obsolete (PF_INET,SOCK_PACKET) [ 112.248423][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 112.248995][ T31] audit: type=1400 audit(112.190:132): avc: denied { create } for pid=4089 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.261540][ T31] audit: type=1400 audit(112.200:133): avc: denied { getopt } for pid=4089 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.264185][ T31] audit: type=1400 audit(112.200:134): avc: denied { write } for pid=4089 comm="syz.0.94" path="socket:[3432]" dev="sockfs" ino=3432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.527642][ T31] audit: type=1400 audit(112.470:135): avc: denied { setopt } for pid=4095 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.638796][ T31] audit: type=1400 audit(112.580:136): avc: denied { prog_load } for pid=4098 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 112.639171][ T31] audit: type=1400 audit(112.580:137): avc: denied { bpf } for pid=4098 comm="syz.0.98" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.645919][ T31] audit: type=1400 audit(112.580:138): avc: denied { perfmon } for pid=4098 comm="syz.0.98" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.451164][ T31] audit: type=1400 audit(113.390:139): avc: denied { ioctl } for pid=4106 comm="syz.1.101" path="socket:[2710]" dev="sockfs" ino=2710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.713779][ T31] audit: type=1400 audit(113.650:140): avc: denied { create } for pid=4111 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.718358][ T31] audit: type=1400 audit(113.660:141): avc: denied { bind } for pid=4111 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.795712][ C0] hrtimer: interrupt took 3075216 ns [ 125.791710][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 125.794776][ T31] audit: type=1400 audit(125.730:144): avc: denied { read } for pid=4120 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.704275][ T31] audit: type=1400 audit(126.640:145): avc: denied { create } for pid=4123 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.156641][ T23] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 127.324211][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.327890][ T23] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 127.329961][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.334551][ T23] usb 2-1: config 0 descriptor?? [ 127.567702][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 127.568178][ T23] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.576188][ T23] usb 2-1: USB disconnect, device number 10 [ 127.926640][ T23] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 128.107823][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.108281][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.108524][ T23] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.108615][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.113827][ T23] usb 2-1: config 0 descriptor?? [ 128.342666][ T23] usb 2-1: USB disconnect, device number 11 [ 128.688060][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 129.489371][ T4165] macvlan2: entered promiscuous mode [ 129.489969][ T4165] macvlan2: entered allmulticast mode [ 129.491799][ T4165] bond1: entered promiscuous mode [ 129.493100][ T4165] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.513051][ T4165] bond1: left promiscuous mode [ 129.663019][ T31] audit: type=1400 audit(129.600:146): avc: denied { setopt } for pid=4164 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.679996][ T31] audit: type=1400 audit(130.620:147): avc: denied { map_create } for pid=4207 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.691392][ T31] audit: type=1400 audit(130.620:148): avc: denied { map_read map_write } for pid=4207 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.316771][ T31] audit: type=1400 audit(135.210:149): avc: denied { ioctl } for pid=4212 comm="syz.1.116" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2779 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.676894][ T31] audit: type=1400 audit(135.610:150): avc: denied { create } for pid=4212 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.685277][ T31] audit: type=1400 audit(135.620:151): avc: denied { write } for pid=4212 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.598724][ T31] audit: type=1400 audit(146.540:152): avc: denied { create } for pid=4217 comm="syz.0.117" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.609948][ T31] audit: type=1400 audit(146.550:153): avc: denied { write } for pid=4217 comm="syz.0.117" name="file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.613815][ T31] audit: type=1400 audit(146.550:154): avc: denied { open } for pid=4217 comm="syz.0.117" path="/71/file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.643359][ T31] audit: type=1400 audit(146.580:155): avc: denied { ioctl } for pid=4217 comm="syz.0.117" path="/71/file0" dev="tmpfs" ino=388 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.990311][ T31] audit: type=1400 audit(146.930:156): avc: denied { mounton } for pid=4221 comm="syz.1.118" path="/45/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.874247][ T31] audit: type=1400 audit(158.810:157): avc: denied { unlink } for pid=3102 comm="syz-executor" name="file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.104863][ T31] audit: type=1400 audit(164.040:158): avc: denied { map } for pid=4239 comm="syz.0.124" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.108917][ T31] audit: type=1400 audit(164.040:159): avc: denied { read write } for pid=4239 comm="syz.0.124" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.941733][ T31] audit: type=1400 audit(165.880:160): avc: denied { name_bind } for pid=4251 comm="syz.1.127" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 165.946350][ T31] audit: type=1400 audit(165.880:161): avc: denied { node_bind } for pid=4251 comm="syz.1.127" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 177.791933][ T31] audit: type=1400 audit(177.730:162): avc: denied { read write } for pid=4263 comm="syz.0.132" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.793479][ T31] audit: type=1400 audit(177.730:163): avc: denied { open } for pid=4263 comm="syz.0.132" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 193.590484][ T4287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.584523][ T31] audit: type=1400 audit(205.520:164): avc: denied { map } for pid=4294 comm="syz.0.140" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.738358][ T4307] tmpfs: Unsupported parameter 'huge' [ 209.828192][ T31] audit: type=1400 audit(209.770:165): avc: denied { read } for pid=4308 comm="syz.0.144" path="socket:[2908]" dev="sockfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.813989][ T31] audit: type=1400 audit(250.750:166): avc: denied { write } for pid=4341 comm="syz.0.152" name="protocols" dev="proc" ino=4026532754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 253.738976][ T4344] comedi: valid board names for 8255 driver are: [ 253.741572][ T4344] 8255 [ 253.746262][ T4344] comedi: valid board names for vmk80xx driver are: [ 253.747303][ T4344] vmk80xx [ 253.758586][ T4344] comedi: valid board names for usbduxsigma driver are: [ 253.759809][ T4344] usbduxsigma [ 253.761720][ T4344] comedi: valid board names for usbduxfast driver are: [ 253.762696][ T4344] usbduxfast [ 253.763385][ T4344] comedi: valid board names for usbdux driver are: [ 253.764219][ T4344] usbdux [ 253.764831][ T4344] comedi: valid board names for ni6501 driver are: [ 253.766204][ T4344] ni6501 [ 253.766988][ T4344] comedi: valid board names for dt9812 driver are: [ 253.777976][ T4344] dt9812 [ 253.778968][ T4344] comedi: valid board names for ni_labpc_cs driver are: [ 253.786219][ T4344] ni_labpc_cs [ 253.788655][ T4344] comedi: valid board names for ni_daq_700 driver are: [ 253.789590][ T4344] ni_daq_700 [ 253.790263][ T4344] comedi: valid board names for labpc_pci driver are: [ 253.791131][ T4344] labpc_pci [ 253.791792][ T4344] comedi: valid board names for adl_pci9118 driver are: [ 253.792662][ T4344] pci9118dg [ 253.793316][ T4344] pci9118hg [ 253.793966][ T4344] pci9118hr [ 253.794575][ T4344] comedi: valid board names for 8255_pci driver are: [ 253.795384][ T4344] 8255_pci [ 253.796493][ T4344] comedi: valid board names for comedi_parport driver are: [ 253.807482][ T4344] comedi_parport [ 253.807895][ T4344] comedi: valid board names for comedi_test driver are: [ 253.808076][ T4344] comedi_test [ 253.808249][ T4344] comedi: valid board names for comedi_bond driver are: [ 253.808372][ T4344] comedi_bond [ 256.169560][ T4363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.159'. [ 273.050956][ T31] audit: type=1400 audit(272.990:167): avc: denied { bind } for pid=4383 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.059067][ T4384] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 273.059560][ T4384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.166'. [ 273.074366][ T4384] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 274.576185][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 274.726185][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 274.739637][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.740136][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 274.740486][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 274.740761][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 274.741003][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.769524][ T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 274.769916][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.770177][ T9] usb 2-1: Product: syz [ 274.770386][ T9] usb 2-1: Manufacturer: syz [ 274.770592][ T9] usb 2-1: SerialNumber: syz [ 274.817429][ T9] usb 2-1: config 0 descriptor?? [ 275.356234][ T9] rc_core: IR keymap rc-imon-rsc not found [ 275.356714][ T9] Registered IR keymap rc-empty [ 275.362802][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 275.374285][ T9] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input3 [ 275.578246][ T9] usb 2-1: USB disconnect, device number 12 [ 293.496662][ T31] audit: type=1400 audit(293.430:168): avc: denied { write } for pid=4425 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 293.497090][ T31] audit: type=1400 audit(293.430:169): avc: denied { nlmsg_write } for pid=4425 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 293.843068][ T4428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.856200][ T31] audit: type=1400 audit(297.790:170): avc: denied { mounton } for pid=4447 comm="syz.1.181" path="/proc/176/task" dev="proc" ino=4098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 303.916883][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 304.075312][ T23] usb 2-1: config 0 has no interfaces? [ 304.080453][ T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.080860][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.081055][ T23] usb 2-1: SerialNumber: syz [ 304.087316][ T23] usb 2-1: config 0 descriptor?? [ 304.293137][ T4458] netlink: 277 bytes leftover after parsing attributes in process `syz.1.185'. [ 304.302677][ T23] usb 2-1: USB disconnect, device number 13 [ 311.059807][ T4489] process 'syz.0.191' launched './file1' with NULL argv: empty string added [ 311.105787][ T31] audit: type=1400 audit(311.000:171): avc: denied { execute } for pid=4484 comm="syz.0.191" name="file1" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 311.106038][ T31] audit: type=1400 audit(311.000:172): avc: denied { execute_no_trans } for pid=4484 comm="syz.0.191" path="/113/file1" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.597180][ T31] audit: type=1400 audit(322.540:173): avc: denied { name_bind } for pid=4496 comm="syz.0.195" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 322.936693][ T31] audit: type=1400 audit(322.850:174): avc: denied { getopt } for pid=4498 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.892848][ T31] audit: type=1400 audit(323.830:175): avc: denied { getopt } for pid=4504 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.452265][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 351.122217][ T4555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 354.347450][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.754523][ T31] audit: type=1400 audit(354.690:176): avc: denied { create } for pid=4567 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 354.989632][ T31] audit: type=1400 audit(354.930:177): avc: denied { create } for pid=4567 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 363.196319][ T31] audit: type=1400 audit(363.130:178): avc: denied { read } for pid=4574 comm="syz.1.222" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.707455][ T31] audit: type=1400 audit(363.650:179): avc: denied { connect } for pid=4574 comm="syz.1.222" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.712925][ T31] audit: type=1400 audit(363.650:180): avc: denied { write } for pid=4574 comm="syz.1.222" laddr=fe80::a8aa:aaff:feaa:aaaa lport=6 faddr=fc01::a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 383.979035][ T4625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.000054][ T31] audit: type=1400 audit(383.940:181): avc: denied { setopt } for pid=4620 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.304523][ T31] audit: type=1400 audit(388.240:182): avc: denied { connect } for pid=4655 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.164965][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 391.754063][ T31] audit: type=1400 audit(391.690:183): avc: denied { create } for pid=4688 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 406.807758][ T4705] syzkaller0: entered promiscuous mode [ 406.808895][ T4705] syzkaller0: entered allmulticast mode [ 412.524188][ T31] audit: type=1400 audit(412.460:184): avc: denied { nlmsg_write } for pid=4715 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 424.574939][ T31] audit: type=1400 audit(424.510:185): avc: denied { create } for pid=4738 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 424.604865][ T31] audit: type=1400 audit(424.540:186): avc: denied { ioctl } for pid=4738 comm="syz.1.266" path="socket:[5140]" dev="sockfs" ino=5140 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 424.807380][ T31] audit: type=1400 audit(424.750:187): avc: denied { nlmsg_tty_audit } for pid=4740 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 430.703366][ T4756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'. [ 430.732048][ T31] audit: type=1400 audit(430.670:188): avc: denied { mount } for pid=4753 comm="syz.1.272" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 430.743062][ T4756] comedi: valid board names for 8255 driver are: [ 430.744862][ T4756] 8255 [ 430.746161][ T4756] comedi: valid board names for vmk80xx driver are: [ 430.746969][ T4756] vmk80xx [ 430.747607][ T4756] comedi: valid board names for usbduxsigma driver are: [ 430.748367][ T4756] usbduxsigma [ 430.749017][ T4756] comedi: valid board names for usbduxfast driver are: [ 430.749793][ T4756] usbduxfast [ 430.750512][ T4756] comedi: valid board names for usbdux driver are: [ 430.751487][ T4756] usbdux [ 430.752236][ T4756] comedi: valid board names for ni6501 driver are: [ 430.753042][ T4756] ni6501 [ 430.753700][ T4756] comedi: valid board names for dt9812 driver are: [ 430.754454][ T4756] dt9812 [ 430.755060][ T4756] comedi: valid board names for ni_labpc_cs driver are: [ 430.758200][ T4756] ni_labpc_cs [ 430.759010][ T4756] comedi: valid board names for ni_daq_700 driver are: [ 430.760116][ T4756] ni_daq_700 [ 430.760786][ T4756] comedi: valid board names for labpc_pci driver are: [ 430.761631][ T4756] labpc_pci [ 430.762229][ T4756] comedi: valid board names for adl_pci9118 driver are: [ 430.763429][ T4756] pci9118dg [ 430.764093][ T4756] pci9118hg [ 430.764728][ T4756] pci9118hr [ 430.778666][ T4756] comedi: valid board names for 8255_pci driver are: [ 430.779885][ T4756] 8255_pci [ 430.780584][ T4756] comedi: valid board names for comedi_parport driver are: [ 430.781645][ T4756] comedi_parport [ 430.782314][ T4756] comedi: valid board names for comedi_test driver are: [ 430.783317][ T4756] comedi_test [ 430.783958][ T4756] comedi: valid board names for comedi_bond driver are: [ 430.784916][ T4756] comedi_bond [ 442.237671][ T4768] netlink: 'syz.1.277': attribute type 10 has an invalid length. [ 443.809712][ T31] audit: type=1400 audit(443.750:189): avc: denied { create } for pid=4773 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 443.833198][ T4774] trusted_key: syz.1.280 sent an empty control message without MSG_MORE. [ 459.346283][ T2887] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 459.506250][ T2887] usb 1-1: Using ep0 maxpacket: 8 [ 459.559452][ T2887] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 459.560010][ T2887] usb 1-1: config 179 has no interface number 0 [ 459.560370][ T2887] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 459.560597][ T2887] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 459.560726][ T2887] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 459.560804][ T2887] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 459.561075][ T2887] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 459.567781][ T2887] usb 1-1: config 179 interface 65 has no altsetting 0 [ 459.567982][ T2887] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 459.568053][ T2887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.663492][ T2887] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 460.104783][ T23] usb 1-1: USB disconnect, device number 4 [ 460.104872][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 478.326694][ T4825] netlink: 64 bytes leftover after parsing attributes in process `syz.0.290'. [ 478.397034][ T4827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.402636][ T4827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.919814][ T31] audit: type=1400 audit(478.860:190): avc: denied { setopt } for pid=4842 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.845372][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 484.198497][ T4869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 484.200104][ T4869] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 488.748737][ T31] audit: type=1400 audit(488.680:191): avc: denied { bind } for pid=4890 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.691878][ T4902] 8<--- cut here --- [ 492.692206][ T4902] Unable to handle kernel paging request at virtual address fee04f2a when write [ 492.692298][ T4902] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 492.693168][ T4902] Internal error: Oops: a06 [#1] SMP ARM [ 492.695588][ T4902] Modules linked in: [ 492.695977][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.1.317 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 492.696391][ T4902] Hardware name: ARM-Versatile Express [ 492.696685][ T4902] PC is at subdev_8255_io+0x60/0x6c [ 492.697107][ T4902] LR is at subdev_8255_io+0x4c/0x6c [ 492.700488][ T4902] pc : [<8139f128>] lr : [<8139f114>] psr: 60000013 [ 492.706114][ T4902] sp : df9b9cc0 ip : df9b9cc0 fp : df9b9cdc [ 492.706666][ T4902] r10: 00000000 r9 : 00000000 r8 : 00000084 [ 492.707333][ T4902] r7 : 00004f27 r6 : 0000009b r5 : 83d066c0 r4 : 00004f2a [ 492.708063][ T4902] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 83d066c0 [ 492.708750][ T4902] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 492.709202][ T4902] Control: 30c5387d Table: 857f5c80 DAC: fffffffd [ 492.709644][ T4902] Register r0 information: slab kmalloc-192 start 83d066c0 pointer offset 0 size 192 [ 492.711125][ T4902] Register r1 information: non-paged memory [ 492.711738][ T4902] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 492.712456][ T4902] Register r3 information: non-paged memory [ 492.712810][ T4902] Register r4 information: non-paged memory [ 492.713333][ T4902] Register r5 information: slab kmalloc-192 start 83d066c0 pointer offset 0 size 192 [ 492.713984][ T4902] Register r6 information: non-paged memory [ 492.714334][ T4902] Register r7 information: non-paged memory [ 492.714679][ T4902] Register r8 information: non-paged memory [ 492.715046][ T4902] Register r9 information: NULL pointer [ 492.715378][ T4902] Register r10 information: NULL pointer [ 492.715958][ T4902] Register r11 information: 2-page vmalloc region starting at 0xdf9b8000 allocated at kernel_clone+0xac/0x3e4 [ 492.716618][ T4902] Register r12 information: 2-page vmalloc region starting at 0xdf9b8000 allocated at kernel_clone+0xac/0x3e4 [ 492.719576][ T4902] Process syz.1.317 (pid: 4902, stack limit = 0xdf9b8000) [ 492.729866][ T4902] Stack: (0xdf9b9cc0 to 0xdf9ba000) [ 492.730413][ T4902] 9cc0: 8139f0c8 83d066c0 00004f27 00004f27 df9b9cfc df9b9ce0 8139ee00 8139f0d4 [ 492.730993][ T4902] 9ce0: 00004f27 80500f20 85aef000 85aef000 df9b9d1c df9b9d00 8139f1c0 8139edb4 [ 492.731451][ T4902] 9d00: 85aef000 83d066c0 df9b9dac 00004f27 df9b9d5c df9b9d20 8139f3b4 8139f140 [ 492.731861][ T4902] 9d20: 20000013 83c5c500 82822670 00000000 00000000 829c53b0 83d066c0 00000000 [ 492.732281][ T4902] 9d40: df9b9d98 83d066c0 00000000 82b14ef8 df9b9d94 df9b9d60 8138e2c4 8139f304 [ 492.732691][ T4902] 9d60: 200000c0 00000000 df9b9d84 200000c0 83d066c0 b5403587 200000c0 8594b000 [ 492.733103][ T4902] 9d80: 40946400 00000003 df9b9e4c df9b9d98 81389e90 8138e1cc 35353238 00000000 [ 492.733527][ T4902] 9da0: 00000000 00000000 00000000 00004f27 00000005 00000002 00000401 00000001 [ 492.733949][ T4902] 9dc0: 00000cc7 00000fff 5c952399 00000005 000003ff 00000802 00001600 00000001 [ 492.734353][ T4902] 9de0: 00000001 00000009 0000e1cb 00000006 00000004 00000002 00000395 80000089 [ 492.734759][ T4902] 9e00: 00000000 00000000 fffffff5 ffffeadb 00000003 0000003c 00000008 00000004 [ 492.735184][ T4902] 9e20: 08000000 dffffffa 00000000 4e2063aa 00000000 856f69c0 83d066c0 200000c0 [ 492.736027][ T4902] 9e40: df9b9f14 df9b9e50 8138ae44 81389dc4 00000000 00000000 00000000 4e2063aa [ 492.736824][ T4902] 9e60: 00000000 00000000 824693fc 0000005f 83d3ec58 83d066f0 84134294 8594b000 [ 492.737420][ T4902] 9e80: df9b9ee4 df9b9e90 8078f7bc 80785aac 00000064 00000001 00000000 df9b9eac [ 492.741236][ T4902] 9ea0: 85ae0790 83430330 00006400 0000000b df9b9ea0 00000000 00000000 4e2063aa [ 492.741861][ T4902] 9ec0: 856f69c0 40946400 200000c0 200000c0 00000003 856f69c0 df9b9ef4 df9b9ee8 [ 492.746338][ T4902] 9ee0: 8078f8dc 4e2063aa df9b9f14 40946400 00000000 856f69c1 200000c0 00000003 [ 492.746892][ T4902] 9f00: 856f69c0 8594b000 df9b9fa4 df9b9f18 805679c4 8138a874 ecac8b10 8594b000 [ 492.747408][ T4902] 9f20: df9b9f3c df9b9f30 81a24b4c 81a24a1c df9b9f54 df9b9f40 80261ffc 80293598 [ 492.747821][ T4902] 9f40: df9b9fb0 40000000 df9b9f84 df9b9f58 802229ec 80261fb8 00000000 8281d09c [ 492.748233][ T4902] 9f60: df9b9fb0 0014c520 ecac8b10 80222940 00000000 4e2063aa df9b9fac 00000000 [ 492.748663][ T4902] 9f80: 00000000 002f6300 00000036 8020029c 8594b000 00000036 00000000 df9b9fa8 [ 492.749030][ T4902] 9fa0: 80200060 805678a0 00000000 00000000 00000003 40946400 200000c0 00000000 [ 492.749435][ T4902] 9fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b440bc [ 492.749816][ T4902] 9fe0: 76b43ec0 76b43eb0 000193a4 00131fc0 60000010 00000003 00000000 00000000 [ 492.750269][ T4902] Call trace: [ 492.750582][ T4902] [<8139f0c8>] (subdev_8255_io) from [<8139ee00>] (subdev_8255_do_config+0x58/0x60) [ 492.751111][ T4902] r7:00004f27 r6:00004f27 r5:83d066c0 r4:8139f0c8 [ 492.751434][ T4902] [<8139eda8>] (subdev_8255_do_config) from [<8139f1c0>] (subdev_8255_io_init+0x8c/0x9c) [ 492.752112][ T4902] r4:85aef000 [ 492.752479][ T4902] [<8139f134>] (subdev_8255_io_init) from [<8139f3b4>] (dev_8255_attach+0xbc/0x114) [ 492.755747][ T4902] r7:00004f27 r6:df9b9dac r5:83d066c0 r4:85aef000 [ 492.763142][ T4902] [<8139f2f8>] (dev_8255_attach) from [<8138e2c4>] (comedi_device_attach+0x104/0x240) [ 492.764093][ T4902] r10:82b14ef8 r9:00000000 r8:83d066c0 r7:df9b9d98 r6:00000000 r5:83d066c0 [ 492.764496][ T4902] r4:829c53b0 [ 492.764718][ T4902] [<8138e1c0>] (comedi_device_attach) from [<81389e90>] (do_devconfig_ioctl+0xd8/0x1e0) [ 492.765176][ T4902] r10:00000003 r9:40946400 r8:8594b000 r7:200000c0 r6:b5403587 r5:83d066c0 [ 492.765808][ T4902] r4:200000c0 [ 492.766211][ T4902] [<81389db8>] (do_devconfig_ioctl) from [<8138ae44>] (comedi_unlocked_ioctl+0x5dc/0x1c24) [ 492.766707][ T4902] r6:200000c0 r5:83d066c0 r4:856f69c0 [ 492.767038][ T4902] [<8138a868>] (comedi_unlocked_ioctl) from [<805679c4>] (sys_ioctl+0x130/0xdc8) [ 492.767505][ T4902] r10:8594b000 r9:856f69c0 r8:00000003 r7:200000c0 r6:856f69c1 r5:00000000 [ 492.767890][ T4902] r4:40946400 [ 492.768097][ T4902] [<80567894>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 492.768520][ T4902] Exception stack(0xdf9b9fa8 to 0xdf9b9ff0) [ 492.768922][ T4902] 9fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 492.769323][ T4902] 9fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b440bc [ 492.769714][ T4902] 9fe0: 76b43ec0 76b43eb0 000193a4 00131fc0 [ 492.770020][ T4902] r10:00000036 r9:8594b000 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 492.770427][ T4902] r4:00000000 [ 492.770995][ T4902] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 492.771770][ T4902] ---[ end trace 0000000000000000 ]--- [ 492.772705][ T4902] Kernel panic - not syncing: Fatal exception [ 492.774665][ T4902] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:11:56 Registers: info registers vcpu 0 CPU#0 R00=00000001 R01=00000000 R02=00000000 R03=00000039 R04=82979a68 R05=00000000 R06=60000193 R07=00000000 R08=00000001 R09=df9b9a50 R10=00000001 R11=df9b9a3c R12=00000020 R13=df9b99c0 R14=30393454 R15=802e4fd4 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=8e07f000 R01=dfc0f000 R02=00000001 R03=80239bb8 R04=7f00d000 R05=00000001 R06=82abf044 R07=82abe420 R08=7f00d000 R09=dfc0f000 R10=8280c9b4 R11=ec3b9d9c R12=ec3b9da0 R13=ec3b9d70 R14=80230af0 R15=80239bd0 PSR=80000013 N--- A S svc32 s00=01028008 s01=00000000 d00=0000000001028008 s02=040dc003 s03=ffffffff d01=ffffffff040dc003 s04=0dd00303 s05=03000800 d02=030008000dd00303 s06=08000dd8 s07=0de00300 d03=0de0030008000dd8 s08=03000800 s09=08000de8 d04=08000de803000800 s10=0df00300 s11=ffffff04 d05=ffffff040df00300 s12=800303ff s13=ffff040e d06=ffff040e800303ff s14=0303ffff s15=08000e90 d07=08000e900303ffff s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=ffffff04 s33=b00303ff d16=b00303ffffffff04 s34=0008000d s35=000db803 d17=000db8030008000d s36=c0032008 s37=ffff040d d18=ffff040dc0032008 s38=0303ffff s39=08000dd0 d19=08000dd00303ffff s40=0dd80300 s41=03000800 d20=030008000dd80300 s42=08000de0 s43=0de80300 d21=0de8030008000de0 s44=03000800 s45=ff040df0 d22=ff040df003000800 s46=03ffffff s47=040e8003 d23=040e800303ffffff s48=cd7fcb27 s49=0d5fe27e d24=0d5fe27ecd7fcb27 s50=e3044790 s51=1fc44221 d25=1fc44221e3044790 s52=4b9aa327 s53=1c98743d d26=1c98743d4b9aa327 s54=b469a9cb s55=6d804161 d27=6d804161b469a9cb s56=acebdaad s57=e8f68811 d28=e8f68811acebdaad s58=a2685ae1 s59=05c183ce d29=05c183cea2685ae1 s60=403cf2e3 s61=d9d2ffd6 d30=d9d2ffd6403cf2e3 s62=dacf16a1 s63=c758906d d31=c758906ddacf16a1 FPSCR: 00000000