last executing test programs: 45.749679347s ago: executing program 0 (id=524): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdf, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xe5, 0x8, 0xff}) close_range(r0, 0xffffffffffffffff, 0x0) 45.07082759s ago: executing program 0 (id=525): syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e020000"], 0x0) setrlimit(0x7, 0x0) 43.988786191s ago: executing program 0 (id=526): r0 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x4000012, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf", 0x4) 43.610238348s ago: executing program 0 (id=527): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000e00)=""/19, 0x13}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 43.010758219s ago: executing program 0 (id=528): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 20.009514092s ago: executing program 1 (id=534): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 18.669950808s ago: executing program 1 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008050}, 0x40040) 18.379998483s ago: executing program 1 (id=536): setreuid(0xffffffffffffffff, 0xee01) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0x6e, 0x0}, 0x40002002) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) 17.840290493s ago: executing program 1 (id=537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) io_submit(0x0, 0x0, &(0x7f0000002600)) 17.259816214s ago: executing program 0 (id=538): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, 0x59}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 589.630298ms ago: executing program 1 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1800000006a073917d653bb339db2b"], 0x18}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0xfffffffe, 0x9, 0x8, 0x0, 0x1, 0x3}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40890}, 0x20018000) 0s ago: executing program 1 (id=540): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'8255\x00', [0xfc, 0x3ff, 0x1, 0x1, 0x858d, 0x7dd, 0x8, 0x0, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0x6, 0x2, 0x7, 0x8, 0xfea, 0x401, 0x7, 0x5, 0x7, 0x4000009, 0x48, 0xc, 0x10, 0x5, 0x81, 0x1000, 0x8]}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x8cdfa2fb0c90b97b, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 41.402533][ T28] audit: type=1400 audit(41.320:90): avc: denied { write } for pid=3081 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.874357][ T28] audit: type=1400 audit(44.790:91): avc: denied { read write } for pid=3086 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.890483][ T28] audit: type=1400 audit(44.790:92): avc: denied { open } for pid=3086 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:30701' (ED25519) to the list of known hosts. [ 63.574938][ T28] audit: type=1400 audit(63.490:93): avc: denied { name_bind } for pid=3089 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.298082][ T28] audit: type=1400 audit(65.220:94): avc: denied { execute } for pid=3090 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.309662][ T28] audit: type=1400 audit(65.230:95): avc: denied { execute_no_trans } for pid=3090 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.535427][ T28] audit: type=1400 audit(68.450:96): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.543797][ T28] audit: type=1400 audit(68.460:97): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.562859][ T3090] cgroup: Unknown subsys name 'net' [ 68.573076][ T28] audit: type=1400 audit(68.490:98): avc: denied { unmount } for pid=3090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.724632][ T3090] cgroup: Unknown subsys name 'cpuset' [ 68.731047][ T3090] cgroup: Unknown subsys name 'hugetlb' [ 68.732029][ T3090] cgroup: Unknown subsys name 'rlimit' [ 68.899259][ T28] audit: type=1400 audit(68.820:99): avc: denied { setattr } for pid=3090 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.901490][ T28] audit: type=1400 audit(68.820:100): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.904974][ T28] audit: type=1400 audit(68.820:101): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 69.072110][ T3092] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 69.077848][ T28] audit: type=1400 audit(68.990:102): avc: denied { relabelto } for pid=3092 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.084090][ T28] audit: type=1400 audit(69.000:103): avc: denied { write } for pid=3092 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 69.112646][ T28] audit: type=1400 audit(69.030:104): avc: denied { read } for pid=3090 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.114225][ T28] audit: type=1400 audit(69.030:105): avc: denied { open } for pid=3090 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.522194][ T3090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.934899][ T28] audit: type=1400 audit(78.850:106): avc: denied { execmem } for pid=3093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.002777][ T28] audit: type=1400 audit(78.920:107): avc: denied { read } for pid=3095 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.008903][ T28] audit: type=1400 audit(78.920:108): avc: denied { open } for pid=3095 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.016442][ T28] audit: type=1400 audit(78.930:109): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.051574][ T28] audit: type=1400 audit(78.970:110): avc: denied { module_request } for pid=3095 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.052018][ T28] audit: type=1400 audit(78.970:111): avc: denied { module_request } for pid=3096 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.149381][ T28] audit: type=1400 audit(79.070:112): avc: denied { sys_module } for pid=3095 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.880340][ T28] audit: type=1400 audit(79.800:113): avc: denied { ioctl } for pid=3096 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.005330][ T3095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.008322][ T3096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.011972][ T3096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.027869][ T3095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.581213][ T3096] hsr_slave_0: entered promiscuous mode [ 81.585845][ T3096] hsr_slave_1: entered promiscuous mode [ 81.890135][ T28] audit: type=1400 audit(81.810:114): avc: denied { create } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.891568][ T28] audit: type=1400 audit(81.810:115): avc: denied { write } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.897828][ T3096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.911687][ T3096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.920860][ T3096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.928487][ T3096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.931341][ T3096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.936416][ T3096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.954061][ T3096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.960338][ T3096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.071319][ T3095] hsr_slave_0: entered promiscuous mode [ 82.073616][ T3095] hsr_slave_1: entered promiscuous mode [ 82.075374][ T3095] debugfs: 'hsr0' already exists in 'hsr' [ 82.076173][ T3095] Cannot create hsr debugfs directory [ 82.364912][ T3095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.375307][ T3095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.380800][ T3095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.394309][ T3095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.402182][ T3095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.418296][ T3095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.421215][ T3095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.435264][ T3095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.845785][ T3096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.274059][ T3095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.770309][ T3096] veth0_vlan: entered promiscuous mode [ 85.805148][ T3096] veth1_vlan: entered promiscuous mode [ 85.905994][ T3096] veth0_macvtap: entered promiscuous mode [ 85.928168][ T3096] veth1_macvtap: entered promiscuous mode [ 86.014189][ T2198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.018430][ T2198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.019555][ T2198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.035776][ T2198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.172199][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 86.172566][ T28] audit: type=1400 audit(86.090:117): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.178922][ T28] audit: type=1400 audit(86.100:118): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzkaller.ToJrhm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.184566][ T28] audit: type=1400 audit(86.100:119): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.193806][ T28] audit: type=1400 audit(86.110:120): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzkaller.ToJrhm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 86.198737][ T28] audit: type=1400 audit(86.120:121): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzkaller.ToJrhm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 86.213180][ T28] audit: type=1400 audit(86.130:122): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.223505][ T28] audit: type=1400 audit(86.140:123): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 86.231789][ T28] audit: type=1400 audit(86.150:124): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="gadgetfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 86.245973][ T28] audit: type=1400 audit(86.160:125): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.253904][ T28] audit: type=1400 audit(86.170:126): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 86.331017][ T3096] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.349130][ T3095] veth0_vlan: entered promiscuous mode [ 86.375438][ T3095] veth1_vlan: entered promiscuous mode [ 86.474485][ T3095] veth0_macvtap: entered promiscuous mode [ 86.507764][ T3095] veth1_macvtap: entered promiscuous mode [ 86.586329][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.589805][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.590182][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.590273][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.388787][ T3711] fuse: Unknown parameter 'grou00000000000000000000' [ 87.573988][ T3714] FAULT_INJECTION: forcing a failure. [ 87.573988][ T3714] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.588056][ T3714] CPU: 0 UID: 0 PID: 3714 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT [ 87.588394][ T3714] Hardware name: ARM-Versatile Express [ 87.588741][ T3714] Call trace: [ 87.589089][ T3714] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 87.590200][ T3714] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 87.590302][ T3714] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 87.590390][ T3714] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 87.590453][ T3714] r7:20000240 r6:00000000 r5:8410e200 r4:82b4f148 [ 87.590471][ T3714] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 87.590524][ T3714] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 87.590595][ T3714] r8:20000000 r7:20000240 r6:dfed9e28 r5:00000000 r4:dfed9f20 [ 87.590619][ T3714] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 87.590666][ T3714] [<809d7088>] (should_fail_usercopy) from [<815ea7fc>] (copy_msghdr_from_user+0x50/0x1e0) [ 87.590725][ T3714] [<815ea7ac>] (copy_msghdr_from_user) from [<815eaa04>] (___sys_sendmsg+0x78/0xd0) [ 87.590787][ T3714] r8:20000000 r7:00000000 r6:837fb1c0 r5:dfed9f20 r4:dfed9e6c [ 87.590805][ T3714] [<815ea98c>] (___sys_sendmsg) from [<815ecb78>] (__sys_sendmsg+0x8c/0xe0) [ 87.590894][ T3714] r9:8410e200 r8:838b3480 r7:20000000 r6:20000240 r5:838b3481 r4:00000003 [ 87.590929][ T3714] [<815ecaec>] (__sys_sendmsg) from [<815ecbe0>] (sys_sendmsg+0x14/0x18) [ 87.591028][ T3714] r8:8020029c r7:00000128 r6:0012f1a4 r5:00000000 r4:00000000 [ 87.591050][ T3714] [<815ecbcc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 87.591185][ T3714] Exception stack(0xdfed9fa8 to 0xdfed9ff0) [ 87.591375][ T3714] 9fa0: 00000000 00000000 00000003 20000240 20000000 00000000 [ 87.591434][ T3714] 9fc0: 00000000 00000000 0012f1a4 00000128 003462d8 00000000 00000001 76f9c0dc [ 87.591470][ T3714] 9fe0: 76f9be88 76f9be78 00018e58 001307a0 [ 90.308429][ T3731] FAULT_INJECTION: forcing a failure. [ 90.308429][ T3731] name failslab, interval 1, probability 0, space 0, times 1 [ 90.310203][ T3731] CPU: 0 UID: 0 PID: 3731 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT [ 90.310279][ T3731] Hardware name: ARM-Versatile Express [ 90.310327][ T3731] Call trace: [ 90.310370][ T3731] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 90.310476][ T3731] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 90.310496][ T3731] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 90.310546][ T3731] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 90.310620][ T3731] r7:840a8000 r6:00000000 r5:840a8000 r4:82b180c8 [ 90.310640][ T3731] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 90.310692][ T3731] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 90.310749][ T3731] r8:ffffffff r7:840a8000 r6:83001480 r5:00000dc0 r4:00000140 [ 90.310767][ T3731] [<80553ea8>] (should_failslab) from [<80532970>] (__kvmalloc_node_noprof+0x148/0x57c) [ 90.310815][ T3731] [<80532828>] (__kvmalloc_node_noprof) from [<809125b0>] (bucket_table_alloc+0x3c/0x12c) [ 90.310893][ T3731] r10:82c7d6f4 r9:00000cc0 r8:00000dc0 r7:00000cc0 r6:00000100 r5:00000040 [ 90.310914][ T3731] r4:857808dc [ 90.310932][ T3731] [<80912574>] (bucket_table_alloc) from [<809127dc>] (rhashtable_init_noprof+0x13c/0x250) [ 90.311016][ T3731] r9:00000cc0 r8:85780a00 r7:00000001 r6:82ce7048 r5:81cd4648 r4:857808dc [ 90.311037][ T3731] [<809126a0>] (rhashtable_init_noprof) from [<807a1b1c>] (ipc_init_ids+0x40/0x74) [ 90.311093][ T3731] r5:00000000 r4:857808a0 [ 90.311112][ T3731] [<807a1adc>] (ipc_init_ids) from [<807a4cb0>] (msg_init_ns+0x9c/0xc0) [ 90.311166][ T3731] r5:00000000 r4:85780800 [ 90.311185][ T3731] [<807a4c14>] (msg_init_ns) from [<807afe0c>] (copy_ipcs+0x2a4/0x404) [ 90.311245][ T3731] r9:82a208c0 r8:82a209c0 r7:85780b40 r6:85780800 r5:00000000 r4:82a21be0 [ 90.311279][ T3731] [<807afb68>] (copy_ipcs) from [<80282330>] (create_new_namespaces+0xb4/0x2f0) [ 90.311380][ T3731] r9:82a208c0 r8:6a040000 r7:00000000 r6:840a8000 r5:8605d938 r4:85dd0c80 [ 90.311400][ T3731] [<8028227c>] (create_new_namespaces) from [<80282924>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 90.311465][ T3731] r10:00000151 r9:840a8000 r8:00000000 r7:82a208c0 r6:dfe39f60 r5:8603d240 [ 90.311485][ T3731] r4:6a040000 [ 90.311501][ T3731] [<802828a0>] (unshare_nsproxy_namespaces) from [<8024fd7c>] (ksys_unshare+0x154/0x418) [ 90.311564][ T3731] r7:00000000 r6:00000000 r5:840a8000 r4:6a040000 [ 90.311584][ T3731] [<8024fc28>] (ksys_unshare) from [<80250050>] (sys_unshare+0x10/0x14) [ 90.311648][ T3731] r10:00000151 r9:840a8000 r8:8020029c r7:00000151 r6:0012f1a4 r5:00000000 [ 90.311687][ T3731] r4:00000000 [ 90.311703][ T3731] [<80250040>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 90.311751][ T3731] Exception stack(0xdfe39fa8 to 0xdfe39ff0) [ 90.311790][ T3731] 9fa0: 00000000 00000000 6a040000 00000000 00000000 00000000 [ 90.311839][ T3731] 9fc0: 00000000 00000000 0012f1a4 00000151 003462d8 00000000 00000001 76f870dc [ 90.311868][ T3731] 9fe0: 76f86e88 76f86e78 00018e58 001307a0 [ 90.829975][ T3752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3752 comm=syz.0.11 [ 91.455539][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 91.455874][ T28] audit: type=1400 audit(91.370:137): avc: denied { create } for pid=3753 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.477362][ T3754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3754 comm=syz.0.14 [ 91.480281][ T28] audit: type=1400 audit(91.400:138): avc: denied { create } for pid=3753 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.487942][ T28] audit: type=1400 audit(91.410:139): avc: denied { bind } for pid=3753 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.496917][ T28] audit: type=1400 audit(91.410:140): avc: denied { accept } for pid=3753 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.500100][ T28] audit: type=1400 audit(91.420:141): avc: denied { write } for pid=3753 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.510160][ T28] audit: type=1400 audit(91.430:142): avc: denied { ioctl } for pid=3753 comm="syz.0.14" path="socket:[916]" dev="sockfs" ino=916 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.789444][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 91.791951][ T3731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 91.882312][ T28] audit: type=1400 audit(91.790:143): avc: denied { create } for pid=3730 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.443949][ T28] audit: type=1400 audit(92.360:144): avc: denied { create } for pid=3775 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.463348][ T28] audit: type=1400 audit(92.380:145): avc: denied { ioctl } for pid=3775 comm="syz.0.21" path="socket:[2667]" dev="sockfs" ino=2667 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.595498][ T28] audit: type=1400 audit(92.510:146): avc: denied { allowed } for pid=3780 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.828199][ T3787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3787 comm=syz.0.26 [ 92.828764][ T3787] FAULT_INJECTION: forcing a failure. [ 92.828764][ T3787] name failslab, interval 1, probability 0, space 0, times 0 [ 92.841516][ T3787] CPU: 0 UID: 0 PID: 3787 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT [ 92.841729][ T3787] Hardware name: ARM-Versatile Express [ 92.841767][ T3787] Call trace: [ 92.841814][ T3787] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 92.841937][ T3787] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 92.841957][ T3787] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 92.842010][ T3787] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 92.842066][ T3787] r7:00000820 r6:00000000 r5:8483bd40 r4:82b180c8 [ 92.842083][ T3787] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 92.842135][ T3787] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 92.842206][ T3787] r8:8532d800 r7:00000820 r6:00000000 r5:00000000 r4:830e4c00 [ 92.842231][ T3787] [<80553ea8>] (should_failslab) from [<80531224>] (kmem_cache_alloc_noprof+0x54/0x3b8) [ 92.842284][ T3787] [<805311d0>] (kmem_cache_alloc_noprof) from [<815fe4dc>] (skb_clone+0x60/0x1c8) [ 92.842358][ T3787] r10:85786184 r9:8540cd40 r8:8532d800 r7:8337db40 r6:856a7700 r5:8337db40 [ 92.842381][ T3787] r4:00000820 [ 92.842399][ T3787] [<815fe47c>] (skb_clone) from [<8172099c>] (__netlink_deliver_tap+0x1e4/0x27c) [ 92.842471][ T3787] r7:8337db40 r6:856a7700 r5:8532d864 r4:856a7000 [ 92.842492][ T3787] [<817207b8>] (__netlink_deliver_tap) from [<817229c0>] (netlink_unicast+0x35c/0x380) [ 92.842581][ T3787] r10:85786184 r9:85c2d000 r8:8337db40 r7:8540cd40 r6:00000028 r5:8532d864 [ 92.842606][ T3787] r4:8532d800 [ 92.842736][ T3787] [<81722664>] (netlink_unicast) from [<81722bac>] (netlink_sendmsg+0x1c8/0x444) [ 92.842849][ T3787] r10:00000000 r9:00000000 r8:00000000 r7:85786000 r6:00000028 r5:8337db40 [ 92.842874][ T3787] r4:e03b1f20 [ 92.842893][ T3787] [<817229e4>] (netlink_sendmsg) from [<815e95f8>] (__sock_sendmsg+0x44/0x78) [ 92.842975][ T3787] r10:00000020 r9:00000000 r8:e03b1dcc r7:00000000 r6:837faf40 r5:e03b1f20 [ 92.842999][ T3787] r4:00000000 [ 92.843017][ T3787] [<815e95b4>] (__sock_sendmsg) from [<815ea628>] (____sys_sendmsg+0x238/0x2c4) [ 92.843159][ T3787] r7:00000000 r6:00000000 r5:837faf40 r4:e03b1f20 [ 92.843182][ T3787] [<815ea3f0>] (____sys_sendmsg) from [<815eaa28>] (___sys_sendmsg+0x9c/0xd0) [ 92.843258][ T3787] r10:00000128 r9:20000200 r8:00000020 r7:00000000 r6:837faf40 r5:e03b1f20 [ 92.843281][ T3787] r4:00000000 [ 92.843299][ T3787] [<815ea98c>] (___sys_sendmsg) from [<815ecb78>] (__sys_sendmsg+0x8c/0xe0) [ 92.843373][ T3787] r9:8483bd40 r8:838b4980 r7:00000020 r6:20000200 r5:838b4981 r4:00000004 [ 92.843397][ T3787] [<815ecaec>] (__sys_sendmsg) from [<815ecbe0>] (sys_sendmsg+0x14/0x18) [ 92.843461][ T3787] r8:8020029c r7:00000128 r6:0012f1a4 r5:00000000 r4:00000000 [ 92.843480][ T3787] [<815ecbcc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 92.843532][ T3787] Exception stack(0xe03b1fa8 to 0xe03b1ff0) [ 92.843581][ T3787] 1fa0: 00000000 00000000 00000004 20000200 00000020 00000000 [ 92.843615][ T3787] 1fc0: 00000000 00000000 0012f1a4 00000128 003462d8 00000000 00000001 76f9c0dc [ 92.843643][ T3787] 1fe0: 76f9be88 76f9be78 00018e58 001307a0 [ 94.087986][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.257697][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 94.294962][ T43] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 94.295319][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.295647][ T43] usb 1-1: Product: syz [ 94.295827][ T43] usb 1-1: Manufacturer: syz [ 94.295999][ T43] usb 1-1: SerialNumber: syz [ 94.558387][ T3807] FAULT_INJECTION: forcing a failure. [ 94.558387][ T3807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.559106][ T3807] CPU: 1 UID: 0 PID: 3807 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT [ 94.559201][ T3807] Hardware name: ARM-Versatile Express [ 94.559229][ T3807] Call trace: [ 94.559275][ T3807] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 94.559390][ T3807] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 94.559463][ T3807] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 94.559525][ T3807] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 94.559604][ T3807] r7:76f9ae50 r6:00000000 r5:84100c40 r4:82b4f148 [ 94.559624][ T3807] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 94.559684][ T3807] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 94.559752][ T3807] r8:838b1980 r7:76f9ae50 r6:76f9ae50 r5:838b1981 r4:8382e800 [ 94.559824][ T3807] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 94.559881][ T3807] [<809d7088>] (should_fail_usercopy) from [<810e8ef0>] (raw_ioctl+0x4b4/0x1228) [ 94.559944][ T3807] [<810e8a3c>] (raw_ioctl) from [<805a16e0>] (sys_ioctl+0x244/0xb5c) [ 94.560018][ T3807] r10:84100c40 r9:00000003 r8:838b1980 r7:76f9ae50 r6:80085502 r5:838b1981 [ 94.560044][ T3807] r4:00000000 [ 94.560063][ T3807] [<805a149c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 94.560116][ T3807] Exception stack(0xe85d9fa8 to 0xe85d9ff0) [ 94.560155][ T3807] 9fa0: 00023254 76f9ae60 00000003 80085502 76f9ae50 76f99e18 [ 94.560218][ T3807] 9fc0: 00023254 76f9ae60 00000000 00000036 00000000 20000300 00000001 76f9c0dc [ 94.560249][ T3807] 9fe0: 00000000 76f99e00 00310000 001302ac [ 94.560285][ T3807] r10:00000036 r9:84100c40 r8:8020029c r7:00000036 r6:00000000 r5:76f9ae60 [ 94.560307][ T3807] r4:00023254 [ 94.587573][ T43] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 94.594546][ T43] usb 1-1: USB disconnect, device number 2 [ 96.316430][ T3839] fuse: Unknown parameter 'grou00000000000000000000' [ 97.050453][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 97.050798][ T28] audit: type=1400 audit(96.970:153): avc: denied { write } for pid=3847 comm="syz.1.44" name="pfkey" dev="proc" ino=4026532722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.078032][ T28] audit: type=1400 audit(97.000:154): avc: denied { read } for pid=3847 comm="syz.1.44" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.090174][ T28] audit: type=1400 audit(97.010:155): avc: denied { open } for pid=3847 comm="syz.1.44" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.094701][ T28] audit: type=1400 audit(97.010:156): avc: denied { ioctl } for pid=3847 comm="syz.1.44" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.104498][ T3848] binder: 3847:3848 ioctl 4018620d 0 returned -22 [ 98.689704][ T28] audit: type=1400 audit(98.610:157): avc: denied { create } for pid=3853 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.329600][ T28] audit: type=1400 audit(99.250:158): avc: denied { ioctl } for pid=3867 comm="syz.0.50" path="socket:[3154]" dev="sockfs" ino=3154 ioctlcmd=0x6f05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.336197][ T28] audit: type=1400 audit(99.250:159): avc: denied { setattr } for pid=3867 comm="syz.0.50" name="ALG" dev="sockfs" ino=3154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.788549][ T28] audit: type=1400 audit(99.710:160): avc: denied { create } for pid=3877 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.795682][ T28] audit: type=1400 audit(99.710:161): avc: denied { listen } for pid=3877 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.808372][ T28] audit: type=1400 audit(99.720:162): avc: denied { ioctl } for pid=3877 comm="syz.0.53" path="socket:[2788]" dev="sockfs" ino=2788 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.771922][ T3903] FAULT_INJECTION: forcing a failure. [ 100.771922][ T3903] name failslab, interval 1, probability 0, space 0, times 0 [ 100.779151][ T3903] CPU: 0 UID: 0 PID: 3903 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT [ 100.779314][ T3903] Hardware name: ARM-Versatile Express [ 100.779373][ T3903] Call trace: [ 100.779429][ T3903] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 100.779573][ T3903] r7:60000113 r6:60000113 r5:8231e0a0 r4:00000000 [ 100.779593][ T3903] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 100.779689][ T3903] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 100.779760][ T3903] r7:00000000 r6:00000000 r5:847bbd40 r4:82b180c8 [ 100.779779][ T3903] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 100.779837][ T3903] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 100.779899][ T3903] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 100.779917][ T3903] [<80553ea8>] (should_failslab) from [<80532174>] (__kmalloc_noprof+0xa4/0x39c) [ 100.779971][ T3903] [<805320d0>] (__kmalloc_noprof) from [<80814fb0>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 100.780046][ T3903] r10:00000000 r9:830c0000 r8:00000000 r7:834c6d48 r6:838b1ca8 r5:00001000 [ 100.780070][ T3903] r4:00000000 [ 100.780088][ T3903] [<80814f74>] (tomoyo_realpath_from_path) from [<80811078>] (tomoyo_path_number_perm+0xcc/0x22c) [ 100.780159][ T3903] r10:00000000 r9:00000004 r8:838b1c80 r7:80041284 r6:81cda124 r5:00000004 [ 100.780182][ T3903] r4:838b1ca8 r3:828d1400 [ 100.780200][ T3903] [<80810fac>] (tomoyo_path_number_perm) from [<808159cc>] (tomoyo_file_ioctl+0x1c/0x20) [ 100.780270][ T3903] r10:847bbd40 r9:00000004 r8:838b1c80 r7:00000000 r6:00000000 r5:80041284 [ 100.780294][ T3903] r4:838b1c80 [ 100.780314][ T3903] [<808159b0>] (tomoyo_file_ioctl) from [<807c12cc>] (security_file_ioctl+0x80/0x1d4) [ 100.780371][ T3903] [<807c124c>] (security_file_ioctl) from [<805a14e8>] (sys_ioctl+0x4c/0xb5c) [ 100.780437][ T3903] r7:00000000 r6:80041284 r5:838b1c81 r4:00000000 [ 100.780457][ T3903] [<805a149c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 100.780532][ T3903] Exception stack(0xeac99fa8 to 0xeac99ff0) [ 100.780581][ T3903] 9fa0: 00000000 00000000 00000004 80041284 00000000 00000000 [ 100.780624][ T3903] 9fc0: 00000000 00000000 0012f1a4 00000036 003462d8 00000000 00000001 76f9c0dc [ 100.780662][ T3903] 9fe0: 76f9be88 76f9be78 00018e58 001307a0 [ 100.780699][ T3903] r10:00000036 r9:847bbd40 r8:8020029c r7:00000036 r6:0012f1a4 r5:00000000 [ 100.780724][ T3903] r4:00000000 [ 100.807345][ T3903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.247540][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.418754][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 101.473289][ T43] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 101.473650][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.473925][ T43] usb 2-1: Product: syz [ 101.474093][ T43] usb 2-1: Manufacturer: syz [ 101.474250][ T43] usb 2-1: SerialNumber: syz [ 101.959910][ T43] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 101.963913][ T43] usb 2-1: USB disconnect, device number 2 [ 102.756252][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 102.757097][ T28] audit: type=1400 audit(102.670:168): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.115650][ T28] audit: type=1400 audit(103.030:169): avc: denied { ioctl } for pid=3930 comm="syz.0.65" path="socket:[2850]" dev="sockfs" ino=2850 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.357316][ T91] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 103.497748][ T91] usb 2-1: device descriptor read/64, error -71 [ 103.747696][ T91] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 103.877651][ T91] usb 2-1: device descriptor read/64, error -71 [ 103.987976][ T91] usb usb2-port1: attempt power cycle [ 104.171407][ T28] audit: type=1400 audit(104.080:170): avc: denied { ioctl } for pid=3949 comm="syz.0.68" path="pid:[4026532647]" dev="nsfs" ino=4026532647 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.347815][ T91] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 104.370357][ T91] usb 2-1: device descriptor read/8, error -71 [ 104.617859][ T91] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 104.657206][ T91] usb 2-1: device descriptor read/8, error -71 [ 104.768803][ T91] usb usb2-port1: unable to enumerate USB device [ 107.884573][ T3969] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3969 comm=syz.0.72 [ 108.285655][ T28] audit: type=1400 audit(108.200:171): avc: denied { setattr } for pid=3974 comm="syz.0.75" name="" dev="pipefs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 114.724581][ T3999] FAULT_INJECTION: forcing a failure. [ 114.724581][ T3999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.737133][ T3999] CPU: 1 UID: 0 PID: 3999 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT [ 114.737291][ T3999] Hardware name: ARM-Versatile Express [ 114.737321][ T3999] Call trace: [ 114.737373][ T3999] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 114.737494][ T3999] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 114.737518][ T3999] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 114.737605][ T3999] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 114.737671][ T3999] r7:00000000 r6:00000000 r5:847b8c40 r4:82b4f148 [ 114.737692][ T3999] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 114.737755][ T3999] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 114.737830][ T3999] r8:00000001 r7:00000000 r6:000000b4 r5:20000100 r4:83367b40 [ 114.737852][ T3999] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 114.737902][ T3999] [<809d7088>] (should_fail_usercopy) from [<809dd028>] (strncpy_from_user+0x20/0x1b0) [ 114.737959][ T3999] [<809dd008>] (strncpy_from_user) from [<8059557c>] (do_getname+0x4c/0x14c) [ 114.738036][ T3999] r10:83367b4c r9:847b8c40 r8:00000001 r7:00000000 r6:20000100 r5:825258b8 [ 114.738062][ T3999] r4:83367b40 [ 114.738081][ T3999] [<80595530>] (do_getname) from [<8059b768>] (user_path_at+0x30/0x6c) [ 114.738148][ T3999] r10:00000015 r9:847b8c40 r8:00000000 r7:eaf7df6c r6:ffffff9c r5:00000001 [ 114.738173][ T3999] r4:00000000 r3:eaf7df6c [ 114.738193][ T3999] [<8059b738>] (user_path_at) from [<805bc324>] (sys_mount+0x1bc/0x260) [ 114.738261][ T3999] r7:00000000 r6:00000000 r5:00000000 r4:00000000 [ 114.738316][ T3999] [<805bc168>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 114.738374][ T3999] Exception stack(0xeaf7dfa8 to 0xeaf7dff0) [ 114.738416][ T3999] dfa0: 00000000 00000000 00000000 20000100 00000000 00008008 [ 114.738452][ T3999] dfc0: 00000000 00000000 0012f1a4 00000015 003462d8 00000000 00000001 76f9c0dc [ 114.738485][ T3999] dfe0: 76f9be88 76f9be78 00018e58 001307a0 [ 114.738525][ T3999] r10:00000015 r9:847b8c40 r8:8020029c r7:00000015 r6:0012f1a4 r5:00000000 [ 114.738549][ T3999] r4:00000000 [ 114.787346][ T28] audit: type=1400 audit(114.700:172): avc: denied { unmount } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.923579][ T4003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4003 comm=syz.0.82 [ 114.943005][ T4003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4003 comm=syz.0.82 [ 118.660498][ T28] audit: type=1400 audit(118.580:173): avc: denied { ioctl } for pid=4002 comm="syz.0.82" path="socket:[2944]" dev="sockfs" ino=2944 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.682401][ T28] audit: type=1400 audit(118.600:174): avc: denied { write } for pid=4002 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 118.835107][ T28] audit: type=1400 audit(118.750:175): avc: denied { ioctl } for pid=4002 comm="syz.0.82" path="socket:[2945]" dev="sockfs" ino=2945 ioctlcmd=0x4b71 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 121.997385][ T91] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.147297][ T91] usb 1-1: Using ep0 maxpacket: 32 [ 122.175281][ T91] usb 1-1: config 1 interface 0 altsetting 103 bulk endpoint 0x1 has invalid maxpacket 8 [ 122.178641][ T91] usb 1-1: config 1 interface 0 altsetting 103 bulk endpoint 0x82 has invalid maxpacket 32 [ 122.187297][ T91] usb 1-1: config 1 interface 0 has no altsetting 0 [ 122.210939][ T91] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.211307][ T91] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.211591][ T91] usb 1-1: Product: syz [ 122.211760][ T91] usb 1-1: Manufacturer: ᐌ [ 122.211938][ T91] usb 1-1: SerialNumber: syz [ 122.240670][ T4027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.266413][ T4027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.235888][ T28] audit: type=1400 audit(123.150:176): avc: denied { ioctl } for pid=4034 comm="syz.1.87" path="socket:[2968]" dev="sockfs" ino=2968 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.539683][ T28] audit: type=1400 audit(124.460:177): avc: denied { setopt } for pid=4036 comm="syz.1.88" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.667910][ T28] audit: type=1400 audit(124.580:178): avc: denied { ioctl } for pid=4036 comm="syz.1.88" path="socket:[3328]" dev="sockfs" ino=3328 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.395252][ T91] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 103 proto 1 vid 0x0525 pid 0xA4A8 [ 128.088667][ T28] audit: type=1400 audit(128.010:179): avc: denied { getopt } for pid=4077 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.243931][ T28] audit: type=1400 audit(129.160:180): avc: denied { getopt } for pid=4090 comm="syz.1.101" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.244831][ T28] audit: type=1400 audit(130.160:181): avc: denied { bind } for pid=4102 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.417232][ T28] audit: type=1400 audit(132.330:182): avc: denied { create } for pid=4105 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 132.870081][ T41] usb 1-1: USB disconnect, device number 3 [ 132.878886][ T41] usblp0: removed [ 134.297765][ T28] audit: type=1400 audit(134.210:183): avc: denied { remount } for pid=4132 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.300961][ T28] audit: type=1400 audit(136.220:184): avc: denied { create } for pid=4150 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.310081][ T28] audit: type=1400 audit(136.230:185): avc: denied { setopt } for pid=4150 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.312138][ T28] audit: type=1400 audit(136.230:186): avc: denied { ioctl } for pid=4150 comm="syz.0.112" path="socket:[4229]" dev="sockfs" ino=4229 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.459709][ T4174] block nbd1: NBD_DISCONNECT [ 142.372063][ T4196] FAULT_INJECTION: forcing a failure. [ 142.372063][ T4196] name failslab, interval 1, probability 0, space 0, times 0 [ 142.374072][ T4196] CPU: 0 UID: 0 PID: 4196 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT [ 142.374188][ T4196] Hardware name: ARM-Versatile Express [ 142.374219][ T4196] Call trace: [ 142.374262][ T4196] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 142.374374][ T4196] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 142.374396][ T4196] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 142.374454][ T4196] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 142.374519][ T4196] r7:830c0c00 r6:00000000 r5:840a4980 r4:82b180c8 [ 142.374538][ T4196] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 142.374627][ T4196] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 142.374693][ T4196] r8:840a4980 r7:830c0c00 r6:00000cc0 r5:00000000 r4:830c4b40 [ 142.374714][ T4196] [<80553ea8>] (should_failslab) from [<805315e0>] (kmem_cache_alloc_lru_noprof+0x58/0x3c4) [ 142.374767][ T4196] [<80531588>] (kmem_cache_alloc_lru_noprof) from [<805a5e80>] (__d_alloc+0x30/0x218) [ 142.374839][ T4196] r10:830c0c00 r9:825258c0 r8:837f9680 r7:830c0c00 r6:830ed9d0 r5:00000000 [ 142.374864][ T4196] r4:eb2e9e4c [ 142.374883][ T4196] [<805a5e50>] (__d_alloc) from [<805a60e4>] (d_alloc_anon+0x14/0x18) [ 142.374956][ T4196] r9:81c23d40 r8:837f9680 r7:85c2d080 r6:830ed9d0 r5:85c2d0c4 r4:eb2e9e4c [ 142.374977][ T4196] [<805a60d0>] (d_alloc_anon) from [<805c77fc>] (path_from_stashed+0x13c/0x29c) [ 142.375038][ T4196] [<805c76c0>] (path_from_stashed) from [<805dc214>] (open_namespace+0x48/0xd4) [ 142.375112][ T4196] r10:840a4980 r9:00000004 r8:860d5380 r7:85262d90 r6:840a4980 r5:00000000 [ 142.375138][ T4196] r4:853c67a8 [ 142.375157][ T4196] [<805dc1cc>] (open_namespace) from [<805e24e8>] (pidfd_ioctl+0x698/0x1544) [ 142.375222][ T4196] r6:852624c0 r5:85c2d080 r4:853c67a8 [ 142.375241][ T4196] [<805e1e50>] (pidfd_ioctl) from [<805a16e0>] (sys_ioctl+0x244/0xb5c) [ 142.375307][ T4196] r10:840a4980 r9:00000004 r8:860d5380 r7:00000000 r6:0000ff04 r5:860d5381 [ 142.375326][ T4196] r4:00000000 [ 142.375344][ T4196] [<805a149c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 142.375390][ T4196] Exception stack(0xeb2e9fa8 to 0xeb2e9ff0) [ 142.375431][ T4196] 9fa0: 00000000 00000000 00000004 0000ff04 00000000 00000000 [ 142.375465][ T4196] 9fc0: 00000000 00000000 0012f1a4 00000036 003462d8 00000000 00000001 76f9c0dc [ 142.375493][ T4196] 9fe0: 76f9be88 76f9be78 00018e58 001307a0 [ 142.375529][ T4196] r10:00000036 r9:840a4980 r8:8020029c r7:00000036 r6:0012f1a4 r5:00000000 [ 142.375550][ T4196] r4:00000000 [ 142.632511][ T28] audit: type=1400 audit(142.550:187): avc: denied { map } for pid=4197 comm="syz.1.123" path="pipe:[3523]" dev="pipefs" ino=3523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 142.649333][ T28] audit: type=1400 audit(142.570:188): avc: denied { execute } for pid=4197 comm="syz.1.123" path="pipe:[3523]" dev="pipefs" ino=3523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 144.256355][ T28] audit: type=1400 audit(144.170:189): avc: granted { setsecparam } for pid=4217 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 145.121687][ T28] audit: type=1400 audit(145.040:190): avc: denied { getopt } for pid=4221 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.768879][ T4247] FAULT_INJECTION: forcing a failure. [ 148.768879][ T4247] name failslab, interval 1, probability 0, space 0, times 0 [ 148.770893][ T4247] CPU: 0 UID: 0 PID: 4247 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT [ 148.770970][ T4247] Hardware name: ARM-Versatile Express [ 148.770992][ T4247] Call trace: [ 148.771029][ T4247] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 148.771125][ T4247] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 148.771142][ T4247] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 148.771187][ T4247] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 148.771238][ T4247] r7:85c0bc00 r6:00000000 r5:847bb100 r4:82b180c8 [ 148.771253][ T4247] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 148.771297][ T4247] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 148.771348][ T4247] r8:847bb100 r7:85c0bc00 r6:00000cc0 r5:00000000 r4:830c4b40 [ 148.771363][ T4247] [<80553ea8>] (should_failslab) from [<805315e0>] (kmem_cache_alloc_lru_noprof+0x58/0x3c4) [ 148.771407][ T4247] [<80531588>] (kmem_cache_alloc_lru_noprof) from [<805a5e80>] (__d_alloc+0x30/0x218) [ 148.771467][ T4247] r10:00000001 r9:825258c0 r8:82cd6538 r7:85c0bc00 r6:eee57877 r5:ebe51e80 [ 148.771485][ T4247] r4:ebe51df8 [ 148.771499][ T4247] [<805a5e50>] (__d_alloc) from [<805a9634>] (d_alloc_parallel+0x60/0x4f0) [ 148.771555][ T4247] r9:8585fd48 r8:82cd6538 r7:43bd95f4 r6:eee57877 r5:82cd6970 r4:ebe51df8 [ 148.771579][ T4247] [<805a95d4>] (d_alloc_parallel) from [<80595b0c>] (__lookup_slow+0x60/0x144) [ 148.771629][ T4247] r10:00000001 r9:00000000 r8:ebe51e80 r7:00000001 r6:8608c230 r5:8585fd48 [ 148.771646][ T4247] r4:8608c2b0 [ 148.771661][ T4247] [<80595aac>] (__lookup_slow) from [<80595c28>] (lookup_slow+0x38/0x50) [ 148.771709][ T4247] r9:00000000 r8:ebe51f4c r7:00000001 r6:ebe51e80 r5:8585fd48 r4:8608c2b0 [ 148.771724][ T4247] [<80595bf0>] (lookup_slow) from [<80599d98>] (path_lookupat+0x198/0x2a4) [ 148.771769][ T4247] r7:00000101 r6:ebe51f4c r5:00000000 r4:ebe51e78 [ 148.771784][ T4247] [<80599c00>] (path_lookupat) from [<8059b570>] (filename_lookup+0xd8/0x1a8) [ 148.771836][ T4247] r9:00000000 r8:ebe51f4c r7:00000001 r6:847bb100 r5:833679c0 r4:ffffff9c [ 148.771852][ T4247] [<8059b498>] (filename_lookup) from [<805821d8>] (do_fchownat+0x70/0x100) [ 148.771908][ T4247] r9:00000000 r8:00000000 r7:00000000 r6:ffffff9c r5:833679c0 r4:00000000 [ 148.771923][ T4247] [<80582168>] (do_fchownat) from [<803570fc>] (sys_chown16+0x50/0x58) [ 148.771981][ T4247] r10:000000b6 r9:847bb100 r8:8020029c r7:000000b6 r6:0012f1a4 r5:00000000 [ 148.771998][ T4247] r4:00000000 [ 148.772013][ T4247] [<803570ac>] (sys_chown16) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 148.772051][ T4247] Exception stack(0xebe51fa8 to 0xebe51ff0) [ 148.772086][ T4247] 1fa0: 00000000 00000000 20000100 00000000 00000000 00000000 [ 148.772118][ T4247] 1fc0: 00000000 00000000 0012f1a4 000000b6 00346418 00000000 003d0f00 76f450dc [ 148.772142][ T4247] 1fe0: 76f44e88 76f44e78 00018e58 001307a0 [ 148.772161][ T4247] r4:00000000 [ 150.748434][ T28] audit: type=1400 audit(150.660:191): avc: denied { create } for pid=4255 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.967647][ T4251] FAULT_INJECTION: forcing a failure. [ 153.967647][ T4251] name failslab, interval 1, probability 0, space 0, times 0 [ 153.968915][ T4251] CPU: 0 UID: 0 PID: 4251 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT [ 153.968983][ T4251] Hardware name: ARM-Versatile Express [ 153.969005][ T4251] Call trace: [ 153.969042][ T4251] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 153.969136][ T4251] r7:60000113 r6:60000113 r5:8231e0a0 r4:00000000 [ 153.969153][ T4251] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 153.969196][ T4251] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 153.969245][ T4251] r7:85788800 r6:00000000 r5:840aee40 r4:82b180c8 [ 153.969259][ T4251] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 153.969303][ T4251] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 153.969383][ T4251] r8:840aee40 r7:85788800 r6:00000cc0 r5:00000000 r4:830c4b40 [ 153.969400][ T4251] [<80553ea8>] (should_failslab) from [<805315e0>] (kmem_cache_alloc_lru_noprof+0x58/0x3c4) [ 153.969443][ T4251] [<80531588>] (kmem_cache_alloc_lru_noprof) from [<805a5e80>] (__d_alloc+0x30/0x218) [ 153.969501][ T4251] r10:00000001 r9:825258c0 r8:82cd6538 r7:85788800 r6:1db50a6f r5:ebf39e80 [ 153.969519][ T4251] r4:ebf39df8 [ 153.969539][ T4251] [<805a5e50>] (__d_alloc) from [<805a9634>] (d_alloc_parallel+0x60/0x4f0) [ 153.969616][ T4251] r9:8585f220 r8:82cd6538 r7:b7374741 r6:1db50a6f r5:82cd70a8 r4:ebf39df8 [ 153.969632][ T4251] [<805a95d4>] (d_alloc_parallel) from [<80595b0c>] (__lookup_slow+0x60/0x144) [ 153.969683][ T4251] r10:00000001 r9:00000000 r8:ebf39e80 r7:00000001 r6:8608a230 r5:8585f220 [ 153.969699][ T4251] r4:8608a2b0 [ 153.969713][ T4251] [<80595aac>] (__lookup_slow) from [<80595c28>] (lookup_slow+0x38/0x50) [ 153.969761][ T4251] r9:00000000 r8:ebf39f4c r7:00000001 r6:ebf39e80 r5:8585f220 r4:8608a2b0 [ 153.969776][ T4251] [<80595bf0>] (lookup_slow) from [<80599d98>] (path_lookupat+0x198/0x2a4) [ 153.969821][ T4251] r7:00000101 r6:ebf39f4c r5:00000000 r4:ebf39e78 [ 153.969844][ T4251] [<80599c00>] (path_lookupat) from [<8059b570>] (filename_lookup+0xd8/0x1a8) [ 153.969894][ T4251] r9:00000000 r8:ebf39f4c r7:00000001 r6:840aee40 r5:8332f900 r4:ffffff9c [ 153.969909][ T4251] [<8059b498>] (filename_lookup) from [<805821d8>] (do_fchownat+0x70/0x100) [ 153.969965][ T4251] r9:00000000 r8:00000000 r7:00000000 r6:ffffff9c r5:8332f900 r4:00000000 [ 153.969980][ T4251] [<80582168>] (do_fchownat) from [<803570fc>] (sys_chown16+0x50/0x58) [ 153.970036][ T4251] r10:000000b6 r9:840aee40 r8:8020029c r7:000000b6 r6:0012f1a4 r5:00000000 [ 153.970055][ T4251] r4:00000000 [ 153.970069][ T4251] [<803570ac>] (sys_chown16) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 153.970109][ T4251] Exception stack(0xebf39fa8 to 0xebf39ff0) [ 153.970146][ T4251] 9fa0: 00000000 00000000 20000100 00000000 00000000 00000000 [ 153.970184][ T4251] 9fc0: 00000000 00000000 0012f1a4 000000b6 00346418 00000000 003d0f00 76f5a0dc [ 153.970210][ T4251] 9fe0: 76f59e88 76f59e78 00018e58 001307a0 [ 153.970233][ T4251] r4:00000000 [ 156.768779][ T28] audit: type=1400 audit(156.690:192): avc: denied { read } for pid=4270 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.357578][ T4307] Zero length message leads to an empty skb [ 165.717720][ T4320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4320 comm=syz.1.156 [ 173.219077][ T28] audit: type=1400 audit(173.140:193): avc: denied { append } for pid=4357 comm="syz.0.168" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.756254][ T28] audit: type=1400 audit(177.670:194): avc: denied { create } for pid=4371 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 179.647218][ T28] audit: type=1400 audit(179.560:195): avc: denied { write } for pid=4376 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.313838][ T28] audit: type=1400 audit(180.230:196): avc: denied { create } for pid=4376 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.390838][ T28] audit: type=1400 audit(180.310:197): avc: denied { write } for pid=4376 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.602215][ T28] audit: type=1400 audit(191.520:198): avc: denied { kexec_image_load } for pid=4404 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 193.432358][ T28] audit: type=1400 audit(193.350:199): avc: denied { read } for pid=4413 comm="syz.1.186" path="socket:[4605]" dev="sockfs" ino=4605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.306058][ T4427] FAULT_INJECTION: forcing a failure. [ 199.306058][ T4427] name failslab, interval 1, probability 0, space 0, times 0 [ 199.316691][ T4427] CPU: 0 UID: 0 PID: 4427 Comm: syz.1.191 Not tainted syzkaller #0 PREEMPT [ 199.316788][ T4427] Hardware name: ARM-Versatile Express [ 199.316806][ T4427] Call trace: [ 199.316830][ T4427] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 199.316897][ T4427] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 199.316924][ T4427] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 199.316977][ T4427] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 199.317041][ T4427] r7:00000dc0 r6:00000000 r5:8410b100 r4:82b180c8 [ 199.317050][ T4427] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 199.317079][ T4427] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 199.317111][ T4427] r8:000000e0 r7:00000dc0 r6:00000000 r5:00000000 r4:830013c0 [ 199.317127][ T4427] [<80553ea8>] (should_failslab) from [<8052d9f0>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 199.317154][ T4427] [<8052d99c>] (__kmalloc_cache_noprof) from [<81abd0ec>] (subflow_create_ctx+0x44/0xc0) [ 199.317193][ T4427] r10:86132704 r9:00000000 r8:8410b100 r7:85441f00 r6:8251b478 r5:85441f00 [ 199.317205][ T4427] r4:85441f00 [ 199.317213][ T4427] [<81abd0a8>] (subflow_create_ctx) from [<81abd1a0>] (subflow_ulp_init+0x38/0x1a4) [ 199.317267][ T4427] r7:85441f00 r6:8251b478 r5:82bedde4 r4:85441f00 [ 199.317287][ T4427] [<81abd168>] (subflow_ulp_init) from [<81828f98>] (tcp_set_ulp+0xdc/0x15c) [ 199.317326][ T4427] r7:85441f00 r6:8251b478 r5:82bedde4 r4:82a1a278 [ 199.317335][ T4427] [<81828ebc>] (tcp_set_ulp) from [<81ac11ec>] (mptcp_subflow_create_socket+0x100/0x2a0) [ 199.317366][ T4427] r7:ecec9f20 r6:ecec9cc0 r5:86132580 r4:85441f00 [ 199.317375][ T4427] [<81ac10ec>] (mptcp_subflow_create_socket) from [<81ab2668>] (__mptcp_nmpc_sk.part.0+0x64/0x1cc) [ 199.317408][ T4427] r8:8410b100 r7:ecec9f20 r6:20004040 r5:00000000 r4:86132580 [ 199.317417][ T4427] [<81ab2604>] (__mptcp_nmpc_sk.part.0) from [<81aba998>] (mptcp_sendmsg+0x804/0xa94) [ 199.317448][ T4427] r7:ecec9f20 r6:20004040 r5:00000000 r4:86132580 [ 199.317456][ T4427] [<81aba194>] (mptcp_sendmsg) from [<81844cd0>] (inet_sendmsg+0x40/0x4c) [ 199.317492][ T4427] r10:20004844 r9:00000000 r8:ecec9dcc r7:00000000 r6:86132580 r5:00000000 [ 199.317502][ T4427] r4:ecec9f20 [ 199.317510][ T4427] [<81844c90>] (inet_sendmsg) from [<815e95f8>] (__sock_sendmsg+0x44/0x78) [ 199.317579][ T4427] r7:00000000 r6:8587e040 r5:ecec9f20 r4:00000000 [ 199.317601][ T4427] [<815e95b4>] (__sock_sendmsg) from [<815ea628>] (____sys_sendmsg+0x238/0x2c4) [ 199.317645][ T4427] r7:00000000 r6:00000000 r5:8587e040 r4:ecec9f20 [ 199.317667][ T4427] [<815ea3f0>] (____sys_sendmsg) from [<815eaa28>] (___sys_sendmsg+0x9c/0xd0) [ 199.317719][ T4427] r10:00000128 r9:20000080 r8:20004844 r7:00000000 r6:8587e040 r5:ecec9f20 [ 199.317729][ T4427] r4:00000000 [ 199.317737][ T4427] [<815ea98c>] (___sys_sendmsg) from [<815ecb78>] (__sys_sendmsg+0x8c/0xe0) [ 199.317771][ T4427] r9:8410b100 r8:860d4900 r7:20004844 r6:20000080 r5:860d4901 r4:00000003 [ 199.317787][ T4427] [<815ecaec>] (__sys_sendmsg) from [<815ecbe0>] (sys_sendmsg+0x14/0x18) [ 199.317818][ T4427] r8:8020029c r7:00000128 r6:0012f1a4 r5:00000000 r4:00000000 [ 199.317827][ T4427] [<815ecbcc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 199.317850][ T4427] Exception stack(0xecec9fa8 to 0xecec9ff0) [ 199.317870][ T4427] 9fa0: 00000000 00000000 00000003 20000080 20004844 00000000 [ 199.317888][ T4427] 9fc0: 00000000 00000000 0012f1a4 00000128 003462d8 00000000 00000001 76f870dc [ 199.317902][ T4427] 9fe0: 76f86e88 76f86e78 00018e58 001307a0 [ 199.712537][ T28] audit: type=1400 audit(199.630:200): avc: denied { map_create } for pid=4428 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.044509][ T28] audit: type=1400 audit(206.960:201): avc: denied { read } for pid=4449 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.557621][ T28] audit: type=1400 audit(207.470:202): avc: denied { ioctl } for pid=4449 comm="syz.0.199" path="socket:[3909]" dev="sockfs" ino=3909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.577204][ T28] audit: type=1400 audit(207.490:203): avc: denied { bind } for pid=4449 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.707647][ T4474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4474 comm=syz.0.206 [ 217.831175][ T28] audit: type=1400 audit(217.750:204): avc: denied { setopt } for pid=4490 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.377503][ T4511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4511 comm=syz.1.217 [ 226.281683][ T4527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4527 comm=syz.1.223 [ 230.924334][ T28] audit: type=1400 audit(230.840:205): avc: denied { write } for pid=4533 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 232.220546][ T4547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4547 comm=syz.1.228 [ 235.534776][ T4560] FAULT_INJECTION: forcing a failure. [ 235.534776][ T4560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.543521][ T4560] CPU: 0 UID: 0 PID: 4560 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT [ 235.543664][ T4560] Hardware name: ARM-Versatile Express [ 235.543694][ T4560] Call trace: [ 235.543742][ T4560] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 235.543862][ T4560] r7:60000113 r6:60000113 r5:8231e0a0 r4:00000000 [ 235.543882][ T4560] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 235.543931][ T4560] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 235.543985][ T4560] r7:20000340 r6:00000000 r5:8409bd40 r4:82b4f148 [ 235.544004][ T4560] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 235.544062][ T4560] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 235.544116][ T4560] r8:00044040 r7:20000340 r6:ed959e28 r5:00000000 r4:ed959f20 [ 235.544134][ T4560] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 235.544175][ T4560] [<809d7088>] (should_fail_usercopy) from [<815ea7fc>] (copy_msghdr_from_user+0x50/0x1e0) [ 235.544231][ T4560] [<815ea7ac>] (copy_msghdr_from_user) from [<815eaa04>] (___sys_sendmsg+0x78/0xd0) [ 235.544298][ T4560] r8:00044040 r7:00000000 r6:837fbbc0 r5:ed959f20 r4:ed959e6c [ 235.544316][ T4560] [<815ea98c>] (___sys_sendmsg) from [<815ecb78>] (__sys_sendmsg+0x8c/0xe0) [ 235.544380][ T4560] r9:8409bd40 r8:860d2f00 r7:00044040 r6:20000340 r5:860d2f01 r4:00000000 [ 235.544401][ T4560] [<815ecaec>] (__sys_sendmsg) from [<815ecbe0>] (sys_sendmsg+0x14/0x18) [ 235.544460][ T4560] r8:8020029c r7:00000128 r6:0012f1a4 r5:00000000 r4:00000000 [ 235.544478][ T4560] [<815ecbcc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 235.544522][ T4560] Exception stack(0xed959fa8 to 0xed959ff0) [ 235.544563][ T4560] 9fa0: 00000000 00000000 00000000 20000340 00044040 00000000 [ 235.544598][ T4560] 9fc0: 00000000 00000000 0012f1a4 00000128 003462d8 00000000 00000001 76f870dc [ 235.544626][ T4560] 9fe0: 76f86e88 76f86e78 00018e58 001307a0 [ 236.482853][ T4563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4563 comm=syz.1.235 [ 238.365270][ T4571] SELinux: syz.0.239 (4571) wrote to user. This is no longer supported. [ 238.758456][ T41] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 238.897213][ T41] usb 1-1: device descriptor read/64, error -71 [ 239.147549][ T41] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 239.297363][ T41] usb 1-1: device descriptor read/64, error -71 [ 239.408031][ T41] usb usb1-port1: attempt power cycle [ 239.777298][ T41] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 239.799128][ T41] usb 1-1: device descriptor read/8, error -71 [ 240.047327][ T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 240.089419][ T41] usb 1-1: device descriptor read/8, error -71 [ 240.208047][ T41] usb usb1-port1: unable to enumerate USB device [ 248.318609][ T4578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4578 comm=syz.1.240 [ 252.061359][ T4603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4603 comm=syz.0.247 [ 255.727292][ T4607] syz.0.249 uses obsolete (PF_INET,SOCK_PACKET) [ 255.972128][ T28] audit: type=1400 audit(255.890:206): avc: denied { write } for pid=4606 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.619722][ T4618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4618 comm=syz.1.252 [ 260.253627][ T4637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4637 comm=syz.0.261 [ 261.050353][ T4644] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4644 comm=syz.1.260 [ 262.048501][ T28] audit: type=1400 audit(261.970:207): avc: denied { setopt } for pid=4646 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.211264][ T4655] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.266' sets config #4 [ 264.249138][ T28] audit: type=1400 audit(264.170:208): avc: denied { create } for pid=4653 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.610586][ T4668] fuse: Bad value for 'fd' [ 265.380190][ T4674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4674 comm=syz.1.271 [ 267.740325][ T4678] fuse: Unknown parameter 'root'm0000ܳY0000r_i' [ 269.188963][ T4693] fuse: Bad value for 'fd' [ 270.906963][ T3643] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 271.117030][ T3643] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.125487][ T3643] usb 1-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 271.127392][ T3643] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.163509][ T3643] usb 1-1: string descriptor 0 read error: -22 [ 271.164638][ T3643] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 271.165615][ T3643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.594252][ T4706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.657949][ T4706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.748484][ T3643] usb 1-1: USB disconnect, device number 8 [ 273.107602][ T28] audit: type=1400 audit(273.020:209): avc: denied { name_bind } for pid=4729 comm="syz.0.279" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 273.107892][ T28] audit: type=1400 audit(273.020:210): avc: denied { node_bind } for pid=4729 comm="syz.0.279" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 273.764831][ T4741] fuse: Invalid rootmode [ 277.593066][ T4764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4764 comm=syz.1.288 [ 277.716280][ T4764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4764 comm=syz.1.288 [ 277.849876][ T4767] fuse: Invalid rootmode [ 281.483285][ T4794] FAULT_INJECTION: forcing a failure. [ 281.483285][ T4794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.508394][ T4794] CPU: 0 UID: 0 PID: 4794 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT [ 281.508500][ T4794] Hardware name: ARM-Versatile Express [ 281.508516][ T4794] Call trace: [ 281.508543][ T4794] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 281.508618][ T4794] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 281.508630][ T4794] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 281.508657][ T4794] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 281.508685][ T4794] r7:20001840 r6:00000000 r5:84706e40 r4:82b4f148 [ 281.508693][ T4794] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 281.508718][ T4794] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 281.508756][ T4794] r8:00020000 r7:20001840 r6:e0371e28 r5:00000000 r4:e0371f20 [ 281.508776][ T4794] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 281.508809][ T4794] [<809d7088>] (should_fail_usercopy) from [<815ea7fc>] (copy_msghdr_from_user+0x50/0x1e0) [ 281.508840][ T4794] [<815ea7ac>] (copy_msghdr_from_user) from [<815eaa04>] (___sys_sendmsg+0x78/0xd0) [ 281.508891][ T4794] r8:00020000 r7:00000000 r6:837fbbc0 r5:e0371f20 r4:e0371e6c [ 281.508912][ T4794] [<815ea98c>] (___sys_sendmsg) from [<815ecb78>] (__sys_sendmsg+0x8c/0xe0) [ 281.508956][ T4794] r9:84706e40 r8:860d2a80 r7:00020000 r6:20001840 r5:860d2a81 r4:00000003 [ 281.508966][ T4794] [<815ecaec>] (__sys_sendmsg) from [<815ecbe0>] (sys_sendmsg+0x14/0x18) [ 281.508993][ T4794] r8:8020029c r7:00000128 r6:0012f1a4 r5:00000000 r4:00000000 [ 281.509001][ T4794] [<815ecbcc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 281.509023][ T4794] Exception stack(0xe0371fa8 to 0xe0371ff0) [ 281.509042][ T4794] 1fa0: 00000000 00000000 00000003 20001840 00020000 00000000 [ 281.509058][ T4794] 1fc0: 00000000 00000000 0012f1a4 00000128 003462d8 00000000 00000001 76f9c0dc [ 281.509070][ T4794] 1fe0: 76f9be88 76f9be78 00018e58 001307a0 [ 281.886126][ T4798] fuse: Invalid rootmode [ 282.098617][ T4801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4801 comm=syz.1.304 [ 282.607056][ T28] audit: type=1400 audit(282.520:211): avc: denied { accept } for pid=4802 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.917770][ T3643] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 287.067106][ T3643] usb 1-1: Using ep0 maxpacket: 8 [ 287.077003][ T3643] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 1024, setting to 64 [ 287.078423][ T3643] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 178, changing to 7 [ 287.109095][ T3643] usb 1-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 287.110219][ T3643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.111146][ T3643] usb 1-1: Product: ఊ [ 287.111768][ T3643] usb 1-1: Manufacturer: ꝫ龊༊墲鲔唪⮞뼓郻⫟숻᡼᷁杣ɟ觐✈ꃻ퉫ꔰᰃ둰숕້밟圫统朄廠♑걈᥁ꉺࡇ뱈俋铢텋棒㌇姢鵪稜㳶탽ᯋꛎ덷ҡ麏鹱ْ◲灟࠘橔挟䳕ꨀ甅뙲ꄢ齖봥瞁ᕪ첩꾰ㅘ崉몍礚⑃딈炂ﺜ㩢辶叮䏔꓈⫇缆翨㾉燦澏쒮멑ڀﭢ銵議面啝콂制쎢 [ 287.113947][ T3643] usb 1-1: SerialNumber: В [ 287.527979][ T3643] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.560162][ T3643] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 287.569395][ T3643] usb 1-1: USB disconnect, device number 9 [ 287.869226][ T4847] fuse: Bad value for 'rootmode' [ 290.888443][ T28] audit: type=1400 audit(290.810:212): avc: denied { create } for pid=4851 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.911911][ T28] audit: type=1400 audit(290.830:213): avc: denied { getopt } for pid=4851 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.765630][ T4858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4858 comm=syz.0.319 [ 292.867792][ T28] audit: type=1400 audit(292.780:214): avc: denied { connect } for pid=4857 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.727825][ T4863] FAULT_INJECTION: forcing a failure. [ 293.727825][ T4863] name failslab, interval 1, probability 0, space 0, times 0 [ 293.729022][ T4863] CPU: 1 UID: 0 PID: 4863 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT [ 293.729339][ T4863] Hardware name: ARM-Versatile Express [ 293.729592][ T4863] Call trace: [ 293.730439][ T4863] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 293.731668][ T4863] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 293.731758][ T4863] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 293.731816][ T4863] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 293.731875][ T4863] r7:00000000 r6:00000000 r5:847fb100 r4:82b180c8 [ 293.731891][ T4863] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 293.731943][ T4863] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 293.732005][ T4863] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 293.732022][ T4863] [<80553ea8>] (should_failslab) from [<80532174>] (__kmalloc_noprof+0xa4/0x39c) [ 293.732077][ T4863] [<805320d0>] (__kmalloc_noprof) from [<80814fb0>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 293.732158][ T4863] r10:00000000 r9:830c0000 r8:00000000 r7:834d0e58 r6:860d2928 r5:00001000 [ 293.732186][ T4863] r4:00000000 [ 293.732202][ T4863] [<80814f74>] (tomoyo_realpath_from_path) from [<80811078>] (tomoyo_path_number_perm+0xcc/0x22c) [ 293.732276][ T4863] r10:00000000 r9:00000003 r8:860d2900 r7:00008936 r6:81cda124 r5:00000004 [ 293.732298][ T4863] r4:860d2928 r3:828d1400 [ 293.732314][ T4863] [<80810fac>] (tomoyo_path_number_perm) from [<808159cc>] (tomoyo_file_ioctl+0x1c/0x20) [ 293.732377][ T4863] r10:847fb100 r9:00000003 r8:860d2900 r7:00000000 r6:00000000 r5:00008936 [ 293.732396][ T4863] r4:860d2900 [ 293.732412][ T4863] [<808159b0>] (tomoyo_file_ioctl) from [<807c12cc>] (security_file_ioctl+0x80/0x1d4) [ 293.732460][ T4863] [<807c124c>] (security_file_ioctl) from [<805a14e8>] (sys_ioctl+0x4c/0xb5c) [ 293.732540][ T4863] r7:00000000 r6:00008936 r5:860d2901 r4:00000000 [ 293.732563][ T4863] [<805a149c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 293.732678][ T4863] Exception stack(0xea939fa8 to 0xea939ff0) [ 293.732826][ T4863] 9fa0: 00000000 00000000 00000003 00008936 00000000 00000000 [ 293.732877][ T4863] 9fc0: 00000000 00000000 0012f1a4 00000036 003462d8 00000000 00000001 76f9c0dc [ 293.732903][ T4863] 9fe0: 76f9be88 76f9be78 00018e58 001307a0 [ 293.732974][ T4863] r10:00000036 r9:847fb100 r8:8020029c r7:00000036 r6:0012f1a4 r5:00000000 [ 293.732996][ T4863] r4:00000000 [ 293.817397][ T4863] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.709987][ T28] audit: type=1400 audit(295.630:215): avc: denied { create } for pid=4874 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.768944][ T4890] fuse: Unknown parameter 'uid' [ 301.218776][ T28] audit: type=1400 audit(301.140:216): avc: denied { ioctl } for pid=4915 comm="syz.0.343" path="socket:[6269]" dev="sockfs" ino=6269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.337185][ T28] audit: type=1400 audit(301.240:217): avc: denied { setopt } for pid=4914 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.958649][ T28] audit: type=1400 audit(301.880:218): avc: denied { read } for pid=4919 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 304.593906][ T4930] FAULT_INJECTION: forcing a failure. [ 304.593906][ T4930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.594293][ T4930] CPU: 1 UID: 0 PID: 4930 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT [ 304.594375][ T4930] Hardware name: ARM-Versatile Express [ 304.594401][ T4930] Call trace: [ 304.594445][ T4930] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 304.594542][ T4930] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 304.594573][ T4930] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 304.594627][ T4930] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 304.594682][ T4930] r7:85440f80 r6:00000000 r5:847fb100 r4:82b4f148 [ 304.594698][ T4930] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 304.594745][ T4930] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 304.594852][ T4930] r8:85c2d000 r7:85440f80 r6:dfa2de3c r5:200001c0 r4:00000004 [ 304.594875][ T4930] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 304.594923][ T4930] [<809d7088>] (should_fail_usercopy) from [<817f83b0>] (copy_from_sockptr_offset+0x60/0x128) [ 304.595035][ T4930] [<817f8350>] (copy_from_sockptr_offset) from [<817ff96c>] (do_tcp_setsockopt+0x1e4/0xbbc) [ 304.595113][ T4930] r7:85440f80 r6:847fb100 r5:00000004 r4:00000013 [ 304.595175][ T4930] [<817ff78c>] (do_tcp_setsockopt) from [<81800394>] (tcp_setsockopt+0x50/0x58) [ 304.595289][ T4930] r10:00000126 r9:847fb100 r8:00000004 r7:858e36c0 r6:00000013 r5:00000006 [ 304.595365][ T4930] r4:81800344 [ 304.595422][ T4930] [<81800348>] (tcp_setsockopt) from [<815ed4a8>] (sock_common_setsockopt+0x38/0x40) [ 304.595553][ T4930] r4:81800344 [ 304.595605][ T4930] [<815ed474>] (sock_common_setsockopt) from [<815e88a8>] (do_sock_setsockopt+0x70/0xc8) [ 304.595666][ T4930] r4:815ed470 [ 304.595686][ T4930] [<815e8838>] (do_sock_setsockopt) from [<815ec75c>] (__sys_setsockopt+0x7c/0xc4) [ 304.595879][ T4930] r8:00000000 r7:860d4680 r6:860d4681 r5:00000013 r4:00000006 [ 304.595924][ T4930] [<815ec6e0>] (__sys_setsockopt) from [<815ec7c0>] (sys_setsockopt+0x1c/0x24) [ 304.596044][ T4930] r8:8020029c r7:00000126 r6:0012f1a4 r5:00000000 r4:00000004 [ 304.596094][ T4930] [<815ec7a4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 304.596236][ T4930] Exception stack(0xdfa2dfa8 to 0xdfa2dff0) [ 304.596336][ T4930] dfa0: 00000004 00000000 00000003 00000006 00000013 200001c0 [ 304.596462][ T4930] dfc0: 00000004 00000000 0012f1a4 00000126 003462d8 00000000 00000001 76f9c0dc [ 304.596490][ T4930] dfe0: 76f9be88 76f9be78 00018e58 001307a0 [ 304.798542][ T4932] fuse: Unknown parameter 'use00000000000000000000' [ 305.778127][ T28] audit: type=1400 audit(305.700:219): avc: denied { write } for pid=4936 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 307.513439][ T4942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4942 comm=syz.1.352 [ 307.879851][ T28] audit: type=1400 audit(307.800:220): avc: denied { create } for pid=4940 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.249912][ T4950] fuse: Unknown parameter 'use00000000000000000000' [ 308.877888][ T4955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4955 comm=syz.0.358 [ 310.998200][ T28] audit: type=1400 audit(310.920:221): avc: denied { write } for pid=4969 comm="syz.0.363" path="socket:[5812]" dev="sockfs" ino=5812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 311.479342][ T28] audit: type=1400 audit(311.400:222): avc: denied { perfmon } for pid=4974 comm="syz.1.366" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.144703][ T4983] fuse: Unknown parameter 'use00000000000000000000' [ 313.132120][ T28] audit: type=1400 audit(313.050:223): avc: denied { setopt } for pid=4984 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 316.002065][ T4999] fuse: Unknown parameter 'user_i00000000000000000000' [ 316.318319][ T5002] FAULT_INJECTION: forcing a failure. [ 316.318319][ T5002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.318817][ T5002] CPU: 1 UID: 0 PID: 5002 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT [ 316.318895][ T5002] Hardware name: ARM-Versatile Express [ 316.318920][ T5002] Call trace: [ 316.318965][ T5002] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 316.319102][ T5002] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 316.319629][ T5002] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 316.319703][ T5002] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 316.319766][ T5002] r7:20000140 r6:00000000 r5:84081880 r4:82b4f148 [ 316.319805][ T5002] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 316.319869][ T5002] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 316.319942][ T5002] r8:00008000 r7:20000140 r6:dfdb1e28 r5:00000000 r4:dfdb1f20 [ 316.319963][ T5002] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 316.320012][ T5002] [<809d7088>] (should_fail_usercopy) from [<815ea7fc>] (copy_msghdr_from_user+0x50/0x1e0) [ 316.320070][ T5002] [<815ea7ac>] (copy_msghdr_from_user) from [<815eaa04>] (___sys_sendmsg+0x78/0xd0) [ 316.320140][ T5002] r8:00008000 r7:00000000 r6:858e36c0 r5:dfdb1f20 r4:dfdb1e6c [ 316.320160][ T5002] [<815ea98c>] (___sys_sendmsg) from [<815ecb78>] (__sys_sendmsg+0x8c/0xe0) [ 316.320261][ T5002] r9:84081880 r8:860d4080 r7:00008000 r6:20000140 r5:860d4081 r4:00000003 [ 316.320305][ T5002] [<815ecaec>] (__sys_sendmsg) from [<815ecbe0>] (sys_sendmsg+0x14/0x18) [ 316.320392][ T5002] r8:8020029c r7:00000128 r6:0012f1a4 r5:00000000 r4:00000000 [ 316.320414][ T5002] [<815ecbcc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 316.320465][ T5002] Exception stack(0xdfdb1fa8 to 0xdfdb1ff0) [ 316.320508][ T5002] 1fa0: 00000000 00000000 00000003 20000140 00008000 00000000 [ 316.320545][ T5002] 1fc0: 00000000 00000000 0012f1a4 00000128 003462d8 00000000 00000001 76f870dc [ 316.320599][ T5002] 1fe0: 76f86e88 76f86e78 00018e58 001307a0 [ 318.929984][ T28] audit: type=1400 audit(318.850:224): avc: denied { setopt } for pid=5017 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.070952][ T5029] fuse: Unknown parameter 'user_i00000000000000000000' [ 321.540822][ T28] audit: type=1400 audit(321.460:225): avc: denied { map } for pid=5031 comm="syz.1.387" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 321.554720][ T28] audit: type=1400 audit(321.470:226): avc: denied { read write } for pid=5031 comm="syz.1.387" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.359053][ T5043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5043 comm=syz.0.390 [ 324.986184][ T28] audit: type=1400 audit(324.900:227): avc: denied { write } for pid=5047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.512101][ T28] audit: type=1400 audit(325.430:228): avc: denied { write } for pid=5052 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.748760][ T28] audit: type=1400 audit(338.670:229): avc: denied { write } for pid=5069 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 346.450526][ T5103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5103 comm=syz.1.412 [ 352.177797][ T28] audit: type=1400 audit(352.090:230): avc: denied { map } for pid=5102 comm="syz.1.412" path="/215" dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 365.234054][ T5168] fuse: Unknown parameter '0x0000000000000004' [ 368.497678][ T28] audit: type=1400 audit(368.410:231): avc: denied { map } for pid=5180 comm="syz.1.439" path="socket:[6140]" dev="sockfs" ino=6140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.499893][ T28] audit: type=1400 audit(368.410:232): avc: denied { accept } for pid=5180 comm="syz.1.439" path="socket:[6140]" dev="sockfs" ino=6140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.527762][ T28] audit: type=1400 audit(368.450:233): avc: denied { write } for pid=5180 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 368.698154][ T28] audit: type=1400 audit(368.620:234): avc: denied { ioctl } for pid=5180 comm="syz.1.439" path="socket:[6141]" dev="sockfs" ino=6141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.243915][ T5192] fuse: Unknown parameter '0x0000000000000004' [ 373.611988][ T5199] FAULT_INJECTION: forcing a failure. [ 373.611988][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 373.613903][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT [ 373.614009][ T5199] Hardware name: ARM-Versatile Express [ 373.614037][ T5199] Call trace: [ 373.614088][ T5199] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 373.614197][ T5199] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 373.614218][ T5199] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 373.614272][ T5199] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 373.614349][ T5199] r7:00000000 r6:00000000 r5:833e8000 r4:82b180c8 [ 373.614387][ T5199] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 373.614455][ T5199] [<809d6e4c>] (should_fail_ex) from [<80553f14>] (should_failslab+0x6c/0x94) [ 373.614522][ T5199] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 373.614543][ T5199] [<80553ea8>] (should_failslab) from [<80532174>] (__kmalloc_noprof+0xa4/0x39c) [ 373.614611][ T5199] [<805320d0>] (__kmalloc_noprof) from [<80814fb0>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 373.614718][ T5199] r10:00000000 r9:830bf000 r8:00000000 r7:85917f68 r6:838b3528 r5:00001000 [ 373.614744][ T5199] r4:00000000 [ 373.614765][ T5199] [<80814f74>] (tomoyo_realpath_from_path) from [<80811078>] (tomoyo_path_number_perm+0xcc/0x22c) [ 373.614840][ T5199] r10:00000000 r9:00000003 r8:838b3500 r7:00005451 r6:81cda124 r5:00000004 [ 373.614863][ T5199] r4:838b3528 r3:828d1400 [ 373.614879][ T5199] [<80810fac>] (tomoyo_path_number_perm) from [<808159cc>] (tomoyo_file_ioctl+0x1c/0x20) [ 373.614958][ T5199] r10:833e8000 r9:00000003 r8:838b3500 r7:00000000 r6:00000000 r5:00005451 [ 373.614979][ T5199] r4:838b3500 [ 373.614996][ T5199] [<808159b0>] (tomoyo_file_ioctl) from [<807c12cc>] (security_file_ioctl+0x80/0x1d4) [ 373.615049][ T5199] [<807c124c>] (security_file_ioctl) from [<805a14e8>] (sys_ioctl+0x4c/0xb5c) [ 373.615110][ T5199] r7:00000000 r6:00005451 r5:838b3501 r4:00000000 [ 373.615130][ T5199] [<805a149c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 373.615183][ T5199] Exception stack(0xead31fa8 to 0xead31ff0) [ 373.615245][ T5199] 1fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 373.615285][ T5199] 1fc0: 00000000 00000000 0012f1a4 00000036 003462d8 00000000 00000001 76f870dc [ 373.615316][ T5199] 1fe0: 76f86e88 76f86e78 00018e58 001307a0 [ 373.615354][ T5199] r10:00000036 r9:833e8000 r8:8020029c r7:00000036 r6:0012f1a4 r5:00000000 [ 373.615376][ T5199] r4:00000000 [ 373.644372][ T5199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.402215][ T5205] fuse: Unknown parameter '0x0000000000000004' [ 376.100303][ T28] audit: type=1400 audit(376.020:235): avc: denied { create } for pid=5210 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 379.398172][ T5229] fuse: Unknown parameter '0x0000000000000004' [ 383.494163][ T5260] fuse: Unknown parameter 'fd0x0000000000000004' [ 391.331323][ T5278] FAULT_INJECTION: forcing a failure. [ 391.331323][ T5278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.334075][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.1.472 Not tainted syzkaller #0 PREEMPT [ 391.334146][ T5278] Hardware name: ARM-Versatile Express [ 391.334169][ T5278] Call trace: [ 391.334217][ T5278] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 391.334279][ T5278] r7:60000013 r6:60000013 r5:8231e0a0 r4:00000000 [ 391.334289][ T5278] [<80201af0>] (show_stack) from [<8021e34c>] (dump_stack_lvl+0x5c/0x70) [ 391.334315][ T5278] [<8021e2f0>] (dump_stack_lvl) from [<8021e378>] (dump_stack+0x18/0x1c) [ 391.334345][ T5278] r7:200019c0 r6:00000000 r5:847b6200 r4:82b4f148 [ 391.334353][ T5278] [<8021e360>] (dump_stack) from [<809d700c>] (should_fail_ex+0x1c0/0x224) [ 391.334380][ T5278] [<809d6e4c>] (should_fail_ex) from [<809d7084>] (should_fail+0x14/0x18) [ 391.334409][ T5278] r8:0000c800 r7:200019c0 r6:df931e28 r5:00000000 r4:df931f20 [ 391.334417][ T5278] [<809d7070>] (should_fail) from [<809d70a4>] (should_fail_usercopy+0x1c/0x20) [ 391.334439][ T5278] [<809d7088>] (should_fail_usercopy) from [<815ea7fc>] (copy_msghdr_from_user+0x50/0x1e0) [ 391.334469][ T5278] [<815ea7ac>] (copy_msghdr_from_user) from [<815eaa04>] (___sys_sendmsg+0x78/0xd0) [ 391.334505][ T5278] r8:0000c800 r7:00000000 r6:83713bc0 r5:df931f20 r4:df931e6c [ 391.334513][ T5278] [<815ea98c>] (___sys_sendmsg) from [<815ecb78>] (__sys_sendmsg+0x8c/0xe0) [ 391.334545][ T5278] r9:847b6200 r8:860d2b00 r7:0000c800 r6:200019c0 r5:860d2b01 r4:00000004 [ 391.334554][ T5278] [<815ecaec>] (__sys_sendmsg) from [<815ecbe0>] (sys_sendmsg+0x14/0x18) [ 391.334587][ T5278] r8:8020029c r7:00000128 r6:0012f1a4 r5:00000000 r4:00000000 [ 391.334595][ T5278] [<815ecbcc>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 391.334617][ T5278] Exception stack(0xdf931fa8 to 0xdf931ff0) [ 391.334636][ T5278] 1fa0: 00000000 00000000 00000004 200019c0 0000c800 00000000 [ 391.334653][ T5278] 1fc0: 00000000 00000000 0012f1a4 00000128 003462d8 00000000 00000001 76f870dc [ 391.334666][ T5278] 1fe0: 76f86e88 76f86e78 00018e58 001307a0 [ 391.649942][ T5280] fuse: Unknown parameter 'fd0x0000000000000004' [ 398.453081][ T28] audit: type=1400 audit(398.370:236): avc: denied { name_bind } for pid=5303 comm="syz.0.482" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 398.592035][ T28] audit: type=1400 audit(398.510:237): avc: denied { sqpoll } for pid=5303 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 398.714678][ T28] audit: type=1400 audit(398.630:238): avc: denied { read } for pid=5305 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.979806][ T28] audit: type=1400 audit(398.900:239): avc: denied { accept } for pid=5291 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 399.349149][ T28] audit: type=1326 audit(399.260:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.486" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 399.351327][ T28] audit: type=1326 audit(399.270:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.486" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 399.389802][ T28] audit: type=1326 audit(399.310:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.486" exe="/syz-executor" sig=0 arch=40000028 syscall=235 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 399.392686][ T28] audit: type=1326 audit(399.310:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.486" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 399.397036][ T28] audit: type=1326 audit(399.310:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.0.486" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 400.157105][ T28] audit: type=1326 audit(400.060:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.0.487" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1307a0 code=0x7ffc0000 [ 430.404772][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 430.405243][ T28] audit: type=1400 audit(430.320:253): avc: denied { nlmsg_write } for pid=5341 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.839340][ T5359] binder: 5358:5359 ioctl c0306201 0 returned -14 [ 438.852119][ T5359] binder: 5358:5359 ioctl c0306201 0 returned -14 [ 441.694057][ T5366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 450.332582][ T28] audit: type=1400 audit(450.250:254): avc: denied { prog_run } for pid=5395 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 457.813506][ T28] audit: type=1400 audit(457.730:255): avc: denied { map_read map_write } for pid=5397 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 462.809505][ T28] audit: type=1400 audit(462.730:256): avc: denied { name_bind } for pid=5404 comm="syz.0.516" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 468.437985][ T5427] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 469.167609][ T1545] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 469.360247][ T1545] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.361523][ T1545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 469.362777][ T1545] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 469.364210][ T1545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.395854][ T1545] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 469.397823][ T1545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.398815][ T1545] usb 1-1: Product: syz [ 469.399582][ T1545] usb 1-1: Manufacturer: syz [ 469.400643][ T1545] usb 1-1: SerialNumber: syz [ 469.405722][ T1545] usb 1-1: config 0 descriptor?? [ 469.420681][ T1545] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 469.430656][ T1545] ums-isd200 1-1:0.0: USB Mass Storage not supported on this host controller [ 469.470634][ T1545] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 469.682883][ T5399] usb 1-1: USB disconnect, device number 10 [ 470.040148][ T28] audit: type=1400 audit(469.960:257): avc: denied { connect } for pid=5446 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 470.060342][ T28] audit: type=1400 audit(469.980:258): avc: denied { write } for pid=5446 comm="syz.0.526" path="socket:[7063]" dev="sockfs" ino=7063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 472.760972][ T5457] netlink: 75 bytes leftover after parsing attributes in process `syz.1.531'. [ 479.228593][ T28] audit: type=1400 audit(479.150:259): avc: denied { mount } for pid=5458 comm="syz.1.532" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 479.260322][ T28] audit: type=1400 audit(479.180:260): avc: denied { remount } for pid=5458 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 493.040685][ T28] audit: type=1400 audit(492.960:261): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 513.719211][ T28] audit: type=1400 audit(513.640:262): avc: denied { nlmsg_write } for pid=5485 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 514.124846][ T5489] 8<--- cut here --- [ 514.125133][ T5489] Unable to handle kernel paging request at virtual address fee000ff when write [ 514.129916][ T28] audit: type=1400 audit(514.050:263): avc: denied { read } for pid=2903 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 514.132168][ T28] audit: type=1400 audit(514.050:264): avc: denied { search } for pid=2903 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.134306][ T28] audit: type=1400 audit(514.050:265): avc: denied { write search } for pid=2903 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.137288][ T28] audit: type=1400 audit(514.060:266): avc: denied { add_name } for pid=2903 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.137822][ T28] audit: type=1400 audit(514.060:267): avc: denied { create } for pid=2903 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.139763][ T28] audit: type=1400 audit(514.060:268): avc: denied { append open } for pid=2903 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.140761][ T28] audit: type=1400 audit(514.060:269): avc: denied { getattr } for pid=2903 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.172684][ T5489] [fee000ff] *pgd=80000080007003, *pmd=00000000 [ 514.175644][ T5489] Internal error: Oops: a06 [#1] SMP ARM [ 514.177419][ T5489] Modules linked in: [ 514.177998][ T5489] CPU: 1 UID: 0 PID: 5489 Comm: syz.1.540 Not tainted syzkaller #0 PREEMPT [ 514.178405][ T5489] Hardware name: ARM-Versatile Express [ 514.178744][ T5489] PC is at subdev_8255_io+0x60/0x6c [ 514.179157][ T5489] LR is at subdev_8255_io+0x4c/0x6c [ 514.179468][ T5489] pc : [<814650a8>] lr : [<81465094>] psr: 60000013 [ 514.179843][ T5489] sp : df9b1cb8 ip : df9b1cb8 fp : df9b1cd4 [ 514.180156][ T5489] r10: 000000fc r9 : 00000004 r8 : df9b1da4 [ 514.180399][ T5489] r7 : 00000000 r6 : 0000009b r5 : 842159c0 r4 : 000000ff [ 514.180704][ T5489] r3 : 0000009b r2 : fee000ff r1 : 00000001 r0 : 842159c0 [ 514.181121][ T5489] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 514.181462][ T5489] Control: 30c5387d Table: 860e4b00 DAC: 00000000 [ 514.181894][ T5489] Register r0 information: slab kmalloc-192 start 842159c0 pointer offset 0 size 192 [ 514.183011][ T5489] Register r1 information: non-paged memory [ 514.183486][ T5489] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 514.184016][ T5489] Register r3 information: non-paged memory [ 514.184255][ T5489] Register r4 information: non-paged memory [ 514.184487][ T5489] Register r5 information: slab kmalloc-192 start 842159c0 pointer offset 0 size 192 [ 514.184917][ T5489] Register r6 information: non-paged memory [ 514.185157][ T5489] Register r7 information: NULL pointer [ 514.185447][ T5489] Register r8 information: 2-page vmalloc region starting at 0xdf9b0000 allocated at kernel_clone+0xbc/0x438 [ 514.185910][ T5489] Register r9 information: non-paged memory [ 514.186151][ T5489] Register r10 information: non-paged memory [ 514.186389][ T5489] Register r11 information: 2-page vmalloc region starting at 0xdf9b0000 allocated at kernel_clone+0xbc/0x438 [ 514.187015][ T5489] Register r12 information: 2-page vmalloc region starting at 0xdf9b0000 allocated at kernel_clone+0xbc/0x438 [ 514.187731][ T5489] Process syz.1.540 (pid: 5489, stack limit = 0xdf9b0000) [ 514.188231][ T5489] Stack: (0xdf9b1cb8 to 0xdf9b2000) [ 514.188584][ T5489] 1ca0: 81465048 000000fc [ 514.189173][ T5489] 1cc0: 842159c0 00000000 df9b1cf4 df9b1cd8 81464d84 81465054 000000fc 805320dc [ 514.189720][ T5489] 1ce0: 861c1c00 861c1c00 df9b1d14 df9b1cf8 8146513c 81464d38 842159c0 00000000 [ 514.190252][ T5489] 1d00: 861c1c00 00000000 df9b1d54 df9b1d18 814652ec 814650c0 ffffffff 00000004 [ 514.190839][ T5489] 1d20: 82a208c0 00000000 00000000 82bd321c 842159c0 00000000 df9b1d90 842159c0 [ 514.191412][ T5489] 1d40: 00000000 82d2cdc4 df9b1d8c df9b1d58 81453c74 81465284 40946400 00000000 [ 514.191757][ T5489] 1d60: df9b1d7c 20000180 842159c0 b5403587 40946400 00000003 00000003 8410a4c0 [ 514.192255][ T5489] 1d80: df9b1e4c df9b1d90 8144f480 81453b78 35353238 00000000 00000000 00000000 [ 514.192668][ T5489] 1da0: 00000000 000000fc 000003ff 00000001 00000001 0000858d 000007dd 00000008 [ 514.193068][ T5489] 1dc0: 00000000 00000007 0000000a 00000000 00000007 00000005 00000401 00000006 [ 514.193572][ T5489] 1de0: 00000002 00000007 00000008 00000fea 00000401 00000007 00000005 00000007 [ 514.194117][ T5489] 1e00: 04000009 00000048 0000000c 00000010 00000005 00000081 00001000 00000008 [ 514.194561][ T5489] 1e20: 00000000 13372653 8410a4c0 860d4b80 842159c0 20000180 40946400 00000003 [ 514.195135][ T5489] 1e40: df9b1f14 df9b1e50 814507a4 8144f3b8 00000000 13372653 00000000 00000000 [ 514.195665][ T5489] 1e60: 82530804 df9b1ea4 0000005f 844ffa28 00000064 842159f0 df9b1ee4 df9b1e88 [ 514.196186][ T5489] 1e80: 807e9240 807df554 00000064 00000001 00000000 df9b1ea4 8335be50 834de000 [ 514.196662][ T5489] 1ea0: 00006400 0000000b df9b1e98 00000000 00000000 13372653 00000000 860d4b80 [ 514.197080][ T5489] 1ec0: 40946400 20000180 20000180 860d4b80 00000003 8410a4c0 df9b1ef4 df9b1ee8 [ 514.197439][ T5489] 1ee0: 807e9374 13372653 df9b1f14 00000000 860d4b81 40946400 20000180 860d4b80 [ 514.197813][ T5489] 1f00: 00000003 8410a4c0 df9b1fa4 df9b1f18 805a16e0 8145045c ecac8b10 8410a4c0 [ 514.198111][ T5489] 1f20: df9b1f3c df9b1f30 81b15894 81b15760 df9b1f54 df9b1f40 8025a664 8028e168 [ 514.198419][ T5489] 1f40: df9b1fb0 40000000 df9b1f84 df9b1f58 80220be0 8025a620 00000000 82a1c5fc [ 514.198739][ T5489] 1f60: df9b1fb0 0013e940 ecac8b10 80220b34 00000000 13372653 df9b1fac 00000000 [ 514.199070][ T5489] 1f80: 00000000 00346310 00000036 8020029c 8410a4c0 00000036 00000000 df9b1fa8 [ 514.199339][ T5489] 1fa0: 80200060 805a14a8 00000000 00000000 00000003 40946400 20000180 00000000 [ 514.199612][ T5489] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f870dc [ 514.199892][ T5489] 1fe0: 76f86e88 76f86e78 00018e58 001307a0 60000010 00000003 00000000 00000000 [ 514.200232][ T5489] Call trace: [ 514.200431][ T5489] [<81465048>] (subdev_8255_io) from [<81464d84>] (subdev_8255_do_config+0x58/0x60) [ 514.200746][ T5489] r7:00000000 r6:842159c0 r5:000000fc r4:81465048 [ 514.200947][ T5489] [<81464d2c>] (subdev_8255_do_config) from [<8146513c>] (subdev_8255_io_init+0x88/0x98) [ 514.201250][ T5489] r4:861c1c00 [ 514.201373][ T5489] [<814650b4>] (subdev_8255_io_init) from [<814652ec>] (dev_8255_attach+0x74/0x138) [ 514.201704][ T5489] r7:00000000 r6:861c1c00 r5:00000000 r4:842159c0 [ 514.201907][ T5489] [<81465278>] (dev_8255_attach) from [<81453c74>] (comedi_device_attach+0x108/0x244) [ 514.202222][ T5489] r10:82d2cdc4 r9:00000000 r8:842159c0 r7:df9b1d90 r6:00000000 r5:842159c0 [ 514.202466][ T5489] r4:82bd321c [ 514.202592][ T5489] [<81453b6c>] (comedi_device_attach) from [<8144f480>] (do_devconfig_ioctl+0xd4/0x21c) [ 514.202902][ T5489] r10:8410a4c0 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:842159c0 [ 514.203133][ T5489] r4:20000180 [ 514.203253][ T5489] [<8144f3ac>] (do_devconfig_ioctl) from [<814507a4>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 514.203550][ T5489] r8:00000003 r7:40946400 r6:20000180 r5:842159c0 r4:860d4b80 [ 514.203769][ T5489] [<81450450>] (comedi_unlocked_ioctl) from [<805a16e0>] (sys_ioctl+0x244/0xb5c) [ 514.204080][ T5489] r10:8410a4c0 r9:00000003 r8:860d4b80 r7:20000180 r6:40946400 r5:860d4b81 [ 514.204323][ T5489] r4:00000000 [ 514.204454][ T5489] [<805a149c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 514.204706][ T5489] Exception stack(0xdf9b1fa8 to 0xdf9b1ff0) [ 514.204902][ T5489] 1fa0: 00000000 00000000 00000003 40946400 20000180 00000000 [ 514.205155][ T5489] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f870dc [ 514.205489][ T5489] 1fe0: 76f86e88 76f86e78 00018e58 001307a0 [ 514.205857][ T5489] r10:00000036 r9:8410a4c0 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 514.206125][ T5489] r4:00000000 [ 514.206580][ T5489] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 514.208455][ T5489] ---[ end trace 0000000000000000 ]--- [ 514.313010][ T5489] Kernel panic - not syncing: Fatal exception [ 514.315416][ T5489] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:11:57 Registers: info registers vcpu 0 CPU#0 R00=84f9c960 R01=00000001 R02=83e14608 R03=00000004 R04=84fa3480 R05=00000000 R06=81cd9b14 R07=00000003 R08=00000000 R09=84fa3b40 R10=848963f8 R11=ebda1bb4 R12=00000000 R13=ebda1a90 R14=807fd4cc R15=807fd360 PSR=200f0013 --C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=0099c670 R01=00000000 R02=0000d668 R03=009cf078 R04=00040000 R05=00000100 R06=0099c670 R07=0096fe78 R08=0096f1d8 R09=0056601c R10=0000029d R11=7e8b62bc R12=00000000 R13=7e8b6108 R14=76a3494c R15=769cb4ec PSR=20030010 --C- A S usr32 s00=080071a0 s01=71a8036a d00=71a8036a080071a0 s02=048c0800 s03=0071b003 d01=0071b003048c0800 s04=00000000 s05=00000010 d02=0000001000000000 s06=00000220 s07=00000000 d03=0000000000000220 s08=00000000 s09=0000003d d04=0000003d00000000 s10=0175ea06 s11=80080002 d05=800800020175ea06 s12=04c09090 s13=06006fc8 d06=06006fc804c09090 s14=00040800 s15=08000208 d07=0800020800040800 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=4ea16872 s33=d58f6ad7 d16=d58f6ad74ea16872 s34=3b5268ce s35=1288af57 d17=1288af573b5268ce s36=99d30ad5 s37=1e3b2b13 d18=1e3b2b1399d30ad5 s38=f04ed363 s39=26293379 d19=26293379f04ed363 s40=1bea9452 s41=6d3c5dfa d20=6d3c5dfa1bea9452 s42=248fc4af s43=25602baa d21=25602baa248fc4af s44=9fbc71f3 s45=e808bd8f d22=e808bd8f9fbc71f3 s46=228aa033 s47=7f0a7658 d23=7f0a7658228aa033 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=003c0000 s53=00280000 d26=00280000003c0000 s54=00140000 s55=00080000 d27=0008000000140000 s56=00000008 s57=00080004 d28=0008000400000008 s58=03e60000 s59=ff860000 d29=ff86000003e60000 s60=0008ffff s61=00000000 d30=000000000008ffff s62=00000300 s63=ff960000 d31=ff96000000000300 FPSCR: 00000000