last executing test programs: 1m56.400605347s ago: executing program 0 (id=1197): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=@srh={0x3c, 0x0, 0x4, 0x0, 0x1, 0x38, 0x4}, 0x8) 1m55.762633385s ago: executing program 0 (id=1198): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 1m55.254861864s ago: executing program 0 (id=1199): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 1m52.058871686s ago: executing program 0 (id=1200): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0xfff, 0x10, 0x0, 0x5a}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0xa) 1m51.209945391s ago: executing program 0 (id=1201): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x2, 0x3, 0xb0, 0x267c9064f20698f8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 7.770092394s ago: executing program 1 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7b, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r0}, 0x38) 7.210552265s ago: executing program 0 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40090}, 0x4008004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 6.991382632s ago: executing program 1 (id=1268): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x20001002) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) 5.677881351s ago: executing program 1 (id=1269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xffffffff7fffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x80000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendto(r1, 0x0, 0x0, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) 4.225435221s ago: executing program 1 (id=1270): r0 = syz_io_uring_setup(0x890, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x20000000, 0xffffffffffffffff, 0x28, {0xc000, 0xffffffffffffff00}, 0x6}, 0x1) 3.278232512s ago: executing program 1 (id=1271): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') pread64(r0, &(0x7f0000000080)=""/108, 0x6c, 0x38) 0s ago: executing program 1 (id=1272): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): lass=filesystem permissive=1 [ 250.282498][ T3321] cgroup: Unknown subsys name 'net' [ 250.349082][ T30] audit: type=1400 audit(249.800:51): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 250.758573][ T3321] cgroup: Unknown subsys name 'cpuset' [ 250.823488][ T3321] cgroup: Unknown subsys name 'rlimit' [ 251.185996][ T30] audit: type=1400 audit(250.640:52): avc: denied { setattr } for pid=3321 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.191937][ T30] audit: type=1400 audit(250.650:53): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 251.195014][ T30] audit: type=1400 audit(250.650:54): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 251.922716][ T3323] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 251.934646][ T30] audit: type=1400 audit(251.380:55): avc: denied { relabelto } for pid=3323 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 251.952667][ T30] audit: type=1400 audit(251.400:56): avc: denied { write } for pid=3323 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 252.086253][ T30] audit: type=1400 audit(251.540:57): avc: denied { read } for pid=3321 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 252.087390][ T30] audit: type=1400 audit(251.540:58): avc: denied { open } for pid=3321 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 252.113067][ T3321] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 286.932147][ T30] audit: type=1400 audit(286.390:59): avc: denied { execmem } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 287.202967][ T30] audit: type=1400 audit(286.660:60): avc: denied { read } for pid=3326 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 287.212778][ T30] audit: type=1400 audit(286.670:61): avc: denied { open } for pid=3326 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 287.235869][ T30] audit: type=1400 audit(286.690:62): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 287.332562][ T30] audit: type=1400 audit(286.790:63): avc: denied { module_request } for pid=3326 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 287.765280][ T30] audit: type=1400 audit(287.220:64): avc: denied { sys_module } for pid=3326 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 296.072541][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.132139][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.764520][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.795322][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.030235][ T3326] hsr_slave_0: entered promiscuous mode [ 300.044641][ T3326] hsr_slave_1: entered promiscuous mode [ 300.761109][ T3327] hsr_slave_0: entered promiscuous mode [ 300.766658][ T3327] hsr_slave_1: entered promiscuous mode [ 300.775174][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 300.778584][ T3327] Cannot create hsr debugfs directory [ 303.261389][ T30] audit: type=1400 audit(302.720:65): avc: denied { create } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.268974][ T30] audit: type=1400 audit(302.720:66): avc: denied { write } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.274750][ T30] audit: type=1400 audit(302.720:67): avc: denied { read } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.304155][ T3326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.383563][ T3326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 303.456895][ T3326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.575208][ T3326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.218948][ T3327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.257200][ T3327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.283015][ T3327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.306620][ T3327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.893725][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.644935][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.274745][ T3327] veth0_vlan: entered promiscuous mode [ 321.499870][ T3327] veth1_vlan: entered promiscuous mode [ 321.797024][ T3326] veth0_vlan: entered promiscuous mode [ 322.004512][ T3326] veth1_vlan: entered promiscuous mode [ 322.286582][ T3327] veth0_macvtap: entered promiscuous mode [ 322.444002][ T3327] veth1_macvtap: entered promiscuous mode [ 322.810145][ T3326] veth0_macvtap: entered promiscuous mode [ 323.044730][ T3326] veth1_macvtap: entered promiscuous mode [ 323.242612][ T3014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.286741][ T1556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.322416][ T1556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.326172][ T1556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.021801][ T1556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.024229][ T1556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.024708][ T1556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.025056][ T1556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.204598][ T30] audit: type=1400 audit(323.660:68): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 324.303219][ T30] audit: type=1400 audit(323.750:69): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/syzkaller.rr18CT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 324.327523][ T30] audit: type=1400 audit(323.780:70): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 324.446516][ T30] audit: type=1400 audit(323.900:71): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/syzkaller.rr18CT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 324.489446][ T30] audit: type=1400 audit(323.940:72): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/syzkaller.rr18CT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 324.573261][ T30] audit: type=1400 audit(324.030:73): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 324.644182][ T30] audit: type=1400 audit(324.100:74): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 324.719375][ T30] audit: type=1400 audit(324.160:75): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="gadgetfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 324.844342][ T30] audit: type=1400 audit(324.300:76): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 324.875779][ T30] audit: type=1400 audit(324.330:77): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 325.322747][ T3327] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 329.280117][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 329.280523][ T30] audit: type=1400 audit(328.740:86): avc: denied { block_suspend } for pid=3479 comm="syz.1.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.341833][ T973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 329.616827][ T973] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 329.617512][ T973] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 329.619033][ T973] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 329.619778][ T973] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 329.620146][ T973] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 329.695644][ T973] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 329.708908][ T973] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 329.711561][ T973] usb 1-1: Product: syz [ 329.712989][ T973] usb 1-1: Manufacturer: syz [ 330.044053][ T973] cdc_wdm 1-1:1.0: skipping garbage [ 330.060096][ T973] cdc_wdm 1-1:1.0: skipping garbage [ 330.093850][ T973] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 330.560448][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.564867][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.576494][ T30] audit: type=1400 audit(330.030:87): avc: denied { read write } for pid=3482 comm="syz.1.4" name="rdma_cm" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 330.591829][ T30] audit: type=1400 audit(330.040:88): avc: denied { open } for pid=3482 comm="syz.1.4" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 331.947000][ T30] audit: type=1400 audit(331.400:89): avc: denied { watch watch_reads } for pid=3487 comm="syz.1.6" path="/proc/10/task" dev="proc" ino=4133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 332.597327][ T30] audit: type=1400 audit(332.050:90): avc: denied { create } for pid=3489 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.639634][ T30] audit: type=1400 audit(332.090:91): avc: denied { write } for pid=3489 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.801512][ T30] audit: type=1400 audit(333.260:92): avc: denied { read write } for pid=3475 comm="syz.0.1" name="cdc-wdm0" dev="devtmpfs" ino=1547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 333.811588][ T30] audit: type=1400 audit(333.260:93): avc: denied { open } for pid=3475 comm="syz.0.1" path="/dev/cdc-wdm0" dev="devtmpfs" ino=1547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 333.960271][ T30] audit: type=1400 audit(333.400:94): avc: denied { read write } for pid=3492 comm="syz.1.8" name="vhost-net" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 334.015873][ T30] audit: type=1400 audit(333.400:95): avc: denied { open } for pid=3492 comm="syz.1.8" path="/dev/vhost-net" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 336.887390][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 336.893122][ T30] audit: type=1400 audit(336.340:97): avc: denied { create } for pid=3507 comm="syz.1.13" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 336.936900][ T30] audit: type=1400 audit(336.390:98): avc: denied { allowed } for pid=3507 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 338.759627][ T30] audit: type=1400 audit(338.210:99): avc: denied { prog_load } for pid=3512 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 338.764217][ T30] audit: type=1400 audit(338.220:100): avc: denied { bpf } for pid=3512 comm="syz.1.15" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.775709][ T30] audit: type=1400 audit(338.220:101): avc: denied { perfmon } for pid=3512 comm="syz.1.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 342.449714][ T30] audit: type=1400 audit(341.760:102): avc: denied { create } for pid=3512 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.451400][ T30] audit: type=1400 audit(341.790:103): avc: denied { setopt } for pid=3512 comm="syz.1.15" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.620087][ T9] usb 1-1: USB disconnect, device number 2 [ 347.700006][ T30] audit: type=1400 audit(347.150:104): avc: denied { mount } for pid=3524 comm="syz.0.19" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 347.799938][ T30] audit: type=1400 audit(347.250:105): avc: denied { remount } for pid=3524 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 347.803748][ T3525] devpts: Unknown parameter '-BNIjpppm' [ 348.086794][ T30] audit: type=1400 audit(347.530:106): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 350.617419][ T30] audit: type=1400 audit(350.070:107): avc: denied { create } for pid=3531 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 350.687586][ T30] audit: type=1400 audit(350.140:108): avc: denied { setopt } for pid=3531 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 350.939613][ T30] audit: type=1400 audit(350.390:109): avc: denied { prog_run } for pid=3531 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.120120][ T30] audit: type=1400 audit(352.560:110): avc: denied { create } for pid=3535 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 353.176917][ T30] audit: type=1400 audit(352.630:111): avc: denied { write } for pid=3535 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 355.000647][ T30] audit: type=1400 audit(354.460:112): avc: denied { map_create } for pid=3540 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 355.012536][ T30] audit: type=1400 audit(354.470:113): avc: denied { map_read map_write } for pid=3540 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 355.032604][ T30] audit: type=1400 audit(354.490:114): avc: denied { name_bind } for pid=3540 comm="syz.0.26" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 355.039368][ T30] audit: type=1400 audit(354.490:115): avc: denied { node_bind } for pid=3540 comm="syz.0.26" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 355.056813][ T30] audit: type=1400 audit(354.510:116): avc: denied { create } for pid=3540 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 355.067141][ T30] audit: type=1400 audit(354.520:117): avc: denied { bind } for pid=3540 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 355.664603][ T30] audit: type=1400 audit(355.110:118): avc: denied { setopt } for pid=3540 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 355.690039][ T30] audit: type=1400 audit(355.140:119): avc: denied { accept } for pid=3540 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 358.128922][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 358.129485][ T30] audit: type=1400 audit(357.580:124): avc: denied { set_context_mgr } for pid=3558 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 358.190945][ T30] audit: type=1400 audit(357.650:125): avc: denied { write } for pid=3558 comm="syz.0.31" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.223095][ T30] audit: type=1400 audit(357.680:126): avc: denied { map } for pid=3558 comm="syz.0.31" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.273397][ T3563] binder: 3558:3563 tried to acquire reference to desc 0, got 1 instead [ 358.298256][ T30] audit: type=1400 audit(357.750:127): avc: denied { call } for pid=3558 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 358.360949][ T3563] binder: 3558:3563 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 358.361699][ T3563] binder: 3563 RLIMIT_NICE not set [ 358.362673][ T3563] binder: 3563 RLIMIT_NICE not set [ 358.369282][ T3435] binder: release 3558:3563 transaction 5 out, still active [ 358.370046][ T3435] binder: undelivered TRANSACTION_COMPLETE [ 358.540114][ T3414] binder: release 3558:3563 transaction 5 in, still active [ 358.541517][ T3414] binder: send failed reply for transaction 5, target dead [ 359.109938][ T30] audit: type=1400 audit(358.550:128): avc: denied { ioctl } for pid=3557 comm="syz.1.30" path="socket:[4246]" dev="sockfs" ino=4246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 363.012105][ T30] audit: type=1400 audit(362.200:129): avc: denied { read } for pid=3567 comm="syz.0.32" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 363.018988][ T30] audit: type=1400 audit(362.210:130): avc: denied { open } for pid=3567 comm="syz.0.32" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 363.081200][ T30] audit: type=1400 audit(362.340:131): avc: denied { ioctl } for pid=3567 comm="syz.0.32" path="/dev/dri/card1" dev="devtmpfs" ino=619 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 366.465845][ T30] audit: type=1400 audit(365.890:132): avc: denied { read write } for pid=3582 comm="syz.1.34" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 366.526907][ T30] audit: type=1400 audit(365.920:133): avc: denied { open } for pid=3582 comm="syz.1.34" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 366.660668][ T30] audit: type=1400 audit(366.070:134): avc: denied { mounton } for pid=3582 comm="syz.1.34" path="/22/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.290792][ T30] audit: type=1400 audit(371.740:135): avc: denied { create } for pid=3589 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 379.147313][ T30] audit: type=1400 audit(378.590:136): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 388.133730][ T30] audit: type=1400 audit(387.140:137): avc: denied { create } for pid=3598 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.134615][ T30] audit: type=1400 audit(387.260:138): avc: denied { connect } for pid=3598 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.135330][ T30] audit: type=1400 audit(387.410:139): avc: denied { read } for pid=3598 comm="syz.1.39" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 388.135778][ T30] audit: type=1400 audit(387.430:140): avc: denied { open } for pid=3598 comm="syz.1.39" path="/dev/fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.539784][ T30] audit: type=1400 audit(388.010:141): avc: denied { map } for pid=3598 comm="syz.1.39" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 389.540695][ T30] audit: type=1400 audit(388.010:142): avc: denied { read write } for pid=3598 comm="syz.1.39" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 389.541379][ T30] audit: type=1400 audit(388.090:143): avc: denied { ioctl } for pid=3598 comm="syz.1.39" path="/dev/fb0" dev="devtmpfs" ino=620 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.541848][ T30] audit: type=1400 audit(388.350:144): avc: denied { write } for pid=3600 comm="syz.0.40" name="dev_mcast" dev="proc" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 389.592557][ T30] audit: type=1400 audit(389.030:145): avc: denied { read } for pid=3598 comm="syz.1.39" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.539657][ T30] audit: type=1400 audit(389.030:146): avc: denied { open } for pid=3598 comm="syz.1.39" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 396.983906][ T3610] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 397.061576][ T30] audit: type=1400 audit(396.510:147): avc: denied { bind } for pid=3608 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.090636][ T30] audit: type=1400 audit(396.540:148): avc: denied { name_bind } for pid=3608 comm="syz.0.41" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 397.114053][ T30] audit: type=1400 audit(396.560:149): avc: denied { node_bind } for pid=3608 comm="syz.0.41" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 397.179087][ T30] audit: type=1400 audit(396.630:150): avc: denied { connect } for pid=3608 comm="syz.0.41" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.219821][ T30] audit: type=1400 audit(396.670:151): avc: denied { write } for pid=3608 comm="syz.0.41" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.352930][ T30] audit: type=1400 audit(396.780:152): avc: denied { read } for pid=3608 comm="syz.0.41" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.390106][ T3628] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 402.606323][ T30] audit: type=1400 audit(402.060:153): avc: denied { ioctl } for pid=3629 comm="syz.0.50" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 402.626705][ T3631] binder: 3629:3631 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 403.163035][ T3628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.699966][ T3628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 404.259014][ T3628] macvlan2: entered promiscuous mode [ 404.270386][ T3628] macvlan2: entered allmulticast mode [ 404.809090][ T3628] bond1: (slave ip6gretap1): making interface the new active one [ 404.925323][ T3628] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 407.584544][ T30] audit: type=1400 audit(407.010:154): avc: denied { create } for pid=3634 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.585209][ T30] audit: type=1400 audit(407.020:155): avc: denied { listen } for pid=3634 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.585752][ T30] audit: type=1400 audit(407.030:156): avc: denied { connect } for pid=3634 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 408.111143][ T30] audit: type=1400 audit(407.550:157): avc: denied { write } for pid=3634 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 408.251123][ T30] audit: type=1326 audit(407.680:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.0.51" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x0 [ 422.451015][ T30] audit: type=1400 audit(421.910:159): avc: denied { getopt } for pid=3666 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.247603][ T30] audit: type=1400 audit(429.680:160): avc: denied { create } for pid=3672 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 430.288982][ T30] audit: type=1400 audit(429.700:161): avc: denied { connect } for pid=3672 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.321340][ T30] audit: type=1400 audit(432.780:162): avc: denied { write } for pid=3682 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 441.971226][ T30] audit: type=1400 audit(441.430:163): avc: denied { execute } for pid=3723 comm="syz.0.86" path="/36/cgroup.controllers" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 444.579102][ T3740] syz.0.93 uses obsolete (PF_INET,SOCK_PACKET) [ 444.586354][ T30] audit: type=1400 audit(444.040:164): avc: denied { ioctl } for pid=3739 comm="syz.0.93" path="socket:[5341]" dev="sockfs" ino=5341 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.470780][ T3749] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 449.696059][ T30] audit: type=1400 audit(449.150:165): avc: denied { read } for pid=3766 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.234143][ T3792] trusted_key: syz.0.116 sent an empty control message without MSG_MORE. [ 480.749556][ T30] audit: type=1400 audit(480.190:166): avc: denied { create } for pid=3829 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 480.750514][ T30] audit: type=1400 audit(480.200:167): avc: denied { write } for pid=3829 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.380598][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 484.572838][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 489.989146][ T30] audit: type=1400 audit(489.440:168): avc: denied { getopt } for pid=3874 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 491.141522][ T3879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.666780][ T30] audit: type=1400 audit(492.120:169): avc: denied { watch } for pid=3880 comm="syz.1.150" path="/85/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 534.892322][ T3928] Process accounting resumed [ 539.516692][ T30] audit: type=1400 audit(538.960:170): avc: denied { mounton } for pid=3943 comm="syz.1.173" path="/101/file1/file4" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 539.754552][ T30] audit: type=1400 audit(539.210:171): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 540.855906][ T3948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.892997][ T3948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.288980][ T30] audit: type=1400 audit(542.740:172): avc: denied { read write } for pid=3954 comm="syz.1.178" name="uinput" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 543.308434][ T30] audit: type=1400 audit(542.750:173): avc: denied { open } for pid=3954 comm="syz.1.178" path="/dev/uinput" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 543.359363][ T30] audit: type=1400 audit(542.810:174): avc: denied { ioctl } for pid=3954 comm="syz.1.178" path="/dev/uinput" dev="devtmpfs" ino=707 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 543.419973][ T3956] input: syz1 as /devices/virtual/input/input1 [ 547.054529][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.072794][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.076447][ T3972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.184'. [ 551.327113][ T30] audit: type=1326 audit(550.780:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.0.188" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x0 [ 551.379665][ T30] audit: type=1400 audit(550.830:176): avc: denied { write } for pid=3981 comm="syz.1.189" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 551.462422][ T30] audit: type=1400 audit(550.920:177): avc: denied { create } for pid=3981 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 574.129548][ T4022] fuse: root generation should be zero [ 575.523604][ T30] audit: type=1400 audit(574.980:178): avc: denied { create } for pid=4029 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 575.563119][ T30] audit: type=1400 audit(575.020:179): avc: denied { ioctl } for pid=4029 comm="syz.1.204" path="socket:[5936]" dev="sockfs" ino=5936 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 575.626326][ T30] audit: type=1400 audit(575.080:180): avc: denied { write } for pid=4029 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 582.202152][ T4044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.293517][ T4044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.112335][ T4046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.180982][ T4046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.461395][ T30] audit: type=1400 audit(582.920:181): avc: denied { read } for pid=4041 comm="syz.1.208" name="rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 583.504339][ T30] audit: type=1400 audit(582.950:182): avc: denied { open } for pid=4041 comm="syz.1.208" path="/dev/rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 583.560445][ T30] audit: type=1400 audit(582.990:183): avc: denied { ioctl } for pid=4041 comm="syz.1.208" path="/dev/rtc0" dev="devtmpfs" ino=708 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 589.560798][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 589.759842][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 589.820384][ T9] usb 1-1: config 32 has an invalid interface number: 85 but max is 0 [ 589.821025][ T9] usb 1-1: config 32 has no interface number 0 [ 589.821780][ T9] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.822030][ T9] usb 1-1: config 32 interface 85 has no altsetting 0 [ 589.859623][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 589.860073][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.860618][ T9] usb 1-1: Product: syz [ 589.860727][ T9] usb 1-1: Manufacturer: syz [ 589.860825][ T9] usb 1-1: SerialNumber: syz [ 598.343071][ T30] audit: type=1400 audit(597.800:184): avc: denied { create } for pid=4059 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 598.368875][ T30] audit: type=1400 audit(597.820:185): avc: denied { write } for pid=4059 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.410236][ T30] audit: type=1400 audit(598.860:186): avc: denied { read } for pid=4059 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.965312][ T30] audit: type=1400 audit(599.420:187): avc: denied { write } for pid=4062 comm="syz.1.212" name="001" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 599.971576][ T4063] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.212' sets config #0 [ 600.499317][ T30] audit: type=1400 audit(599.950:188): avc: denied { watch_reads } for pid=4064 comm="syz.1.213" path="/132" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 605.960863][ T23] usb 1-1: USB disconnect, device number 3 [ 607.590238][ T30] audit: type=1400 audit(607.030:189): avc: denied { create } for pid=4074 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.700179][ T30] audit: type=1400 audit(607.150:190): avc: denied { ioctl } for pid=4074 comm="syz.0.216" path="socket:[6020]" dev="sockfs" ino=6020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.700653][ T30] audit: type=1400 audit(607.150:191): avc: denied { bind } for pid=4074 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.752242][ T30] audit: type=1400 audit(607.200:192): avc: denied { setopt } for pid=4074 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.786953][ T30] audit: type=1400 audit(607.240:193): avc: denied { write } for pid=4074 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 613.225146][ T30] audit: type=1400 audit(612.680:194): avc: denied { create } for pid=4082 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 614.785424][ T4090] [U]  [ 614.785685][ T4090] [U] K{ [ 614.792260][ T4090] [U] t 1ŠFfˊ`GJgo/mC [ 614.792813][ T4090] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 614.792995][ T4090] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 614.793444][ T4090] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 614.793867][ T4090] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 614.794106][ T4090] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 614.794255][ T4090] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 614.794393][ T4090] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 614.795721][ T4090] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 614.796007][ T4090] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 614.796118][ T4090] [U] 22Ʃx?0;3u [ 614.796578][ T4090] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 614.796855][ T4090] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 614.796982][ T4090] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 614.797091][ T4090] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 614.797284][ T4090] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 614.797418][ T4090] [U] ec [ 614.797485][ T4090] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 614.890797][ T30] audit: type=1400 audit(614.340:195): avc: denied { ioctl } for pid=4089 comm="syz.0.222" path="socket:[4974]" dev="sockfs" ino=4974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 614.963844][ T4089] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 625.700714][ T4122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 630.447554][ T4127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 630.561130][ T30] audit: type=1400 audit(629.840:196): avc: denied { create } for pid=4123 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 630.639475][ T30] audit: type=1400 audit(629.880:197): avc: denied { write } for pid=4123 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 640.636141][ T4134] netlink: 96 bytes leftover after parsing attributes in process `syz.1.236'. [ 643.823748][ T30] audit: type=1400 audit(643.270:198): avc: denied { map } for pid=4136 comm="syz.0.237" path="socket:[6106]" dev="sockfs" ino=6106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 643.861237][ T30] audit: type=1400 audit(643.290:199): avc: denied { read write } for pid=4136 comm="syz.0.237" path="socket:[6106]" dev="sockfs" ino=6106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 643.971742][ T30] audit: type=1400 audit(643.430:200): avc: denied { setopt } for pid=4136 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 649.570272][ T30] audit: type=1400 audit(649.020:201): avc: denied { mount } for pid=4144 comm="syz.1.241" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 649.574534][ T30] audit: type=1400 audit(649.030:202): avc: denied { search } for pid=4144 comm="syz.1.241" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 649.601459][ T30] audit: type=1400 audit(649.030:203): avc: denied { search } for pid=4144 comm="syz.1.241" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 649.605655][ T30] audit: type=1400 audit(649.030:204): avc: denied { search } for pid=4144 comm="syz.1.241" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 650.959910][ T3414] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 651.290151][ T3414] usb 1-1: Using ep0 maxpacket: 8 [ 651.391223][ T3414] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 651.395785][ T3414] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 651.396401][ T3414] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 651.396633][ T3414] usb 1-1: config 150 has no interface number 0 [ 651.396932][ T3414] usb 1-1: config 150 interface 204 has no altsetting 0 [ 651.522632][ T3414] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 651.529096][ T3414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.529780][ T3414] usb 1-1: Product: syz [ 651.529986][ T3414] usb 1-1: Manufacturer: syz [ 651.530170][ T3414] usb 1-1: SerialNumber: syz [ 651.609212][ T30] audit: type=1400 audit(651.030:205): avc: denied { read write } for pid=4151 comm="syz.1.244" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 651.613312][ T30] audit: type=1400 audit(651.060:206): avc: denied { open } for pid=4151 comm="syz.1.244" path="/144/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 651.641517][ T30] audit: type=1400 audit(651.090:207): avc: denied { ioctl } for pid=4151 comm="syz.1.244" path="/144/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 651.887059][ T3414] usb 1-1: USB disconnect, device number 4 [ 652.993401][ T30] audit: type=1400 audit(652.440:208): avc: denied { module_load } for pid=4159 comm="syz.1.245" path="/sys/power/wakeup_count" dev="sysfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 654.700100][ T973] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 654.902708][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 654.945297][ T973] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.948812][ T973] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 654.952217][ T973] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 654.954445][ T973] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 654.956707][ T973] usb 1-1: config 1 interface 0 has no altsetting 0 [ 655.023883][ T973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.029467][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 655.031087][ T973] usb 1-1: SerialNumber: syz [ 655.121769][ T4165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.139459][ T4165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.425100][ T4165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.471757][ T4165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.340565][ T973] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 656.421071][ T973] usb 1-1: USB disconnect, device number 5 [ 656.544497][ T973] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 660.821111][ T30] audit: type=1400 audit(660.160:209): avc: denied { create } for pid=4171 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 660.826753][ T30] audit: type=1400 audit(660.180:210): avc: denied { write } for pid=4171 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 660.922325][ T30] audit: type=1400 audit(660.190:211): avc: denied { nlmsg_write } for pid=4171 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 661.923690][ T30] audit: type=1400 audit(661.370:212): avc: denied { read } for pid=4172 comm="syz.0.251" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 661.924142][ T30] audit: type=1400 audit(661.380:213): avc: denied { open } for pid=4172 comm="syz.0.251" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 661.990870][ T30] audit: type=1400 audit(661.420:214): avc: denied { ioctl } for pid=4172 comm="syz.0.251" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 665.749440][ T30] audit: type=1400 audit(665.200:215): avc: denied { read } for pid=3171 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 668.684566][ T4186] Zero length message leads to an empty skb [ 668.725081][ T4183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.836546][ T4183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.940713][ T4183] bond0 (unregistering): Released all slaves [ 669.122224][ T30] audit: type=1400 audit(668.580:216): avc: denied { write } for pid=4187 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 672.389916][ T973] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 672.654980][ T973] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 672.659067][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 672.661592][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 672.664899][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.671845][ T973] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.674376][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.730417][ T973] usb 1-1: config 0 descriptor?? [ 672.747505][ T4202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 672.844880][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 673.465068][ T973] hid-generic 0003:047F:FFFF.0001: reserved main item tag 0xd [ 673.606295][ T973] hid-generic 0003:047F:FFFF.0001: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 673.723127][ T973] usb 1-1: USB disconnect, device number 6 [ 674.266661][ T4204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.451773][ T4204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.570396][ T4204] bond0 (unregistering): Released all slaves [ 677.124727][ T4207] fido_id[4207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 685.013982][ T4237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 691.975595][ T30] audit: type=1400 audit(691.430:217): avc: denied { create } for pid=4247 comm="syz.1.276" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 692.227590][ T30] audit: type=1400 audit(691.670:218): avc: denied { unlink } for pid=3327 comm="syz-executor" name="file0" dev="tmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 693.977030][ T30] audit: type=1400 audit(693.430:219): avc: denied { ioctl } for pid=4256 comm="syz.1.280" path="socket:[6325]" dev="sockfs" ino=6325 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 710.799708][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 711.006405][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 711.172232][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.172946][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 711.173705][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 711.173858][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.332340][ T9] usb 1-1: config 0 descriptor?? [ 711.944858][ T9] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 713.172794][ T4131] usb 1-1: USB disconnect, device number 7 [ 715.126622][ T4298] fido_id[4298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 721.064746][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 723.879104][ T4322] netlink: 96 bytes leftover after parsing attributes in process `syz.1.297'. [ 738.191438][ T887] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 738.500286][ T887] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 738.502449][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.540607][ T887] usb 1-1: config 0 descriptor?? [ 738.583966][ T30] audit: type=1400 audit(738.040:220): avc: denied { write } for pid=4342 comm="syz.1.305" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 744.589897][ T4359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.606462][ T4359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.496570][ T887] usb 1-1: USB disconnect, device number 8 [ 765.421379][ T30] audit: type=1326 audit(764.790:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.0.321" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x0 [ 794.030694][ T4417] ip6erspan0: entered promiscuous mode [ 801.844601][ T30] audit: type=1400 audit(801.260:222): avc: denied { map } for pid=4424 comm="syz.1.335" path="socket:[6607]" dev="sockfs" ino=6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 817.739460][ T30] audit: type=1400 audit(817.190:223): avc: denied { map } for pid=4452 comm="syz.0.345" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 817.761097][ T30] audit: type=1400 audit(817.190:224): avc: denied { execute } for pid=4452 comm="syz.0.345" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 818.722845][ T4457] syzkaller0: entered promiscuous mode [ 818.725751][ T4457] syzkaller0: entered allmulticast mode [ 818.974712][ T30] audit: type=1400 audit(818.430:225): avc: denied { write } for pid=4456 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 824.834479][ T30] audit: type=1400 audit(824.290:226): avc: denied { connect } for pid=4480 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 830.167099][ T30] audit: type=1400 audit(829.620:227): avc: denied { getopt } for pid=4499 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 832.191355][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 842.135672][ T30] audit: type=1400 audit(841.590:228): avc: denied { watch watch_reads } for pid=4525 comm="syz.0.375" path="/proc/418/net/pfkey" dev="proc" ino=4026532691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 850.154336][ T4547] netlink: 'syz.1.384': attribute type 4 has an invalid length. [ 853.760228][ T4554] binder: 4553:4554 unknown command 0 [ 853.761497][ T4554] binder: 4553:4554 ioctl c0306201 20000080 returned -22 [ 857.210887][ T30] audit: type=1400 audit(856.600:229): avc: denied { map } for pid=4553 comm="syz.1.388" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 857.522812][ T4559] binder: 4553:4559 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 857.535236][ T4559] binder: 4559 RLIMIT_NICE not set [ 858.215102][ T4562] binder: 4553:4562 tried to acquire reference to desc 0, got 1 instead [ 858.338389][ T4562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.342102][ T4562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.431619][ T4559] binder: 4559 RLIMIT_NICE not set [ 858.440765][ T4559] binder: send failed reply for transaction 10 to 4553:4562 [ 858.500592][ T4559] binder: 4553:4559 ioctl c0306201 20000280 returned -14 [ 861.945012][ T38] binder: undelivered TRANSACTION_COMPLETE [ 861.945726][ T38] binder: undelivered TRANSACTION_ERROR: 29201 [ 873.454838][ T30] audit: type=1400 audit(872.910:230): avc: denied { append } for pid=4593 comm="syz.0.402" name="loop6" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 876.300924][ T30] audit: type=1400 audit(875.760:231): avc: denied { write } for pid=4600 comm="syz.0.405" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 877.321209][ T4607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 877.625675][ T4607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.853695][ T30] audit: type=1400 audit(881.310:232): avc: denied { getopt } for pid=4619 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 882.615905][ T30] audit: type=1400 audit(882.070:233): avc: denied { read } for pid=4621 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 886.440183][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 886.441023][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 886.441443][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 889.353079][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.533376][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.688815][ T30] audit: type=1400 audit(889.120:234): avc: denied { create } for pid=4631 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 892.855679][ T30] audit: type=1400 audit(892.300:235): avc: denied { mount } for pid=4643 comm="syz.0.417" name="/" dev="ramfs" ino=6949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 894.857005][ T4646] fuse: Bad value for 'fd' [ 898.743348][ T4659] fuse: Bad value for 'fd' [ 909.606836][ T30] audit: type=1400 audit(909.060:236): avc: denied { write } for pid=4670 comm="syz.0.427" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 910.959258][ T4678] fuse: Bad value for 'fd' [ 917.560332][ T30] audit: type=1400 audit(917.020:237): avc: denied { bind } for pid=4690 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 919.067363][ T30] audit: type=1400 audit(918.520:238): avc: denied { ioctl } for pid=4692 comm="syz.1.434" path="socket:[8036]" dev="sockfs" ino=8036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 923.532745][ T30] audit: type=1400 audit(922.990:239): avc: denied { create } for pid=4703 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 924.350121][ T30] audit: type=1400 audit(923.800:240): avc: denied { read write } for pid=4703 comm="syz.1.437" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 924.355510][ T30] audit: type=1400 audit(923.810:241): avc: denied { open } for pid=4703 comm="syz.1.437" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 924.421381][ T30] audit: type=1400 audit(923.860:242): avc: denied { map } for pid=4703 comm="syz.1.437" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 924.421946][ T30] audit: type=1400 audit(923.860:243): avc: denied { execute } for pid=4703 comm="syz.1.437" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 928.583354][ T30] audit: type=1400 audit(928.040:244): avc: denied { setopt } for pid=4716 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 931.929227][ T4727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 945.736074][ T4743] binder: 4742:4743 unknown command 0 [ 945.736641][ T4743] binder: 4742:4743 ioctl c0306201 20000080 returned -22 [ 946.472493][ T4746] binder: 4742:4746 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 946.473035][ T4746] binder: 4746 RLIMIT_NICE not set [ 947.008546][ T4748] binder: 4742:4748 tried to acquire reference to desc 0, got 1 instead [ 956.863064][ T4756] bridge_slave_0: entered promiscuous mode [ 956.876001][ T4756] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 957.731446][ T4758] bridge_slave_0: default FDB implementation only supports local addresses [ 957.860758][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 957.863591][ T4758] bridge_slave_0: default FDB implementation only supports local addresses [ 958.503200][ T30] audit: type=1400 audit(957.960:245): avc: denied { ioctl } for pid=4760 comm="syz.0.454" path="socket:[8110]" dev="sockfs" ino=8110 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 959.241738][ T4766] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 960.077504][ C1] vcan0: j1939_tp_rxtimer: 0x00000000333f9e6c: rx timeout, send abort [ 960.109123][ T30] audit: type=1400 audit(959.560:246): avc: denied { read } for pid=3126 comm="syslogd" name="log" dev="vda" ino=1857 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 960.131462][ T30] audit: type=1400 audit(959.580:247): avc: denied { search } for pid=3126 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.132487][ T30] audit: type=1400 audit(959.580:248): avc: denied { search } for pid=3126 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.132904][ T30] audit: type=1400 audit(959.580:249): avc: denied { add_name } for pid=3126 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.146969][ T30] audit: type=1400 audit(959.600:250): avc: denied { create } for pid=3126 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 960.169704][ T30] audit: type=1400 audit(959.620:251): avc: denied { append open } for pid=3126 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 960.200566][ T30] audit: type=1400 audit(959.650:252): avc: denied { getattr } for pid=3126 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 960.580846][ C1] vcan0: j1939_tp_rxtimer: 0x00000000333f9e6c: abort rx timeout. Force session deactivation [ 961.462512][ T4770] binder: 4769:4770 unknown command 0 [ 961.462970][ T4770] binder: 4769:4770 ioctl c0306201 20000080 returned -22 [ 962.176921][ T4773] binder: 4769:4773 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 962.177516][ T4773] binder: 4773 RLIMIT_NICE not set [ 962.674895][ T4777] binder: 4769:4777 tried to acquire reference to desc 0, got 1 instead [ 965.626855][ T4791] fuse: Bad value for 'fd' [ 977.373273][ T4835] binder: 4833:4835 unknown command 0 [ 977.380226][ T4835] binder: 4833:4835 ioctl c0306201 20000080 returned -22 [ 978.402795][ T4840] binder: 4833:4840 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 978.408811][ T4840] binder: 4840 RLIMIT_NICE not set [ 978.993824][ T4844] binder: 4833:4844 tried to acquire reference to desc 0, got 1 instead [ 979.024673][ T4840] binder: 4840 RLIMIT_NICE not set [ 979.025319][ T4840] binder: send failed reply for transaction 23 to 4833:4835 [ 979.027566][ T4840] binder: 4833:4840 ioctl c0306201 20000280 returned -14 [ 979.801596][ T3414] binder: undelivered TRANSACTION_COMPLETE [ 979.801993][ T3414] binder: undelivered TRANSACTION_ERROR: 29201 [ 981.302524][ T30] audit: type=1400 audit(980.760:253): avc: denied { wake_alarm } for pid=4852 comm="syz.0.481" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 981.964879][ T4856] netlink: 272 bytes leftover after parsing attributes in process `syz.1.482'. [ 981.970532][ T30] audit: type=1400 audit(981.420:254): avc: denied { nlmsg_read } for pid=4855 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 983.166263][ T4862] binder: 4860:4862 unknown command 0 [ 983.235752][ T4862] binder: 4860:4862 ioctl c0306201 20000080 returned -22 [ 984.262253][ T4867] binder: 4860:4867 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 984.262981][ T4867] binder: 4867 RLIMIT_NICE not set [ 984.816966][ T4868] binder: 4860:4868 got transaction to invalid handle, 1 [ 984.849956][ T4868] binder: 4860:4868 cannot find target node [ 984.912097][ T4868] binder: 4860:4868 transaction call to 0:0 failed 27/29201/-22, code 0 size 0-0 line 3232 [ 985.138987][ T4870] fuse: Unknown parameter 'grou00000000000000000000' [ 988.392104][ T30] audit: type=1400 audit(987.840:255): avc: denied { name_bind } for pid=4875 comm="syz.0.489" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 988.740526][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 990.246165][ T4882] fuse: Unknown parameter 'grou00000000000000000000' [ 991.889045][ T4890] binder: 4888:4890 unknown command 0 [ 991.891115][ T4890] binder: 4888:4890 ioctl c0306201 20000080 returned -22 [ 992.542074][ T4891] binder: 4888:4891 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 992.547478][ T4891] binder: 4891 RLIMIT_NICE not set [ 993.095889][ T4890] binder: 4888:4890 got transaction to invalid handle, 1 [ 993.099850][ T4890] binder: 4888:4890 cannot find target node [ 993.100344][ T4890] binder: 4888:4890 transaction call to 0:0 failed 31/29201/-22, code 0 size 0-0 line 3232 [ 994.603744][ T3414] binder: undelivered TRANSACTION_ERROR: 29201 [ 995.612551][ T4898] fuse: Unknown parameter 'group_i00000000000000000000' [ 995.852015][ T4899] netlink: 'syz.0.497': attribute type 9 has an invalid length. [ 995.857193][ T4899] netlink: 'syz.0.497': attribute type 7 has an invalid length. [ 995.871991][ T4899] netlink: 'syz.0.497': attribute type 8 has an invalid length. [ 999.842045][ T4910] binder: 4908:4910 unknown command 0 [ 999.850757][ T4910] binder: 4908:4910 ioctl c0306201 20000080 returned -22 [ 1000.400930][ T4913] fuse: Unknown parameter 'group_i00000000000000000000' [ 1000.533284][ T4914] binder: 4908:4914 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1000.536303][ T4914] binder: 4914 RLIMIT_NICE not set [ 1001.121013][ T4917] binder: 4908:4917 got transaction to invalid handle, 1 [ 1001.121714][ T4917] binder: 4908:4917 cannot find target node [ 1001.122414][ T4917] binder: 4908:4917 transaction call to 0:0 failed 35/29201/-22, code 0 size 0-0 line 3232 [ 1003.060508][ T887] binder: undelivered TRANSACTION_ERROR: 29201 [ 1003.492727][ T4925] fuse: Unknown parameter 'group_i00000000000000000000' [ 1006.505706][ T4936] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 1006.514317][ T4935] loop8: detected capacity change from 0 to 8 [ 1007.376586][ T4939] fuse: Unknown parameter 'group_id00000000000000000000' [ 1010.574214][ T4953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 1013.922614][ T4961] fuse: Unknown parameter 'group_id00000000000000000000' [ 1025.206690][ T4974] fuse: Unknown parameter 'group_id00000000000000000000' [ 1039.226863][ T4991] fuse: Bad value for 'user_id' [ 1039.230824][ T4991] fuse: Bad value for 'user_id' [ 1040.245877][ T4997] fuse: Bad value for 'fd' [ 1040.964590][ T5001] fuse: Bad value for 'user_id' [ 1040.981688][ T5001] fuse: Bad value for 'user_id' [ 1041.552136][ T5003] netlink: 384 bytes leftover after parsing attributes in process `syz.0.538'. [ 1054.830799][ T5060] fuse: Unknown parameter 'grou00000000000000000000' [ 1056.971357][ T30] audit: type=1400 audit(1056.410:256): avc: denied { map } for pid=5067 comm="syz.0.565" path="socket:[8647]" dev="sockfs" ino=8647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1056.972421][ T30] audit: type=1400 audit(1056.410:257): avc: denied { read } for pid=5067 comm="syz.0.565" path="socket:[8647]" dev="sockfs" ino=8647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1058.032093][ T5073] fuse: Unknown parameter 'grou00000000000000000000' [ 1060.850792][ T5092] fuse: Unknown parameter 'grou00000000000000000000' [ 1064.585707][ T5107] fuse: Unknown parameter 'group_i00000000000000000000' [ 1070.191831][ T5111] binder: 5110:5111 tried to acquire reference to desc 0, got 1 instead [ 1071.599036][ T10] binder: undelivered TRANSACTION_COMPLETE [ 1071.774682][ T10] binder: undelivered transaction 40, process died. [ 1080.621718][ T30] audit: type=1400 audit(1080.080:258): avc: denied { setopt } for pid=5135 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1087.703389][ T5163] syzkaller0: entered promiscuous mode [ 1087.703979][ T5163] syzkaller0: entered allmulticast mode [ 1095.232122][ T30] audit: type=1400 audit(1094.660:259): avc: denied { ioctl } for pid=5174 comm="syz.1.609" path="/dev/nullb0" dev="devtmpfs" ino=672 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1098.095696][ T5183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 1100.750603][ T5177] pim6reg: entered allmulticast mode [ 1101.774529][ T5174] pim6reg: left allmulticast mode [ 1102.003247][ T5191] binder: 5190:5191 unknown command 0 [ 1102.003922][ T5191] binder: 5190:5191 ioctl c0306201 20000080 returned -22 [ 1102.134659][ T5191] binder: 5190:5191 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1102.135349][ T5191] binder: 5191 RLIMIT_NICE not set [ 1102.652813][ T5192] binder: 5190:5192 tried to acquire reference to desc 0, got 1 instead [ 1102.662449][ T5191] binder: 5191 RLIMIT_NICE not set [ 1102.664946][ T5191] binder: send failed reply for transaction 45 to 5190:5192 [ 1102.669853][ T5191] binder: 5190:5191 ioctl c0306201 20000280 returned -14 [ 1102.710102][ T3414] binder: undelivered TRANSACTION_COMPLETE [ 1102.710839][ T3414] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.459686][ T5194] fuse: Bad value for 'user_id' [ 1103.461695][ T5194] fuse: Bad value for 'user_id' [ 1106.326988][ T5204] fuse: Bad value for 'user_id' [ 1106.331174][ T5204] fuse: Bad value for 'user_id' [ 1106.896624][ T5206] binder: 5205:5206 unknown command 0 [ 1106.897324][ T5206] binder: 5205:5206 ioctl c0306201 20000080 returned -22 [ 1106.976956][ T5206] binder: 5205:5206 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1106.980263][ T5206] binder: 5206 RLIMIT_NICE not set [ 1107.507224][ T5207] binder: 5205:5207 tried to acquire reference to desc 0, got 1 instead [ 1107.523816][ T5206] binder: 5206 RLIMIT_NICE not set [ 1107.527507][ T5206] binder: send failed reply for transaction 50 to 5205:5207 [ 1107.529257][ T5206] binder: 5205:5206 ioctl c0306201 20000280 returned -14 [ 1107.546990][ T10] binder: undelivered TRANSACTION_COMPLETE [ 1107.553817][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 1112.595145][ T5219] fuse: Bad value for 'user_id' [ 1112.595716][ T5219] fuse: Bad value for 'user_id' [ 1113.349539][ T30] audit: type=1400 audit(1112.810:260): avc: denied { sqpoll } for pid=5220 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1115.026377][ T5231] batadv_slave_0: entered promiscuous mode [ 1115.027454][ T5231] batadv_slave_0: entered allmulticast mode [ 1118.715170][ T30] audit: type=1326 audit(1118.170:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x7ffc0000 [ 1118.725555][ T30] audit: type=1326 audit(1118.180:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x7ffc0000 [ 1118.742602][ T30] audit: type=1326 audit(1118.190:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb535b3a8 code=0x7ffc0000 [ 1118.745503][ T30] audit: type=1326 audit(1118.200:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x7ffc0000 [ 1118.753638][ T30] audit: type=1326 audit(1118.210:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x7ffc0000 [ 1118.764607][ T30] audit: type=1326 audit(1118.220:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffb535b3a8 code=0x7ffc0000 [ 1118.814060][ T30] audit: type=1326 audit(1118.270:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1118.819513][ T30] audit: type=1326 audit(1118.270:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1118.836036][ T30] audit: type=1326 audit(1118.290:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1118.917368][ T30] audit: type=1326 audit(1118.370:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.639" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1125.482690][ T5275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.487636][ T5275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.481949][ T5279] tap0: tun_chr_ioctl cmd 35108 [ 1131.740503][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1131.741488][ T30] audit: type=1400 audit(1131.190:347): avc: denied { setopt } for pid=5303 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1133.237098][ T30] audit: type=1400 audit(1132.690:348): avc: denied { append } for pid=5307 comm="syz.0.662" name="001" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1135.844946][ T5316] netlink: 72 bytes leftover after parsing attributes in process `syz.0.666'. [ 1136.676997][ T30] audit: type=1326 audit(1136.130:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.697323][ T30] audit: type=1326 audit(1136.140:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.711087][ T30] audit: type=1326 audit(1136.150:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.712421][ T30] audit: type=1326 audit(1136.150:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.712901][ T30] audit: type=1326 audit(1136.160:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.713343][ T30] audit: type=1326 audit(1136.170:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.738883][ T30] audit: type=1326 audit(1136.180:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.739876][ T30] audit: type=1326 audit(1136.190:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.757016][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1136.774069][ T30] audit: type=1326 audit(1136.210:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.775139][ T30] audit: type=1326 audit(1136.210:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.800653][ T30] audit: type=1326 audit(1136.240:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.801678][ T30] audit: type=1326 audit(1136.250:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb535b3a8 code=0x7ffc0000 [ 1136.861641][ T30] audit: type=1326 audit(1136.290:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.867231][ T30] audit: type=1326 audit(1136.320:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.895537][ T30] audit: type=1326 audit(1136.350:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.908985][ T30] audit: type=1326 audit(1136.360:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.952602][ T30] audit: type=1326 audit(1136.390:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1136.979254][ T30] audit: type=1326 audit(1136.410:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb62b18f8 code=0x7ffc0000 [ 1138.021958][ T5320] binder: 5319:5320 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1138.022689][ T5320] binder: 5320 RLIMIT_NICE not set [ 1138.580247][ T5321] binder: 5319:5321 got transaction to invalid handle, 1 [ 1138.584992][ T5321] binder: 5319:5321 cannot find target node [ 1138.595658][ T5321] binder: 5319:5321 transaction call to 0:0 failed 54/29201/-22, code 0 size 0-0 line 3232 [ 1140.337494][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 1141.515882][ T5327] netlink: 'syz.0.671': attribute type 4 has an invalid length. [ 1141.874501][ T5329] fuse: Bad value for 'fd' [ 1142.623204][ T5331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'. [ 1143.112173][ T5333] binder: 5332:5333 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1143.119934][ T5333] binder: 5333 RLIMIT_NICE not set [ 1143.656371][ T5334] binder: 5332:5334 got transaction to invalid handle, 1 [ 1143.662417][ T5334] binder: 5332:5334 cannot find target node [ 1143.665515][ T5334] binder: 5332:5334 transaction call to 0:0 failed 58/29201/-22, code 0 size 0-0 line 3232 [ 1144.994454][ T5339] fuse: Bad value for 'fd' [ 1145.514183][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 1145.603825][ T5341] fuse: Invalid rootmode [ 1149.180337][ T5353] binder: BINDER_SET_CONTEXT_MGR already set [ 1149.189543][ T5353] binder: 5352:5353 ioctl 4018620d 200002c0 returned -16 [ 1149.201910][ T5353] binder: 5352:5353 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1149.220526][ T5353] binder: 5353 RLIMIT_NICE not set [ 1149.922247][ T5356] netlink: 72 bytes leftover after parsing attributes in process `syz.0.683'. [ 1149.946878][ T5356] vlan0: entered promiscuous mode [ 1154.613341][ T5372] binder: BINDER_SET_CONTEXT_MGR already set [ 1154.614173][ T5372] binder: 5371:5372 ioctl 4018620d 200002c0 returned -16 [ 1154.650095][ T5372] binder: 5371:5372 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1154.654752][ T5372] binder: 5372 RLIMIT_NICE not set [ 1156.916995][ T5379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.693'. [ 1158.173907][ T5385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.696'. [ 1158.178813][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.696'. [ 1158.197400][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.696'. [ 1158.202213][ T5385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.696'. [ 1159.465713][ T5392] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.466391][ T5392] binder: 5391:5392 ioctl 4018620d 200002c0 returned -16 [ 1159.477494][ T5392] binder: 5391:5392 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1159.479648][ T5392] binder: 5392 RLIMIT_NICE not set [ 1160.951538][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1160.961447][ T30] audit: type=1400 audit(1160.410:405): avc: denied { bind } for pid=5394 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1162.689732][ T30] audit: type=1400 audit(1162.140:406): avc: denied { bind } for pid=5404 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1180.865115][ T30] audit: type=1400 audit(1180.320:407): avc: denied { bind } for pid=5462 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1181.347488][ T5467] pimreg: entered allmulticast mode [ 1190.242022][ T5489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.262237][ T5489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.414518][ T30] audit: type=1400 audit(1189.850:408): avc: denied { write } for pid=5488 comm="syz.1.735" path="socket:[10311]" dev="sockfs" ino=10311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1198.931384][ T30] audit: type=1400 audit(1198.380:409): avc: denied { bind } for pid=5495 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1206.370518][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 1215.915566][ T30] audit: type=1400 audit(1215.370:410): avc: denied { append } for pid=5543 comm="syz.0.755" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1222.862514][ T5577] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1224.401975][ T5583] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1225.639518][ T5589] fuse: Bad value for 'fd' [ 1229.392403][ T5599] fuse: Bad value for 'fd' [ 1237.026425][ T5617] fuse: Bad value for 'fd' [ 1240.444352][ T5627] fuse: Unknown parameter '0x0000000000000003' [ 1248.022430][ T30] audit: type=1400 audit(1247.480:411): avc: denied { create } for pid=5628 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1256.541288][ T5640] ucma_write: process 1020 (syz.1.794) changed security contexts after opening file descriptor, this is not allowed. [ 1259.991299][ T5642] fuse: Bad value for 'group_id' [ 1259.992121][ T5642] fuse: Bad value for 'group_id' [ 1277.341717][ T5660] fuse: Bad value for 'group_id' [ 1277.349259][ T5660] fuse: Bad value for 'group_id' [ 1286.386744][ T5675] fuse: Bad value for 'group_id' [ 1286.387378][ T5675] fuse: Bad value for 'group_id' [ 1305.821272][ T5695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.826828][ T5695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.945027][ T5696] team_slave_1: entered promiscuous mode [ 1305.946929][ T5696] team_slave_1: entered allmulticast mode [ 1311.055388][ T30] audit: type=1400 audit(1310.510:412): avc: denied { setopt } for pid=5710 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1316.041528][ T5719] lo: entered allmulticast mode [ 1316.224719][ T5718] lo: left allmulticast mode [ 1318.186609][ T30] audit: type=1400 audit(1317.640:413): avc: denied { read } for pid=5722 comm="syz.0.822" dev="nsfs" ino=4026532624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1318.219836][ T30] audit: type=1400 audit(1317.670:414): avc: denied { open } for pid=5722 comm="syz.0.822" path="net:[4026532624]" dev="nsfs" ino=4026532624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1320.914624][ T5729] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1325.672602][ T30] audit: type=1400 audit(1325.120:415): avc: denied { create } for pid=5750 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1325.715034][ T30] audit: type=1400 audit(1325.170:416): avc: denied { bind } for pid=5750 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1338.132321][ T5798] nbd0: detected capacity change from 0 to 127 [ 1338.256769][ T898] block nbd0: Wrong magic (0x12e9cc0c) [ 1338.306592][ T5798] netlink: 64 bytes leftover after parsing attributes in process `syz.1.850'. [ 1338.436970][ T5798] block nbd0: reconnected socket [ 1338.584410][ T5799] block nbd0: Receive control failed (result -104) [ 1339.690518][ T5802] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 1343.647541][ T5817] binder: 5816:5817 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1343.660033][ T5817] binder: 5817 RLIMIT_NICE not set [ 1344.204028][ T5821] binder: 5816:5821 got transaction to invalid handle, 1 [ 1344.221858][ T5821] binder: 5816:5821 cannot find target node [ 1344.222783][ T5821] binder: 5816:5821 transaction call to 0:0 failed 65/29201/-22, code 0 size 0-0 line 3232 [ 1345.973924][ T38] binder: undelivered TRANSACTION_ERROR: 29201 [ 1352.234566][ T5849] fuse: Unknown parameter 'group_i00000000000000000000' [ 1353.756762][ T5858] gretap0: entered promiscuous mode [ 1353.766280][ T5858] vlan3: entered promiscuous mode [ 1354.425093][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 1354.986505][ T5862] binder: 5861:5862 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1354.993267][ T5862] binder: 5862 RLIMIT_NICE not set [ 1355.219440][ T30] audit: type=1400 audit(1354.670:417): avc: denied { shutdown } for pid=5863 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1355.522561][ T5865] binder: 5861:5865 got transaction to invalid handle, 1 [ 1355.524032][ T5865] binder: 5861:5865 cannot find target node [ 1355.524492][ T5865] binder: 5861:5865 transaction call to 0:0 failed 69/29201/-22, code 0 size 0-0 line 3232 [ 1357.256668][ T38] binder: undelivered TRANSACTION_ERROR: 29201 [ 1358.274586][ T5874] netlink: 'syz.0.879': attribute type 4 has an invalid length. [ 1359.784551][ T5881] binder: 5880:5881 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1359.787277][ T5881] binder: 5881 RLIMIT_NICE not set [ 1360.315060][ T5882] binder: 5880:5882 got transaction to invalid handle, 1 [ 1360.319541][ T5882] binder: 5880:5882 cannot find target node [ 1360.322078][ T5882] binder: 5880:5882 transaction call to 0:0 failed 73/29201/-22, code 0 size 0-0 line 3232 [ 1362.165637][ T23] binder: undelivered TRANSACTION_ERROR: 29201 [ 1368.739157][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 30 seconds [ 1368.744923][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 30 seconds [ 1368.751832][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 30 seconds [ 1368.754133][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 30 seconds [ 1369.844613][ T5914] veth0: entered promiscuous mode [ 1370.149083][ T5914] veth0: left promiscuous mode [ 1377.942007][ T5941] binder: 5940:5941 unknown command 0 [ 1377.942607][ T5941] binder: 5940:5941 ioctl c0306201 20000080 returned -22 [ 1378.002419][ T5941] binder: tried to use weak ref as strong ref [ 1378.003135][ T5941] binder: 5940:5941 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1378.011521][ T5941] binder: 5940:5941 got transaction to invalid handle, 1 [ 1378.012222][ T5941] binder: 5940:5941 cannot find target node [ 1378.012606][ T5941] binder: 5940:5941 transaction call to 0:0 failed 76/29201/-22, code 0 size 0-0 line 3232 [ 1378.019914][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 1380.732573][ T5954] netlink: 'syz.0.906': attribute type 12 has an invalid length. [ 1380.757272][ T30] audit: type=1400 audit(1380.210:418): avc: denied { create } for pid=5948 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1383.160869][ T5959] binder: 5957:5959 unknown command 0 [ 1383.164622][ T5959] binder: 5957:5959 ioctl c0306201 20000080 returned -22 [ 1383.293315][ T5959] binder: tried to use weak ref as strong ref [ 1383.293914][ T5959] binder: 5957:5959 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1383.306912][ T5959] binder: 5957:5959 got transaction to invalid handle, 1 [ 1383.338983][ T5959] binder: 5957:5959 cannot find target node [ 1383.339518][ T5959] binder: 5957:5959 transaction call to 0:0 failed 79/29201/-22, code 0 size 0-0 line 3232 [ 1383.361835][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 1384.804463][ T5966] syzkaller0: entered promiscuous mode [ 1384.821727][ T5966] syzkaller0: entered allmulticast mode [ 1386.740563][ T5974] binder: 5972:5974 unknown command 0 [ 1386.741266][ T5974] binder: 5972:5974 ioctl c0306201 20000080 returned -22 [ 1386.800755][ T5974] binder: tried to use weak ref as strong ref [ 1386.801504][ T5974] binder: 5972:5974 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1386.822115][ T5974] binder: 5972:5974 got transaction to invalid handle, 1 [ 1386.850108][ T5974] binder: 5972:5974 cannot find target node [ 1386.851179][ T5974] binder: 5972:5974 transaction call to 0:0 failed 82/29201/-22, code 0 size 0-0 line 3232 [ 1386.890301][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 1388.564311][ T5982] fuse: Bad value for 'fd' [ 1389.533111][ T5986] binder: 5984:5986 unknown command 0 [ 1389.536259][ T5986] binder: 5984:5986 ioctl c0306201 20000080 returned -22 [ 1389.641222][ T5986] binder: 5984:5986 ioctl 4018620d 0 returned -22 [ 1389.662715][ T5986] binder: 5984:5986 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1389.663362][ T5986] binder: 5986 RLIMIT_NICE not set [ 1390.087520][ T30] audit: type=1400 audit(1389.540:419): avc: denied { setopt } for pid=5987 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1390.166034][ T5989] binder: tried to use weak ref as strong ref [ 1390.166954][ T5989] binder: 5984:5989 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1390.204651][ T5989] binder: 5984:5989 got transaction to invalid handle, 1 [ 1390.205418][ T5989] binder: 5984:5989 cannot find target node [ 1390.239592][ T5989] binder: 5984:5989 transaction call to 0:0 failed 85/29201/-22, code 0 size 0-0 line 3232 [ 1391.891651][ T38] binder: undelivered TRANSACTION_ERROR: 29201 [ 1393.810779][ T5996] fuse: Bad value for 'fd' [ 1398.794217][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 60 seconds [ 1398.796714][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 60 seconds [ 1398.805956][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 60 seconds [ 1398.810431][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 60 seconds [ 1405.829244][ T6007] binder: 6006:6007 unknown command 0 [ 1405.831838][ T6007] binder: 6006:6007 ioctl c0306201 20000080 returned -22 [ 1405.860594][ T6007] binder: 6006:6007 ioctl 4018620d 0 returned -22 [ 1405.865022][ T6007] binder: 6006:6007 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1405.870582][ T6007] binder: 6007 RLIMIT_NICE not set [ 1406.384990][ T6008] binder: tried to use weak ref as strong ref [ 1406.386248][ T6008] binder: 6006:6008 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1406.391806][ T6008] binder: 6006:6008 got transaction to invalid handle, 1 [ 1406.392952][ T6008] binder: 6006:6008 cannot find target node [ 1406.395625][ T6008] binder: 6006:6008 transaction call to 0:0 failed 88/29201/-22, code 0 size 0-0 line 3232 [ 1407.091914][ T6010] fuse: Bad value for 'fd' [ 1408.303093][ T38] binder: undelivered TRANSACTION_ERROR: 29201 [ 1408.530551][ T6015] netlink: 'syz.1.931': attribute type 5 has an invalid length. [ 1411.987283][ T6021] fuse: Bad value for 'fd' [ 1413.042258][ T6025] binder: 6024:6025 unknown command 0 [ 1413.043072][ T6025] binder: 6024:6025 ioctl c0306201 20000080 returned -22 [ 1413.123322][ T6025] binder: 6024:6025 ioctl 4018620d 0 returned -22 [ 1413.135958][ T6025] binder: 6024:6025 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1413.136486][ T6025] binder: 6025 RLIMIT_NICE not set [ 1413.649441][ T6028] binder: tried to use weak ref as strong ref [ 1413.649963][ T6028] binder: 6024:6028 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1413.662736][ T6028] binder: 6024:6028 got transaction to invalid handle, 1 [ 1413.663205][ T6028] binder: 6024:6028 cannot find target node [ 1413.666812][ T6028] binder: 6024:6028 transaction call to 0:0 failed 91/29201/-22, code 0 size 0-0 line 3232 [ 1415.432563][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 1415.957002][ T6032] fuse: Bad value for 'fd' [ 1416.576347][ T3141] udevd[3141]: worker [5701] /devices/virtual/block/nbd0 is taking a long time [ 1416.975715][ T30] audit: type=1400 audit(1416.430:420): avc: denied { create } for pid=6029 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1417.006854][ T30] audit: type=1400 audit(1416.460:421): avc: denied { sys_admin } for pid=6029 comm="syz.0.938" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1419.323271][ T6041] binder: 6039:6041 unknown command 0 [ 1419.324377][ T6041] binder: 6039:6041 ioctl c0306201 20000080 returned -22 [ 1419.359920][ T6041] binder: 6039:6041 ioctl c0306201 0 returned -14 [ 1419.363082][ T6041] binder: 6039:6041 tried to acquire reference to desc 0, got 1 instead [ 1419.379746][ T23] binder: release 6039:6041 transaction 96 out, still active [ 1419.387287][ T23] binder: undelivered TRANSACTION_COMPLETE [ 1419.531937][ T9] binder: send failed reply for transaction 96, target dead [ 1420.101583][ T6042] team_slave_1: left allmulticast mode [ 1421.765653][ T716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1421.786849][ T716] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1422.633297][ T6047] syzkaller0: entered promiscuous mode [ 1422.635307][ T6047] syzkaller0: entered allmulticast mode [ 1425.965910][ T6053] binder: 6052:6053 unknown command 0 [ 1425.970198][ T6053] binder: 6052:6053 ioctl c0306201 20000080 returned -22 [ 1426.044226][ T6053] binder: 6052:6053 ioctl c0306201 0 returned -14 [ 1426.065417][ T6053] binder: 6052:6053 tried to acquire reference to desc 0, got 1 instead [ 1426.090867][ T9] binder: release 6052:6053 transaction 101 out, still active [ 1426.091420][ T9] binder: undelivered TRANSACTION_COMPLETE [ 1426.163213][ T9] binder: send failed reply for transaction 101, target dead [ 1426.219880][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1426.222332][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1428.885350][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 90 seconds [ 1428.886335][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 90 seconds [ 1428.886974][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 90 seconds [ 1428.887255][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 90 seconds [ 1435.269343][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1435.270591][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1442.450144][ T6072] syzkaller0: entered promiscuous mode [ 1442.450791][ T6072] syzkaller0: entered allmulticast mode [ 1446.684900][ T30] audit: type=1400 audit(1446.140:422): avc: denied { name_bind } for pid=6086 comm="syz.1.962" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1453.179829][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1453.823123][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1459.461702][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 120 seconds [ 1459.462675][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 120 seconds [ 1459.463432][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 120 seconds [ 1459.463877][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 120 seconds [ 1488.386004][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1489.664557][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 150 seconds [ 1489.665680][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 150 seconds [ 1489.666282][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 150 seconds [ 1489.666445][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 150 seconds [ 1490.939464][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1494.679506][ T6149] fuse: Bad value for 'fd' [ 1496.426197][ T6158] fuse: Bad value for 'fd' [ 1499.833227][ T6171] binder: 6170:6171 unknown command 0 [ 1499.835573][ T6171] binder: 6170:6171 ioctl c0306201 20000080 returned -22 [ 1499.864204][ T6171] binder: 6170:6171 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1499.866874][ T6171] binder: 6171 RLIMIT_NICE not set [ 1500.384668][ T6172] binder: 6170:6172 got transaction to invalid handle, 1 [ 1500.385267][ T6172] binder: 6170:6172 cannot find target node [ 1500.390829][ T6172] binder: 6170:6172 transaction call to 0:0 failed 105/29201/-22, code 0 size 0-0 line 3232 [ 1502.301079][ T5487] binder: undelivered TRANSACTION_ERROR: 29201 [ 1502.680008][ T6174] fuse: Unknown parameter '0x0000000000000004' [ 1505.696795][ T6187] binder: 6186:6187 unknown command 0 [ 1505.697282][ T6187] binder: 6186:6187 ioctl c0306201 20000080 returned -22 [ 1505.743076][ T6187] binder: 6186:6187 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1505.745817][ T6187] binder: 6187 RLIMIT_NICE not set [ 1506.289982][ T6188] binder: 6186:6188 got transaction to invalid handle, 1 [ 1506.290627][ T6188] binder: 6186:6188 cannot find target node [ 1506.291122][ T6188] binder: 6186:6188 transaction call to 0:0 failed 109/29201/-22, code 0 size 0-0 line 3232 [ 1508.161045][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 1508.952552][ T6190] fuse: Unknown parameter '0x0000000000000004' [ 1513.653043][ T6204] fuse: Unknown parameter '0x0000000000000004' [ 1517.776299][ T6220] fuse: Unknown parameter '0x0000000000000004' [ 1519.752382][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 180 seconds [ 1519.753080][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 180 seconds [ 1519.753676][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 180 seconds [ 1519.753908][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 180 seconds [ 1519.999998][ T3141] udevd[3141]: worker [5701] /devices/virtual/block/nbd0 timeout; kill it [ 1520.031391][ T3141] udevd[3141]: seq 7997 '/devices/virtual/block/nbd0' killed [ 1520.127532][ T6231] fuse: Unknown parameter '0x0000000000000004' [ 1522.276696][ T6241] fuse: Unknown parameter '0x0000000000000004' [ 1537.183910][ T6258] fuse: Unknown parameter 'fd0x0000000000000004' [ 1540.264934][ T6265] futex_wake_op: syz.1.1032 tries to shift op by -1; fix this program [ 1543.573299][ T6270] fuse: Unknown parameter 'fd0x0000000000000004' [ 1549.824238][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 210 seconds [ 1549.826312][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 210 seconds [ 1549.828890][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 210 seconds [ 1549.830133][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 210 seconds [ 1556.942329][ T6284] fuse: Unknown parameter 'fd0x0000000000000004' [ 1560.060897][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1565.184110][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1573.304145][ T6319] binder: 6316:6319 tried to acquire reference to desc 0, got 1 instead [ 1573.323853][ T6319] binder: 6316:6319 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1573.324735][ T6319] binder: 6319 RLIMIT_NICE not set [ 1573.325977][ T6319] binder: undelivered transaction 114, put_user failed [ 1573.326346][ T6319] binder: 6316:6319 ioctl c0306201 20000680 returned -14 [ 1573.345616][ T9] binder: undelivered TRANSACTION_COMPLETE [ 1574.290390][ T6326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1574.291019][ T6326] IPv6: NLM_F_CREATE should be set when creating new route [ 1574.291965][ T6326] IPv6: NLM_F_CREATE should be set when creating new route [ 1574.306145][ T6326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1579.909078][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 240 seconds [ 1579.909772][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 240 seconds [ 1579.909911][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 240 seconds [ 1579.910031][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 240 seconds [ 1595.725574][ T30] audit: type=1400 audit(1595.180:423): avc: denied { execute } for pid=6367 comm="syz.1.1071" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1606.256193][ T6385] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1077'. [ 1608.034803][ T6392] C: renamed from batadv_slave_0 [ 1609.996377][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 270 seconds [ 1609.997517][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 270 seconds [ 1609.999616][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 270 seconds [ 1609.999818][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 270 seconds [ 1617.862697][ T30] audit: type=1400 audit(1617.310:424): avc: denied { module_load } for pid=6409 comm="syz.1.1087" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1630.134245][ T6431] netlink: 'syz.0.1095': attribute type 3 has an invalid length. [ 1634.465131][ T30] audit: type=1400 audit(1633.920:425): avc: denied { unmount } for pid=6435 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1640.063734][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 300 seconds [ 1640.064688][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 300 seconds [ 1640.064876][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 300 seconds [ 1640.065213][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 300 seconds [ 1650.533435][ T6450] netlink: 'syz.1.1103': attribute type 39 has an invalid length. [ 1670.142982][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 330 seconds [ 1670.143847][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 330 seconds [ 1670.144057][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 330 seconds [ 1670.144221][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 330 seconds [ 1700.226569][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 360 seconds [ 1700.227507][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 360 seconds [ 1700.229042][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 360 seconds [ 1700.229363][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 360 seconds [ 1703.419778][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1704.424713][ T30] audit: type=1400 audit(1703.880:426): avc: denied { getopt } for pid=6501 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1706.287624][ T1144] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.309358][ T1144] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.310611][ T1144] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.311026][ T1144] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.444050][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 1709.679565][ T6529] vcan0: tx address claim with different name [ 1710.823486][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1135'. [ 1713.669523][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1731.000332][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 390 seconds [ 1731.001886][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 390 seconds [ 1731.005808][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 390 seconds [ 1731.007231][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 390 seconds [ 1740.938895][ T6579] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1762.235451][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 420 seconds [ 1762.236441][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 420 seconds [ 1762.239661][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 420 seconds [ 1762.239837][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 420 seconds [ 1768.393097][ T6615] capability: warning: `syz.1.1162' uses deprecated v2 capabilities in a way that may be insecure [ 1771.559866][ T30] audit: type=1400 audit(1770.950:427): avc: denied { mounton } for pid=6618 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1789.317502][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.385050][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1792.386358][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 450 seconds [ 1792.387166][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 450 seconds [ 1792.391178][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 450 seconds [ 1792.391615][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 450 seconds [ 1795.853750][ T6618] hsr_slave_0: entered promiscuous mode [ 1795.865286][ T6618] hsr_slave_1: entered promiscuous mode [ 1795.900619][ T6618] debugfs: 'hsr0' already exists in 'hsr' [ 1795.901407][ T6618] Cannot create hsr debugfs directory [ 1798.947410][ T30] audit: type=1400 audit(1798.400:428): avc: denied { getopt } for pid=6677 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1800.374885][ T6618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1800.492206][ T6618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1800.555863][ T6618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1800.622904][ T6618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1806.190652][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.593397][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 480 seconds [ 1822.594230][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 480 seconds [ 1822.596942][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 480 seconds [ 1822.597564][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 480 seconds [ 1826.089319][ T6618] veth0_vlan: entered promiscuous mode [ 1826.680796][ T6618] veth1_vlan: entered promiscuous mode [ 1828.290976][ T6618] veth0_macvtap: entered promiscuous mode [ 1828.573968][ T6618] veth1_macvtap: entered promiscuous mode [ 1830.180299][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.183551][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.230128][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.232487][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.675860][ T30] audit: type=1400 audit(1831.130:429): avc: denied { mounton } for pid=6618 comm="syz-executor" path="/syzkaller.U5aAll/syz-tmp" dev="vda" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1831.860315][ T30] audit: type=1400 audit(1831.310:430): avc: denied { mount } for pid=6618 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1832.350533][ T30] audit: type=1400 audit(1831.800:431): avc: denied { unmount } for pid=6618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1832.494196][ T30] audit: type=1400 audit(1831.940:432): avc: denied { mounton } for pid=6618 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1839.704180][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 1840.915381][ T6784] capability: warning: `syz.0.1200' uses 32-bit capabilities (legacy support in use) [ 1844.161102][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 1849.873125][ T5687] udevd[5687]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1851.414313][ T5804] udevd[5804]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1853.363077][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 510 seconds [ 1853.363909][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 510 seconds [ 1853.364073][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 510 seconds [ 1853.364454][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 510 seconds [ 1855.515229][ T30] audit: type=1400 audit(1854.590:433): avc: denied { setopt } for pid=6800 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1863.552229][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.611056][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.711090][ T716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.297374][ T716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.097061][ T716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.975579][ T716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.929221][ T30] audit: type=1400 audit(1877.380:434): avc: denied { read } for pid=3171 comm="dhcpcd" name="n19" dev="tmpfs" ino=3773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1877.956693][ T30] audit: type=1400 audit(1877.410:435): avc: denied { open } for pid=3171 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=3773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1878.020036][ T30] audit: type=1400 audit(1877.470:436): avc: denied { getattr } for pid=3171 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=3773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1878.482301][ T716] hsr_slave_0: left promiscuous mode [ 1878.514996][ T716] hsr_slave_1: left promiscuous mode [ 1878.695248][ T716] veth1_macvtap: left promiscuous mode [ 1878.698852][ T716] veth0_macvtap: left promiscuous mode [ 1878.702881][ T716] veth1_vlan: left promiscuous mode [ 1879.208644][ T30] audit: type=1400 audit(1878.660:437): avc: denied { listen } for pid=6828 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1879.215407][ T30] audit: type=1400 audit(1878.670:438): avc: denied { accept } for pid=6828 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1880.033648][ T716] pimreg (unregistering): left allmulticast mode [ 1883.906116][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 540 seconds [ 1883.906858][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 540 seconds [ 1883.911607][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 540 seconds [ 1883.911820][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 540 seconds [ 1887.843691][ T30] audit: type=1400 audit(1887.300:439): avc: denied { write } for pid=6836 comm="syz.1.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1887.856401][ T6837] netlink: 'syz.1.1214': attribute type 6 has an invalid length. [ 1890.507129][ T30] audit: type=1400 audit(1889.960:440): avc: denied { create } for pid=6843 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1890.531305][ T30] audit: type=1400 audit(1889.960:441): avc: denied { write } for pid=6843 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1890.543502][ T30] audit: type=1400 audit(1890.000:442): avc: denied { append } for pid=6843 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1892.209597][ T30] audit: type=1400 audit(1891.660:443): avc: denied { unlink } for pid=6852 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1898.645331][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.721402][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.905307][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1899.976100][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1902.254764][ T30] audit: type=1400 audit(1901.710:444): avc: denied { create } for pid=6894 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1902.366104][ T30] audit: type=1400 audit(1901.810:445): avc: denied { ioctl } for pid=6894 comm="syz.1.1226" path="socket:[15553]" dev="sockfs" ino=15553 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1906.696951][ T6807] hsr_slave_0: entered promiscuous mode [ 1906.719894][ T6807] hsr_slave_1: entered promiscuous mode [ 1907.022067][ T6920] fuse: Bad value for 'fd' [ 1909.737298][ T6931] fuse: Bad value for 'fd' [ 1911.101599][ T30] audit: type=1400 audit(1910.560:446): avc: denied { append } for pid=6936 comm="syz.1.1237" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1912.603977][ T6807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1912.697310][ T6807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1912.836561][ T6807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1912.987598][ T6807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1913.995331][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 570 seconds [ 1913.996051][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 570 seconds [ 1913.996208][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 570 seconds [ 1913.996389][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 570 seconds [ 1919.376184][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1926.842851][ T30] audit: type=1400 audit(1926.300:447): avc: denied { read } for pid=6997 comm="syz.1.1249" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1926.847109][ T30] audit: type=1400 audit(1926.300:448): avc: denied { open } for pid=6997 comm="syz.1.1249" path="/47/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1934.784262][ T7039] ======================================================= [ 1934.784262][ T7039] WARNING: The mand mount option has been deprecated and [ 1934.784262][ T7039] and is ignored by this kernel. Remove the mand [ 1934.784262][ T7039] option from the mount to silence this warning. [ 1934.784262][ T7039] ======================================================= [ 1936.302120][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 1938.064937][ T7053] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1261'. [ 1941.613024][ T6807] veth0_vlan: entered promiscuous mode [ 1941.754588][ T6807] veth1_vlan: entered promiscuous mode [ 1942.367179][ T6807] veth0_macvtap: entered promiscuous mode [ 1942.516234][ T6807] veth1_macvtap: entered promiscuous mode [ 1943.187181][ T6823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.192117][ T6823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.195184][ T6823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.197471][ T6823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.100362][ T54] block nbd0: Possible stuck request 00000000397e82a5: control (read@0,1024B). Runtime 600 seconds [ 1944.103957][ T54] block nbd0: Possible stuck request 00000000e5783f54: control (read@1024,1024B). Runtime 600 seconds [ 1944.106682][ T54] block nbd0: Possible stuck request 00000000981ae610: control (read@2048,1024B). Runtime 600 seconds [ 1944.107151][ T54] block nbd0: Possible stuck request 00000000ca3e8882: control (read@3072,1024B). Runtime 600 seconds [ 1944.409162][ T30] audit: type=1400 audit(1943.850:449): avc: denied { mounton } for pid=6807 comm="syz-executor" path="/syzkaller.jcOLdx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1947.551056][ T7078] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1269'. [ 1953.706613][ T32] INFO: task udevd:5701 blocked for more than 430 seconds. [ 1953.710104][ T32] Not tainted syzkaller #0 [ 1953.712352][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1953.726811][ T32] task:udevd state:D stack:0 pid:5701 tgid:5701 ppid:3141 task_flags:0x400140 flags:0x00000019 [ 1953.749740][ T32] Call trace: [ 1953.774490][ T32] __switch_to+0x208/0x4f0 (T) [ 1953.780157][ T32] __schedule+0xd58/0x3180 SYZFAIL: failed to recv rpc [ 1953.815113][ T32] schedule+0xd0/0x344 [ 1953.815825][ T32] io_schedule+0xac/0x114 [ 1953.816050][ T32] folio_wait_bit_common+0x2a8/0x634 [ 1953.816277][ T32] do_read_cache_folio+0x240/0x3f4 [ 1953.816502][ T32] read_cache_folio+0x44/0x6c [ 1953.816706][ T32] read_part_sector+0xac/0x5f4 [ 1953.816928][ T32] msdos_partition+0xe4/0x1f3c [ 1953.817152][ T32] bdev_disk_changed+0x508/0xf0c [ 1953.817403][ T32] blkdev_get_whole+0x144/0x1e4 [ 1953.817699][ T32] bdev_open+0x1dc/0xa84 [ 1953.855638][ T32] blkdev_open+0x270/0x3dc [ 1953.856036][ T32] do_dentry_open+0x6a4/0x103c [ 1953.856275][ T32] vfs_open+0x5c/0x2fc [ 1953.856514][ T32] path_openat+0x148c/0x24b0 [ 1953.856749][ T32] do_filp_open+0x184/0x360 [ 1953.856988][ T32] do_sys_openat2+0xe0/0x160 [ 1953.857269][ T32] __arm64_sys_openat+0x12c/0x1bc [ 1953.857499][ T32] invoke_syscall+0x6c/0x258 [ 1953.890015][ T32] el0_svc_common.constprop.0+0xac/0x230 [ 1953.890405][ T32] do_el0_svc+0x40/0x58 [ 1953.890640][ T32] el0_svc+0x54/0x288 [ 1953.890870][ T32] el0t_64_sync_handler+0xa0/0xe4 [ 1953.891094][ T32] el0t_64_sync+0x198/0x19c [ 1953.891958][ T32] [ 1953.891958][ T32] Showing all locks held in the system: [ 1953.892371][ T32] 1 lock held by khungtaskd/32: [ 1953.892608][ T32] #0: ffff800087433560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x18/0x1c4 [ 1953.894677][ T32] 1 lock held by klogd/3130: [ 1953.895031][ T32] 2 locks held by getty/3265: [ 1953.895273][ T32] #0: ffff0000135d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1953.896447][ T32] #1: ffff80008d7bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e8/0xdc0 [ 1953.897530][ T32] 2 locks held by syz-executor/3321: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1953.956026][ T32] 1 lock held by udevd/5701: [ 1953.970460][ T32] #0: ffff000014ad6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2c4/0xa84 [ 1953.990333][ T32] 2 locks held by syz-executor/6618: [ 1953.990602][ T32] 3 locks held by kworker/u8:6/6823: [ 1953.990878][ T32] 1 lock held by syz.0.1206/7081: [ 1954.007325][ T32] [ 1954.013490][ T32] ============================================= [ 1954.013490][ T32] [ 1954.016662][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1954.019743][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 1954.020436][ T32] Hardware name: linux,dummy-virt (DT) [ 1954.020951][ T32] Call trace: [ 1954.021489][ T32] show_stack+0x18/0x24 (C) [ 1954.021937][ T32] dump_stack_lvl+0x38/0xf4 [ 1954.022332][ T32] dump_stack+0x1c/0x28 [ 1954.022686][ T32] vpanic+0x49c/0x50c [ 1954.023037][ T32] nmi_panic+0x0/0x64 [ 1954.023427][ T32] watchdog+0x538/0xcd8 [ 1954.023822][ T32] kthread+0x348/0x5fc [ 1954.024198][ T32] ret_from_fork+0x10/0x20 [ 1954.025701][ T32] SMP: stopping secondary CPUs [ 1954.028425][ T32] Kernel Offset: disabled [ 1954.029376][ T32] CPU features: 0x082000,04006800,40004000,0400421b [ 1954.030516][ T32] Memory Limit: none [ 1954.033045][ T32] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:23:47 Registers: info registers vcpu 0 CPU#0 PC=ffff800085511f90 X00=ffff800085511f8c X01=0000000000000000 X02=0000000000000000 X03=1fffe000024ba3d1 X04=1ffff00011ad4fbe X05=ffff80008d6a7da8 X06=ffff80008d6a7dc0 X07=ffff80008d6a7ea0 X08=ffff80008d6a7d48 X09=dfff800000000000 X10=ffff700011ad4fa8 X11=1ffff00011ad4fa8 X12=ffff700011ad4fa9 X13=0000000000000000 X14=0000000000000000 X15=0000000000000002 X16=0000000000000007 X17=0000000000000000 X18=1fffe00003724b79 X19=ffff800087477470 X20=ffff0000125d1e80 X21=0000000000000003 X22=0000000000000028 X23=dfff800000000000 X24=ffff800087477440 X25=0000000000000000 X26=0000000000000004 X27=ffff800087477470 X28=ffff8000855b1a40 X29=ffff80008d6a7de0 X30=ffff8000804475d0 SP=ffff80008d6a7de0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0400000000000000:0400000000000000 Q01=0000000400000000:0000000000000000 Q02=0000000000000004:0000000000000000 Q03=00d000a800000000:0000000000000000 Q04=0000000000000000:0000000000000002 Q05=0000000000000004:0000000000000002 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffcda300f0:0000ffffcda300f0 Q17=ffffff80ffffffd0:0000ffffcda300c0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008031648c X00=ffff000017803d08 X01=1fffe00002e2c8a0 X02=0000000000000000 X03=0000000000000000 X04=1fffe00002f007a1 X05=00000000f1f1f1f1 X06=ffff700014014f22 X07=0000000000000001 X08=ffff8000a00a7917 X09=dfff800000000000 X10=ffff700014014f24 X11=1fffe00002e2c8a5 X12=ffff600002e2c8a6 X13=0000000000000000 X14=6d69745f6b736174 X15=6365735f74756f65 X16=ffff00006a076504 X17=736968742073656c X18=ffff80008d6b787c X19=00000001000285cf X20=ffff000017164570 X21=ffff800087200000 X22=ffff00000dc29800 X23=0000000000000000 X24=1ffff00014014f06 X25=ffff800087230000 X26=ffff8000855f4ee0 X27=ffff80008d5096e8 X28=ffff000017164570 X29=ffff8000a00a75e0 X30=ffff80008550e500 SP=ffff8000a00a75b0 PSTATE=60000005 -ZC- EL1h FPCR=00000000 FPSR=00000000 Q00=0400000000000000:0400000000000000 Q01=0000000400000000:0000000000000000 Q02=0000000000000004:0000000000000000 Q03=00d000a800000000:0000000000000000 Q04=0000000000000000:0000000000000002 Q05=0000000000000004:0000000000000002 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffcda300f0:0000ffffcda300f0 Q17=ffffff80ffffffd0:0000ffffcda300c0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000