last executing test programs: 28.779839444s ago: executing program 1 (id=5421): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 28.678827524s ago: executing program 1 (id=5422): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x2, 0x2, 0x1000}], 0x1) 28.579195713s ago: executing program 1 (id=5423): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 28.466361665s ago: executing program 1 (id=5424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0xd, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000002240)={0x1, 0x10, 0xfa00, {&(0x7f0000002200)}}, 0x18) 28.268538422s ago: executing program 1 (id=5425): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 3.459666727s ago: executing program 0 (id=5430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) 3.408438437s ago: executing program 1 (id=5425): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 3.329684742s ago: executing program 0 (id=5431): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 3.118313712s ago: executing program 0 (id=5432): r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.917981191s ago: executing program 0 (id=5433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 160.672039ms ago: executing program 0 (id=5434): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 0s ago: executing program 0 (id=5435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) kernel console output (not intermixed with test programs): ARM-Versatile Express [ 1714.071514][T16502] Call trace: [ 1714.071751][T16502] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1714.072180][T16502] r7:00000000 r6:00000000 r5:60000013 r4:8203d408 [ 1714.072442][T16502] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1714.072853][T16502] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1714.073207][T16502] r5:00000000 r4:8274e844 [ 1714.073404][T16502] [<819b77ac>] (dump_stack) from [<808e548c>] (should_fail_ex+0x18c/0x1dc) [ 1714.073770][T16502] [<808e5300>] (should_fail_ex) from [<808e54f0>] (should_fail+0x14/0x18) [ 1714.074113][T16502] r6:00000000 r5:ee621f68 r4:00000002 [ 1714.074337][T16502] [<808e54dc>] (should_fail) from [<808e5510>] (should_fail_usercopy+0x1c/0x20) [ 1714.074695][T16502] [<808e54f4>] (should_fail_usercopy) from [<8054e70c>] (simple_read_from_buffer+0x8c/0x134) [ 1714.075215][T16502] [<8054e680>] (simple_read_from_buffer) from [<805c320c>] (proc_fail_nth_read+0xb8/0x100) [ 1714.079313][T16502] r10:00000001 r9:805c3154 r8:00000002 r7:ee621f68 r6:0000000f r5:76b2ef30 [ 1714.079812][T16502] r4:8412b000 r3:ee621e9f [ 1714.080156][T16502] [<805c3154>] (proc_fail_nth_read) from [<80515e6c>] (vfs_read+0x98/0x324) [ 1714.080688][T16502] r8:76b2ef30 r7:ee621f68 r6:8412b000 r5:0000000f r4:852626c0 [ 1714.081055][T16502] [<80515dd4>] (vfs_read) from [<80516b1c>] (ksys_read+0x78/0xf8) [ 1714.081442][T16502] r10:00000003 r9:8412b000 r8:8020029c r7:00000000 r6:00000000 r5:852626c0 [ 1714.081820][T16502] r4:852626c3 [ 1714.082065][T16502] [<80516aa4>] (ksys_read) from [<80516bac>] (sys_read+0x10/0x14) [ 1714.082720][T16502] r7:00000003 r6:00000003 r5:76b2ef30 r4:0000000f [ 1714.083183][T16502] [<80516b9c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1714.083575][T16502] Exception stack(0xee621fa8 to 0xee621ff0) [ 1714.083883][T16502] 1fa0: 0000000f 76b2ef30 00000003 76b2ef30 0000000f 00000000 [ 1714.084264][T16502] 1fc0: 0000000f 76b2ef30 00000003 00000003 00000000 00006364 003d0f00 76b2f0bc [ 1714.084638][T16502] 1fe0: 00000158 76b2eed0 000d8408 00130d94 [ 1714.277220][ T31] audit: type=1400 audit(1714.190:13395): avc: denied { connect } for pid=16503 comm="syz.0.4432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1718.732491][ T31] audit: type=1400 audit(1718.650:13396): avc: denied { mount } for pid=16519 comm="syz.0.4438" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1718.864515][T16523] FAULT_INJECTION: forcing a failure. [ 1718.864515][T16523] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.865087][T16523] CPU: 0 UID: 0 PID: 16523 Comm: syz.0.4439 Not tainted 6.12.0-rc2-syzkaller #0 [ 1718.865452][T16523] Hardware name: ARM-Versatile Express [ 1718.865694][T16523] Call trace: [ 1718.865907][T16523] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1718.866401][T16523] r7:00000d40 r6:852620e8 r5:60000013 r4:8203d408 [ 1718.866638][T16523] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1718.867004][T16523] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1718.867331][T16523] r5:00000000 r4:8271925c [ 1718.867516][T16523] [<819b77ac>] (dump_stack) from [<808e548c>] (should_fail_ex+0x18c/0x1dc) [ 1718.867864][T16523] [<808e5300>] (should_fail_ex) from [<804e8218>] (should_failslab+0x6c/0x94) [ 1718.868475][T16523] r6:852620e8 r5:00000019 r4:82c01240 [ 1718.869010][T16523] [<804e81ac>] (should_failslab) from [<804cd638>] (__kmalloc_noprof+0x9c/0x458) [ 1718.869476][T16523] [<804cd59c>] (__kmalloc_noprof) from [<80750ef0>] (tomoyo_encode2+0x64/0xf0) [ 1718.869818][T16523] r10:00000fff r9:82c9fc00 r8:00000000 r7:84cb9e58 r6:852620e8 r5:848c5ffd [ 1718.870061][T16523] r4:848c5fef [ 1718.870177][T16523] [<80750e8c>] (tomoyo_encode2) from [<80750fa0>] (tomoyo_encode+0x24/0x30) [ 1718.870441][T16523] r9:82c9fc00 r8:00000000 r7:84cb9e58 r6:852620e8 r5:00001000 r4:848c5ff0 [ 1718.870654][T16523] [<80750f7c>] (tomoyo_encode) from [<8075102c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1718.870910][T16523] r5:00001000 r4:848c5000 [ 1718.871042][T16523] [<80750fac>] (tomoyo_realpath_from_path) from [<8074d12c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1718.871346][T16523] r10:83efbc00 r9:00000000 r8:00000003 r7:00008940 r6:00000004 r5:81ad1828 [ 1718.871556][T16523] r4:852620e8 r3:824ba340 [ 1718.871679][T16523] [<8074d060>] (tomoyo_path_number_perm) from [<807519f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 1718.871947][T16523] r9:852620c0 r8:00000003 r7:00000000 r6:00000000 r5:00008940 r4:852620c0 [ 1718.872145][T16523] [<807519dc>] (tomoyo_file_ioctl) from [<80700044>] (security_file_ioctl+0x64/0x1e4) [ 1718.872395][T16523] [<806fffe0>] (security_file_ioctl) from [<8052f600>] (sys_ioctl+0x50/0xda8) [ 1718.872654][T16523] r7:00000000 r6:852620c1 r5:00000000 r4:00008940 [ 1718.872853][T16523] [<8052f5b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1718.873079][T16523] Exception stack(0xee77dfa8 to 0xee77dff0) [ 1718.873245][T16523] dfa0: 00000000 00000000 00000003 00008940 00000000 00000000 [ 1718.873466][T16523] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b2f0bc [ 1718.873672][T16523] dfe0: 76b2eec0 76b2eeb0 00018af8 00132ec0 [ 1718.873837][T16523] r10:00000036 r9:83efbc00 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 1718.874063][T16523] r4:00000000 [ 1718.889179][T16523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1720.215757][T16541] FAULT_INJECTION: forcing a failure. [ 1720.215757][T16541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.216833][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.0.4447 Not tainted 6.12.0-rc2-syzkaller #0 [ 1720.217439][T16541] Hardware name: ARM-Versatile Express [ 1720.217688][T16541] Call trace: [ 1720.217911][T16541] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1720.218447][T16541] r7:00000000 r6:00000000 r5:60000013 r4:8203d408 [ 1720.218875][T16541] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1720.219310][T16541] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1720.219678][T16541] r5:00000000 r4:8274e844 [ 1720.219897][T16541] [<819b77ac>] (dump_stack) from [<808e548c>] (should_fail_ex+0x18c/0x1dc) [ 1720.220334][T16541] [<808e5300>] (should_fail_ex) from [<808e54f0>] (should_fail+0x14/0x18) [ 1720.220754][T16541] r6:00000000 r5:ee82df68 r4:00000002 [ 1720.221079][T16541] [<808e54dc>] (should_fail) from [<808e5510>] (should_fail_usercopy+0x1c/0x20) [ 1720.221479][T16541] [<808e54f4>] (should_fail_usercopy) from [<8054e70c>] (simple_read_from_buffer+0x8c/0x134) [ 1720.221915][T16541] [<8054e680>] (simple_read_from_buffer) from [<805c320c>] (proc_fail_nth_read+0xb8/0x100) [ 1720.222392][T16541] r10:00000001 r9:805c3154 r8:00000002 r7:ee82df68 r6:0000000f r5:76b2ef30 [ 1720.222804][T16541] r4:83efa400 r3:ee82de9f [ 1720.223054][T16541] [<805c3154>] (proc_fail_nth_read) from [<80515e6c>] (vfs_read+0x98/0x324) [ 1720.223466][T16541] r8:76b2ef30 r7:ee82df68 r6:83efa400 r5:0000000f r4:843b7600 [ 1720.223788][T16541] [<80515dd4>] (vfs_read) from [<80516b1c>] (ksys_read+0x78/0xf8) [ 1720.224183][T16541] r10:00000003 r9:83efa400 r8:8020029c r7:00000000 r6:00000000 r5:843b7600 [ 1720.224532][T16541] r4:843b7603 [ 1720.224743][T16541] [<80516aa4>] (ksys_read) from [<80516bac>] (sys_read+0x10/0x14) [ 1720.225196][T16541] r7:00000003 r6:00000003 r5:76b2ef30 r4:0000000f [ 1720.225487][T16541] [<80516b9c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1720.225873][T16541] Exception stack(0xee82dfa8 to 0xee82dff0) [ 1720.226191][T16541] dfa0: 0000000f 76b2ef30 00000003 76b2ef30 0000000f 00000000 [ 1720.226540][T16541] dfc0: 0000000f 76b2ef30 00000003 00000003 00000000 00006364 003d0f00 76b2f0bc [ 1720.226907][T16541] dfe0: 00000158 76b2eed0 000d8408 00130d94 [ 1720.890723][T16544] FAULT_INJECTION: forcing a failure. [ 1720.890723][T16544] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.893096][T16544] CPU: 1 UID: 0 PID: 16544 Comm: syz.0.4448 Not tainted 6.12.0-rc2-syzkaller #0 [ 1720.893512][T16544] Hardware name: ARM-Versatile Express [ 1720.893771][T16544] Call trace: [ 1720.894056][T16544] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1720.894717][T16544] r7:83efb000 r6:00000cc0 r5:60000013 r4:8203d408 [ 1720.895044][T16544] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1720.895440][T16544] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1720.895857][T16544] r5:00000000 r4:8271925c [ 1720.896105][T16544] [<819b77ac>] (dump_stack) from [<808e548c>] (should_fail_ex+0x18c/0x1dc) [ 1720.896476][T16544] [<808e5300>] (should_fail_ex) from [<804e8218>] (should_failslab+0x6c/0x94) [ 1720.896967][T16544] r6:00000cc0 r5:20000140 r4:82ca8b40 [ 1720.897191][T16544] [<804e81ac>] (should_failslab) from [<804cd2b4>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1720.897592][T16544] [<804cd268>] (kmem_cache_alloc_noprof) from [<80524fc4>] (getname_flags.part.0+0x28/0x18c) [ 1720.898408][T16544] r10:000000e3 r9:83efb000 r8:ee85de64 r7:00000000 r6:8223783c r5:20000140 [ 1720.898956][T16544] r4:20000140 [ 1720.899313][T16544] [<80524f9c>] (getname_flags.part.0) from [<8052a080>] (getname_flags+0x3c/0x50) [ 1720.899748][T16544] r9:83efb000 r8:ee85de64 r7:00000000 r6:ffffff9c r5:00000000 r4:20000140 [ 1720.900111][T16544] [<8052a044>] (getname_flags) from [<8052a5e8>] (user_path_at+0x2c/0x64) [ 1720.900489][T16544] r5:00000000 r4:ee85de48 [ 1720.900708][T16544] [<8052a5bc>] (user_path_at) from [<8054c7ac>] (path_setxattr+0x8c/0x124) [ 1720.901155][T16544] r6:00000000 r5:20000140 r4:00000000 [ 1720.901425][T16544] [<8054c720>] (path_setxattr) from [<8054c9d4>] (sys_lsetxattr+0x24/0x2c) [ 1720.901826][T16544] r8:8020029c r7:000000e3 r6:00130e70 r5:00000000 r4:00000002 [ 1720.902207][T16544] [<8054c9b0>] (sys_lsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1720.902628][T16544] Exception stack(0xee85dfa8 to 0xee85dff0) [ 1720.902959][T16544] dfa0: 00000002 00000000 20000140 20000200 00000000 00000000 [ 1720.903407][T16544] dfc0: 00000002 00000000 00130e70 000000e3 00000000 00006364 003d0f00 76b0e0bc [ 1720.903797][T16544] dfe0: 76b0dec0 76b0deb0 00018af8 00132ec0 [ 1723.476197][ T31] audit: type=1400 audit(1723.390:13397): avc: denied { create } for pid=16551 comm="syz.0.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 1726.556174][T16585] FAULT_INJECTION: forcing a failure. [ 1726.556174][T16585] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.557002][T16585] CPU: 1 UID: 0 PID: 16585 Comm: syz.0.4463 Not tainted 6.12.0-rc2-syzkaller #0 [ 1726.557406][T16585] Hardware name: ARM-Versatile Express [ 1726.557677][T16585] Call trace: [ 1726.557922][T16585] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1726.560498][T16585] r7:00000cc0 r6:00000007 r5:60000013 r4:8203d408 [ 1726.562055][T16585] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1726.564001][T16585] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1726.566353][T16585] r5:00000000 r4:8271925c [ 1726.566604][T16585] [<819b77ac>] (dump_stack) from [<808e548c>] (should_fail_ex+0x18c/0x1dc) [ 1726.567132][T16585] [<808e5300>] (should_fail_ex) from [<804e8218>] (should_failslab+0x6c/0x94) [ 1726.569913][T16585] r6:00000007 r5:00000007 r4:82c01240 [ 1726.571464][T16585] [<804e81ac>] (should_failslab) from [<804ce2ec>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 1726.575556][T16585] [<804ce24c>] (__kmalloc_node_track_caller_noprof) from [<8046cdb0>] (kstrdup+0x38/0x5c) [ 1726.579042][T16585] r10:83efd400 r9:8571eb40 r8:826f6564 r7:802f9700 r6:00000007 r5:00000cc0 [ 1726.582241][T16585] r4:df985e20 [ 1726.583540][T16585] [<8046cd78>] (kstrdup) from [<802f9700>] (__request_module+0xfc/0x2c0) [ 1726.586162][T16585] r7:83efd400 r6:814849e4 r5:00000002 r4:83843080 [ 1726.586527][T16585] [<802f9604>] (__request_module) from [<814849e4>] (br_ioctl_call+0x94/0xa0) [ 1726.586990][T16585] r3:00000000 r2:00008940 r1:821be22c [ 1726.587301][T16585] r8:00000000 r7:00008940 r6:00000000 r5:844e1a00 r4:82920e90 [ 1726.587654][T16585] [<81484950>] (br_ioctl_call) from [<81484cb0>] (sock_ioctl+0x2c0/0x608) [ 1726.588536][T16585] r8:00000003 r7:84c24500 r6:844e1a00 r5:00000000 r4:00008940 [ 1726.589250][T16585] [<814849f0>] (sock_ioctl) from [<8052f6e4>] (sys_ioctl+0x134/0xda8) [ 1726.589734][T16585] r9:8571eb40 r8:00000003 r7:00000000 r6:8571eb41 r5:00000000 r4:00008940 [ 1726.590172][T16585] [<8052f5b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1726.590582][T16585] Exception stack(0xdf985fa8 to 0xdf985ff0) [ 1726.590897][T16585] 5fa0: 00000000 00000000 00000003 00008940 00000000 00000000 [ 1726.591318][T16585] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b2f0bc [ 1726.591688][T16585] 5fe0: 76b2eec0 76b2eeb0 00018af8 00132ec0 [ 1726.591968][T16585] r10:00000036 r9:83efd400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 1726.592430][T16585] r4:00000000 [ 1727.141609][ T31] audit: type=1400 audit(1727.060:13398): avc: denied { connect } for pid=16590 comm="syz.0.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1732.854307][ T31] audit: type=1400 audit(1732.760:13399): avc: denied { execute } for pid=16601 comm="syz-executor" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1732.855354][ T31] audit: type=1400 audit(1732.770:13400): avc: denied { execute_no_trans } for pid=16601 comm="syz-executor" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1732.896537][ T31] audit: type=1400 audit(1732.810:13401): avc: denied { mounton } for pid=16603 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1733.239225][ T9249] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 1733.369145][ T9249] usb 1-1: device descriptor read/64, error -71 [ 1733.619103][ T9249] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 1733.749064][ T9249] usb 1-1: device descriptor read/64, error -71 [ 1733.869036][ T9249] usb usb1-port1: attempt power cycle [ 1734.212187][ T9249] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 1734.251711][ T9249] usb 1-1: device descriptor read/8, error -71 [ 1734.488834][ T9249] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1734.514386][ T9249] usb 1-1: device descriptor read/8, error -71 [ 1734.620109][ T9249] usb usb1-port1: unable to enumerate USB device [ 1735.259758][T16603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.266550][T16603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.269792][T16603] hsr_slave_0: entered promiscuous mode [ 1736.273244][T16603] hsr_slave_1: entered promiscuous mode [ 1736.277356][T16603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1736.281123][T16603] Cannot create hsr debugfs directory [ 1736.537248][T16603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.589279][T16603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.643841][T16603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.699907][T16603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.795065][T16603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1736.802928][T16603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1736.809454][T16603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1736.825570][T16603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1737.511623][T16603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.901897][T16603] veth0_vlan: entered promiscuous mode [ 1740.920409][T16603] veth1_vlan: entered promiscuous mode [ 1740.975605][T16603] veth0_macvtap: entered promiscuous mode [ 1740.985757][T16603] veth1_macvtap: entered promiscuous mode [ 1741.045021][T16603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.045583][T16603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.046884][T16603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.049242][T16603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.159001][ T31] audit: type=1400 audit(1741.070:13402): avc: denied { mounton } for pid=16603 comm="syz-executor" path="/syzkaller.wAg9BI/syz-tmp" dev="vda" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1741.178684][ T31] audit: type=1400 audit(1741.090:13403): avc: denied { mounton } for pid=16603 comm="syz-executor" path="/syzkaller.wAg9BI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1741.182931][ T31] audit: type=1400 audit(1741.100:13404): avc: denied { mounton } for pid=16603 comm="syz-executor" path="/syzkaller.wAg9BI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1741.196853][ T31] audit: type=1400 audit(1741.110:13405): avc: denied { unmount } for pid=16603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1741.203788][ T31] audit: type=1400 audit(1741.120:13406): avc: denied { mounton } for pid=16603 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1741.205834][ T31] audit: type=1400 audit(1741.120:13407): avc: denied { mount } for pid=16603 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1741.213440][ T31] audit: type=1400 audit(1741.130:13408): avc: denied { mounton } for pid=16603 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1741.579248][T11806] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1741.759419][T11806] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1741.759834][T11806] usb 2-1: can't read configurations, error -71 [ 1742.282803][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4475'. [ 1743.271107][ T31] audit: type=1400 audit(1743.190:13409): avc: denied { map } for pid=16979 comm="syz.0.4477" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1744.063051][T16993] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 1744.064346][ T31] audit: type=1400 audit(1743.980:13410): avc: denied { relabelto } for pid=16992 comm="syz.1.4481" name="MPTCPv6" dev="sockfs" ino=43015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:nvram_device_t:s0" [ 1744.342532][ T31] audit: type=1400 audit(1744.260:13411): avc: denied { write } for pid=16996 comm="syz.1.4483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1748.142599][T17041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17041 comm=syz.0.4495 [ 1751.594556][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1751.594667][ T31] audit: type=1400 audit(1751.510:13413): avc: denied { ioctl } for pid=17056 comm="syz.1.4500" path="socket:[43136]" dev="sockfs" ino=43136 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1761.711952][ T31] audit: type=1400 audit(1761.630:13414): avc: denied { create } for pid=17100 comm="syz.1.4515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1762.022764][ T31] audit: type=1400 audit(1761.940:13415): avc: denied { setopt } for pid=17100 comm="syz.1.4515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1762.328722][ T31] audit: type=1400 audit(1762.230:13416): avc: denied { create } for pid=17109 comm="syz.1.4517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1762.549375][T17110] mmap: syz.1.4517 (17110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1762.953176][ T31] audit: type=1400 audit(1762.870:13417): avc: denied { setattr } for pid=17116 comm="syz.1.4519" name="fscreate" dev="proc" ino=43200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1769.117876][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.126266][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1769.144318][T14979] bond0 (unregistering): Released all slaves [ 1769.235099][T14979] hsr_slave_0: left promiscuous mode [ 1769.242351][T14979] hsr_slave_1: left promiscuous mode [ 1769.253353][T14979] veth1_macvtap: left promiscuous mode [ 1769.253913][T14979] veth0_macvtap: left promiscuous mode [ 1769.254389][T14979] veth1_vlan: left promiscuous mode [ 1769.254708][T14979] veth0_vlan: left promiscuous mode [ 1781.052893][ T31] audit: type=1400 audit(1780.970:13418): avc: denied { execute } for pid=17274 comm="syz.1.4546" path="/dev/snd/timer" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1782.212147][T17193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1782.216875][T17193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1782.638983][T17396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17396 comm=syz.1.4549 [ 1782.935764][ T31] audit: type=1400 audit(1782.850:13419): avc: denied { name_bind } for pid=17401 comm="syz.1.4550" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1782.940568][ T31] audit: type=1400 audit(1782.860:13420): avc: denied { node_bind } for pid=17401 comm="syz.1.4550" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1783.465294][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1783.467228][T17193] hsr_slave_0: entered promiscuous mode [ 1783.507301][T17193] hsr_slave_1: entered promiscuous mode [ 1783.514882][T17193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1783.515385][T17193] Cannot create hsr debugfs directory [ 1783.836117][T17193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.926233][T17193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.990035][T17193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.051476][T17193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.176306][T17193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1784.193008][T17193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1784.208826][T17193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1784.216134][T17193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1785.150634][T17193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1785.612031][ T31] audit: type=1400 audit(1785.530:13421): avc: denied { setattr } for pid=17550 comm="syz.1.4551" name="loop9" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1785.864838][ T31] audit: type=1400 audit(1785.780:13422): avc: denied { append } for pid=17550 comm="syz.1.4551" name="mice" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0" [ 1786.070404][T17193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1789.717444][T17193] veth0_vlan: entered promiscuous mode [ 1789.751291][T17193] veth1_vlan: entered promiscuous mode [ 1789.846686][T17193] veth0_macvtap: entered promiscuous mode [ 1789.877644][T17193] veth1_macvtap: entered promiscuous mode [ 1790.037374][T17193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.041545][T17193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.042265][T17193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.043217][T17193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.099574][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.100527][T17653] syz.1.4567: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1793.102141][T17653] CPU: 1 UID: 0 PID: 17653 Comm: syz.1.4567 Not tainted 6.12.0-rc2-syzkaller #0 [ 1793.102509][T17653] Hardware name: ARM-Versatile Express [ 1793.102820][T17653] Call trace: [ 1793.103076][T17653] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1793.103573][T17653] r7:ff800000 r6:82056278 r5:60000113 r4:8203d408 [ 1793.103889][T17653] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1793.104358][T17653] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1793.105104][T17653] r5:83d96000 r4:00000000 [ 1793.105350][T17653] [<819b77ac>] (dump_stack) from [<804bf488>] (warn_alloc+0xd8/0x178) [ 1793.105739][T17653] [<804bf3b0>] (warn_alloc) from [<804b1ad4>] (__vmalloc_node_range_noprof+0xcc/0x55c) [ 1793.106212][T17653] r3:20000000 r2:82056278 [ 1793.106453][T17653] r6:00000dc0 r5:00000001 r4:20000000 [ 1793.106714][T17653] [<804b1a08>] (__vmalloc_node_range_noprof) from [<8046d408>] (__kvmalloc_node_noprof+0xc0/0x110) [ 1793.107204][T17653] r10:eb521d00 r9:85775400 r8:8163ea00 r7:ffffffff r6:00000dc0 r5:20000000 [ 1793.107499][T17653] r4:00000000 [ 1793.107658][T17653] [<8046d348>] (__kvmalloc_node_noprof) from [<8163ea00>] (xt_alloc_entry_offsets+0x24/0x30) [ 1793.108279][T17653] r8:b5403587 r7:00000000 r6:20000360 r5:85775440 r4:08000000 [ 1793.108895][T17653] [<8163e9dc>] (xt_alloc_entry_offsets) from [<816f86c0>] (translate_table+0x70/0x78c) [ 1793.109407][T17653] [<816f8650>] (translate_table) from [<816f986c>] (do_replace+0xe8/0x5a0) [ 1793.110048][T17653] r10:00000126 r9:85775440 r8:b5403587 r7:00000238 r6:20000360 r5:85775400 [ 1793.110551][T17653] r4:84759a00 [ 1793.110770][T17653] [<816f9784>] (do_replace) from [<816f9e58>] (do_ipt_set_ctl+0x134/0x2a0) [ 1793.111153][T17653] r10:00000126 r9:814876a0 r8:00000298 r7:85097ec8 r6:eb521da8 r5:8513dd00 [ 1793.111482][T17653] r4:00000040 [ 1793.111654][T17653] [<816f9d24>] (do_ipt_set_ctl) from [<815cbc44>] (nf_setsockopt+0x60/0x7c) [ 1793.112058][T17653] r10:00000126 r9:814876a0 r8:00000298 r7:85097ec8 r6:8513dd00 r5:816f9d24 [ 1793.112389][T17653] r4:827e30a0 [ 1793.112562][T17653] [<815cbbe8>] (nf_setsockopt) from [<816647fc>] (ip_setsockopt+0x88/0x98) [ 1793.112989][T17653] r6:8513dd00 r5:00000298 r4:00000040 [ 1793.113231][T17653] [<81664778>] (ip_setsockopt) from [<81674b60>] (tcp_setsockopt+0x3c/0x58) [ 1793.113602][T17653] r6:00000000 r5:85097a80 r4:81664774 [ 1793.113859][T17653] [<81674b28>] (tcp_setsockopt) from [<814876d8>] (sock_common_setsockopt+0x38/0x40) [ 1793.114252][T17653] r4:81674b24 [ 1793.114417][T17653] [<814876a4>] (sock_common_setsockopt) from [<818a201c>] (smc_setsockopt+0xac/0x3cc) [ 1793.114822][T17653] r4:00000040 [ 1793.115006][T17653] [<818a1f74>] (smc_setsockopt) from [<81482d34>] (do_sock_setsockopt+0xb0/0x17c) [ 1793.115406][T17653] r9:83d96000 r8:8020029c r7:00000000 r6:84c93900 r5:00000000 r4:818a1f70 [ 1793.115718][T17653] [<81482c84>] (do_sock_setsockopt) from [<814861f8>] (sys_setsockopt+0x78/0xbc) [ 1793.116349][T17653] r6:84c93900 r5:00000040 r4:00000000 [ 1793.116746][T17653] [<81486180>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1793.117406][T17653] Exception stack(0xeb521fa8 to 0xeb521ff0) [ 1793.117667][T17653] 1fa0: 00000298 00000000 0000000a 00000000 00000040 20000300 [ 1793.118289][T17653] 1fc0: 00000298 00000000 00286388 00000126 00000000 00006364 003d0f00 76b6f0bc [ 1793.118938][T17653] 1fe0: 76b6eec0 76b6eeb0 00018af8 00132ec0 [ 1793.119267][T17653] r7:00000126 r6:00286388 r5:00000000 r4:00000298 [ 1793.122265][T17653] Mem-Info: [ 1793.122965][T17653] active_anon:9743 inactive_anon:0 isolated_anon:0 [ 1793.122965][T17653] active_file:64 inactive_file:39987 isolated_file:0 [ 1793.122965][T17653] unevictable:768 dirty:25 writeback:0 [ 1793.122965][T17653] slab_reclaimable:1061 slab_unreclaimable:7045 [ 1793.122965][T17653] mapped:1792 shmem:9186 pagetables:230 [ 1793.122965][T17653] sec_pagetables:0 bounce:0 [ 1793.122965][T17653] kernel_misc_reclaimable:0 [ 1793.122965][T17653] free:428774 free_pcp:366 free_cma:4029 [ 1793.129050][T17653] Node 0 active_anon:38972kB inactive_anon:0kB active_file:256kB inactive_file:159948kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:7168kB dirty:100kB writeback:0kB shmem:36744kB writeback_tmp:0kB kernel_stack:1640kB pagetables:920kB sec_pagetables:0kB all_unreclaimable? no [ 1793.130867][T17653] Normal free:1384492kB boost:0kB min:4776kB low:6200kB high:7624kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:3008kB unevictable:0kB writepending:68kB present:1556480kB managed:1430020kB mlocked:0kB bounce:0kB free_pcp:1464kB local_pcp:656kB free_cma:0kB [ 1793.132549][T17653] lowmem_reserve[]: 0 4224 0 [ 1793.133050][T17653] Normal: 5*4kB (UME) 11*8kB (UME) 10*16kB (ME) 7*32kB (UE) 9*64kB (UME) 4*128kB (UE) 2*256kB (UM) 2*512kB (M) 5*1024kB (ME) 4*2048kB (UME) 334*4096kB (UM) = 1384492kB [ 1793.134530][T17653] 49239 total pagecache pages [ 1793.134779][T17653] 0 pages in swap cache [ 1793.135062][T17653] Free swap = 124996kB [ 1793.135343][T17653] Total swap = 124996kB [ 1793.135617][T17653] 524288 pages RAM [ 1793.135812][T17653] 135168 pages HighMem/MovableOnly [ 1793.136188][T17653] 31615 pages reserved [ 1793.136407][T17653] 4096 pages cma reserved [ 1793.147833][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.155797][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.157085][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.159364][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.160582][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.161500][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.162286][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.163150][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1793.164011][T17653] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1795.975012][T17723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17723 comm=syz.0.4583 [ 1795.977131][T17723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17723 comm=syz.0.4583 [ 1799.002381][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 1799.002472][ T31] audit: type=1400 audit(1798.920:13428): avc: denied { setopt } for pid=17761 comm="syz.1.4591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1804.151380][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1804.179655][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.197779][T14979] bond0 (unregistering): Released all slaves [ 1804.289639][T14979] hsr_slave_0: left promiscuous mode [ 1804.292152][T14979] hsr_slave_1: left promiscuous mode [ 1804.300505][T14979] veth1_macvtap: left promiscuous mode [ 1804.301051][T14979] veth0_macvtap: left promiscuous mode [ 1804.301609][T14979] veth0_vlan: left promiscuous mode [ 1809.987945][T17906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64260 sclass=netlink_route_socket pid=17906 comm=syz.0.4615 [ 1819.399195][ T31] audit: type=1400 audit(1819.320:13429): avc: denied { connect } for pid=17953 comm="syz.1.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1819.496895][ T31] audit: type=1400 audit(1819.410:13430): avc: denied { create } for pid=17991 comm="syz.1.4631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1820.759291][ T31] audit: type=1400 audit(1820.670:13431): avc: denied { setattr } for pid=18008 comm="syz.1.4635" name="L2TP/IP" dev="sockfs" ino=45170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1822.289326][ T31] audit: type=1400 audit(1822.200:13432): avc: denied { mount } for pid=18041 comm="syz.1.4644" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1822.318570][ T31] audit: type=1400 audit(1822.230:13433): avc: denied { accept } for pid=18041 comm="syz.1.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1822.331223][ T31] audit: type=1326 audit(1822.240:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18041 comm="syz.1.4644" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 1822.332000][ T31] audit: type=1326 audit(1822.240:13435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18041 comm="syz.1.4644" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 1822.332647][ T31] audit: type=1326 audit(1822.240:13436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18041 comm="syz.1.4644" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 1822.333869][ T31] audit: type=1326 audit(1822.240:13437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18041 comm="syz.1.4644" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 1822.334426][ T31] audit: type=1326 audit(1822.240:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18041 comm="syz.1.4644" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 1822.352066][T18042] syz.1.4644 (18042): drop_caches: 0 [ 1824.686257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1830.484650][T18102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18102 comm=syz.1.4664 [ 1834.110280][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1834.110391][ T31] audit: type=1400 audit(1834.030:13457): avc: denied { accept } for pid=18125 comm="syz.1.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1838.960846][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1839.071276][T18177] gretap0: entered allmulticast mode [ 1839.103332][ T31] audit: type=1400 audit(1839.020:13458): avc: denied { write } for pid=18176 comm="syz.0.4682" path="socket:[46324]" dev="sockfs" ino=46324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1839.273907][ T31] audit: type=1400 audit(1839.190:13459): avc: granted { setsecparam } for pid=18178 comm="syz.1.4683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1839.419204][ T31] audit: type=1400 audit(1839.330:13460): avc: denied { setopt } for pid=18187 comm="syz.0.4685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1840.284132][ T31] audit: type=1400 audit(1840.200:13461): avc: denied { sqpoll } for pid=18215 comm="syz.0.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1841.020372][ T31] audit: type=1400 audit(1840.940:13462): avc: denied { bind } for pid=18221 comm="syz.1.4699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1841.022079][ T31] audit: type=1400 audit(1840.940:13463): avc: denied { name_bind } for pid=18221 comm="syz.1.4699" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1841.022801][ T31] audit: type=1400 audit(1840.940:13464): avc: denied { node_bind } for pid=18221 comm="syz.1.4699" saddr=10.1.1.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1841.404039][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1848.689155][T18315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18315 comm=syz.1.4726 [ 1849.471175][T18316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18316 comm=syz.1.4726 [ 1852.586181][T18349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18349 comm=syz.1.4736 [ 1854.389226][ T7963] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1854.614618][ T7963] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1854.615213][ T7963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.615542][ T7963] usb 2-1: Product: syz [ 1854.615760][ T7963] usb 2-1: Manufacturer: syz [ 1854.615993][ T7963] usb 2-1: SerialNumber: syz [ 1855.353678][ T31] audit: type=1400 audit(1855.270:13465): avc: denied { map } for pid=18387 comm="syz.0.4745" path="socket:[46633]" dev="sockfs" ino=46633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1861.834598][ T31] audit: type=1400 audit(1861.750:13466): avc: denied { load_policy } for pid=18415 comm="syz.0.4753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1861.837102][T18416] SELinux: policydb version -486697635 does not match my version range 15-33 [ 1861.837865][T18416] SELinux: failed to load policy [ 1864.144603][ T8] usb 2-1: USB disconnect, device number 15 [ 1864.637549][ T31] audit: type=1400 audit(1864.550:13467): avc: denied { read } for pid=18439 comm="syz.0.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1866.491197][T18447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18447 comm=syz.0.4759 [ 1866.764234][T18450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18450 comm=syz.0.4759 [ 1867.514312][T18469] FAULT_INJECTION: forcing a failure. [ 1867.514312][T18469] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.514970][T18469] CPU: 0 UID: 0 PID: 18469 Comm: syz.0.4763 Not tainted 6.12.0-rc2-syzkaller #0 [ 1867.515345][T18469] Hardware name: ARM-Versatile Express [ 1867.515592][T18469] Call trace: [ 1867.515797][T18469] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1867.516193][T18469] r7:00000d40 r6:8605f6e8 r5:60000013 r4:8203d408 [ 1867.516449][T18469] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1867.516857][T18469] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1867.517229][T18469] r5:00000000 r4:8271925c [ 1867.517431][T18469] [<819b77ac>] (dump_stack) from [<808e548c>] (should_fail_ex+0x18c/0x1dc) [ 1867.517805][T18469] [<808e5300>] (should_fail_ex) from [<804e8218>] (should_failslab+0x6c/0x94) [ 1867.518572][T18469] r6:8605f6e8 r5:00000021 r4:82c01240 [ 1867.518930][T18469] [<804e81ac>] (should_failslab) from [<804cd638>] (__kmalloc_noprof+0x9c/0x458) [ 1867.519524][T18469] [<804cd59c>] (__kmalloc_noprof) from [<80750ef0>] (tomoyo_encode2+0x64/0xf0) [ 1867.519979][T18469] r10:00000fff r9:8340e800 r8:00000000 r7:84c57880 r6:8605f6e8 r5:84ac5ffd [ 1867.520327][T18469] r4:84ac5fe7 [ 1867.520517][T18469] [<80750e8c>] (tomoyo_encode2) from [<80750fa0>] (tomoyo_encode+0x24/0x30) [ 1867.521477][T18469] r9:8340e800 r8:00000000 r7:84c57880 r6:8605f6e8 r5:00001000 r4:84ac5fe8 [ 1867.522220][T18469] [<80750f7c>] (tomoyo_encode) from [<8075102c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1867.523469][T18469] r5:00001000 r4:84ac5000 [ 1867.523715][T18469] [<80750fac>] (tomoyo_realpath_from_path) from [<8074d12c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1867.524179][T18469] r10:83d90c00 r9:00000000 r8:00000003 r7:c0405405 r6:00000004 r5:81ad1828 [ 1867.524520][T18469] r4:8605f6e8 r3:824ba340 [ 1867.524753][T18469] [<8074d060>] (tomoyo_path_number_perm) from [<807519f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 1867.525215][T18469] r9:8605f6c0 r8:00000003 r7:00000000 r6:00000000 r5:c0405405 r4:8605f6c0 [ 1867.525537][T18469] [<807519dc>] (tomoyo_file_ioctl) from [<80700044>] (security_file_ioctl+0x64/0x1e4) [ 1867.525965][T18469] [<806fffe0>] (security_file_ioctl) from [<8052f600>] (sys_ioctl+0x50/0xda8) [ 1867.526381][T18469] r7:00000000 r6:8605f6c1 r5:00000000 r4:c0405405 [ 1867.526664][T18469] [<8052f5b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1867.527052][T18469] Exception stack(0xdfa85fa8 to 0xdfa85ff0) [ 1867.527334][T18469] 5fa0: 00000000 00000000 00000003 c0405405 00000000 00000000 [ 1867.527725][T18469] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b110bc [ 1867.528770][T18469] 5fe0: 76b10ec0 76b10eb0 00018af8 00132ec0 [ 1867.529456][T18469] r10:00000036 r9:83d90c00 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 1867.530432][T18469] r4:00000000 [ 1867.554161][T18469] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1867.599526][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1867.739018][ T8] usb 2-1: device descriptor read/64, error -71 [ 1867.989091][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1868.119127][ T8] usb 2-1: device descriptor read/64, error -71 [ 1868.231032][ T8] usb usb2-port1: attempt power cycle [ 1868.579082][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1868.601721][ T8] usb 2-1: device descriptor read/8, error -71 [ 1868.839142][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1868.871611][ T8] usb 2-1: device descriptor read/8, error -71 [ 1868.979659][ T8] usb usb2-port1: unable to enumerate USB device [ 1873.649143][ T31] audit: type=1400 audit(1873.570:13468): avc: denied { execute } for pid=18517 comm="syz.0.4782" path="/dev/rtc2" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1873.837474][ T31] audit: type=1400 audit(1873.750:13469): avc: denied { getopt } for pid=18521 comm="syz.0.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1874.676340][ T31] audit: type=1400 audit(1874.590:13470): avc: denied { getopt } for pid=18532 comm="syz.0.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1878.735551][T18571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18571 comm=syz.0.4804 [ 1879.490078][T18587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18587 comm=syz.0.4810 [ 1880.273727][T18605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18605 comm=syz.0.4816 [ 1887.292916][ T31] audit: type=1400 audit(1887.210:13471): avc: denied { setattr } for pid=18712 comm="syz.0.4838" name="NETLINK" dev="sockfs" ino=48160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1887.447160][ T31] audit: type=1400 audit(1887.360:13472): avc: denied { getopt } for pid=18712 comm="syz.0.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1887.494434][ T31] audit: type=1400 audit(1887.410:13473): avc: denied { write } for pid=18712 comm="syz.0.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1889.898606][ T31] audit: type=1400 audit(1889.810:13474): avc: denied { bind } for pid=18739 comm="syz.0.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1889.905578][ T31] audit: type=1400 audit(1889.820:13475): avc: denied { getopt } for pid=18739 comm="syz.0.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1895.474790][T18808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18808 comm=syz.0.4863 [ 1895.499060][T18808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18808 comm=syz.0.4863 [ 1896.044354][T18819] sctp: [Deprecated]: syz.0.4867 (pid 18819) Use of int in maxseg socket option. [ 1896.044354][T18819] Use struct sctp_assoc_value instead [ 1896.771551][ T31] audit: type=1400 audit(1896.690:13476): avc: granted { setsecparam } for pid=18823 comm="syz.0.4869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1897.550681][ T31] audit: type=1400 audit(1897.470:13477): avc: denied { accept } for pid=18834 comm="syz.1.4873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1899.386977][ T31] audit: type=1800 audit(1899.300:13478): pid=18848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.4876" name="/newroot/178/file0" dev="tmpfs" ino=960 res=0 errno=0 [ 1943.347016][ T31] audit: type=1400 audit(1943.260:13479): avc: denied { nlmsg_write } for pid=18868 comm="syz.0.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1943.441892][ T31] audit: type=1400 audit(1943.360:13480): avc: denied { read } for pid=18870 comm="syz.1.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1944.418505][ T31] audit: type=1400 audit(1944.330:13481): avc: denied { shutdown } for pid=18885 comm="syz.0.4888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1946.448712][ T31] audit: type=1400 audit(1946.360:13482): avc: denied { shutdown } for pid=18898 comm="syz.1.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1946.452893][ T31] audit: type=1400 audit(1946.370:13483): avc: denied { read } for pid=18898 comm="syz.1.4893" path="socket:[47839]" dev="sockfs" ino=47839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1946.966583][ T31] audit: type=1400 audit(1946.880:13484): avc: denied { write } for pid=18898 comm="syz.1.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1947.707106][ T31] audit: type=1400 audit(1947.620:13485): avc: denied { lock } for pid=18920 comm="syz.0.4896" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1947.901635][ T31] audit: type=1400 audit(1947.820:13486): avc: denied { getopt } for pid=18922 comm="syz.0.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1948.004085][ T31] audit: type=1400 audit(1947.920:13487): avc: denied { setattr } for pid=18922 comm="syz.0.4897" path="socket:[47854]" dev="sockfs" ino=47854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1948.219746][ T31] audit: type=1400 audit(1948.140:13488): avc: denied { accept } for pid=18924 comm="syz.0.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1949.407025][T18946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18946 comm=syz.1.4903 [ 1951.987601][T18961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18961 comm=syz.1.4907 [ 1954.048939][T18981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18981 comm=syz.0.4915 [ 1954.052863][T18981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18981 comm=syz.0.4915 [ 1954.866719][ T31] audit: type=1400 audit(1954.780:13489): avc: denied { nlmsg_write } for pid=18990 comm="syz.0.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1954.873757][ T31] audit: type=1400 audit(1954.790:13490): avc: denied { getopt } for pid=18990 comm="syz.0.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1955.397456][ T31] audit: type=1400 audit(1955.310:13491): avc: denied { create } for pid=18999 comm="syz.1.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1955.405919][ T31] audit: type=1400 audit(1955.320:13492): avc: denied { getopt } for pid=18999 comm="syz.1.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1955.418946][ T31] audit: type=1400 audit(1955.330:13493): avc: denied { read } for pid=2927 comm="syslogd" name="log" dev="vda" ino=671 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1955.423542][ T31] audit: type=1400 audit(1955.340:13494): avc: denied { search } for pid=2927 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1955.424739][ T31] audit: type=1400 audit(1955.340:13495): avc: denied { append } for pid=2927 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1955.425498][ T31] audit: type=1400 audit(1955.340:13496): avc: denied { open } for pid=2927 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1955.432971][ T31] audit: type=1400 audit(1955.340:13497): avc: denied { getattr } for pid=2927 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1955.456218][ T31] audit: type=1400 audit(1955.370:13498): avc: denied { read write } for pid=16603 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1958.268953][T19030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.279040][T19030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.489001][ T46] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1958.731268][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 1958.735081][ T46] usb 1-1: config 3 has an invalid interface number: 82 but max is 2 [ 1958.735584][ T46] usb 1-1: config 3 has an invalid interface number: 83 but max is 2 [ 1958.736097][ T46] usb 1-1: config 3 has an invalid interface number: 189 but max is 2 [ 1958.736451][ T46] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1958.736879][ T46] usb 1-1: config 3 has an invalid interface number: 222 but max is 2 [ 1958.737217][ T46] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1958.737628][ T46] usb 1-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 1958.739330][ T46] usb 1-1: config 3 has no interface number 0 [ 1958.739697][ T46] usb 1-1: config 3 has no interface number 1 [ 1958.740001][ T46] usb 1-1: config 3 has no interface number 2 [ 1958.740283][ T46] usb 1-1: config 3 has no interface number 3 [ 1958.741436][ T46] usb 1-1: config 3 interface 82 altsetting 5 endpoint 0x7 has invalid maxpacket 96, setting to 64 [ 1958.742374][ T46] usb 1-1: config 3 interface 82 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 1958.742957][ T46] usb 1-1: too many endpoints for config 3 interface 83 altsetting 189: 77, using maximum allowed: 30 [ 1958.743433][ T46] usb 1-1: config 3 interface 83 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 1958.743975][ T46] usb 1-1: config 3 interface 189 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1958.744451][ T46] usb 1-1: config 3 interface 189 altsetting 4 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1958.744953][ T46] usb 1-1: config 3 interface 189 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1958.745447][ T46] usb 1-1: config 3 interface 222 altsetting 13 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1958.745871][ T46] usb 1-1: config 3 interface 222 altsetting 13 endpoint 0x1 has invalid maxpacket 31277, setting to 64 [ 1958.746255][ T46] usb 1-1: config 3 interface 222 altsetting 13 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1958.746655][ T46] usb 1-1: config 3 interface 222 altsetting 13 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1958.747163][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1958.747589][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1958.769144][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 1958.769891][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 1958.771163][ T46] usb 1-1: config 3 interface 222 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1958.771666][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x8, skipping [ 1958.772203][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 1958.772708][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 1958.773840][ T46] usb 1-1: config 3 interface 222 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1958.774660][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 1958.775274][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 1958.775679][ T46] usb 1-1: config 3 interface 222 altsetting 13 has a duplicate endpoint with address 0x9, skipping [ 1958.776078][ T46] usb 1-1: config 3 interface 82 has no altsetting 0 [ 1958.776422][ T46] usb 1-1: config 3 interface 83 has no altsetting 0 [ 1958.776691][ T46] usb 1-1: config 3 interface 189 has no altsetting 0 [ 1958.777016][ T46] usb 1-1: config 3 interface 222 has no altsetting 0 [ 1958.799178][ T46] usb 1-1: Dual-Role OTG device on HNP port [ 1958.802217][ T46] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0187, bcdDevice=be.a8 [ 1958.804697][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.807170][ T46] usb 1-1: Product: ᤤ쏌㻉拃蛨偯䪕ꖛ豣ϖﻰ軿⏷ᱹ⏃䗜吐쥺궈﬩ٲ瑇仨巉툇牴堩╣︻ፄ㇬獎츁�韗ኛࢲ쬓쪯มᖗ愗偷㦪潷퓊碀砰⢢۬潎뿷뛢켺 [ 1958.815936][ T46] usb 1-1: Manufacturer: ꥵꢥṣ쌺ࢇꖳ෱ﷺ䔼鰼擻ぷ胹ێ鸹ല㧎⚣玄⡛嬎矛旔趄ꤲ鞬ᇡ톉ۇ려瓾渀礶ꌃ虮灂 [ 1958.817210][ T46] usb 1-1: SerialNumber: ⬩阐쵑๋⊚䯫췀疼ﶺ㎺鞛ｂ㑨嬍ꀘ㵧┡ᜈｈ̨䬝㍀䞀琊癦겑㜔≻꺨됈劽Ṧ䴫坪ﾬࡱჼᦻ厬Ｇ㒹梑弎퍶焥뿰ᗖ͡䷒픱鎈ꧧ桱岴院쐖壒樯ﱴ쮌᝗ퟜ⪺퉅 [ 1959.083557][ T46] ftdi_sio 1-1:3.82: FTDI USB Serial Device converter detected [ 1959.085974][ T46] ftdi_sio ttyUSB0: unknown device type: 0xbea8 [ 1959.104430][ T46] ftdi_sio 1-1:3.83: FTDI USB Serial Device converter detected [ 1959.107456][ T46] ftdi_sio ttyUSB1: unknown device type: 0xbea8 [ 1959.124546][ T46] ftdi_sio 1-1:3.189: FTDI USB Serial Device converter detected [ 1959.126136][ T46] ftdi_sio ttyUSB2: unknown device type: 0xbea8 [ 1959.137200][ T46] ftdi_sio 1-1:3.222: FTDI USB Serial Device converter detected [ 1959.142268][ T46] ftdi_sio ttyUSB3: unknown device type: 0xbea8 [ 1959.159755][ T46] usb 1-1: USB disconnect, device number 26 [ 1959.167819][ T46] ftdi_sio 1-1:3.82: device disconnected [ 1959.174328][ T46] ftdi_sio 1-1:3.83: device disconnected [ 1959.177428][ T46] ftdi_sio 1-1:3.189: device disconnected [ 1959.195565][ T46] ftdi_sio 1-1:3.222: device disconnected [ 1959.385464][T19075] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19075 comm=syz.0.4933 [ 1960.133239][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 1960.133363][ T31] audit: type=1400 audit(1960.050:13530): avc: denied { setattr } for pid=19076 comm="syz.0.4934" name="nvme-fabrics" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1961.627747][ T31] audit: type=1400 audit(1961.540:13531): avc: denied { ioctl } for pid=19082 comm="syz.1.4936" path="socket:[48708]" dev="sockfs" ino=48708 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1961.781319][ T31] audit: type=1400 audit(1961.700:13532): avc: denied { create } for pid=19084 comm="syz.1.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1961.800328][ T31] audit: type=1400 audit(1961.720:13533): avc: denied { write } for pid=19084 comm="syz.1.4937" path="socket:[49179]" dev="sockfs" ino=49179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1961.820400][ T31] audit: type=1400 audit(1961.730:13534): avc: denied { create } for pid=19084 comm="syz.1.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1961.824324][ T31] audit: type=1400 audit(1961.740:13535): avc: denied { connect } for pid=19084 comm="syz.1.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1962.328889][ T31] audit: type=1400 audit(1962.240:13536): avc: denied { setopt } for pid=19084 comm="syz.1.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1962.846892][ T31] audit: type=1400 audit(1962.760:13537): avc: denied { create } for pid=19084 comm="syz.1.4937" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1966.639212][ T31] audit: type=1400 audit(1966.560:13538): avc: denied { nlmsg_read } for pid=19097 comm="syz.0.4941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1966.868992][ T31] audit: type=1400 audit(1966.780:13539): avc: denied { mounton } for pid=19100 comm="syz.0.4942" path="/220/file0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1966.883261][ T31] audit: type=1400 audit(1966.800:13540): avc: denied { mount } for pid=19100 comm="syz.0.4942" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1969.051535][ T31] audit: type=1400 audit(1968.970:13541): avc: denied { create } for pid=19100 comm="syz.0.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1970.288893][ T31] audit: type=1400 audit(1970.200:13542): avc: denied { unmount } for pid=17193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1970.845748][ T31] audit: type=1400 audit(1970.760:13543): avc: denied { create } for pid=19109 comm="syz.0.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1970.853284][ T31] audit: type=1400 audit(1970.770:13544): avc: denied { ioctl } for pid=19109 comm="syz.0.4944" path="socket:[48759]" dev="sockfs" ino=48759 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1971.279478][ T31] audit: type=1400 audit(1971.190:13545): avc: denied { setopt } for pid=19113 comm="syz.0.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1971.796823][ T31] audit: type=1400 audit(1971.710:13546): avc: denied { connect } for pid=19113 comm="syz.0.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1972.041240][ T31] audit: type=1400 audit(1971.960:13547): avc: denied { sys_module } for pid=19113 comm="syz.0.4946" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1972.199691][ T31] audit: type=1400 audit(1972.110:13548): avc: denied { getopt } for pid=19113 comm="syz.0.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1972.200863][ T31] audit: type=1400 audit(1972.120:13549): avc: denied { map_create } for pid=19113 comm="syz.0.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1974.117499][ T31] audit: type=1400 audit(1974.030:13550): avc: denied { ioctl } for pid=19123 comm="syz.0.4948" path="socket:[49230]" dev="sockfs" ino=49230 ioctlcmd=0x4122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1974.665947][ T31] audit: type=1400 audit(1974.580:13551): avc: denied { read } for pid=19123 comm="syz.0.4948" name="mixer" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 1974.667709][ T31] audit: type=1400 audit(1974.580:13552): avc: denied { open } for pid=19123 comm="syz.0.4948" path="/dev/mixer" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 1974.676069][ T31] audit: type=1400 audit(1974.590:13553): avc: denied { ioctl } for pid=19123 comm="syz.0.4948" path="/dev/mixer" dev="devtmpfs" ino=735 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 1976.163421][ T31] audit: type=1400 audit(1976.080:13554): avc: denied { read } for pid=19128 comm="syz.1.4949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1977.403071][ T31] audit: type=1400 audit(1977.320:13555): avc: denied { setopt } for pid=19142 comm="syz.0.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1977.407855][ T31] audit: type=1400 audit(1977.320:13556): avc: denied { write } for pid=19142 comm="syz.0.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1977.721542][ T31] audit: type=1400 audit(1977.640:13557): avc: denied { create } for pid=19144 comm="syz.0.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1978.150482][ T31] audit: type=1400 audit(1978.070:13558): avc: denied { create } for pid=19148 comm="syz.0.4955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1978.197513][ T31] audit: type=1400 audit(1978.110:13559): avc: denied { ioctl } for pid=19148 comm="syz.0.4955" path="socket:[49278]" dev="sockfs" ino=49278 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1978.221365][ T31] audit: type=1400 audit(1978.140:13560): avc: denied { ioctl } for pid=19148 comm="syz.0.4955" path="socket:[49279]" dev="sockfs" ino=49279 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1978.599093][ T31] audit: type=1400 audit(1978.510:13561): avc: denied { write } for pid=19148 comm="syz.0.4955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1978.776039][ T31] audit: type=1400 audit(1978.690:13562): avc: denied { accept } for pid=19150 comm="syz.1.4956" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1978.810859][ T31] audit: type=1400 audit(1978.720:13563): avc: denied { write } for pid=19150 comm="syz.1.4956" path="socket:[49280]" dev="sockfs" ino=49280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1979.013915][ T31] audit: type=1400 audit(1978.930:13564): avc: denied { create } for pid=19152 comm="syz.1.4957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1979.946956][T19171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19171 comm=syz.0.4962 [ 1982.284888][T19204] FAULT_INJECTION: forcing a failure. [ 1982.284888][T19204] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.285618][T19204] CPU: 0 UID: 0 PID: 19204 Comm: syz.0.4968 Not tainted 6.12.0-rc2-syzkaller #0 [ 1982.285985][T19204] Hardware name: ARM-Versatile Express [ 1982.286304][T19204] Call trace: [ 1982.286499][T19204] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 1982.286890][T19204] r7:00000d40 r6:843f4f28 r5:60000013 r4:8203d408 [ 1982.287127][T19204] [<819992dc>] (show_stack) from [<819b77a0>] (dump_stack_lvl+0x70/0x7c) [ 1982.287496][T19204] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 1982.287861][T19204] r5:00000000 r4:8271925c [ 1982.288654][T19204] [<819b77ac>] (dump_stack) from [<808e548c>] (should_fail_ex+0x18c/0x1dc) [ 1982.289211][T19204] [<808e5300>] (should_fail_ex) from [<804e8218>] (should_failslab+0x6c/0x94) [ 1982.289880][T19204] r6:843f4f28 r5:00000022 r4:82c01240 [ 1982.290308][T19204] [<804e81ac>] (should_failslab) from [<804cd638>] (__kmalloc_noprof+0x9c/0x458) [ 1982.291028][T19204] [<804cd59c>] (__kmalloc_noprof) from [<80750ef0>] (tomoyo_encode2+0x64/0xf0) [ 1982.291601][T19204] r10:00000fff r9:82f9b400 r8:00000000 r7:830bfa18 r6:843f4f28 r5:84ac7ffc [ 1982.291986][T19204] r4:84ac7fe5 [ 1982.292248][T19204] [<80750e8c>] (tomoyo_encode2) from [<80750fa0>] (tomoyo_encode+0x24/0x30) [ 1982.292654][T19204] r9:82f9b400 r8:00000000 r7:830bfa18 r6:843f4f28 r5:00001000 r4:84ac7fe6 [ 1982.293116][T19204] [<80750f7c>] (tomoyo_encode) from [<8075102c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1982.293556][T19204] r5:00001000 r4:84ac7000 [ 1982.293819][T19204] [<80750fac>] (tomoyo_realpath_from_path) from [<8074d12c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1982.294302][T19204] r10:8476e000 r9:00000000 r8:00000003 r7:00005450 r6:00000004 r5:81ad1828 [ 1982.294669][T19204] r4:843f4f28 r3:824ba340 [ 1982.294905][T19204] [<8074d060>] (tomoyo_path_number_perm) from [<807519f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 1982.295363][T19204] r9:843f4f00 r8:00000003 r7:00000000 r6:00000000 r5:00005450 r4:843f4f00 [ 1982.295741][T19204] [<807519dc>] (tomoyo_file_ioctl) from [<80700044>] (security_file_ioctl+0x64/0x1e4) [ 1982.296156][T19204] [<806fffe0>] (security_file_ioctl) from [<8052f600>] (sys_ioctl+0x50/0xda8) [ 1982.296561][T19204] r7:00000000 r6:843f4f01 r5:00000000 r4:00005450 [ 1982.296883][T19204] [<8052f5b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1982.297278][T19204] Exception stack(0xecb19fa8 to 0xecb19ff0) [ 1982.297587][T19204] 9fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 1982.298429][T19204] 9fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b110bc [ 1982.299581][T19204] 9fe0: 76b10ec0 76b10eb0 00018af8 00132ec0 [ 1982.300086][T19204] r10:00000036 r9:8476e000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 1982.300756][T19204] r4:00000000 [ 1982.303444][T19204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1982.571683][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1982.571793][ T31] audit: type=1400 audit(1982.490:13571): avc: denied { create } for pid=19206 comm="syz.0.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1982.666841][ T31] audit: type=1400 audit(1982.580:13572): avc: denied { read } for pid=19206 comm="syz.0.4971" path="socket:[48978]" dev="sockfs" ino=48978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1983.120756][ T31] audit: type=1400 audit(1983.040:13573): avc: denied { create } for pid=19211 comm="syz.1.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1985.495544][ T31] audit: type=1400 audit(1985.410:13574): avc: denied { setopt } for pid=19237 comm="syz.0.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1985.530848][ T31] audit: type=1400 audit(1985.450:13575): avc: denied { write } for pid=19237 comm="syz.0.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1985.535206][ T31] audit: type=1400 audit(1985.450:13576): avc: denied { connect } for pid=19237 comm="syz.0.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1985.550917][ T31] audit: type=1400 audit(1985.460:13577): avc: denied { name_connect } for pid=19237 comm="syz.0.4978" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1986.466155][ T31] audit: type=1400 audit(1986.380:13578): avc: denied { write } for pid=19249 comm="syz.1.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1987.289802][ T31] audit: type=1400 audit(1987.210:13579): avc: denied { ioctl } for pid=19255 comm="syz.1.4986" path="socket:[49040]" dev="sockfs" ino=49040 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1988.322214][ T31] audit: type=1400 audit(1988.240:13580): avc: denied { bind } for pid=19255 comm="syz.1.4986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1988.323227][ T31] audit: type=1400 audit(1988.240:13581): avc: denied { accept } for pid=19255 comm="syz.1.4986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1988.336442][ T31] audit: type=1400 audit(1988.240:13582): avc: denied { write } for pid=19255 comm="syz.1.4986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1990.125303][ T31] audit: type=1400 audit(1990.040:13583): avc: denied { write } for pid=19267 comm="syz.1.4989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1990.306886][ T31] audit: type=1400 audit(1990.220:13584): avc: denied { create } for pid=19269 comm="syz.1.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1990.448447][ T31] audit: type=1400 audit(1990.360:13585): avc: denied { create } for pid=19269 comm="syz.1.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1991.303336][ T31] audit: type=1400 audit(1991.220:13586): avc: denied { setopt } for pid=19282 comm="syz.1.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1991.327244][ T31] audit: type=1400 audit(1991.240:13587): avc: denied { connect } for pid=19282 comm="syz.1.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1991.434249][ T31] audit: type=1400 audit(1991.350:13588): avc: denied { ioctl } for pid=19282 comm="syz.1.4994" path="socket:[49062]" dev="sockfs" ino=49062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1991.720461][ T31] audit: type=1400 audit(1991.640:13589): avc: denied { setopt } for pid=19282 comm="syz.1.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1992.009695][T19295] tmpfs: Unknown parameter 'dont_appraise' [ 1994.212639][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1994.212735][ T31] audit: type=1400 audit(134219722.124:13593): avc: denied { ioctl } for pid=19308 comm="syz.0.5002" path="socket:[50179]" dev="sockfs" ino=50179 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1995.042726][ T31] audit: type=1400 audit(134219722.954:13594): avc: denied { ioctl } for pid=19315 comm="syz.0.5004" path="socket:[49569]" dev="sockfs" ino=49569 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1999.061394][ T31] audit: type=1400 audit(134219726.974:13595): avc: denied { create } for pid=19327 comm="syz.0.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1999.070971][ T31] audit: type=1400 audit(134219726.984:13596): avc: denied { write } for pid=19327 comm="syz.0.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1999.113372][ T31] audit: type=1400 audit(134219727.024:13597): avc: denied { ioctl } for pid=19327 comm="syz.0.5008" path="socket:[49599]" dev="sockfs" ino=49599 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1999.966697][ T31] audit: type=1400 audit(134219727.874:13598): avc: denied { ioctl } for pid=19341 comm="syz.1.5013" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=50224 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2001.375296][ T31] audit: type=1400 audit(134219729.284:13599): avc: denied { read } for pid=19350 comm="syz.0.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2001.399363][ T31] audit: type=1400 audit(134219729.314:13600): avc: denied { write } for pid=19350 comm="syz.0.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2001.412203][ T31] audit: type=1400 audit(134219729.324:13601): avc: denied { setopt } for pid=19350 comm="syz.0.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2006.261900][ T31] audit: type=1400 audit(134219734.174:13602): avc: denied { append } for pid=19372 comm="syz.1.5025" name="nbd1" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2006.328487][ T31] audit: type=1400 audit(134219734.234:13603): avc: denied { write } for pid=19372 comm="syz.1.5025" name="mixer" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 2007.077693][ T31] audit: type=1400 audit(134219734.984:13604): avc: denied { accept } for pid=19397 comm="syz.1.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2009.156074][ T31] audit: type=1400 audit(134219737.064:13605): avc: denied { execmem } for pid=19406 comm="syz.1.5031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2009.729103][ T31] audit: type=1400 audit(134219737.634:13606): avc: denied { create } for pid=19419 comm="syz.1.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2010.456419][ T31] audit: type=1400 audit(134219738.364:13607): avc: denied { lock } for pid=19434 comm="syz.1.5044" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2024.474091][T19564] fuse: Bad value for 'group_id' [ 2024.474776][T19564] fuse: Bad value for 'group_id' [ 2027.440868][ T31] audit: type=1400 audit(134219755.354:13608): avc: denied { block_suspend } for pid=19565 comm="syz.0.5093" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2028.491173][ T31] audit: type=1400 audit(134219756.404:13609): avc: denied { map_read map_write } for pid=19567 comm="syz.1.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2028.497693][ T31] audit: type=1400 audit(134219756.404:13610): avc: denied { prog_run } for pid=19567 comm="syz.1.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2056.958823][ T31] audit: type=1400 audit(134219784.864:13611): avc: denied { bind } for pid=19597 comm="syz.0.5101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2056.959790][ T31] audit: type=1400 audit(134219784.864:13612): avc: denied { name_bind } for pid=19597 comm="syz.0.5101" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2056.960634][ T31] audit: type=1400 audit(134219784.874:13613): avc: denied { node_bind } for pid=19597 comm="syz.0.5101" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2057.302240][ T31] audit: type=1400 audit(134219785.214:13614): avc: denied { map } for pid=19597 comm="syz.0.5101" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2057.312203][ T31] audit: type=1400 audit(134219785.224:13615): avc: denied { read write } for pid=19597 comm="syz.0.5101" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2071.783881][ T31] audit: type=1400 audit(134219799.694:13616): avc: denied { mounton } for pid=19615 comm="syz.1.5106" path="/318/file0" dev="tmpfs" ino=1723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2072.698950][ T7963] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2072.869304][ T7963] usb 2-1: Using ep0 maxpacket: 32 [ 2072.885112][ T7963] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2072.885662][ T7963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.894353][ T7963] usb 2-1: config 0 descriptor?? [ 2083.133858][T11806] usb 2-1: USB disconnect, device number 20 [ 2083.306365][T19650] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 2083.507147][T19654] *** NOT YET: opcode db *** [ 2083.794329][ T31] audit: type=1400 audit(134219811.704:13617): avc: denied { bind } for pid=19657 comm="syz.1.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2083.809735][ T31] audit: type=1400 audit(134219811.724:13618): avc: denied { setopt } for pid=19657 comm="syz.1.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2112.968826][ T31] audit: type=1400 audit(134219840.874:13619): avc: denied { connect } for pid=19707 comm="syz.1.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2113.349085][T10812] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2113.529179][T10812] usb 2-1: Using ep0 maxpacket: 16 [ 2113.548438][T10812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 2113.549156][T10812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2113.558490][T10812] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=53.f0 [ 2113.559087][T10812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.559415][T10812] usb 2-1: Product: syz [ 2113.559623][T10812] usb 2-1: Manufacturer: syz [ 2113.559861][T10812] usb 2-1: SerialNumber: syz [ 2113.567535][T10812] usb 2-1: config 0 descriptor?? [ 2113.596507][T10812] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 2113.597640][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 2113.610613][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 2113.611356][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 2113.611732][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 2113.612275][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 2113.612753][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 2113.619382][T10812] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2113.621180][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 2113.621672][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 2113.622355][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 2113.622914][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 2113.623339][T10812] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 2113.642447][T10812] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2113.796531][ T9249] usb 2-1: USB disconnect, device number 21 [ 2113.861158][ T9249] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2113.875637][ T9249] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2113.901771][ T9249] keyspan 2-1:0.0: device disconnected [ 2114.429127][ T9249] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2114.589587][ T9249] usb 2-1: Using ep0 maxpacket: 16 [ 2114.602647][ T9249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2114.603175][ T9249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2114.606465][ T9249] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2114.618442][ T9249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.632342][ T9249] usb 2-1: config 0 descriptor?? [ 2115.076869][ T9249] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 2115.479630][T10812] usb 2-1: USB disconnect, device number 22 [ 2115.890458][ T31] audit: type=1400 audit(134219843.784:13620): avc: denied { connect } for pid=19761 comm="syz.1.5131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2119.114662][ T9249] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2119.299130][ T9249] usb 2-1: Using ep0 maxpacket: 32 [ 2119.410583][ T9249] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2119.410924][ T9249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.411265][ T9249] usb 2-1: Product: syz [ 2119.411418][ T9249] usb 2-1: Manufacturer: syz [ 2119.411539][ T9249] usb 2-1: SerialNumber: syz [ 2119.434875][ T9249] usb 2-1: config 0 descriptor?? [ 2120.053229][ T9249] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:4b:44:d0:78:53 [ 2120.072713][ T9249] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 2120.084408][ T9249] usb 2-1: USB disconnect, device number 23 [ 2120.432484][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5135'. [ 2122.618731][T10812] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2122.907071][T10812] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2122.907753][T10812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2122.909060][T10812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2122.909522][T10812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2122.910093][T10812] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2122.910470][T10812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.930069][T10812] usb 2-1: config 0 descriptor?? [ 2122.949626][T19809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2123.439763][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.440517][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.440953][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.441331][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.441698][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.442097][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.442431][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.442842][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.443211][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.443575][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.443957][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.444324][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.444694][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.445112][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.445482][T10812] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 2123.446251][T10812] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 2123.460374][T10812] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2123.734609][ T7963] usb 2-1: USB disconnect, device number 24 [ 2123.918505][ T31] audit: type=1400 audit(134219851.824:13621): avc: denied { create } for pid=19832 comm="syz.1.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2127.877106][ T31] audit: type=1400 audit(134219855.784:13622): avc: denied { execute } for pid=19861 comm="syz-executor" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 2127.888877][ T31] audit: type=1400 audit(134219855.794:13623): avc: denied { execute_no_trans } for pid=19861 comm="syz-executor" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 2127.976200][ T31] audit: type=1400 audit(134219855.884:13624): avc: denied { mounton } for pid=19862 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2132.721959][T14979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2132.822354][T14979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2132.899304][T14979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2132.951179][ T31] audit: type=1400 audit(134219860.864:13625): avc: denied { name_connect } for pid=19868 comm="syz.1.5146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2132.991444][T14979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2133.981620][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2134.004052][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2134.021582][T14979] bond0 (unregistering): Released all slaves [ 2134.195760][T14979] hsr_slave_0: left promiscuous mode [ 2134.209935][T14979] hsr_slave_1: left promiscuous mode [ 2134.216287][T14979] veth1_macvtap: left promiscuous mode [ 2134.216939][T14979] veth0_macvtap: left promiscuous mode [ 2134.217569][T14979] veth1_vlan: left promiscuous mode [ 2134.218433][T14979] veth0_vlan: left promiscuous mode [ 2134.500175][ T31] audit: type=1400 audit(134219862.404:13626): avc: denied { write } for pid=19998 comm="dhcpcd-run-hook" name="null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2134.515650][ T31] audit: type=1400 audit(134219862.424:13627): avc: denied { open } for pid=19998 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2134.517219][ T31] audit: type=1400 audit(134219862.424:13628): avc: denied { getattr } for pid=19998 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2134.528955][ T31] audit: type=1400 audit(134219862.434:13629): avc: denied { ioctl } for pid=19998 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=4 ioctlcmd=0x5401 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2135.038678][ T31] audit: type=1400 audit(134219862.944:13630): avc: denied { search } for pid=19999 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2135.108821][ T31] audit: type=1400 audit(134219863.014:13631): avc: denied { read } for pid=20000 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2135.109834][ T31] audit: type=1400 audit(134219863.014:13632): avc: denied { open } for pid=20000 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2135.110675][ T31] audit: type=1400 audit(134219863.014:13633): avc: denied { getattr } for pid=20000 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2135.251793][ T31] audit: type=1400 audit(134219863.164:13634): avc: denied { write } for pid=19999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2136.861485][T19862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2136.881542][T19862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2139.689695][T19862] hsr_slave_0: entered promiscuous mode [ 2139.699345][T19862] hsr_slave_1: entered promiscuous mode [ 2139.715940][T19862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2139.734178][T19862] Cannot create hsr debugfs directory [ 2140.830689][T19862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2140.846605][T19862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2140.870632][T19862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2140.892105][T19862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2143.322931][T19862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2152.181833][T19862] veth0_vlan: entered promiscuous mode [ 2152.212763][T19862] veth1_vlan: entered promiscuous mode [ 2152.307829][T19862] veth0_macvtap: entered promiscuous mode [ 2152.326830][T19862] veth1_macvtap: entered promiscuous mode [ 2152.423696][T19862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.424286][T19862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.424620][T19862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.424970][T19862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.571428][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 2152.571526][ T31] audit: type=1400 audit(134219880.474:13643): avc: denied { mounton } for pid=19862 comm="syz-executor" path="/syzkaller.MCNff1/syz-tmp" dev="vda" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 2152.597441][ T31] audit: type=1400 audit(134219880.504:13644): avc: denied { mount } for pid=19862 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2152.612200][ T31] audit: type=1400 audit(134219880.514:13645): avc: denied { mount } for pid=19862 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2152.617731][ T31] audit: type=1400 audit(134219880.524:13646): avc: denied { mounton } for pid=19862 comm="syz-executor" path="/syzkaller.MCNff1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2152.629241][ T31] audit: type=1400 audit(134219880.534:13647): avc: denied { mounton } for pid=19862 comm="syz-executor" path="/syzkaller.MCNff1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2152.636822][ T31] audit: type=1400 audit(134219880.544:13648): avc: denied { unmount } for pid=19862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2152.653458][ T31] audit: type=1400 audit(134219880.564:13649): avc: denied { mounton } for pid=19862 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2152.656682][ T31] audit: type=1400 audit(134219880.564:13650): avc: denied { mount } for pid=19862 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2152.660368][ T31] audit: type=1400 audit(134219880.574:13651): avc: denied { mounton } for pid=19862 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2152.677440][ T31] audit: type=1400 audit(134219880.584:13652): avc: denied { map } for pid=20298 comm="syz.1.5148" path="/dev/nullb0" dev="devtmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2152.711844][T20299] Trying to write to read-only block-device nullb0 [ 2168.294557][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 2168.294658][ T31] audit: type=1400 audit(134219896.204:13657): avc: denied { mount } for pid=20327 comm="syz.1.5156" name="/" dev="ramfs" ino=51658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2172.870938][T19865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2172.894163][T19865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2172.909243][T19865] bond0 (unregistering): Released all slaves [ 2173.007560][T19865] hsr_slave_0: left promiscuous mode [ 2173.022604][T19865] hsr_slave_1: left promiscuous mode [ 2173.049395][T19865] veth1_macvtap: left promiscuous mode [ 2173.049901][T19865] veth0_macvtap: left promiscuous mode [ 2173.050276][T19865] veth1_vlan: left promiscuous mode [ 2173.050590][T19865] veth0_vlan: left promiscuous mode [ 2179.903011][T20346] syz.1.5162[20346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2179.903401][T20346] syz.1.5162[20346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2179.904179][T20346] syz.1.5162[20346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2180.129846][ T31] audit: type=1400 audit(134219908.034:13658): avc: denied { watch } for pid=20343 comm="syz.0.5161" path="/6" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2188.073228][ T31] audit: type=1400 audit(134219915.984:13659): avc: denied { write } for pid=20363 comm="syz.1.5167" path="socket:[51705]" dev="sockfs" ino=51705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2188.075335][ T31] audit: type=1400 audit(134219915.984:13660): avc: denied { nlmsg_write } for pid=20363 comm="syz.1.5167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2199.375188][ T31] audit: type=1400 audit(134219927.284:13661): avc: denied { name_bind } for pid=20367 comm="syz.0.5168" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2201.866663][ T31] audit: type=1400 audit(134219929.774:13662): avc: denied { name_bind } for pid=20370 comm="syz.0.5169" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2202.904455][T19865] bond0: (slave bond_slave_0): interface is now down [ 2202.905369][T19865] bond0: (slave bond_slave_1): interface is now down [ 2202.919234][T19865] bond0: (slave bond_slave_0): interface is now down [ 2202.919574][T19865] bond0: (slave bond_slave_1): interface is now down [ 2202.921100][T19865] bond0: now running without any active interface! [ 2204.312886][ T31] audit: type=1400 audit(134219932.224:13663): avc: denied { read } for pid=20372 comm="syz.1.5170" name="binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2204.314760][ T31] audit: type=1400 audit(134219932.224:13664): avc: denied { open } for pid=20372 comm="syz.1.5170" path="/dev/binderfs/binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2206.485387][ T31] audit: type=1400 audit(134219934.394:13665): avc: denied { write } for pid=20397 comm="syz.0.5176" name="net" dev="proc" ino=51075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2206.516630][ T31] audit: type=1400 audit(134219934.404:13666): avc: denied { add_name } for pid=20397 comm="syz.0.5176" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2206.520939][ T31] audit: type=1400 audit(134219934.404:13667): avc: denied { create } for pid=20397 comm="syz.0.5176" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 2206.521866][ T31] audit: type=1400 audit(134219934.404:13668): avc: denied { associate } for pid=20397 comm="syz.0.5176" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2206.981820][T20400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5177'. [ 2224.619832][ T31] audit: type=1400 audit(134219952.524:13669): avc: denied { bind } for pid=20413 comm="syz.0.5181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2224.639479][ T31] audit: type=1400 audit(134219952.544:13670): avc: denied { name_bind } for pid=20413 comm="syz.0.5181" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2224.647602][ T31] audit: type=1400 audit(134219952.544:13671): avc: denied { node_bind } for pid=20413 comm="syz.0.5181" saddr=fe88::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2224.795845][T20427] tmpfs: Unsupported parameter 'mpol' [ 2229.790764][ T31] audit: type=1400 audit(134219957.704:13672): avc: denied { watch_reads } for pid=20436 comm="syz.1.5186" path="/370/file1" dev="tmpfs" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2243.034656][ T31] audit: type=1326 audit(134219970.934:13673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.0.5188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2243.035686][ T31] audit: type=1326 audit(134219970.944:13674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.0.5188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2243.064456][ T31] audit: type=1326 audit(134219970.974:13675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.0.5188" exe="/syz-executor" sig=0 arch=40000028 syscall=372 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2243.065622][ T31] audit: type=1326 audit(134219970.974:13676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.0.5188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2243.078842][ T31] audit: type=1326 audit(134219970.974:13677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.0.5188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x7ffc0000 [ 2243.849764][T20333] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2244.072529][T20333] usb 1-1: Using ep0 maxpacket: 32 [ 2244.131916][T20333] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2244.159696][T20333] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2244.160359][T20333] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2244.162888][T20333] usb 1-1: Product: syz [ 2244.163214][T20333] usb 1-1: Manufacturer: syz [ 2244.163546][T20333] usb 1-1: SerialNumber: syz [ 2244.185063][T20333] usb 1-1: config 0 descriptor?? [ 2244.190052][T20447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2244.479051][T20333] usb 1-1: USB disconnect, device number 27 [ 2249.368680][ T31] audit: type=1400 audit(134219977.264:13678): avc: denied { ioctl } for pid=20482 comm="syz.1.5193" path="socket:[51795]" dev="sockfs" ino=51795 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2249.398667][ T31] audit: type=1400 audit(134219977.304:13679): avc: denied { nlmsg_read } for pid=20482 comm="syz.1.5193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2253.066602][T20492] ======================================================= [ 2253.066602][T20492] WARNING: The mand mount option has been deprecated and [ 2253.066602][T20492] and is ignored by this kernel. Remove the mand [ 2253.066602][T20492] option from the mount to silence this warning. [ 2253.066602][T20492] ======================================================= [ 2253.113327][ T31] audit: type=1400 audit(134219981.014:13680): avc: denied { mount } for pid=20491 comm="syz.1.5196" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2253.114803][ T31] audit: type=1400 audit(134219981.014:13681): avc: denied { remount } for pid=20491 comm="syz.1.5196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2253.289161][ T31] audit: type=1400 audit(134219981.184:13682): avc: denied { unmount } for pid=16603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2253.292124][ T31] audit: type=1400 audit(134219981.204:13683): avc: denied { unmount } for pid=16603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2253.752285][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.840268][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.941056][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.030194][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.782322][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2254.817811][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2254.841699][ T11] bond0 (unregistering): Released all slaves [ 2254.959073][ T11] hsr_slave_0: left promiscuous mode [ 2254.973549][ T11] hsr_slave_1: left promiscuous mode [ 2255.018946][ T11] veth1_macvtap: left promiscuous mode [ 2255.019290][ T11] veth0_macvtap: left promiscuous mode [ 2255.019633][ T11] veth1_vlan: left promiscuous mode [ 2255.019870][ T11] veth0_vlan: left promiscuous mode [ 2259.107505][T20497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2259.114979][T20497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2260.553148][T20497] hsr_slave_0: entered promiscuous mode [ 2260.556945][T20497] hsr_slave_1: entered promiscuous mode [ 2261.443027][T20497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2261.461467][T20497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2261.490144][T20497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2261.520687][T20497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2262.867832][T20497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2264.475214][ T31] audit: type=1400 audit(134219992.384:13684): avc: denied { write } for pid=20882 comm="syz.0.5201" name="ip6_flowlabel" dev="proc" ino=4026532818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2267.820549][T20497] veth0_vlan: entered promiscuous mode [ 2267.837143][T20497] veth1_vlan: entered promiscuous mode [ 2267.892641][T20497] veth0_macvtap: entered promiscuous mode [ 2267.913975][T20497] veth1_macvtap: entered promiscuous mode [ 2267.993315][T20497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.993875][T20497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.994250][T20497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.994730][T20497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2276.517046][T20333] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2276.722840][T20333] usb 1-1: Using ep0 maxpacket: 8 [ 2276.773813][T20333] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 2276.778775][T20333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.780684][T20333] usb 1-1: Product: syz [ 2276.781074][T20333] usb 1-1: Manufacturer: syz [ 2276.781415][T20333] usb 1-1: SerialNumber: syz [ 2276.826137][T20333] usb 1-1: config 0 descriptor?? [ 2287.102539][ T8] usb 1-1: USB disconnect, device number 28 [ 2310.395534][T21019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5226'. [ 2310.397437][T21019] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2310.405441][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5226'. [ 2311.667028][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2311.691240][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5236'. [ 2319.121638][T21066] fuse: Bad value for 'group_id' [ 2319.123502][T21066] fuse: Bad value for 'group_id' [ 2319.541969][T21070] netlink: 'syz.0.5249': attribute type 10 has an invalid length. [ 2319.944587][T21079] fuse: Bad value for 'group_id' [ 2319.945065][T21079] fuse: Bad value for 'group_id' [ 2320.770390][T21089] fuse: Bad value for 'group_id' [ 2320.770637][T21089] fuse: Bad value for 'group_id' [ 2326.401515][ T31] audit: type=1400 audit(134220054.314:13685): avc: denied { mounton } for pid=21095 comm="syz.1.5260" path="/proc/70/task" dev="proc" ino=52176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2331.085270][T21114] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2331.086667][T21114] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2331.088266][T21114] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2331.088580][T21114] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2331.089605][T21114] vxlan0: entered promiscuous mode [ 2331.089874][T21114] vxlan0: entered allmulticast mode [ 2347.040368][ T31] audit: type=1400 audit(134220074.954:13686): avc: denied { getopt } for pid=21158 comm="syz.0.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2348.189437][T21170] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2348.190023][T21170] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2348.190396][T21170] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2348.190815][T21170] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2350.400041][ T31] audit: type=1400 audit(134220078.314:13687): avc: denied { listen } for pid=21183 comm="syz.0.5292" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2350.401579][ T31] audit: type=1400 audit(134220078.314:13688): avc: denied { accept } for pid=21183 comm="syz.0.5292" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2384.880311][T21255] fuse: Unknown parameter 'grou00000000000000000000' [ 2385.431816][T21266] fuse: Unknown parameter 'grou00000000000000000000' [ 2386.269739][T21279] fuse: Unknown parameter 'grou00000000000000000000' [ 2386.687875][T21294] fuse: Unknown parameter 'group_i00000000000000000000' [ 2392.154366][T21322] fuse: Unknown parameter 'group_i00000000000000000000' [ 2392.256041][T21324] fuse: Unknown parameter 'group_id00000000000000000000' [ 2403.528957][T21337] fuse: Unknown parameter 'group_id00000000000000000000' [ 2403.631392][T21339] fuse: Unknown parameter 'group_id00000000000000000000' [ 2406.407492][T21348] fuse: Unknown parameter 'group_id00000000000000000000' [ 2406.500920][T21350] fuse: Unknown parameter 'group_id00000000000000000000' [ 2409.361208][T21360] fuse: Unknown parameter 'group_id00000000000000000000' [ 2417.521584][T21375] fuse: Bad value for 'user_id' [ 2417.522167][T21375] fuse: Bad value for 'user_id' [ 2424.159663][T19771] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 2424.318764][T19771] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 2424.319530][T19771] usb 1-1: config 4 has no interface number 0 [ 2424.332299][T19771] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=80.20 [ 2424.332917][T19771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.333296][T19771] usb 1-1: Product: syz [ 2424.333705][T19771] usb 1-1: Manufacturer: syz [ 2424.334303][T19771] usb 1-1: SerialNumber: syz [ 2424.760000][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5365'. [ 2424.763927][T10812] usb 1-1: USB disconnect, device number 29 [ 2425.087572][T21402] fuse: Bad value for 'user_id' [ 2425.088892][T21402] fuse: Bad value for 'user_id' [ 2425.600171][T21412] fuse: Bad value for 'user_id' [ 2425.603141][T21412] fuse: Bad value for 'user_id' [ 2425.831990][T21418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5376'. [ 2428.487823][T21422] fuse: Bad value for 'fd' [ 2428.930385][T20962] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2429.095980][T20962] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2429.142991][T20962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2429.143533][T20962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.143882][T20962] usb 1-1: Product: syz [ 2429.144147][T20962] usb 1-1: Manufacturer: syz [ 2429.144387][T20962] usb 1-1: SerialNumber: syz [ 2429.397481][ T31] audit: type=1400 audit(134220157.302:13689): avc: denied { write } for pid=21425 comm="syz.0.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2430.464189][T21426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2430.470444][T21426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2430.485384][T20962] cdc_ncm 1-1:1.0: failed to get mac address [ 2430.489945][T20962] cdc_ncm 1-1:1.0: bind() failure [ 2430.506084][T20962] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2430.508972][T20962] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2430.514368][T20962] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 2430.526643][T20962] usb 1-1: USB disconnect, device number 30 [ 2430.573876][T21449] fuse: Bad value for 'fd' [ 2441.990190][T21471] fuse: Bad value for 'fd' [ 2442.629016][T18055] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2442.804729][T18055] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2442.807766][T18055] usb 1-1: config 0 has no interfaces? [ 2442.851165][T18055] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2442.851639][T18055] usb 1-1: New USB device strings: Mfr=1, Product=62, SerialNumber=3 [ 2442.851850][T18055] usb 1-1: Product: syz [ 2442.852017][T18055] usb 1-1: Manufacturer: syz [ 2442.852139][T18055] usb 1-1: SerialNumber: syz [ 2442.857468][T18055] usb 1-1: config 0 descriptor?? [ 2442.871116][ T31] audit: type=1400 audit(134220170.782:13690): avc: denied { write } for pid=2927 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.871631][ T31] audit: type=1400 audit(134220170.782:13691): avc: denied { remove_name } for pid=2927 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.872219][ T31] audit: type=1400 audit(134220170.782:13692): avc: denied { rename } for pid=2927 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2442.872585][ T31] audit: type=1400 audit(134220170.782:13693): avc: denied { add_name } for pid=2927 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.873052][ T31] audit: type=1400 audit(134220170.782:13694): avc: denied { unlink } for pid=2927 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2442.874785][ T31] audit: type=1400 audit(134220170.782:13695): avc: denied { create } for pid=2927 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2443.074175][T18055] usb 1-1: USB disconnect, device number 31 [ 2458.906143][ T31] audit: type=1400 audit(134220186.812:13696): avc: denied { create } for pid=21514 comm="syz.1.5397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2468.099199][T20962] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2468.269551][T20962] usb 2-1: Using ep0 maxpacket: 16 [ 2468.277752][T20962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2468.279354][T20962] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2468.294611][T20962] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 2468.295499][T20962] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 2468.295881][T20962] usb 2-1: Product: syz [ 2468.296142][T20962] usb 2-1: Manufacturer: syz [ 2468.296401][T20962] usb 2-1: SerialNumber: syz [ 2468.300761][T20962] usb 2-1: config 0 descriptor?? [ 2468.311141][T20962] usb 2-1: NFC: intf 8507f400 id 827603dc [ 2468.513294][T20962] usb 2-1: USB disconnect, device number 25 [ 2472.169302][T10812] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2472.318928][T10812] usb 2-1: Using ep0 maxpacket: 16 [ 2472.353568][T10812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2472.380042][T10812] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2472.380397][T10812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.380635][T10812] usb 2-1: Product: syz [ 2472.380837][T10812] usb 2-1: Manufacturer: syz [ 2472.381047][T10812] usb 2-1: SerialNumber: syz [ 2472.385560][T10812] usb 2-1: config 0 descriptor?? [ 2472.624954][T10812] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 2472.650114][T10812] usb 2-1: USB disconnect, device number 26 [ 2472.767356][T21575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5409'. [ 2473.099091][T19771] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2473.259118][T19771] usb 2-1: Using ep0 maxpacket: 16 [ 2473.301957][T19771] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2473.302877][T19771] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2473.303425][T19771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.307720][T19771] usb 2-1: config 0 descriptor?? [ 2473.847039][T19771] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0008/input/input12 [ 2473.860507][T19771] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0008/input/input13 [ 2473.974328][T19771] kye 0003:0458:5013.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 2474.406001][T18055] usb 2-1: USB disconnect, device number 27 [ 2474.598700][ T31] audit: type=1400 audit(134220202.492:13697): avc: denied { shutdown } for pid=21617 comm="syz.1.5412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2494.353209][T14979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2494.354279][T14979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.355247][T14979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2494.433384][T14979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2494.434002][T14979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.435108][T14979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2494.486834][T14979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2494.487476][T14979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.487895][T14979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2494.542027][T14979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2494.542728][T14979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.543122][T14979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2494.835328][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2494.843455][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2494.845881][T14979] bond0 (unregistering): Released all slaves [ 2494.939758][T14979] hsr_slave_0: left promiscuous mode [ 2494.964670][T14979] hsr_slave_1: left promiscuous mode [ 2494.970623][T14979] veth1_macvtap: left promiscuous mode [ 2494.970909][T14979] veth0_macvtap: left promiscuous mode [ 2494.971155][T14979] veth1_vlan: left promiscuous mode [ 2494.971346][T14979] veth0_vlan: left promiscuous mode [ 2497.680204][ C1] vkms_vblank_simulate: vblank timer overrun [ 2498.950946][T21649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2498.976662][T21649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2501.019520][T21649] hsr_slave_0: entered promiscuous mode [ 2501.021267][T21649] hsr_slave_1: entered promiscuous mode [ 2501.874762][T21649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2501.899852][T21649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2501.904185][T21649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2501.909179][T21649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2503.539960][T21649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2508.670922][T21649] veth0_vlan: entered promiscuous mode [ 2508.704113][T21649] veth1_vlan: entered promiscuous mode [ 2508.775326][T21649] veth0_macvtap: entered promiscuous mode [ 2508.785729][T21649] veth1_macvtap: entered promiscuous mode [ 2508.834109][T21649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.834692][T21649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.834981][T21649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.835227][T21649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2509.403742][T20519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.466582][T20519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.567099][T20519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.655102][T20519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2510.082735][T20519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2510.111189][T20519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2510.124256][T20519] bond0 (unregistering): Released all slaves [ 2510.199267][T20519] hsr_slave_0: left promiscuous mode [ 2510.211826][T20519] hsr_slave_1: left promiscuous mode [ 2510.222453][T20519] veth1_macvtap: left promiscuous mode [ 2510.223077][T20519] veth0_macvtap: left promiscuous mode [ 2510.223490][T20519] veth1_vlan: left promiscuous mode [ 2510.223828][T20519] veth0_vlan: left promiscuous mode [ 2513.072962][T22066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2513.089851][T22066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2514.113896][T22066] hsr_slave_0: entered promiscuous mode [ 2514.117593][T22066] hsr_slave_1: entered promiscuous mode [ 2514.754007][T22066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2514.766414][T22066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2514.781550][T22066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2514.796645][T22066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2515.703946][T22066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2518.574788][T22066] veth0_vlan: entered promiscuous mode [ 2518.600654][T22066] veth1_vlan: entered promiscuous mode [ 2518.674625][T22066] veth0_macvtap: entered promiscuous mode [ 2518.690339][T22066] veth1_macvtap: entered promiscuous mode [ 2518.761020][T22066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.761545][T22066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.761946][T22066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.762347][T22066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2519.261773][T19865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2519.333392][T19865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2519.409680][T19865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2519.481000][T19865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2519.651591][ T31] audit: type=1400 audit(134224342.567:13698): avc: denied { bind } for pid=22511 comm="syz.0.5432" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2519.654980][ T31] audit: type=1400 audit(134224342.567:13699): avc: denied { name_bind } for pid=22511 comm="syz.0.5432" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2519.660437][ T31] audit: type=1400 audit(134224342.577:13700): avc: denied { node_bind } for pid=22511 comm="syz.0.5432" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2519.940052][T19865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2519.954233][T19865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2519.962365][T19865] bond0 (unregistering): Released all slaves [ 2520.026182][T19865] hsr_slave_0: left promiscuous mode [ 2520.031678][T19865] hsr_slave_1: left promiscuous mode [ 2520.041345][T19865] veth1_macvtap: left promiscuous mode [ 2520.041864][T19865] veth0_macvtap: left promiscuous mode [ 2520.042237][T19865] veth1_vlan: left promiscuous mode [ 2520.042697][T19865] veth0_vlan: left promiscuous mode [ 2523.936433][T22678] ------------[ cut here ]------------ [ 2523.937109][T22678] WARNING: CPU: 1 PID: 22678 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 2523.937693][T22678] Modules linked in: [ 2523.940478][T22678] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2523.941655][T22678] CPU: 1 UID: 0 PID: 22678 Comm: syz.0.5435 Not tainted 6.12.0-rc2-syzkaller #0 [ 2523.943009][T22678] Hardware name: ARM-Versatile Express [ 2523.943407][T22678] Call trace: [ 2523.943671][T22678] [<819991f8>] (dump_backtrace) from [<819992f4>] (show_stack+0x18/0x1c) [ 2523.944083][T22678] r7:00000000 r6:82622f44 r5:00000000 r4:8203d408 [ 2523.944368][T22678] [<819992dc>] (show_stack) from [<819b7784>] (dump_stack_lvl+0x54/0x7c) [ 2523.944716][T22678] [<819b7730>] (dump_stack_lvl) from [<819b77c4>] (dump_stack+0x18/0x1c) [ 2523.945152][T22678] r5:00000000 r4:82870d18 [ 2523.945353][T22678] [<819b77ac>] (dump_stack) from [<81999e20>] (panic+0x120/0x374) [ 2523.945664][T22678] [<81999d00>] (panic) from [<802420e0>] (get_taint+0x0/0x1c) [ 2523.946029][T22678] r3:8260c5c4 r2:00000001 r1:820257e8 r0:8202d250 [ 2523.946288][T22678] r7:8048c6b4 [ 2523.946459][T22678] [<8024206c>] (check_panic_on_warn) from [<80242244>] (__warn+0x80/0x188) [ 2523.946837][T22678] [<802421c4>] (__warn) from [<802424c4>] (warn_slowpath_fmt+0x178/0x1f4) [ 2523.947231][T22678] r8:00000009 r7:82054e4c r6:e0465d24 r5:84768c00 r4:00000000 [ 2523.947522][T22678] [<80242350>] (warn_slowpath_fmt) from [<8048c6b4>] (kunmap_local_indexed+0x20c/0x224) [ 2523.947922][T22678] r10:ffedcfe8 r9:84050600 r8:20000000 r7:00000000 r6:00000003 r5:84768c00 [ 2523.948891][T22678] r4:ffedc000 [ 2523.949070][T22678] [<8048c4a8>] (kunmap_local_indexed) from [<80505ad8>] (move_pages+0x7e8/0x149c) [ 2523.949531][T22678] r7:00000000 r6:8424c480 r5:debd3ab0 r4:ffeda000 [ 2523.949820][T22678] [<805052f0>] (move_pages) from [<80581d18>] (userfaultfd_ioctl+0x114c/0x2080) [ 2523.950432][T22678] r10:84050600 r9:e0465e98 r8:00000001 r7:21000000 r6:00000000 r5:20000040 [ 2523.950837][T22678] r4:852c2100 [ 2523.951019][T22678] [<80580bcc>] (userfaultfd_ioctl) from [<8052f6e4>] (sys_ioctl+0x134/0xda8) [ 2523.951578][T22678] r10:84768c00 r9:8440b9c0 r8:00000005 r7:20000040 r6:8440b9c1 r5:00000000 [ 2523.951943][T22678] r4:c028aa05 [ 2523.952116][T22678] [<8052f5b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2523.952467][T22678] Exception stack(0xe0465fa8 to 0xe0465ff0) [ 2523.953633][T22678] 5fa0: 00000000 00000000 00000005 c028aa05 20000040 00000000 [ 2523.953996][T22678] 5fc0: 00000000 00000000 00286410 00000036 00000000 00006364 003d0f00 76b120bc [ 2523.954353][T22678] 5fe0: 76b11ec0 76b11eb0 00018af8 00132ec0 [ 2523.954673][T22678] r10:00000036 r9:84768c00 r8:8020029c r7:00000036 r6:00286410 r5:00000000 [ 2523.955009][T22678] r4:00000000 [ 2523.957121][T22678] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:19:47 Registers: info registers vcpu 0 CPU#0 R00=845e07c0 R01=00000000 R02=000000e0 R03=00000000 R04=845e07c0 R05=852363c0 R06=00000000 R07=00000014 R08=852363d8 R09=0000024b R10=002ec2b8 R11=df8019f4 R12=002eccc9 R13=df801928 R14=8168626c R15=81684228 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=7efc6f9b s17=76fd86b0 d08=76fd86b07efc6f9b s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=827584d8 R01=15581557 R02=00000002 R03=ebb8b030 R04=83f33040 R05=20000093 R06=60000093 R07=00000001 R08=8287341c R09=00000065 R10=00000001 R11=e0465aac R12=e0465a70 R13=e0465a88 R14=819c4754 R15=809ecba8 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000