last executing test programs: 20.134492664s ago: executing program 0 (id=13): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) process_mrelease(r0, 0x0) 19.788894796s ago: executing program 0 (id=14): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40950b20770000010203010902270001010080fa0904000003ff000000070581020002000705020200020007058303400001"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2}, &(0x7f0000000510)={0x40, 0x9, 0x1}, &(0x7f0000000520)={0x40, 0xb, 0x2}, &(0x7f0000000530)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="112233445566"}, &(0x7f0000000550)={0x40, 0x17, 0x6, @random="112233445566"}, &(0x7f0000000560)={0x40, 0x19, 0x2}, &(0x7f0000000570)={0x40, 0x1a, 0x2}, &(0x7f0000000580)={0x40, 0x1c, 0x1}, &(0x7f0000000590)={0x40, 0x1e, 0x1}, &(0x7f00000005a0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 8.377359573s ago: executing program 1 (id=19): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102400000070502024000"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000200)="0000ff02fed503280000") (async) 7.993381466s ago: executing program 1 (id=20): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendto$llc(r0, &(0x7f0000000100)="01020304", 0x4, 0x2404e9ff, 0x0, 0x0) 7.287829341s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0\n', 0x2) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) 6.991810293s ago: executing program 1 (id=22): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendto$llc(r0, &(0x7f0000000100)="01020304", 0x4, 0x4000, 0x0, 0x0) 5.87189981s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='readonly\n', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='idle\n', 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r10, &(0x7f0000000640)='1\n', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r11, &(0x7f00000006c0)='1024\n', 0x5) 4.44321166s ago: executing program 0 (id=24): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102400000070502024000"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000000200)="0000ff02fed50328000000") (async) 2.361541584s ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mtd1\x00', 0x2, 0x0) ioctl(r1, 0x40104d14, &(0x7f0000000380)="00000000000000000000000400000000") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000440)="ffffffff0100"/24) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f00000004c0)="ffffffff0100000000003000000000000300040000000000766f6c3000"/143) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='ubi0_0\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='ubifs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test/file\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000640)='hello\x00', 0x6) 2.032682096s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'lo\x00', 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/infiniband/syz0\x00', 0x0, 0x0) 323.124748ms ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/vkms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/vkms/mydev/crtcs/crtc0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/vkms/mydev/encoders/encoder0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/vkms/mydev/connectors/connector0\x00', 0x1ff) symlinkat(&(0x7f0000000140)='./config/vkms/mydev/crtcs/crtc0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/vkms/mydev/planes/plane0/possible_crtcs/crtc0\x00') symlinkat(&(0x7f0000000140)='./config/vkms/mydev/crtcs/crtc0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/vkms/mydev/encoders/encoder0/possible_crtcs/crtc0\x00') symlinkat(&(0x7f0000000180)='./config/vkms/mydev/encoders/encoder0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/vkms/mydev/connectors/connector0/possible_encoders/encoder0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/vkms/mydev/planes/plane0/type\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/vkms/mydev/enabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x1) 0s ago: executing program 1 (id=28): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0102010400000000") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000140)="010401020000") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000180)="0105010100") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000001c0)="0108010401000000") nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/spi_master/spi0/slave\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='spidev\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/spi_master/spi0/target\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='spidev\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/spi_master/spi1/slave\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='spidev\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/spi_master/spi1/target\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='spidev\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/spi_master/spi2/slave\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='spidev\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/spi_master/spi2/target\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='spidev\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/spi_master/spi3/slave\x00', 0x2, 0x0) write(r7, &(0x7f0000000500)='spidev\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/spi_master/spi3/target\x00', 0x2, 0x0) write(r8, &(0x7f0000000500)='spidev\x00', 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/spi_master/spi4/slave\x00', 0x2, 0x0) write(r9, &(0x7f0000000500)='spidev\x00', 0x7) r10 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/class/spi_master/spi4/target\x00', 0x2, 0x0) write(r10, &(0x7f0000000500)='spidev\x00', 0x7) kernel console output (not intermixed with test programs): [ 203.588601][ T29] audit: type=1400 audit(203.190:80): avc: denied { write } for pid=3356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.397129][ T29] audit: type=1400 audit(204.000:81): avc: denied { write } for pid=3361 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.980196][ T29] audit: type=1400 audit(205.580:82): avc: denied { write } for pid=3367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.703198][ T29] audit: type=1400 audit(206.300:83): avc: denied { write } for pid=3371 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:64624' (ED25519) to the list of known hosts. [ 241.532863][ T29] audit: type=1400 audit(241.130:84): avc: denied { name_bind } for pid=3378 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 241.902938][ T29] audit: type=1400 audit(241.500:85): avc: denied { execute } for pid=3379 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 241.907609][ T29] audit: type=1400 audit(241.510:86): avc: denied { execute_no_trans } for pid=3379 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 248.148949][ T29] audit: type=1400 audit(247.750:87): avc: denied { mounton } for pid=3379 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 248.188485][ T29] audit: type=1400 audit(247.790:88): avc: denied { mount } for pid=3379 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 248.226908][ T3379] cgroup: Unknown subsys name 'net' [ 248.291113][ T29] audit: type=1400 audit(247.890:89): avc: denied { unmount } for pid=3379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 248.622275][ T3379] cgroup: Unknown subsys name 'cpuset' [ 248.691788][ T3379] cgroup: Unknown subsys name 'rlimit' [ 249.108346][ T29] audit: type=1400 audit(248.710:90): avc: denied { setattr } for pid=3379 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.893006][ T3381] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 249.903524][ T29] audit: type=1400 audit(249.500:91): avc: denied { relabelto } for pid=3381 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 249.913386][ T29] audit: type=1400 audit(249.510:92): avc: denied { write } for pid=3381 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 250.022783][ T29] audit: type=1400 audit(249.620:93): avc: denied { read } for pid=3379 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 250.029031][ T29] audit: type=1400 audit(249.620:94): avc: denied { open } for pid=3379 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 250.063178][ T3379] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 283.775417][ T29] audit: type=1400 audit(283.360:95): avc: denied { execmem } for pid=3382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 283.843003][ T29] audit: type=1400 audit(283.440:96): avc: denied { read } for pid=3384 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.858633][ T29] audit: type=1400 audit(283.450:97): avc: denied { open } for pid=3384 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.867075][ T29] audit: type=1400 audit(283.470:98): avc: denied { mounton } for pid=3384 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 283.942266][ T29] audit: type=1400 audit(283.530:99): avc: denied { module_request } for pid=3384 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 284.117198][ T29] audit: type=1400 audit(283.720:100): avc: denied { sys_module } for pid=3384 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.792822][ T3386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.877978][ T3386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.311812][ T3384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.389927][ T3384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.472986][ T3386] hsr_slave_0: entered promiscuous mode [ 296.489405][ T3386] hsr_slave_1: entered promiscuous mode [ 296.917824][ T3384] hsr_slave_0: entered promiscuous mode [ 296.933377][ T3384] hsr_slave_1: entered promiscuous mode [ 296.941292][ T3384] debugfs: 'hsr0' already exists in 'hsr' [ 296.946792][ T3384] Cannot create hsr debugfs directory [ 299.574799][ T29] audit: type=1400 audit(299.170:101): avc: denied { create } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.579506][ T29] audit: type=1400 audit(299.180:102): avc: denied { write } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.591855][ T29] audit: type=1400 audit(299.190:103): avc: denied { read } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.631306][ T3386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 299.742856][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.776888][ T3386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 299.822374][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.839867][ T3386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.878821][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.901090][ T3386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.946800][ T3386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.709120][ T3384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.780937][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.796196][ T3384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.836896][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.872825][ T3384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.930623][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.987279][ T3384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.023384][ T3384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.455382][ T3386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.426369][ T3384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.058638][ T3386] veth0_vlan: entered promiscuous mode [ 316.339052][ T3386] veth1_vlan: entered promiscuous mode [ 316.436487][ T3384] veth0_vlan: entered promiscuous mode [ 316.717562][ T3384] veth1_vlan: entered promiscuous mode [ 317.122604][ T3386] veth0_macvtap: entered promiscuous mode [ 317.219537][ T3386] veth1_macvtap: entered promiscuous mode [ 317.548734][ T3384] veth0_macvtap: entered promiscuous mode [ 317.752413][ T3384] veth1_macvtap: entered promiscuous mode [ 318.182666][ T1613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.308059][ T1613] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.433392][ T1613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.438597][ T1613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.854748][ T1019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.896488][ T1019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.897547][ T1019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.897920][ T1019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.967398][ T29] audit: type=1400 audit(318.570:104): avc: denied { mounton } for pid=3386 comm="syz-executor" path="/syzkaller.GsHnr5/syz-tmp" dev="vda" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 318.976352][ T29] audit: type=1400 audit(318.580:105): avc: denied { mount } for pid=3386 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 318.991035][ T29] audit: type=1400 audit(318.590:106): avc: denied { mounton } for pid=3386 comm="syz-executor" path="/syzkaller.GsHnr5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 319.008849][ T29] audit: type=1400 audit(318.610:107): avc: denied { mount } for pid=3386 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 319.033256][ T29] audit: type=1400 audit(318.630:108): avc: denied { mounton } for pid=3386 comm="syz-executor" path="/syzkaller.GsHnr5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 319.048444][ T29] audit: type=1400 audit(318.650:109): avc: denied { mounton } for pid=3386 comm="syz-executor" path="/syzkaller.GsHnr5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 319.087836][ T29] audit: type=1400 audit(318.690:110): avc: denied { unmount } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 319.106543][ T29] audit: type=1400 audit(318.710:111): avc: denied { mounton } for pid=3386 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 319.120198][ T29] audit: type=1400 audit(318.720:112): avc: denied { mount } for pid=3386 comm="syz-executor" name="/" dev="gadgetfs" ino=4114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 319.228123][ T29] audit: type=1400 audit(318.820:113): avc: denied { mount } for pid=3386 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 319.873223][ T3386] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 324.179243][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 324.192319][ T29] audit: type=1400 audit(323.770:122): avc: denied { write } for pid=3535 comm="syz.0.1" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.717635][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 325.170969][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 325.361678][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.228410][ T9] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, fa:74:0e:b3:e3:74 [ 326.785011][ T29] audit: type=1400 audit(326.380:123): avc: denied { ioctl } for pid=3535 comm="syz.0.1" path="socket:[4143]" dev="sockfs" ino=4143 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.551569][ T29] audit: type=1400 audit(327.150:124): avc: denied { read } for pid=3229 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 332.278635][ T3448] usb 1-1: USB disconnect, device number 2 [ 332.697281][ T3448] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 332.965972][ T29] audit: type=1400 audit(332.530:125): avc: denied { mount } for pid=3542 comm="syz.1.3" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 333.965146][ T29] audit: type=1400 audit(333.560:126): avc: denied { read write } for pid=3542 comm="syz.1.3" name="mtd1" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 333.966501][ T29] audit: type=1400 audit(333.560:127): avc: denied { open } for pid=3542 comm="syz.1.3" path="/dev/mtd1" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 334.089092][ T29] audit: type=1400 audit(333.640:128): avc: denied { ioctl } for pid=3542 comm="syz.1.3" path="/dev/mtd1" dev="devtmpfs" ino=686 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 334.252262][ T3549] ubi0: attaching mtd1 [ 334.368416][ T3549] ubi0: scanning is finished [ 334.375815][ T3549] ubi0: empty MTD device detected [ 334.615722][ T29] audit: type=1400 audit(334.210:129): avc: denied { mount } for pid=3547 comm="syz.0.4" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 335.577447][ T3544] ftl_cs: FTL header not found. [ 335.637537][ T3549] ubi0: attached mtd1 (name "mtdram test device", size 0 MiB) [ 335.638474][ T3549] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 335.666114][ T3549] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 335.666961][ T3549] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 335.667091][ T3549] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 335.667195][ T3549] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 335.667317][ T3549] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3675142985 [ 335.667481][ T3549] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 335.686532][ T3554] ubi0: background thread "ubi_bgt0d" started, PID 3554 [ 336.748750][ T3544] block2mtd: mtd2: [/dev/loop0] erase_size = 64KiB [65536] [ 336.779818][ T3559] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 336.787702][ T3558] ubi: mtd1 is already attached to ubi0 [ 336.795563][ T3559] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 339.869018][ T3550] ftl_cs: FTL header not found. [ 340.145277][ T29] audit: type=1400 audit(339.690:130): avc: denied { unmount } for pid=3386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 340.175869][ T29] audit: type=1400 audit(339.760:131): avc: denied { write } for pid=3565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.181305][ T29] audit: type=1400 audit(339.780:132): avc: denied { create } for pid=3565 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.244903][ T29] audit: type=1400 audit(339.830:133): avc: denied { write open } for pid=3565 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.255574][ T29] audit: type=1400 audit(339.850:134): avc: denied { append } for pid=3565 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.353467][ T29] audit: type=1400 audit(339.950:135): avc: denied { getattr } for pid=3565 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.642167][ T3550] block2mtd: mtd3: [/dev/ram0] erase_size = 4KiB [4096] [ 341.307920][ T29] audit: type=1400 audit(340.900:136): avc: denied { unmount } for pid=3384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 341.683185][ T29] audit: type=1400 audit(341.280:137): avc: denied { read } for pid=3570 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.755387][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 343.087991][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 343.135243][ T9] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 343.135689][ T9] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 343.136004][ T9] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 343.136089][ T9] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 343.136259][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 343.136445][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.204818][ T29] audit: type=1400 audit(342.800:138): avc: denied { write } for pid=3575 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.214963][ T29] audit: type=1400 audit(342.810:139): avc: denied { unlink } for pid=3575 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 343.242071][ T3577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.317949][ T3577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.336951][ T3577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.366062][ T3577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 348.039183][ T29] audit: type=1400 audit(347.640:140): avc: denied { write } for pid=3584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.192736][ T3589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.225740][ T3589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.179370][ T29] audit: type=1400 audit(350.780:141): avc: denied { write } for pid=3594 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.398090][ T3603] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 354.701386][ T3600] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 354.928957][ T3600] virtio_blk virtio3: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 355.279021][ T3602] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 355.296743][ T3604] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 355.302085][ T3598] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 355.316398][ T3598] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 356.847192][ T3606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.851413][ T3606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.093136][ T10] usb 1-1: USB disconnect, device number 3 [ 359.875464][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 360.115708][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 360.118084][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 360.159504][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 360.162169][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 360.229594][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.234770][ T10] usb 1-1: Product: syz [ 360.236541][ T10] usb 1-1: Manufacturer: syz [ 360.237864][ T10] usb 1-1: SerialNumber: syz [ 360.348991][ T3617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.366362][ T3617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.689343][ T3617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.776010][ T3617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.941082][ T3619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.045562][ T3619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.066763][ T10] asix 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 361.078777][ T10] asix 1-1:1.0: probe with driver asix failed with error -61 [ 363.706332][ T3621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.727574][ T3621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.322782][ T29] audit: type=1400 audit(364.920:142): avc: denied { kexec_image_load } for pid=3623 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 370.941966][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.989503][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.677549][ T3489] usb 1-1: USB disconnect, device number 4 [ 371.812388][ T29] audit: type=1400 audit(371.410:143): avc: denied { create } for pid=3632 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.899105][ T29] audit: type=1400 audit(371.470:144): avc: denied { connect } for pid=3632 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.938316][ T29] audit: type=1400 audit(371.540:145): avc: denied { write } for pid=3632 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.222909][ T3643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 374.588065][ T3643] md: could not open device unknown-block(1,0). [ 375.505293][ T804] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 375.783029][ T804] usb 1-1: not running at top speed; connect to a high speed hub [ 375.788853][ T804] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 375.809805][ T3643] md/raid1:md0: active with 1 out of 2 mirrors [ 375.847413][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.059497][ T3649] md_update_sb: can't update sb for read-only array md0 [ 376.649954][ T804] usb 1-1: NFC: Reader power on cmd error -71 [ 376.650853][ T804] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 376.651834][ T804] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -71 [ 376.960741][ T804] usb 1-1: USB disconnect, device number 5 [ 377.961288][ T3652] block2mtd: error: cannot open device /dev/ram0 [ 378.060725][ T3652] ubi: mtd1 is already attached to ubi0 [ 378.163109][ T3652] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 378.176055][ T3652] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 379.269061][ T29] audit: type=1400 audit(378.870:146): avc: denied { mount } for pid=3657 comm="syz.0.27" name="/" dev="configfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 379.287911][ T29] audit: type=1400 audit(378.880:147): avc: denied { search } for pid=3657 comm="syz.0.27" name="/" dev="configfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.339840][ T29] audit: type=1400 audit(378.930:148): avc: denied { search } for pid=3657 comm="syz.0.27" name="/" dev="configfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.340804][ T29] audit: type=1400 audit(378.930:149): avc: denied { search } for pid=3657 comm="syz.0.27" name="vkms" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.378090][ T29] audit: type=1400 audit(378.930:150): avc: denied { read write } for pid=3386 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.389253][ T29] audit: type=1400 audit(378.930:151): avc: denied { write search } for pid=3657 comm="syz.0.27" name="vkms" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.390200][ T29] audit: type=1400 audit(378.930:152): avc: denied { open } for pid=3386 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.390523][ T29] audit: type=1400 audit(378.940:153): avc: denied { ioctl } for pid=3386 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.390786][ T29] audit: type=1400 audit(378.970:154): avc: denied { add_name } for pid=3657 comm="syz.0.27" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.416321][ T29] audit: type=1400 audit(378.980:155): avc: denied { create } for pid=3657 comm="syz.0.27" name="mydev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 379.652033][ T3660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.697228][ T3660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.082915][ T3658] ------------[ cut here ]------------ [ 380.087028][ T3658] [PLANE:35:plane-0] pixel format with alpha exposed but blend mode not setup [ 380.116289][ T3658] WARNING: drivers/gpu/drm/drm_mode_config.c:872 at drm_mode_config_validate+0xa64/0x1914, CPU#1: syz.0.27/3658 [ 380.117564][ T3658] Modules linked in: [ 380.118065][ T3658] CPU: 1 UID: 0 PID: 3658 Comm: syz.0.27 Tainted: G W syzkaller #0 PREEMPT [ 380.118583][ T3658] Tainted: [W]=WARN [ 380.118859][ T3658] Hardware name: linux,dummy-virt (DT) [ 380.119172][ T3658] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 380.119599][ T3658] pc : drm_mode_config_validate+0xa64/0x1914 [ 380.120088][ T3658] lr : drm_mode_config_validate+0xa64/0x1914 [ 380.120543][ T3658] sp : ffff8000a1db7870 [ 380.120799][ T3658] x29: ffff8000a1db7880 x28: ffff00001577f080 x27: 0000000000000001 [ 380.121421][ T3658] x26: dfff800000000000 x25: ffff0000219347c0 x24: ffff00001577f170 [ 380.122029][ T3658] x23: ffff00001577f178 x22: 0000000000000003 x21: ffff600002aefe2e [ 380.122792][ T3658] x20: 0000000000000000 x19: 1fffe00002aefe2f x18: 0000000000000000 [ 380.123415][ T3658] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000877cb698 [ 380.124113][ T3658] x14: 1ffff00010ef96d3 x13: ffff800089ec0508 x12: ffff60000d7f6a22 [ 380.124930][ T3658] x11: 1fffe0000d7f6a21 x10: ffff60000d7f6a21 x9 : dfff800000000000 [ 380.125543][ T3658] x8 : ffff8000a1db73a0 x7 : ffff8000a1db7520 x6 : ffff8000a1db74c0 [ 380.126148][ T3658] x5 : ffff8000a1db7400 x4 : 0000000000000005 x3 : 1fffe0000d7f5b5d [ 380.126772][ T3658] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000014615700 [ 380.127356][ T3658] Call trace: [ 380.127600][ T3658] drm_mode_config_validate+0xa64/0x1914 (P) [ 380.128024][ T3658] drm_dev_register+0x3d0/0x7e0 [ 380.128410][ T3658] vkms_create+0x378/0x450 [ 380.128780][ T3658] device_enabled_store+0x1c8/0x22c [ 380.129127][ T3658] configfs_write_iter+0x244/0x398 [ 380.129500][ T3658] vfs_write+0x4c0/0xbac [ 380.129825][ T3658] ksys_write+0xf0/0x1e0 [ 380.130149][ T3658] __arm64_sys_write+0x70/0xa0 [ 380.130498][ T3658] invoke_syscall+0x74/0x240 [ 380.130854][ T3658] el0_svc_common.constprop.0+0xac/0x230 [ 380.131224][ T3658] do_el0_svc+0x40/0x58 [ 380.131547][ T3658] el0_svc+0x58/0x2a4 [ 380.131900][ T3658] el0t_64_sync_handler+0xa0/0xe4 [ 380.132302][ T3658] el0t_64_sync+0x198/0x19c [ 380.132709][ T3658] irq event stamp: 5562 [ 380.132959][ T3658] hardirqs last enabled at (5561): [] finish_task_switch.isra.0+0x1e4/0x9f0 [ 380.133453][ T3658] hardirqs last disabled at (5562): [] el1_brk64+0x20/0x54 [ 380.133983][ T3658] softirqs last enabled at (5552): [] handle_softirqs+0xa98/0x1048 [ 380.134291][ T3658] softirqs last disabled at (5463): [] __do_softirq+0x14/0x20 [ 380.134540][ T3658] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 380.642589][ T3658] [drm] Initialized vkms 1.0.0 for mydev on minor 2 [ 381.982566][ T3658] faux_driver mydev: [drm] fb1: vkmsdrmfb frame buffer device [ 382.659779][ T3563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.307794][ T3563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.739816][ T3563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.083071][ T3563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.810339][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.885596][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.937465][ T3563] bond0 (unregistering): Released all slaves [ 388.312077][ T3563] hsr_slave_0: left promiscuous mode [ 388.330037][ T3563] hsr_slave_1: left promiscuous mode [ 388.401723][ T3563] veth1_macvtap: left promiscuous mode [ 388.408869][ T3563] veth0_macvtap: left promiscuous mode [ 388.411001][ T3563] veth1_vlan: left promiscuous mode [ 388.416199][ T3563] veth0_vlan: left promiscuous mode [ 389.545808][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 389.546645][ T29] audit: type=1400 audit(389.140:224): avc: denied { write } for pid=3664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.087007][ T29] audit: type=1400 audit(390.690:225): avc: denied { write } for pid=3667 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.366584][ T3229] 8021q: adding VLAN 0 to HW filter on device eth1 [ 395.230805][ T3563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.549731][ T3563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.747990][ T3563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.035692][ T3563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.386102][ T29] audit: type=1400 audit(395.980:226): avc: denied { write } for pid=3671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.294806][ T29] audit: type=1400 audit(397.880:227): avc: denied { write } for pid=3676 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.886847][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.958794][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.020651][ T3563] bond0 (unregistering): Released all slaves [ 400.139003][ T3229] 8021q: adding VLAN 0 to HW filter on device eth2 [ 400.302357][ T3563] hsr_slave_0: left promiscuous mode [ 400.331646][ T3563] hsr_slave_1: left promiscuous mode [ 400.411745][ T3563] veth1_macvtap: left promiscuous mode [ 400.413047][ T3563] veth0_macvtap: left promiscuous mode [ 400.419759][ T3563] veth1_vlan: left promiscuous mode [ 400.421328][ T3563] veth0_vlan: left promiscuous mode [ 406.977555][ T29] audit: type=1400 audit(406.580:228): avc: denied { write } for pid=3682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.753516][ T29] audit: type=1400 audit(407.350:229): avc: denied { write } for pid=3685 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.515605][ T3229] 8021q: adding VLAN 0 to HW filter on device eth3