last executing test programs: 31m40.942919499s ago: executing program 0 (id=71): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) connect$can_j1939(r0, &(0x7f0000000140), 0x18) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0}], 0x2) 31m39.417029511s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00001b0000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000a0000)={0x0, 0x0, &(0x7f00000a0040)={&(0x7f00000a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) 31m29.086223914s ago: executing program 0 (id=75): syz_emit_ethernet(0xde, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004d0000d0fffd000000119078ac"], 0x0) 31m28.019274113s ago: executing program 0 (id=77): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) connect$can_j1939(r0, &(0x7f0000000140), 0x18) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0}], 0x2) 31m25.90573167s ago: executing program 0 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000005e000100278cef4deeb35dc9b880bc4aa5"], 0x1c}}, 0x884) 31m20.752653761s ago: executing program 0 (id=80): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) shutdown(r0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) 30m33.675749968s ago: executing program 32 (id=80): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) shutdown(r0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) 23m15.267016351s ago: executing program 1 (id=218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10000014}, 0x4084) 23m12.858022941s ago: executing program 1 (id=219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 23m9.667692986s ago: executing program 1 (id=221): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a6d2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x40800) lsm_list_modules(0x0, 0x0, 0x0) 22m58.087359429s ago: executing program 1 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x12, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0\n\x00', 0x3) 22m56.905349329s ago: executing program 1 (id=225): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 22m44.033004182s ago: executing program 1 (id=227): syz_emit_ethernet(0x60, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 21m58.536218386s ago: executing program 33 (id=227): syz_emit_ethernet(0x60, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 6m31.884650438s ago: executing program 3 (id=492): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m25.166856962s ago: executing program 3 (id=494): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xd8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 6m18.515317635s ago: executing program 3 (id=496): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) socket(0x1e, 0x4, 0x0) write$nci(r0, 0x0, 0x14) 6m12.469367043s ago: executing program 3 (id=499): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0080000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020200500000000000000bfa100000000060007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r0, 0x0, 0x0}, 0x10) 6m11.022111725s ago: executing program 3 (id=500): r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200027, 0x801, 0x4, 0x7}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) 6m9.876890284s ago: executing program 3 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 5m24.716101335s ago: executing program 34 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 26.603049252s ago: executing program 2 (id=559): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x2004a080) 24.358204909s ago: executing program 2 (id=560): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21.324510433s ago: executing program 2 (id=561): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00), 0x0, 0xce}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(0x0, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4622}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 12.065373945s ago: executing program 2 (id=562): prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x1, 'syzkaller1\x00', {}, 0xfff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 1.876149805s ago: executing program 2 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='1.0', 0x3) read(r0, 0x0, 0x0) 0s ago: executing program 2 (id=564): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) kernel console output (not intermixed with test programs): for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 329.107820][ T30] audit: type=1400 audit(328.670:133): avc: denied { create } for pid=3557 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 329.130688][ T30] audit: type=1400 audit(328.700:134): avc: denied { accept } for pid=3557 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 329.162371][ T30] audit: type=1400 audit(328.720:135): avc: denied { setopt } for pid=3557 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 331.254009][ T30] audit: type=1400 audit(330.820:136): avc: denied { mount } for pid=3554 comm="syz.1.7" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 339.569673][ T30] audit: type=1400 audit(339.140:137): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 339.721417][ T30] audit: type=1400 audit(339.290:138): avc: denied { read write } for pid=3561 comm="syz.0.13" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.728278][ T30] audit: type=1400 audit(339.290:139): avc: denied { open } for pid=3561 comm="syz.0.13" path="/dev/raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.744096][ T30] audit: type=1400 audit(339.300:140): avc: denied { ioctl } for pid=3561 comm="syz.0.13" path="/dev/raw-gadget" dev="devtmpfs" ino=704 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.158175][ T3448] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 340.399872][ T3448] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 340.516115][ T3448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.541674][ T3448] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 340.542341][ T3448] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 340.546727][ T3448] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.547603][ T3448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.656022][ T3448] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 2 [ 344.766577][ T30] audit: type=1400 audit(344.320:141): avc: denied { setopt } for pid=3570 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 344.790313][ T30] audit: type=1400 audit(344.340:142): avc: denied { connect } for pid=3570 comm="syz.0.10" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.121544][ T3448] gud 1-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 345.421283][ T3448] usb 1-1: USB disconnect, device number 2 [ 350.440033][ T30] audit: type=1400 audit(349.980:143): avc: denied { mounton } for pid=3572 comm="syz.0.11" path="/proc/17/task" dev="proc" ino=4244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 353.976235][ T30] audit: type=1400 audit(353.540:144): avc: denied { read write } for pid=3383 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.980741][ T30] audit: type=1400 audit(353.540:145): avc: denied { open } for pid=3383 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.023637][ T30] audit: type=1400 audit(353.540:146): avc: denied { ioctl } for pid=3383 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.002129][ T30] audit: type=1400 audit(358.570:147): avc: denied { map_create } for pid=3580 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 359.020163][ T30] audit: type=1400 audit(358.570:148): avc: denied { bpf } for pid=3580 comm="syz.0.14" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.052553][ T30] audit: type=1400 audit(358.620:149): avc: denied { map_read map_write } for pid=3580 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 359.078102][ T30] audit: type=1400 audit(358.650:150): avc: denied { prog_load } for pid=3580 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 359.103395][ T30] audit: type=1400 audit(358.670:151): avc: denied { perfmon } for pid=3580 comm="syz.0.14" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.271111][ T30] audit: type=1400 audit(358.840:152): avc: denied { prog_run } for pid=3580 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 360.148650][ T30] audit: type=1400 audit(359.700:153): avc: denied { read write } for pid=3582 comm="syz.0.15" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 360.152410][ T30] audit: type=1400 audit(359.720:154): avc: denied { open } for pid=3582 comm="syz.0.15" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 360.270149][ T30] audit: type=1400 audit(359.840:155): avc: denied { allowed } for pid=3577 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 360.482946][ T30] audit: type=1400 audit(360.050:156): avc: denied { unmount } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 360.926537][ T3587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16'. [ 362.103317][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 362.268519][ T9] usb 1-1: device descriptor read/64, error -71 [ 362.516681][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 362.699547][ T9] usb 1-1: device descriptor read/64, error -71 [ 362.809331][ T9] usb usb1-port1: attempt power cycle [ 363.207297][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 363.241632][ T9] usb 1-1: device descriptor read/8, error -71 [ 363.671564][ T3599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.712821][ T3599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.113380][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 364.114338][ T30] audit: type=1400 audit(363.680:159): avc: denied { create } for pid=3602 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 364.143684][ T30] audit: type=1400 audit(363.710:160): avc: denied { read } for pid=3602 comm="syz.0.20" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 364.144826][ T30] audit: type=1400 audit(363.710:161): avc: denied { open } for pid=3602 comm="syz.0.20" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 364.243282][ T30] audit: type=1400 audit(363.810:162): avc: denied { read append } for pid=3602 comm="syz.0.20" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 364.243835][ T30] audit: type=1400 audit(363.810:163): avc: denied { open } for pid=3602 comm="syz.0.20" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 364.262570][ T30] audit: type=1400 audit(363.830:164): avc: denied { ioctl } for pid=3602 comm="syz.0.20" path="/dev/dri/card1" dev="devtmpfs" ino=619 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 364.823680][ T30] audit: type=1400 audit(364.390:165): avc: denied { mount } for pid=3606 comm="syz.0.21" name="/" dev="ramfs" ino=4303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 364.890656][ T30] audit: type=1400 audit(364.460:166): avc: denied { create } for pid=3606 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 364.913557][ T30] audit: type=1400 audit(364.480:167): avc: denied { setopt } for pid=3606 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.791144][ T30] audit: type=1400 audit(365.330:168): avc: denied { create } for pid=3609 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.384244][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 369.392174][ T30] audit: type=1400 audit(368.950:172): avc: denied { mount } for pid=3616 comm="syz.0.24" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 369.800304][ T3617] psci: CPU1 killed (polled 0 ms) [ 371.482636][ T30] audit: type=1400 audit(371.020:173): avc: denied { unmount } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 376.962445][ T30] audit: type=1400 audit(376.520:174): avc: denied { write } for pid=3624 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.744171][ T26] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.766735][ T26] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.774305][ T26] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.809508][ T26] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.116419][ T30] audit: type=1400 audit(391.680:175): avc: denied { ioctl } for pid=3634 comm="syz.0.31" path="socket:[4043]" dev="sockfs" ino=4043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.133651][ T30] audit: type=1400 audit(391.690:176): avc: denied { bind } for pid=3634 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.143752][ T30] audit: type=1400 audit(391.710:177): avc: denied { connect } for pid=3634 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.195862][ T30] audit: type=1400 audit(391.740:178): avc: denied { write } for pid=3634 comm="syz.0.31" path="socket:[4043]" dev="sockfs" ino=4043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.230038][ T30] audit: type=1400 audit(391.800:179): avc: denied { setopt } for pid=3634 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 413.854282][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f909f41b: rx timeout, send abort [ 413.919099][ T30] audit: type=1400 audit(413.450:180): avc: denied { read } for pid=3183 comm="syslogd" name="log" dev="vda" ino=1857 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 413.919655][ T30] audit: type=1400 audit(413.480:181): avc: denied { search } for pid=3183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.920014][ T30] audit: type=1400 audit(413.480:182): avc: denied { write search } for pid=3183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.920264][ T30] audit: type=1400 audit(413.480:183): avc: denied { add_name } for pid=3183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.920546][ T30] audit: type=1400 audit(413.480:184): avc: denied { create } for pid=3183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 413.954307][ T30] audit: type=1400 audit(413.520:185): avc: denied { append open } for pid=3183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.000206][ T30] audit: type=1400 audit(413.570:186): avc: denied { getattr } for pid=3183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.357431][ C0] vcan0: j1939_tp_rxtimer: 0x000000004e3f58b2: rx timeout, send abort [ 414.358143][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f909f41b: abort rx timeout. Force session deactivation [ 414.858404][ C0] vcan0: j1939_tp_rxtimer: 0x000000004e3f58b2: abort rx timeout. Force session deactivation [ 415.737303][ T30] audit: type=1400 audit(415.290:187): avc: denied { write } for pid=3653 comm="syz.1.39" name="usb_gadget" dev="configfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 415.828081][ T30] audit: type=1400 audit(415.390:188): avc: denied { add_name } for pid=3653 comm="syz.1.39" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 415.928162][ T30] audit: type=1400 audit(415.480:189): avc: denied { create } for pid=3653 comm="syz.1.39" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 422.011163][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 422.031578][ T30] audit: type=1400 audit(421.570:197): avc: denied { write } for pid=3659 comm="syz.1.43" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 424.129083][ T3662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.150736][ T3662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.562546][ T30] audit: type=1400 audit(425.130:198): avc: denied { name_bind } for pid=3664 comm="syz.1.45" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 445.507515][ T3683] ip_tables: iptables: counters copy to user failed while replacing table [ 459.226836][ T30] audit: type=1400 audit(458.790:199): avc: denied { create } for pid=3688 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.242625][ T30] audit: type=1400 audit(458.810:200): avc: denied { setopt } for pid=3688 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.273566][ T30] audit: type=1400 audit(458.840:201): avc: denied { write } for pid=3688 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.286994][ T30] audit: type=1400 audit(458.850:202): avc: denied { nlmsg_write } for pid=3688 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 463.182617][ T30] audit: type=1400 audit(462.750:203): avc: denied { bind } for pid=3692 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.384547][ T30] audit: type=1400 audit(464.700:204): avc: denied { ioctl } for pid=3691 comm="syz.1.55" path="socket:[5284]" dev="sockfs" ino=5284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.417057][ T30] audit: type=1400 audit(464.900:205): avc: denied { setopt } for pid=3691 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 476.529462][ T3702] FAULT_INJECTION: forcing a failure. [ 476.529462][ T3702] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 476.532201][ T3702] CPU: 0 UID: 0 PID: 3702 Comm: syz.0.58 Tainted: G W syzkaller #0 PREEMPT [ 476.532363][ T3702] Tainted: [W]=WARN [ 476.532395][ T3702] Hardware name: linux,dummy-virt (DT) [ 476.532456][ T3702] Call trace: [ 476.532554][ T3702] show_stack+0x18/0x24 (C) [ 476.532762][ T3702] dump_stack_lvl+0x7c/0xb0 [ 476.532838][ T3702] dump_stack+0x1c/0x28 [ 476.532890][ T3702] should_fail_ex+0x6b4/0x6c4 [ 476.532997][ T3702] should_fail+0x14/0x34 [ 476.533071][ T3702] should_fail_usercopy+0x1c/0x40 [ 476.533165][ T3702] drm_ioctl+0x440/0xbfc [ 476.533269][ T3702] __arm64_sys_ioctl+0x128/0x1a8 [ 476.533353][ T3702] invoke_syscall+0x74/0x240 [ 476.533460][ T3702] el0_svc_common.constprop.0+0xac/0x230 [ 476.533566][ T3702] do_el0_svc+0x40/0x58 [ 476.533667][ T3702] el0_svc+0x58/0x2a4 [ 476.533759][ T3702] el0t_64_sync_handler+0xa0/0xe4 [ 476.533868][ T3702] el0t_64_sync+0x198/0x19c [ 477.330957][ T3704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 486.458783][ T30] audit: type=1400 audit(485.980:206): avc: denied { unmount } for pid=3385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 488.707399][ T3710] nft_compat: unsupported protocol 5 [ 488.713408][ T30] audit: type=1400 audit(488.260:207): avc: denied { write } for pid=3706 comm="syz.0.60" name="c.1" dev="configfs" ino=5145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 508.023794][ T30] audit: type=1400 audit(507.580:208): avc: denied { read write } for pid=3723 comm="syz.0.65" name="rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 508.061640][ T30] audit: type=1400 audit(507.600:209): avc: denied { open } for pid=3723 comm="syz.0.65" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 508.163231][ T30] audit: type=1400 audit(507.720:210): avc: denied { write } for pid=3718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.203573][ T30] audit: type=1400 audit(507.750:211): avc: denied { create } for pid=3718 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.246325][ T30] audit: type=1400 audit(507.800:212): avc: denied { write open } for pid=3718 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=1182 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.273089][ T30] audit: type=1400 audit(507.840:213): avc: denied { append } for pid=3718 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1182 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.298605][ T30] audit: type=1400 audit(507.850:214): avc: denied { create } for pid=3723 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.344411][ T30] audit: type=1400 audit(507.900:215): avc: denied { getattr } for pid=3718 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 510.747479][ T30] audit: type=1400 audit(510.300:216): avc: denied { read } for pid=3725 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 510.786637][ T3456] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 511.027827][ T3456] usb 1-1: Using ep0 maxpacket: 32 [ 511.086881][ T3456] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 511.275816][ T3456] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 511.277598][ T3456] usb 1-1: config 0 has no interface number 0 [ 511.278961][ T3456] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.299475][ T3456] usb 1-1: config 0 interface 85 has no altsetting 0 [ 513.522835][ T3456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.523177][ T3456] usb 1-1: Product: syz [ 513.523432][ T3456] usb 1-1: Manufacturer: syz [ 513.523560][ T3456] usb 1-1: SerialNumber: syz [ 513.649848][ T3456] usb 1-1: config 0 descriptor?? [ 518.971250][ T3456] usb 1-1: USB disconnect, device number 7 [ 519.476094][ T30] audit: type=1400 audit(519.030:217): avc: denied { write } for pid=3729 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.486695][ T30] audit: type=1400 audit(519.050:218): avc: denied { unlink } for pid=3729 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=1182 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 520.236574][ T30] audit: type=1400 audit(519.790:219): avc: denied { watch watch_reads } for pid=3732 comm="syz.0.68" path="/41/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 526.789062][ T30] audit: type=1400 audit(526.340:220): avc: denied { bind } for pid=3744 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.897863][ T30] audit: type=1400 audit(526.460:221): avc: denied { setopt } for pid=3744 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.967858][ T30] audit: type=1400 audit(526.520:222): avc: denied { accept } for pid=3744 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 536.623923][ T3752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.74'. [ 541.168371][ T30] audit: type=1400 audit(540.720:223): avc: denied { read } for pid=3759 comm="syz.1.78" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 541.266257][ T30] audit: type=1400 audit(540.830:224): avc: denied { open } for pid=3759 comm="syz.1.78" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 546.026317][ T3765] capability: warning: `syz.1.78' uses 32-bit capabilities (legacy support in use) [ 548.226354][ T3765] Zero length message leads to an empty skb [ 558.152372][ T30] audit: type=1400 audit(557.700:225): avc: denied { mmap_zero } for pid=3772 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 595.602469][ T3795] syzkaller0: entered promiscuous mode [ 595.659932][ T3795] syzkaller0: entered allmulticast mode [ 605.886075][ T30] audit: type=1400 audit(605.440:226): avc: denied { create } for pid=3804 comm="syz.1.90" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 606.069954][ T30] audit: type=1400 audit(605.640:227): avc: denied { ioctl } for pid=3804 comm="syz.1.90" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5590 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 625.110122][ T30] audit: type=1400 audit(624.670:228): avc: denied { create } for pid=3815 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 625.378433][ T30] audit: type=1400 audit(624.940:229): avc: denied { bind } for pid=3815 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 625.548921][ T30] audit: type=1400 audit(625.100:230): avc: denied { listen } for pid=3815 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 625.728036][ T30] audit: type=1400 audit(625.260:231): avc: denied { connect } for pid=3815 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 626.014721][ T30] audit: type=1400 audit(625.570:232): avc: denied { write } for pid=3815 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 626.186694][ T30] audit: type=1400 audit(625.670:233): avc: denied { accept } for pid=3815 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 626.227763][ T30] audit: type=1400 audit(625.770:234): avc: denied { read } for pid=3815 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 627.281543][ T30] audit: type=1400 audit(626.850:235): avc: denied { write } for pid=3819 comm="syz.1.93" name="functions" dev="configfs" ino=5139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 627.291105][ T3820] LUN: removable file: (no medium) [ 627.312290][ T30] audit: type=1400 audit(626.880:236): avc: denied { read } for pid=3819 comm="syz.1.93" name="nofua" dev="configfs" ino=5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 628.449364][ T30] audit: type=1400 audit(628.010:237): avc: denied { read } for pid=3821 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.991261][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 653.267027][ T30] audit: type=1400 audit(652.830:238): avc: denied { read } for pid=3228 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 660.622344][ T2161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.688450][ T2161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.747685][ T2161] bond0 (unregistering): Released all slaves [ 662.690767][ T2161] hsr_slave_0: left promiscuous mode [ 663.030036][ T2161] hsr_slave_1: left promiscuous mode [ 663.627969][ T30] audit: type=1400 audit(663.170:239): avc: denied { create } for pid=3851 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 700.559902][ T30] audit: type=1326 audit(700.120:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.1.104" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f782e8 code=0x7ffc0000 [ 700.617823][ T30] audit: type=1326 audit(700.160:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.1.104" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f782e8 code=0x7ffc0000 [ 700.661846][ T30] audit: type=1326 audit(700.230:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.1.104" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa2f782e8 code=0x7ffc0000 [ 700.767750][ T30] audit: type=1326 audit(700.260:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.1.104" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f782e8 code=0x7ffc0000 [ 700.768754][ T30] audit: type=1326 audit(700.320:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.1.104" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f782e8 code=0x7ffc0000 [ 711.077403][ T30] audit: type=1326 audit(710.630:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.1.105" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f782e8 code=0x0 [ 723.853772][ T30] audit: type=1400 audit(723.420:246): avc: denied { mounton } for pid=3890 comm="syz.1.109" path="/58/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 723.948022][ T3892] fuse: Unknown parameter 'ÿÿÿÿ' [ 724.587021][ T30] audit: type=1400 audit(724.150:247): avc: denied { write } for pid=3887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.311137][ T30] audit: type=1400 audit(728.880:248): avc: denied { write } for pid=3898 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.800461][ T3228] 8021q: adding VLAN 0 to HW filter on device eth1 [ 733.377863][ T30] audit: type=1400 audit(732.930:249): avc: denied { mount } for pid=3908 comm="syz.1.112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 733.447758][ T30] audit: type=1400 audit(733.000:250): avc: denied { search } for pid=3908 comm="syz.1.112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.468259][ T30] audit: type=1400 audit(733.030:251): avc: denied { search } for pid=3908 comm="syz.1.112" name="per_cpu" dev="tracefs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.499300][ T30] audit: type=1400 audit(733.060:252): avc: denied { search } for pid=3908 comm="syz.1.112" name="cpu0" dev="tracefs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.574453][ T30] audit: type=1400 audit(733.130:253): avc: denied { read } for pid=3908 comm="syz.1.112" name="trace_pipe_raw" dev="tracefs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 733.613761][ T30] audit: type=1400 audit(733.160:254): avc: denied { open } for pid=3908 comm="syz.1.112" path="/61/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 733.828346][ T30] audit: type=1400 audit(733.380:255): avc: denied { write } for pid=3908 comm="syz.1.112" name="trace_pipe_raw" dev="tracefs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 735.236236][ T30] audit: type=1400 audit(734.750:256): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 738.728854][ T3797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.973631][ T3797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.096013][ T30] audit: type=1400 audit(742.650:257): avc: denied { write } for pid=3917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.631345][ T30] audit: type=1400 audit(746.200:258): avc: denied { write } for pid=3925 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.190051][ T3228] 8021q: adding VLAN 0 to HW filter on device eth2 [ 755.432234][ T3797] hsr_slave_0: entered promiscuous mode [ 755.530534][ T3797] hsr_slave_1: entered promiscuous mode [ 755.639064][ T3797] debugfs: 'hsr0' already exists in 'hsr' [ 755.657933][ T3797] Cannot create hsr debugfs directory [ 759.700323][ T30] audit: type=1400 audit(759.260:259): avc: denied { write } for pid=3940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.107647][ T30] audit: type=1400 audit(759.650:260): avc: denied { write } for pid=3945 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 763.328928][ T30] audit: type=1400 audit(762.830:261): avc: denied { write } for pid=3950 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.328966][ T30] audit: type=1400 audit(764.890:262): avc: denied { read write } for pid=3955 comm="syz.1.121" name="vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 765.347320][ T30] audit: type=1400 audit(764.910:263): avc: denied { open } for pid=3955 comm="syz.1.121" path="/dev/vhost-net" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 765.418223][ T30] audit: type=1400 audit(764.980:264): avc: denied { ioctl } for pid=3955 comm="syz.1.121" path="/dev/vhost-net" dev="devtmpfs" ino=716 ioctlcmd=0xaf85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 765.511334][ T3228] 8021q: adding VLAN 0 to HW filter on device eth3 [ 766.964074][ T3797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 767.367263][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.442148][ T3797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 767.898723][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.953845][ T3797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 768.150039][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.269822][ T3797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 768.507465][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.582823][ T30] audit: type=1400 audit(771.140:265): avc: denied { read } for pid=3973 comm="syz.1.124" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 771.586196][ T30] audit: type=1400 audit(771.150:266): avc: denied { open } for pid=3973 comm="syz.1.124" path="/dev/fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 771.637630][ T30] audit: type=1400 audit(771.200:267): avc: denied { ioctl } for pid=3973 comm="syz.1.124" path="/dev/fb0" dev="devtmpfs" ino=620 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 774.840342][ T30] audit: type=1400 audit(774.390:268): avc: denied { write } for pid=3976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.673399][ T30] audit: type=1400 audit(779.980:269): avc: denied { setopt } for pid=3983 comm="syz.1.126" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.834020][ T30] audit: type=1400 audit(790.380:270): avc: denied { write } for pid=3992 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.598702][ T3228] 8021q: adding VLAN 0 to HW filter on device eth4 [ 805.177755][ T3797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.236352][ T30] audit: type=1400 audit(808.760:271): avc: denied { write } for pid=4009 comm="syz.1.130" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 809.425892][ T30] audit: type=1400 audit(808.990:272): avc: denied { ioctl } for pid=4009 comm="syz.1.130" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 809.498583][ T4010] binder: 4009:4010 got transaction to invalid handle, 1 [ 809.640328][ T4010] binder: 4009:4010 cannot find target node [ 809.667040][ T4010] binder: 4009:4010 transaction call to 0:0 failed 1/29201/-22, code 0 size 0-0 line 3252 [ 809.748312][ T3630] binder: undelivered TRANSACTION_ERROR: 29201 [ 811.807758][ T30] audit: type=1400 audit(811.320:273): avc: denied { search } for pid=4011 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.168328][ T30] audit: type=1400 audit(811.630:274): avc: denied { create } for pid=4014 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 812.276731][ T30] audit: type=1400 audit(811.830:275): avc: denied { sys_admin } for pid=4014 comm="syz.1.131" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 818.338410][ T30] audit: type=1400 audit(817.890:276): avc: denied { read } for pid=4027 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.367367][ T30] audit: type=1400 audit(817.930:277): avc: denied { read open } for pid=4027 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.392780][ T30] audit: type=1400 audit(817.950:278): avc: denied { getattr } for pid=4027 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=933 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.228793][ T30] audit: type=1400 audit(818.770:279): avc: denied { write } for pid=4024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.229795][ T30] audit: type=1400 audit(818.770:280): avc: denied { add_name } for pid=4024 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.486630][ T4032] FAULT_INJECTION: forcing a failure. [ 822.486630][ T4032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.489715][ T4032] CPU: 0 UID: 0 PID: 4032 Comm: syz.1.133 Tainted: G W syzkaller #0 PREEMPT [ 822.489843][ T4032] Tainted: [W]=WARN [ 822.489872][ T4032] Hardware name: linux,dummy-virt (DT) [ 822.489905][ T4032] Call trace: [ 822.489956][ T4032] show_stack+0x18/0x24 (C) [ 822.490099][ T4032] dump_stack_lvl+0x7c/0xb0 [ 822.490159][ T4032] dump_stack+0x1c/0x28 [ 822.490212][ T4032] should_fail_ex+0x6b4/0x6c4 [ 822.490279][ T4032] should_fail+0x14/0x34 [ 822.490334][ T4032] should_fail_usercopy+0x1c/0x40 [ 822.490390][ T4032] _copy_from_iter+0x17c/0x1044 [ 822.490450][ T4032] bcm_sendmsg+0x10c/0x3940 [ 822.490515][ T4032] __sock_sendmsg+0xc8/0x1a4 [ 822.490571][ T4032] ____sys_sendmsg+0x52c/0x76c [ 822.490622][ T4032] ___sys_sendmsg+0x124/0x1a4 [ 822.490721][ T4032] __sys_sendmsg+0x10c/0x198 [ 822.490779][ T4032] __arm64_sys_sendmsg+0x74/0xa4 [ 822.490833][ T4032] invoke_syscall+0x74/0x240 [ 822.490891][ T4032] el0_svc_common.constprop.0+0xac/0x230 [ 822.490958][ T4032] do_el0_svc+0x40/0x58 [ 822.491013][ T4032] el0_svc+0x58/0x2a4 [ 822.491078][ T4032] el0t_64_sync_handler+0xa0/0xe4 [ 822.491131][ T4032] el0t_64_sync+0x198/0x19c [ 823.366193][ T30] audit: type=1400 audit(822.920:281): avc: denied { write } for pid=4034 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.378202][ T30] audit: type=1400 audit(822.940:282): avc: denied { remove_name } for pid=4034 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=1397 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.614193][ T30] audit: type=1400 audit(826.170:283): avc: denied { mount } for pid=4037 comm="syz.1.134" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 828.779183][ T30] audit: type=1400 audit(828.330:284): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 838.379776][ T30] audit: type=1400 audit(837.940:285): avc: denied { write } for pid=4057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.597832][ T30] audit: type=1400 audit(844.140:286): avc: denied { write } for pid=4068 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.127041][ T30] audit: type=1400 audit(854.660:287): avc: denied { write } for pid=4079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.642947][ T30] audit: type=1400 audit(860.210:288): avc: denied { write } for pid=4089 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.533754][ T3797] veth0_vlan: entered promiscuous mode [ 862.757558][ T3797] veth1_vlan: entered promiscuous mode [ 864.924378][ T3797] veth0_macvtap: entered promiscuous mode [ 865.292438][ T3797] veth1_macvtap: entered promiscuous mode [ 866.030528][ T3844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.032926][ T3844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.060859][ T3844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.063564][ T3844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.830871][ T30] audit: type=1400 audit(867.350:289): avc: denied { mounton } for pid=3797 comm="syz-executor" path="/syzkaller.2SUD5I/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 870.094580][ T30] audit: type=1400 audit(869.630:290): avc: denied { map_create } for pid=4100 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 870.098919][ T30] audit: type=1400 audit(869.660:291): avc: denied { map_read map_write } for pid=4100 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 870.279919][ T30] audit: type=1400 audit(869.850:292): avc: denied { prog_load } for pid=4100 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 871.577270][ T30] audit: type=1400 audit(871.130:293): avc: denied { prog_run } for pid=4100 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 873.067161][ T30] audit: type=1400 audit(872.630:294): avc: denied { write } for pid=4098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.906796][ T30] audit: type=1400 audit(873.460:295): avc: denied { append } for pid=4105 comm="syz.2.144" name="iommu" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 874.282868][ T4108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.304246][ T4108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.332696][ T30] audit: type=1400 audit(873.880:296): avc: denied { create } for pid=4107 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 874.382192][ T30] audit: type=1400 audit(873.930:297): avc: denied { bind } for pid=4107 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 878.755857][ T30] audit: type=1400 audit(878.310:298): avc: denied { write } for pid=4112 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.367700][ T4127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.371011][ T4127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.843564][ T30] audit: type=1400 audit(904.410:299): avc: denied { name_bind } for pid=4130 comm="syz.2.153" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 905.895995][ T30] audit: type=1400 audit(905.440:300): avc: denied { create } for pid=4130 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 905.987355][ T4133] FAULT_INJECTION: forcing a failure. [ 905.987355][ T4133] name failslab, interval 1, probability 0, space 0, times 1 [ 905.991529][ T4133] CPU: 0 UID: 0 PID: 4133 Comm: syz.1.154 Tainted: G W syzkaller #0 PREEMPT [ 905.991674][ T4133] Tainted: [W]=WARN [ 905.991732][ T4133] Hardware name: linux,dummy-virt (DT) [ 905.991800][ T4133] Call trace: [ 905.991860][ T4133] show_stack+0x18/0x24 (C) [ 905.992040][ T4133] dump_stack_lvl+0x7c/0xb0 [ 905.992169][ T4133] dump_stack+0x1c/0x28 [ 905.992288][ T4133] should_fail_ex+0x6b4/0x6c4 [ 905.992421][ T4133] should_failslab+0xbc/0x120 [ 905.992563][ T4133] __kmalloc_cache_noprof+0x3ec/0x628 [ 905.992708][ T4133] fl_create+0xec/0x8fc [ 905.992838][ T4133] ipv6_flowlabel_opt+0x154/0x1c80 [ 905.992960][ T4133] do_ipv6_setsockopt+0xd00/0x2c80 [ 905.993088][ T4133] ipv6_setsockopt+0x8c/0x120 [ 905.993209][ T4133] tcp_setsockopt+0x90/0xcc [ 905.993329][ T4133] sock_common_setsockopt+0x70/0xe0 [ 905.993461][ T4133] do_sock_setsockopt+0x178/0x35c [ 905.993575][ T4133] __sys_setsockopt+0xc8/0x160 [ 905.993693][ T4133] __arm64_sys_setsockopt+0xa8/0x104 [ 905.993805][ T4133] invoke_syscall+0x74/0x240 [ 905.993922][ T4133] el0_svc_common.constprop.0+0xac/0x230 [ 905.994037][ T4133] do_el0_svc+0x40/0x58 [ 905.994153][ T4133] el0_svc+0x58/0x2a4 [ 905.994267][ T4133] el0t_64_sync_handler+0xa0/0xe4 [ 905.994378][ T4133] el0t_64_sync+0x198/0x19c [ 906.050737][ T30] audit: type=1400 audit(905.610:301): avc: denied { write } for pid=4130 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 906.879561][ T4134] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 910.900144][ T4140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.981646][ T4140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.053461][ T4168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'. [ 928.798639][ T30] audit: type=1400 audit(928.350:302): avc: denied { create } for pid=4175 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 929.601807][ T4177] syzkaller0: entered promiscuous mode [ 929.610884][ T4177] syzkaller0: entered allmulticast mode [ 929.742477][ T30] audit: type=1400 audit(929.310:303): avc: denied { write } for pid=4175 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 929.751331][ T4177] TC_ACT_REPEAT abuse ? [ 930.476948][ T30] audit: type=1400 audit(929.950:304): avc: denied { mount } for pid=4179 comm="syz.1.172" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 930.780235][ T30] audit: type=1400 audit(930.310:305): avc: denied { append } for pid=4179 comm="syz.1.172" name="fb0" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 930.894699][ T4180] FAULT_INJECTION: forcing a failure. [ 930.894699][ T4180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.909176][ T4180] CPU: 0 UID: 0 PID: 4180 Comm: syz.1.172 Tainted: G W syzkaller #0 PREEMPT [ 930.909436][ T4180] Tainted: [W]=WARN [ 930.909493][ T4180] Hardware name: linux,dummy-virt (DT) [ 930.909568][ T4180] Call trace: [ 930.909630][ T4180] show_stack+0x18/0x24 (C) [ 930.909812][ T4180] dump_stack_lvl+0x7c/0xb0 [ 930.909923][ T4180] dump_stack+0x1c/0x28 [ 930.910029][ T4180] should_fail_ex+0x6b4/0x6c4 [ 930.910164][ T4180] should_fail+0x14/0x34 [ 930.910276][ T4180] should_fail_usercopy+0x1c/0x40 [ 930.910387][ T4180] _inline_copy_from_user+0x38/0x124 [ 930.910504][ T4180] memdup_user+0x60/0xc0 [ 930.910618][ T4180] strndup_user+0x5c/0xbc [ 930.910735][ T4180] __arm64_sys_mount+0x110/0x3dc [ 930.910855][ T4180] invoke_syscall+0x74/0x240 [ 930.910976][ T4180] el0_svc_common.constprop.0+0xac/0x230 [ 930.911087][ T4180] do_el0_svc+0x40/0x58 [ 930.911218][ T4180] el0_svc+0x58/0x2a4 [ 930.911346][ T4180] el0t_64_sync_handler+0xa0/0xe4 [ 930.911464][ T4180] el0t_64_sync+0x198/0x19c [ 931.472612][ T30] audit: type=1400 audit(931.020:306): avc: denied { unmount } for pid=3383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 941.738527][ T30] audit: type=1400 audit(941.300:307): avc: denied { allowed } for pid=4187 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 941.850525][ T4188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.892363][ T4188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.842597][ T30] audit: type=1400 audit(943.410:308): avc: denied { ioctl } for pid=4190 comm="syz.2.176" path="socket:[7095]" dev="sockfs" ino=7095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 962.332645][ T4204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 962.333559][ T4204] IPv6: NLM_F_CREATE should be set when creating new route [ 964.306105][ T30] audit: type=1400 audit(963.870:309): avc: denied { setopt } for pid=4205 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 975.526451][ T30] audit: type=1400 audit(975.080:310): avc: denied { create } for pid=4214 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 977.333897][ T30] audit: type=1400 audit(976.890:311): avc: denied { write } for pid=4213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.092883][ T30] audit: type=1400 audit(984.610:312): avc: denied { write } for pid=4226 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.113083][ T4235] FAULT_INJECTION: forcing a failure. [ 989.113083][ T4235] name failslab, interval 1, probability 0, space 0, times 0 [ 989.114599][ T4235] CPU: 0 UID: 0 PID: 4235 Comm: syz.1.191 Tainted: G W syzkaller #0 PREEMPT [ 989.114686][ T4235] Tainted: [W]=WARN [ 989.114717][ T4235] Hardware name: linux,dummy-virt (DT) [ 989.114759][ T4235] Call trace: [ 989.114882][ T4235] show_stack+0x18/0x24 (C) [ 989.115032][ T4235] dump_stack_lvl+0x7c/0xb0 [ 989.115141][ T4235] dump_stack+0x1c/0x28 [ 989.115197][ T4235] should_fail_ex+0x6b4/0x6c4 [ 989.115263][ T4235] should_failslab+0xbc/0x120 [ 989.115325][ T4235] __kmalloc_cache_noprof+0x3ec/0x628 [ 989.115383][ T4235] kernfs_get_tree+0xb8/0x900 [ 989.115457][ T4235] vfs_get_tree+0x74/0x280 [ 989.115551][ T4235] fc_mount+0x18/0x19c [ 989.115653][ T4235] path_mount+0x6d8/0x1830 [ 989.115707][ T4235] __arm64_sys_mount+0x318/0x3dc [ 989.115758][ T4235] invoke_syscall+0x74/0x240 [ 989.115815][ T4235] el0_svc_common.constprop.0+0xac/0x230 [ 989.115869][ T4235] do_el0_svc+0x40/0x58 [ 989.115931][ T4235] el0_svc+0x58/0x2a4 [ 989.115989][ T4235] el0t_64_sync_handler+0xa0/0xe4 [ 989.116042][ T4235] el0t_64_sync+0x198/0x19c [ 990.573150][ T30] audit: type=1400 audit(990.140:313): avc: denied { create } for pid=4236 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 990.801552][ T30] audit: type=1400 audit(990.340:314): avc: denied { connect } for pid=4236 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 995.119467][ T4245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.134687][ T4245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.289571][ T4248] FAULT_INJECTION: forcing a failure. [ 998.289571][ T4248] name failslab, interval 1, probability 0, space 0, times 0 [ 998.342183][ T4248] CPU: 0 UID: 0 PID: 4248 Comm: syz.1.197 Tainted: G W syzkaller #0 PREEMPT [ 998.342444][ T4248] Tainted: [W]=WARN [ 998.342499][ T4248] Hardware name: linux,dummy-virt (DT) [ 998.342560][ T4248] Call trace: [ 998.342612][ T4248] show_stack+0x18/0x24 (C) [ 998.342788][ T4248] dump_stack_lvl+0x7c/0xb0 [ 998.342912][ T4248] dump_stack+0x1c/0x28 [ 998.343022][ T4248] should_fail_ex+0x6b4/0x6c4 [ 998.343150][ T4248] should_failslab+0xbc/0x120 [ 998.343272][ T4248] kmem_cache_alloc_noprof+0x3d4/0x610 [ 998.343391][ T4248] do_getname+0x3c/0x290 [ 998.343521][ T4248] getname_flags+0x14/0x20 [ 998.343643][ T4248] path_setxattrat+0x220/0x260 [ 998.343757][ T4248] __arm64_sys_setxattr+0xac/0x120 [ 998.343875][ T4248] invoke_syscall+0x74/0x240 [ 998.344009][ T4248] el0_svc_common.constprop.0+0xac/0x230 [ 998.344119][ T4248] do_el0_svc+0x40/0x58 [ 998.344231][ T4248] el0_svc+0x58/0x2a4 [ 998.344349][ T4248] el0t_64_sync_handler+0xa0/0xe4 [ 998.344456][ T4248] el0t_64_sync+0x198/0x19c [ 1014.066108][ T30] audit: type=1400 audit(1013.620:315): avc: denied { mount } for pid=4267 comm="syz.2.207" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1016.369362][ T30] audit: type=1400 audit(1015.930:316): avc: denied { unmount } for pid=3797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1026.921454][ T30] audit: type=1400 audit(1026.470:317): avc: denied { create } for pid=4287 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1048.521137][ T30] audit: type=1400 audit(1048.090:318): avc: denied { create } for pid=4309 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1048.579685][ T30] audit: type=1400 audit(1048.140:319): avc: denied { write } for pid=4309 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1053.879640][ T30] audit: type=1400 audit(1053.450:320): avc: denied { read write } for pid=4314 comm="syz.1.225" name="vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1053.903294][ T30] audit: type=1400 audit(1053.470:321): avc: denied { open } for pid=4314 comm="syz.1.225" path="/dev/vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1055.968953][ T30] audit: type=1400 audit(1053.520:322): avc: denied { map } for pid=4314 comm="syz.1.225" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1057.953932][ T30] audit: type=1400 audit(1056.540:323): avc: denied { read write } for pid=4314 comm="syz.1.225" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1067.523605][ T30] audit: type=1400 audit(1067.090:324): avc: denied { mount } for pid=4331 comm="syz.2.230" name="/" dev="autofs" ino=7529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1070.157468][ T30] audit: type=1400 audit(1069.720:325): avc: denied { unmount } for pid=3797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1092.543454][ T30] audit: type=1400 audit(1091.450:326): avc: denied { read } for pid=4351 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1107.580530][ T30] audit: type=1400 audit(1107.140:327): avc: denied { execute } for pid=4363 comm="syz-executor" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1107.606591][ T30] audit: type=1400 audit(1107.160:328): avc: denied { execute_no_trans } for pid=4363 comm="syz-executor" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1119.573953][ T3845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.453517][ T3845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.810941][ T3845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.157666][ T3845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.117386][ T4394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.246'. [ 1154.117964][ T4394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.246'. [ 1155.691611][ T4398] FAULT_INJECTION: forcing a failure. [ 1155.691611][ T4398] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.702174][ T4398] CPU: 0 UID: 0 PID: 4398 Comm: syz.2.247 Tainted: G W syzkaller #0 PREEMPT [ 1155.702349][ T4398] Tainted: [W]=WARN [ 1155.702376][ T4398] Hardware name: linux,dummy-virt (DT) [ 1155.702410][ T4398] Call trace: [ 1155.702439][ T4398] show_stack+0x18/0x24 (C) [ 1155.702541][ T4398] dump_stack_lvl+0x7c/0xb0 [ 1155.702609][ T4398] dump_stack+0x1c/0x28 [ 1155.702671][ T4398] should_fail_ex+0x6b4/0x6c4 [ 1155.702777][ T4398] should_failslab+0xbc/0x120 [ 1155.702835][ T4398] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 1155.702891][ T4398] sock_alloc_inode+0x24/0x238 [ 1155.702948][ T4398] alloc_inode+0x58/0x1c0 [ 1155.703002][ T4398] sock_alloc+0x3c/0x240 [ 1155.703058][ T4398] __sock_create+0xa0/0x5fc [ 1155.703112][ T4398] __sys_socket+0x124/0x1f0 [ 1155.703163][ T4398] __arm64_sys_socket+0x70/0xa4 [ 1155.703246][ T4398] invoke_syscall+0x74/0x240 [ 1155.703313][ T4398] el0_svc_common.constprop.0+0xac/0x230 [ 1155.703365][ T4398] do_el0_svc+0x40/0x58 [ 1155.703416][ T4398] el0_svc+0x58/0x2a4 [ 1155.703472][ T4398] el0t_64_sync_handler+0xa0/0xe4 [ 1155.703523][ T4398] el0t_64_sync+0x198/0x19c [ 1155.747546][ T4398] socket: no more sockets [ 1168.038714][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.239624][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.372141][ T3845] bond0 (unregistering): Released all slaves [ 1170.197456][ T3845] hsr_slave_0: left promiscuous mode [ 1170.217609][ T3845] hsr_slave_1: left promiscuous mode [ 1170.646694][ T3845] veth1_macvtap: left promiscuous mode [ 1170.651205][ T3845] veth0_macvtap: left promiscuous mode [ 1170.688415][ T3845] veth1_vlan: left promiscuous mode [ 1170.689978][ T3845] veth0_vlan: left promiscuous mode [ 1173.250430][ T4408] FAULT_INJECTION: forcing a failure. [ 1173.250430][ T4408] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.270323][ T4408] CPU: 0 UID: 0 PID: 4408 Comm: syz.2.251 Tainted: G W syzkaller #0 PREEMPT [ 1173.270484][ T4408] Tainted: [W]=WARN [ 1173.270513][ T4408] Hardware name: linux,dummy-virt (DT) [ 1173.270548][ T4408] Call trace: [ 1173.270583][ T4408] show_stack+0x18/0x24 (C) [ 1173.270682][ T4408] dump_stack_lvl+0x7c/0xb0 [ 1173.270739][ T4408] dump_stack+0x1c/0x28 [ 1173.270792][ T4408] should_fail_ex+0x6b4/0x6c4 [ 1173.270853][ T4408] should_failslab+0xbc/0x120 [ 1173.270912][ T4408] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 1173.270969][ T4408] sock_alloc_inode+0x24/0x238 [ 1173.271027][ T4408] alloc_inode+0x58/0x1c0 [ 1173.271092][ T4408] sock_alloc+0x3c/0x240 [ 1173.271150][ T4408] __sock_create+0xa0/0x5fc [ 1173.271201][ T4408] __sys_socket+0x124/0x1f0 [ 1173.271252][ T4408] __arm64_sys_socket+0x70/0xa4 [ 1173.271303][ T4408] invoke_syscall+0x74/0x240 [ 1173.271358][ T4408] el0_svc_common.constprop.0+0xac/0x230 [ 1173.271412][ T4408] do_el0_svc+0x40/0x58 [ 1173.271464][ T4408] el0_svc+0x58/0x2a4 [ 1173.271520][ T4408] el0t_64_sync_handler+0xa0/0xe4 [ 1173.271577][ T4408] el0t_64_sync+0x198/0x19c [ 1173.296047][ T4408] socket: no more sockets [ 1189.780364][ T4422] FAULT_INJECTION: forcing a failure. [ 1189.780364][ T4422] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.785825][ T4422] CPU: 0 UID: 0 PID: 4422 Comm: syz.2.255 Tainted: G W syzkaller #0 PREEMPT [ 1189.785968][ T4422] Tainted: [W]=WARN [ 1189.786029][ T4422] Hardware name: linux,dummy-virt (DT) [ 1189.786065][ T4422] Call trace: [ 1189.786097][ T4422] show_stack+0x18/0x24 (C) [ 1189.786234][ T4422] dump_stack_lvl+0x7c/0xb0 [ 1189.786292][ T4422] dump_stack+0x1c/0x28 [ 1189.786344][ T4422] should_fail_ex+0x6b4/0x6c4 [ 1189.786405][ T4422] should_failslab+0xbc/0x120 [ 1189.786494][ T4422] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 1189.786558][ T4422] sock_alloc_inode+0x24/0x238 [ 1189.786624][ T4422] alloc_inode+0x58/0x1c0 [ 1189.786679][ T4422] sock_alloc+0x3c/0x240 [ 1189.786735][ T4422] __sock_create+0xa0/0x5fc [ 1189.786785][ T4422] __sys_socket+0x124/0x1f0 [ 1189.786835][ T4422] __arm64_sys_socket+0x70/0xa4 [ 1189.786885][ T4422] invoke_syscall+0x74/0x240 [ 1189.786940][ T4422] el0_svc_common.constprop.0+0xac/0x230 [ 1189.786993][ T4422] do_el0_svc+0x40/0x58 [ 1189.787044][ T4422] el0_svc+0x58/0x2a4 [ 1189.787102][ T4422] el0t_64_sync_handler+0xa0/0xe4 [ 1189.787155][ T4422] el0t_64_sync+0x198/0x19c [ 1189.803737][ T4422] socket: no more sockets [ 1191.798883][ T30] audit: type=1400 audit(1191.330:329): avc: denied { write } for pid=4420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1196.663281][ T30] audit: type=1400 audit(1196.220:330): avc: denied { write } for pid=4433 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1198.059682][ T4439] FAULT_INJECTION: forcing a failure. [ 1198.059682][ T4439] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.065806][ T4439] CPU: 0 UID: 0 PID: 4439 Comm: syz.2.259 Tainted: G W syzkaller #0 PREEMPT [ 1198.065952][ T4439] Tainted: [W]=WARN [ 1198.065980][ T4439] Hardware name: linux,dummy-virt (DT) [ 1198.066012][ T4439] Call trace: [ 1198.066041][ T4439] show_stack+0x18/0x24 (C) [ 1198.066136][ T4439] dump_stack_lvl+0x7c/0xb0 [ 1198.066193][ T4439] dump_stack+0x1c/0x28 [ 1198.066244][ T4439] should_fail_ex+0x6b4/0x6c4 [ 1198.066305][ T4439] should_failslab+0xbc/0x120 [ 1198.066362][ T4439] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1198.066419][ T4439] security_inode_alloc+0x28/0x200 [ 1198.066476][ T4439] inode_init_always_gfp+0x984/0xd64 [ 1198.066531][ T4439] alloc_inode+0x70/0x1c0 [ 1198.066582][ T4439] sock_alloc+0x3c/0x240 [ 1198.066654][ T4439] __sock_create+0xa0/0x5fc [ 1198.066705][ T4439] __sys_socket+0x124/0x1f0 [ 1198.066755][ T4439] __arm64_sys_socket+0x70/0xa4 [ 1198.066806][ T4439] invoke_syscall+0x74/0x240 [ 1198.066860][ T4439] el0_svc_common.constprop.0+0xac/0x230 [ 1198.066913][ T4439] do_el0_svc+0x40/0x58 [ 1198.066965][ T4439] el0_svc+0x58/0x2a4 [ 1198.067020][ T4439] el0t_64_sync_handler+0xa0/0xe4 [ 1198.067072][ T4439] el0t_64_sync+0x198/0x19c [ 1198.098327][ T4439] socket: no more sockets [ 1199.654730][ T3228] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1215.033583][ T30] audit: type=1400 audit(1214.600:331): avc: denied { read } for pid=4453 comm="syz.2.262" name="rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1215.070352][ T30] audit: type=1400 audit(1214.620:332): avc: denied { open } for pid=4453 comm="syz.2.262" path="/dev/rtc0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1215.082509][ T30] audit: type=1400 audit(1214.650:333): avc: denied { ioctl } for pid=4453 comm="syz.2.262" path="/dev/rtc0" dev="devtmpfs" ino=710 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1217.096968][ T4460] FAULT_INJECTION: forcing a failure. [ 1217.096968][ T4460] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.097531][ T4460] CPU: 0 UID: 0 PID: 4460 Comm: syz.2.263 Tainted: G W syzkaller #0 PREEMPT [ 1217.097624][ T4460] Tainted: [W]=WARN [ 1217.097655][ T4460] Hardware name: linux,dummy-virt (DT) [ 1217.097718][ T4460] Call trace: [ 1217.097765][ T4460] show_stack+0x18/0x24 (C) [ 1217.097863][ T4460] dump_stack_lvl+0x7c/0xb0 [ 1217.097936][ T4460] dump_stack+0x1c/0x28 [ 1217.098033][ T4460] should_fail_ex+0x6b4/0x6c4 [ 1217.098127][ T4460] should_failslab+0xbc/0x120 [ 1217.098210][ T4460] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 1217.098268][ T4460] sock_alloc_inode+0x24/0x238 [ 1217.098339][ T4460] alloc_inode+0x58/0x1c0 [ 1217.098428][ T4460] sock_alloc+0x3c/0x240 [ 1217.098488][ T4460] __sock_create+0xa0/0x5fc [ 1217.098543][ T4460] __sys_socket+0x124/0x1f0 [ 1217.098594][ T4460] __arm64_sys_socket+0x70/0xa4 [ 1217.098645][ T4460] invoke_syscall+0x74/0x240 [ 1217.098701][ T4460] el0_svc_common.constprop.0+0xac/0x230 [ 1217.098754][ T4460] do_el0_svc+0x40/0x58 [ 1217.098805][ T4460] el0_svc+0x58/0x2a4 [ 1217.098860][ T4460] el0t_64_sync_handler+0xa0/0xe4 [ 1217.098911][ T4460] el0t_64_sync+0x198/0x19c [ 1217.130362][ T4460] socket: no more sockets [ 1220.849048][ T4463] Injecting memory failure for pfn 0x657ed at process virtual address 0x201ed000 [ 1222.431966][ T4368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.677065][ T4368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.426990][ T30] audit: type=1400 audit(1223.980:334): avc: denied { write } for pid=4462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1224.680967][ T4463] Memory failure: 0x657ed: recovery action for dirty LRU page: Recovered [ 1229.306541][ T30] audit: type=1400 audit(1228.860:335): avc: denied { write } for pid=4471 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1230.253973][ T30] audit: type=1400 audit(1229.820:336): avc: denied { read write } for pid=4473 comm="syz.2.266" name="uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1230.261960][ T30] audit: type=1400 audit(1229.830:337): avc: denied { open } for pid=4473 comm="syz.2.266" path="/dev/uhid" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1230.799524][ T1002] input: syz0 as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input1 [ 1231.486279][ T1002] hid-generic 0005:057E:0306.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1233.000328][ T3228] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1235.132996][ T4483] FAULT_INJECTION: forcing a failure. [ 1235.132996][ T4483] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.133441][ T4483] CPU: 0 UID: 0 PID: 4483 Comm: syz.2.267 Tainted: G W syzkaller #0 PREEMPT [ 1235.133524][ T4483] Tainted: [W]=WARN [ 1235.133553][ T4483] Hardware name: linux,dummy-virt (DT) [ 1235.133587][ T4483] Call trace: [ 1235.133615][ T4483] show_stack+0x18/0x24 (C) [ 1235.133708][ T4483] dump_stack_lvl+0x7c/0xb0 [ 1235.133783][ T4483] dump_stack+0x1c/0x28 [ 1235.133889][ T4483] should_fail_ex+0x6b4/0x6c4 [ 1235.134029][ T4483] should_failslab+0xbc/0x120 [ 1235.134104][ T4483] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 1235.134193][ T4483] sock_alloc_inode+0x24/0x238 [ 1235.134311][ T4483] alloc_inode+0x58/0x1c0 [ 1235.134374][ T4483] sock_alloc+0x3c/0x240 [ 1235.134435][ T4483] __sock_create+0xa0/0x5fc [ 1235.134486][ T4483] __sys_socket+0x124/0x1f0 [ 1235.134558][ T4483] __arm64_sys_socket+0x70/0xa4 [ 1235.134613][ T4483] invoke_syscall+0x74/0x240 [ 1235.134671][ T4483] el0_svc_common.constprop.0+0xac/0x230 [ 1235.134728][ T4483] do_el0_svc+0x40/0x58 [ 1235.134806][ T4483] el0_svc+0x58/0x2a4 [ 1235.134918][ T4483] el0t_64_sync_handler+0xa0/0xe4 [ 1235.134976][ T4483] el0t_64_sync+0x198/0x19c [ 1235.169183][ T4483] socket: no more sockets [ 1238.596367][ T30] audit: type=1400 audit(1238.130:338): avc: denied { write } for pid=4484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.242378][ T4479] fido_id[4479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1242.135859][ T30] audit: type=1400 audit(1241.700:339): avc: denied { write } for pid=4496 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1242.409723][ T4495] syzkaller0: entered promiscuous mode [ 1242.411220][ T4495] syzkaller0: entered allmulticast mode [ 1242.664334][ T4368] hsr_slave_0: entered promiscuous mode [ 1242.714312][ T4368] hsr_slave_1: entered promiscuous mode [ 1245.347589][ T4501] FAULT_INJECTION: forcing a failure. [ 1245.347589][ T4501] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.357206][ T4501] CPU: 0 UID: 0 PID: 4501 Comm: syz.2.271 Tainted: G W syzkaller #0 PREEMPT [ 1245.357363][ T4501] Tainted: [W]=WARN [ 1245.357392][ T4501] Hardware name: linux,dummy-virt (DT) [ 1245.357425][ T4501] Call trace: [ 1245.357454][ T4501] show_stack+0x18/0x24 (C) [ 1245.357551][ T4501] dump_stack_lvl+0x7c/0xb0 [ 1245.357614][ T4501] dump_stack+0x1c/0x28 [ 1245.357667][ T4501] should_fail_ex+0x6b4/0x6c4 [ 1245.357728][ T4501] should_failslab+0xbc/0x120 [ 1245.357786][ T4501] kmem_cache_alloc_lru_noprof+0x3dc/0x620 [ 1245.357842][ T4501] sock_alloc_inode+0x24/0x238 [ 1245.357900][ T4501] alloc_inode+0x58/0x1c0 [ 1245.357955][ T4501] sock_alloc+0x3c/0x240 [ 1245.358011][ T4501] __sock_create+0xa0/0x5fc [ 1245.358061][ T4501] __sys_socket+0x124/0x1f0 [ 1245.358120][ T4501] __arm64_sys_socket+0x70/0xa4 [ 1245.358171][ T4501] invoke_syscall+0x74/0x240 [ 1245.358226][ T4501] el0_svc_common.constprop.0+0xac/0x230 [ 1245.358280][ T4501] do_el0_svc+0x40/0x58 [ 1245.358358][ T4501] el0_svc+0x58/0x2a4 [ 1245.358449][ T4501] el0t_64_sync_handler+0xa0/0xe4 [ 1245.358504][ T4501] el0t_64_sync+0x198/0x19c [ 1245.386667][ T4501] socket: no more sockets [ 1250.412256][ T4509] process 'syz.2.274' launched './file0' with NULL argv: empty string added [ 1250.430189][ T30] audit: type=1400 audit(1249.980:340): avc: denied { execute } for pid=4508 comm="syz.2.274" name="file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1250.534698][ T30] audit: type=1400 audit(1250.090:341): avc: denied { execute_no_trans } for pid=4508 comm="syz.2.274" path="/86/file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1252.727100][ T30] audit: type=1400 audit(1252.290:342): avc: denied { write } for pid=4507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1253.440019][ T4368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1253.552422][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.588478][ T4368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1253.721582][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.770648][ T4368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1253.937739][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1253.999842][ T4368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1254.239282][ T4368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1258.786696][ T30] audit: type=1400 audit(1258.270:343): avc: denied { write } for pid=4524 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1263.383587][ T3228] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1271.772750][ T30] audit: type=1326 audit(1270.890:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.2.279" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x0 [ 1282.970701][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.067236][ T30] audit: type=1400 audit(1286.600:345): avc: denied { write } for pid=4550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.566479][ T30] audit: type=1400 audit(1293.120:346): avc: denied { write } for pid=4564 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.274608][ T30] audit: type=1400 audit(1294.840:347): avc: denied { listen } for pid=4566 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1299.279141][ T3228] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1318.373492][ T4594] Console: switching to colour dummy device 80x25 [ 1323.576225][ T30] audit: type=1400 audit(1323.130:348): avc: denied { write } for pid=4588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.987279][ T30] audit: type=1400 audit(1328.520:349): avc: denied { write } for pid=4603 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1335.377665][ T30] audit: type=1400 audit(1334.940:350): avc: denied { ioctl } for pid=4611 comm="syz.2.291" path="socket:[8708]" dev="sockfs" ino=8708 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1335.544375][ T4613] netlink: 'syz.2.291': attribute type 8 has an invalid length. [ 1338.658779][ T30] audit: type=1400 audit(1338.190:351): avc: denied { create } for pid=4616 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1348.077486][ T4631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.294'. [ 1359.891377][ T30] audit: type=1400 audit(1358.620:352): avc: denied { getopt } for pid=4634 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1362.561674][ T30] audit: type=1400 audit(1362.110:353): avc: denied { write } for pid=4632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1367.789505][ T30] audit: type=1400 audit(1367.070:354): avc: denied { kexec_image_load } for pid=4645 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1389.554636][ T30] audit: type=1400 audit(1389.120:355): avc: denied { write } for pid=4655 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1392.886131][ T30] audit: type=1400 audit(1392.420:356): avc: denied { create } for pid=4661 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1393.010480][ T30] audit: type=1400 audit(1392.550:357): avc: denied { bind } for pid=4661 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1399.934073][ T4368] veth0_vlan: entered promiscuous mode [ 1400.353142][ T4368] veth1_vlan: entered promiscuous mode [ 1401.643582][ T30] audit: type=1400 audit(1401.200:358): avc: denied { write } for pid=4674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1401.792935][ T4368] veth0_macvtap: entered promiscuous mode [ 1402.277567][ T4368] veth1_macvtap: entered promiscuous mode [ 1403.576262][ T1505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.607167][ T1505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.611142][ T1505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.611447][ T1505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.113950][ T30] audit: type=1400 audit(1406.680:359): avc: denied { write } for pid=4678 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1413.352759][ T30] audit: type=1400 audit(1412.910:360): avc: denied { bind } for pid=4686 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1413.611803][ T30] audit: type=1400 audit(1413.150:361): avc: denied { map } for pid=4686 comm="syz.2.302" path="socket:[8934]" dev="sockfs" ino=8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1413.630838][ T30] audit: type=1400 audit(1413.190:362): avc: denied { read } for pid=4686 comm="syz.2.302" path="socket:[8934]" dev="sockfs" ino=8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1418.644774][ T30] audit: type=1400 audit(1418.200:363): avc: denied { write } for pid=4691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1434.477439][ T30] audit: type=1400 audit(1434.020:364): avc: denied { write } for pid=4712 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1440.141672][ T4727] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.142592][ T4727] audit: out of memory in audit_log_start [ 1442.648924][ T30] audit: type=1400 audit(1442.200:365): avc: denied { append } for pid=4728 comm="syz.2.312" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1442.694608][ T30] audit: type=1400 audit(1442.250:366): avc: denied { open } for pid=4728 comm="syz.2.312" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1442.819349][ T30] audit: type=1400 audit(1442.380:367): avc: denied { ioctl } for pid=4728 comm="syz.2.312" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1446.280413][ T4736] No control pipe specified [ 1448.314162][ T30] audit: type=1326 audit(1447.880:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.343181][ T30] audit: type=1326 audit(1447.910:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.356572][ T30] audit: type=1326 audit(1447.910:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.363879][ T30] audit: type=1326 audit(1447.930:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.387127][ T30] audit: type=1326 audit(1447.930:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.415525][ T30] audit: type=1326 audit(1447.980:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.448623][ T30] audit: type=1326 audit(1448.010:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.449248][ T30] audit: type=1326 audit(1448.010:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=49 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.450037][ T30] audit: type=1326 audit(1448.010:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1448.450380][ T30] audit: type=1326 audit(1448.010:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.2.316" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1454.701126][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1454.716710][ T30] audit: type=1400 audit(1454.270:380): avc: denied { write } for pid=4747 comm="syz.2.320" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1470.198136][ T4753] No control pipe specified [ 1473.511147][ T30] audit: type=1400 audit(1473.080:381): avc: denied { node_bind } for pid=4757 comm="syz.3.323" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1474.121719][ T4758] FAULT_INJECTION: forcing a failure. [ 1474.121719][ T4758] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.122526][ T4758] CPU: 0 UID: 0 PID: 4758 Comm: syz.3.323 Tainted: G W syzkaller #0 PREEMPT [ 1474.122688][ T4758] Tainted: [W]=WARN [ 1474.122744][ T4758] Hardware name: linux,dummy-virt (DT) [ 1474.122813][ T4758] Call trace: [ 1474.122875][ T4758] show_stack+0x18/0x24 (C) [ 1474.123051][ T4758] dump_stack_lvl+0x7c/0xb0 [ 1474.123176][ T4758] dump_stack+0x1c/0x28 [ 1474.123282][ T4758] should_fail_ex+0x6b4/0x6c4 [ 1474.123406][ T4758] should_failslab+0xbc/0x120 [ 1474.123528][ T4758] kmem_cache_alloc_node_noprof+0x34c/0x620 [ 1474.123647][ T4758] __alloc_skb+0x474/0x600 [ 1474.123777][ T4758] tcp_stream_alloc_skb+0x2c/0x458 [ 1474.123904][ T4758] tcp_sendmsg_locked+0xd64/0x3818 [ 1474.124018][ T4758] tcp_sendmsg+0x38/0x60 [ 1474.124133][ T4758] inet_sendmsg+0x90/0xd8 [ 1474.124244][ T4758] sock_write_iter+0x310/0x414 [ 1474.124352][ T4758] vfs_write+0x7cc/0xbac [ 1474.124462][ T4758] ksys_write+0x194/0x1e0 [ 1474.124573][ T4758] __arm64_sys_write+0x70/0xa0 [ 1474.124734][ T4758] invoke_syscall+0x74/0x240 [ 1474.124901][ T4758] el0_svc_common.constprop.0+0xac/0x230 [ 1474.125024][ T4758] do_el0_svc+0x40/0x58 [ 1474.125154][ T4758] el0_svc+0x58/0x2a4 [ 1474.125279][ T4758] el0t_64_sync_handler+0xa0/0xe4 [ 1474.125405][ T4758] el0t_64_sync+0x198/0x19c [ 1477.947017][ T30] audit: type=1400 audit(1477.500:382): avc: denied { read write } for pid=4765 comm="syz.2.326" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1479.879862][ T4768] No control pipe specified [ 1481.929824][ C0] vcan0: j1939_tp_rxtimer: 0x000000009ffe6ce7: rx timeout, send abort [ 1482.017608][ T30] audit: type=1400 audit(1481.570:383): avc: denied { search } for pid=3183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.022286][ T30] audit: type=1400 audit(1481.570:384): avc: denied { append } for pid=3183 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1482.049007][ T30] audit: type=1400 audit(1481.570:385): avc: denied { open } for pid=3183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1482.091652][ T30] audit: type=1400 audit(1481.570:386): avc: denied { getattr } for pid=3183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1482.430752][ C0] vcan0: j1939_tp_rxtimer: 0x000000009ffe6ce7: abort rx timeout. Force session deactivation [ 1482.433656][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a7601eb2: rx timeout, send abort [ 1482.934484][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a7601eb2: abort rx timeout. Force session deactivation [ 1501.194460][ T4784] ======================================================= [ 1501.194460][ T4784] WARNING: The mand mount option has been deprecated and [ 1501.194460][ T4784] and is ignored by this kernel. Remove the mand [ 1501.194460][ T4784] option from the mount to silence this warning. [ 1501.194460][ T4784] ======================================================= [ 1502.070401][ T30] audit: type=1400 audit(1501.630:387): avc: denied { read write } for pid=4782 comm="syz.2.334" name="uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1502.130071][ T30] audit: type=1400 audit(1501.650:388): avc: denied { open } for pid=4782 comm="syz.2.334" path="/dev/uinput" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1521.237283][ T4799] FAULT_INJECTION: forcing a failure. [ 1521.237283][ T4799] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.238146][ T4799] CPU: 0 UID: 0 PID: 4799 Comm: syz.2.341 Tainted: G W syzkaller #0 PREEMPT [ 1521.238312][ T4799] Tainted: [W]=WARN [ 1521.238373][ T4799] Hardware name: linux,dummy-virt (DT) [ 1521.238446][ T4799] Call trace: [ 1521.238509][ T4799] show_stack+0x18/0x24 (C) [ 1521.238707][ T4799] dump_stack_lvl+0x7c/0xb0 [ 1521.238826][ T4799] dump_stack+0x1c/0x28 [ 1521.238944][ T4799] should_fail_ex+0x6b4/0x6c4 [ 1521.239080][ T4799] should_failslab+0xbc/0x120 [ 1521.239209][ T4799] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1521.239326][ T4799] taskstats_exit+0x294/0x9a0 [ 1521.239435][ T4799] do_exit+0x45c/0x2158 [ 1521.239563][ T4799] do_group_exit+0xa4/0x208 [ 1521.239678][ T4799] get_signal+0x1b20/0x1f00 [ 1521.239788][ T4799] arch_do_signal_or_restart+0x168/0x700 [ 1521.239904][ T4799] exit_to_user_mode_loop+0x13c/0x1c8 [ 1521.240030][ T4799] el0_svc+0x244/0x2a4 [ 1521.240157][ T4799] el0t_64_sync_handler+0xa0/0xe4 [ 1521.240268][ T4799] el0t_64_sync+0x198/0x19c [ 1528.839685][ T30] audit: type=1400 audit(1528.380:389): avc: denied { bind } for pid=4810 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1530.029695][ T4813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 1588.010015][ T30] audit: type=1400 audit(1587.570:390): avc: denied { execute } for pid=4836 comm="syz.2.354" path="/file1" dev="ramfs" ino=9388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1594.954206][ T4847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.182655][ T4847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.542439][ T4858] syzkaller0: entered promiscuous mode [ 1611.543806][ T4858] syzkaller0: entered allmulticast mode [ 1611.557126][ T30] audit: type=1400 audit(1611.110:391): avc: denied { ioctl } for pid=4856 comm="syz.3.359" path="socket:[9441]" dev="sockfs" ino=9441 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1611.829050][ T4858] simple: /dev/video#_74 [ 1611.829584][ T4858] simple: /dev/video#_148 [ 1611.829934][ T4858] simple: /dev/video#_222 [ 1611.830053][ T4858] simple: /dev/video#_296 [ 1611.830156][ T4858] simple: /dev/video#_370 [ 1611.830249][ T4858] simple: /dev/video#_444 [ 1611.830340][ T4858] simple: /dev/video#_518 [ 1611.830477][ T4858] simple: /dev/video#_592 [ 1611.830589][ T4858] simple: /dev/video#_666 [ 1611.830702][ T4858] simple: /dev/video#_740 [ 1611.830796][ T4858] simple: /dev/video#_814 [ 1611.830895][ T4858] simple: /dev/video#_888 [ 1611.831064][ T4858] simple: /dev/video#_962 [ 1611.831212][ T4858] simple: /dev/video#_1036 [ 1611.831329][ T4858] simple: /dev/video#_1110 [ 1611.831426][ T4858] simple: /dev/video#_1184 [ 1611.831520][ T4858] simple: /dev/video#_1258 [ 1611.831622][ T4858] simple: /dev/video#_1332 [ 1611.831769][ T4858] simple: /dev/video#_1406 [ 1611.831865][ T4858] simple: /dev/video#_1480 [ 1611.831956][ T4858] simple: /dev/video#_1554 [ 1611.832048][ T4858] simple: /dev/video#_1628 [ 1611.832145][ T4858] simple: /dev/video#_1702 [ 1611.832236][ T4858] simple: /dev/video#_1776 [ 1611.832358][ T4858] simple: /dev/video#_1850 [ 1611.832497][ T4858] simple: /dev/video#_1924 [ 1611.832651][ T4858] simple: /dev/video#_1998 [ 1611.832785][ T4858] simple: /dev/video#_2072 [ 1611.832877][ T4858] simple: /dev/video#_2146 [ 1611.832968][ T4858] simple: /dev/video#_2220 [ 1611.833058][ T4858] simple: /dev/video#_2294 [ 1611.833156][ T4858] simple: /dev/video#_2368 [ 1611.833272][ T4858] TC_ACT_REPEAT abuse ? [ 1616.526470][ T30] audit: type=1400 audit(1616.070:392): avc: denied { read } for pid=4867 comm="syz.2.364" name="mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1616.589086][ T30] audit: type=1400 audit(1616.150:393): avc: denied { open } for pid=4867 comm="syz.2.364" path="/dev/input/mice" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1630.031982][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.173712][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.663914][ T4897] ip_tables: iptables: counters copy to user failed while replacing table [ 1648.352567][ T30] audit: type=1400 audit(1647.900:394): avc: denied { create } for pid=4899 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1663.527965][ T4925] FAULT_INJECTION: forcing a failure. [ 1663.527965][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.566287][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: syz.2.383 Tainted: G W syzkaller #0 PREEMPT [ 1663.566515][ T4925] Tainted: [W]=WARN [ 1663.566567][ T4925] Hardware name: linux,dummy-virt (DT) [ 1663.566618][ T4925] Call trace: [ 1663.566661][ T4925] show_stack+0x18/0x24 (C) [ 1663.566809][ T4925] dump_stack_lvl+0x7c/0xb0 [ 1663.566901][ T4925] dump_stack+0x1c/0x28 [ 1663.566985][ T4925] should_fail_ex+0x6b4/0x6c4 [ 1663.567086][ T4925] should_failslab+0xbc/0x120 [ 1663.567179][ T4925] kmem_cache_alloc_noprof+0x3d4/0x610 [ 1663.567270][ T4925] __mpol_dup+0x84/0x310 [ 1663.567355][ T4925] mbind_range+0x200/0x380 [ 1663.567438][ T4925] do_mbind+0x4e8/0x958 [ 1663.567521][ T4925] __arm64_sys_mbind+0x1d4/0x228 [ 1663.567614][ T4925] invoke_syscall+0x74/0x240 [ 1663.567703][ T4925] el0_svc_common.constprop.0+0xac/0x230 [ 1663.567790][ T4925] do_el0_svc+0x40/0x58 [ 1663.567876][ T4925] el0_svc+0x58/0x2a4 [ 1663.567969][ T4925] el0t_64_sync_handler+0xa0/0xe4 [ 1663.568055][ T4925] el0t_64_sync+0x198/0x19c [ 1702.970166][ T30] audit: type=1400 audit(1702.530:395): avc: denied { associate } for pid=4952 comm="syz.2.393" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1731.754577][ T4974] misc userio: No port type given on /dev/userio [ 1731.827978][ T4974] misc userio: The device must be registered before sending interrupts [ 1732.079774][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.184052][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.798514][ T30] audit: type=1400 audit(1738.300:396): avc: denied { map } for pid=4978 comm="syz.3.403" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1738.799409][ T30] audit: type=1400 audit(1738.300:397): avc: denied { write execute } for pid=4978 comm="syz.3.403" path="/dev/dri/card0" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1751.030441][ T30] audit: type=1400 audit(1750.590:398): avc: denied { read } for pid=4985 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1754.722789][ T4993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.406'. [ 1754.750557][ T4993] nbd: device at index 0 is going down [ 1757.011476][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.012215][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.012546][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.012735][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.012898][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.013049][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.013165][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.013273][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.013372][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.013470][ T4996] tc action pedit 'at' offset 5 out of bounds [ 1757.013798][ T4996] 0: reclassify loop, rule prio 0, protocol 800 [ 1768.091624][ T30] audit: type=1400 audit(1767.650:399): avc: denied { write } for pid=4998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1775.047242][ T30] audit: type=1400 audit(1774.570:400): avc: denied { map } for pid=5010 comm="syz.2.411" path="socket:[9948]" dev="sockfs" ino=9948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1775.272920][ T30] audit: type=1326 audit(1774.840:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1775.356635][ T30] audit: type=1326 audit(1774.900:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1775.426980][ T30] audit: type=1326 audit(1774.790:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1775.487083][ T30] audit: type=1326 audit(1775.030:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8e95b1ac code=0x7ffc0000 [ 1775.514480][ T30] audit: type=1326 audit(1775.080:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1775.631392][ T30] audit: type=1326 audit(1775.200:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8e95b1ac code=0x7ffc0000 [ 1775.768102][ T30] audit: type=1326 audit(1775.290:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1775.769143][ T30] audit: type=1326 audit(1775.250:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1775.804243][ T30] audit: type=1326 audit(1775.330:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.2.411" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8e95b1ac code=0x7ffc0000 [ 1791.554276][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1791.560526][ T30] audit: type=1400 audit(1791.120:424): avc: denied { write } for pid=5026 comm="syz.2.417" name="functions" dev="configfs" ino=5139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1791.710243][ T30] audit: type=1400 audit(1791.280:425): avc: denied { write } for pid=5026 comm="syz.2.417" name="midi2.0" dev="configfs" ino=9995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1808.459307][ T30] audit: type=1326 audit(1808.000:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.460196][ T30] audit: type=1326 audit(1808.030:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.509036][ T30] audit: type=1326 audit(1808.050:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.686893][ T30] audit: type=1326 audit(1808.180:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.687791][ T30] audit: type=1326 audit(1808.240:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.721464][ T30] audit: type=1326 audit(1808.240:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.722499][ T30] audit: type=1326 audit(1808.270:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.823774][ T30] audit: type=1326 audit(1808.240:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.832192][ T30] audit: type=1326 audit(1808.270:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1808.857274][ T30] audit: type=1326 audit(1808.410:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.2.426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9782e8 code=0x7ffc0000 [ 1817.289187][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.357110][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.013232][ T5079] capability: warning: `syz.3.436' uses deprecated v2 capabilities in a way that may be insecure [ 1833.392467][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.473954][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.030285][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1840.034111][ T30] audit: type=1400 audit(1839.600:446): avc: denied { write } for pid=5099 comm="syz.2.443" name="usb_gadget" dev="configfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1840.120259][ T30] audit: type=1400 audit(1839.670:447): avc: denied { write } for pid=5099 comm="syz.2.443" name="functions" dev="configfs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1870.501363][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.543037][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.978863][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.079329][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.012463][ T30] audit: type=1400 audit(1913.560:448): avc: denied { setattr } for pid=5142 comm="syz.2.459" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1919.988644][ T5150] syz.2.462 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 1919.996957][ T5150] CPU: 0 UID: 0 PID: 5150 Comm: syz.2.462 Tainted: G W syzkaller #0 PREEMPT [ 1919.997221][ T5150] Tainted: [W]=WARN [ 1919.997279][ T5150] Hardware name: linux,dummy-virt (DT) [ 1919.997356][ T5150] Call trace: [ 1919.997423][ T5150] show_stack+0x18/0x24 (C) [ 1919.997626][ T5150] dump_stack_lvl+0x7c/0xb0 [ 1919.997754][ T5150] dump_stack+0x1c/0x28 [ 1919.997873][ T5150] dump_header+0x104/0x498 [ 1919.997997][ T5150] oom_kill_process+0x49c/0x6ec [ 1919.998129][ T5150] out_of_memory+0x244/0x1064 [ 1919.998250][ T5150] mem_cgroup_out_of_memory+0x128/0x140 [ 1919.998381][ T5150] try_charge_memcg+0x640/0xd1c [ 1919.998506][ T5150] obj_cgroup_charge_pages+0xf8/0x2e0 [ 1919.998636][ T5150] __memcg_kmem_charge_page+0x134/0x4d8 [ 1919.998755][ T5150] __alloc_frozen_pages_noprof+0x2b4/0x3498 [ 1919.998882][ T5150] alloc_pages_mpol+0xf8/0x41c [ 1919.999003][ T5150] alloc_frozen_pages_noprof+0xb8/0x200 [ 1919.999124][ T5150] alloc_pages_noprof+0x14/0x120 [ 1919.999241][ T5150] __pte_alloc_one_noprof.constprop.0+0x24/0x208 [ 1919.999363][ T5150] __pte_alloc+0x7c/0x1f8 [ 1919.999478][ T5150] copy_page_range+0x27ac/0x3f3c [ 1919.999629][ T5150] dup_mmap+0x92c/0x1810 [ 1919.999764][ T5150] copy_process+0x3140/0x5950 [ 1919.999892][ T5150] kernel_clone+0x15c/0x93c [ 1920.000018][ T5150] __do_sys_clone+0xd4/0x124 [ 1920.000141][ T5150] __arm64_sys_clone+0xa8/0x100 [ 1920.000266][ T5150] invoke_syscall+0x74/0x240 [ 1920.000409][ T5150] el0_svc_common.constprop.0+0xac/0x230 [ 1920.000538][ T5150] do_el0_svc+0x40/0x58 [ 1920.000731][ T5150] el0_svc+0x58/0x2a4 [ 1920.000871][ T5150] el0t_64_sync_handler+0xa0/0xe4 [ 1920.000996][ T5150] el0t_64_sync+0x198/0x19c [ 1920.059108][ T5150] memory: usage 96kB, limit 96kB, failcnt 79 [ 1920.070317][ T5150] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1920.077803][ T5150] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1920.126162][ T5150] Memory cgroup stats for /syz2/test: [ 1920.180996][ T5150] cache 0 [ 1920.195946][ T5150] rss 0 [ 1920.196440][ T5150] rss_huge 0 [ 1920.196543][ T5150] shmem 0 [ 1920.196711][ T5150] mapped_file 0 [ 1920.196849][ T5150] dirty 0 [ 1920.196967][ T5150] writeback 0 [ 1920.197053][ T5150] workingset_refault_anon 0 [ 1920.197196][ T5150] workingset_refault_file 0 [ 1920.197324][ T5150] swap 0 [ 1920.197410][ T5150] swapcached 16384 [ 1920.197496][ T5150] pgpgin 4 [ 1920.197580][ T5150] pgpgout 4 [ 1920.197676][ T5150] pgfault 11 [ 1920.197760][ T5150] pgmajfault 0 [ 1920.197844][ T5150] inactive_anon 0 [ 1920.197927][ T5150] active_anon 0 [ 1920.198010][ T5150] inactive_file 0 [ 1920.198092][ T5150] active_file 0 [ 1920.198176][ T5150] unevictable 0 [ 1920.198259][ T5150] hierarchical_memory_limit 98304 [ 1920.198343][ T5150] hierarchical_memsw_limit 9223372036854771712 [ 1920.198428][ T5150] total_cache 0 [ 1920.198510][ T5150] total_rss 0 [ 1920.198593][ T5150] total_rss_huge 0 [ 1920.198684][ T5150] total_shmem 0 [ 1920.198772][ T5150] total_mapped_file 0 [ 1920.198860][ T5150] total_dirty 0 [ 1920.198943][ T5150] total_writeback 0 [ 1920.199027][ T5150] total_workingset_refault_anon 0 [ 1920.199111][ T5150] total_workingset_refault_file 0 [ 1920.199195][ T5150] total_swap 0 [ 1920.199278][ T5150] total_swapcached 16384 [ 1920.199361][ T5150] total_pgpgin 4 [ 1920.199443][ T5150] total_pgpgout 4 [ 1920.199533][ T5150] total_pgfault 11 [ 1920.199623][ T5150] total_pgmajfault 0 [ 1920.199739][ T5150] total_inactive_anon 0 [ 1920.199863][ T5150] total_active_anon 0 [ 1920.199953][ T5150] total_inactive_file 0 [ 1920.200082][ T5150] total_active_file 0 [ 1920.200188][ T5150] total_unevictable 0 [ 1920.200311][ T5150] anon_cost 0 [ 1920.200398][ T5150] file_cost 0 [ 1920.200785][ T5150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.462,pid=5149,uid=0 [ 1920.208170][ T5150] Memory cgroup out of memory: Killed process 5149 (syz.2.462) total-vm:40656kB, anon-rss:1300kB, file-rss:1040kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 1949.646481][ T30] audit: type=1400 audit(1949.200:449): avc: denied { bind } for pid=5173 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1949.672001][ T30] audit: type=1400 audit(1949.230:450): avc: denied { name_bind } for pid=5173 comm="syz.2.472" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1949.673875][ T30] audit: type=1400 audit(1949.240:451): avc: denied { node_bind } for pid=5173 comm="syz.2.472" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1962.728494][ T5187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1970.060454][ T30] audit: type=1400 audit(1969.590:452): avc: denied { block_suspend } for pid=5194 comm="syz.3.479" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1973.438601][ T5203] FAULT_INJECTION: forcing a failure. [ 1973.438601][ T5203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1973.483724][ T5203] CPU: 0 UID: 0 PID: 5203 Comm: syz.3.481 Tainted: G W syzkaller #0 PREEMPT [ 1973.483982][ T5203] Tainted: [W]=WARN [ 1973.484040][ T5203] Hardware name: linux,dummy-virt (DT) [ 1973.484114][ T5203] Call trace: [ 1973.484175][ T5203] show_stack+0x18/0x24 (C) [ 1973.484370][ T5203] dump_stack_lvl+0x7c/0xb0 [ 1973.484484][ T5203] dump_stack+0x1c/0x28 [ 1973.484636][ T5203] should_fail_ex+0x6b4/0x6c4 [ 1973.484772][ T5203] should_fail+0x14/0x34 [ 1973.484943][ T5203] should_fail_usercopy+0x1c/0x40 [ 1973.485066][ T5203] _copy_to_iter+0x17c/0x1060 [ 1973.485185][ T5203] get_random_bytes_user+0x130/0x288 [ 1973.485322][ T5203] __arm64_sys_getrandom+0x108/0x1e0 [ 1973.485446][ T5203] invoke_syscall+0x74/0x240 [ 1973.485578][ T5203] el0_svc_common.constprop.0+0xac/0x230 [ 1973.485700][ T5203] do_el0_svc+0x40/0x58 [ 1973.485818][ T5203] el0_svc+0x58/0x2a4 [ 1973.485945][ T5203] el0t_64_sync_handler+0xa0/0xe4 [ 1973.486068][ T5203] el0t_64_sync+0x198/0x19c [ 1989.430759][ T30] audit: type=1400 audit(1989.000:453): avc: denied { bind } for pid=5212 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1989.521703][ T30] audit: type=1400 audit(1989.080:454): avc: denied { node_bind } for pid=5212 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1993.479048][ T5218] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 1994.738302][ T5220] FAULT_INJECTION: forcing a failure. [ 1994.738302][ T5220] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1994.756805][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz.2.488 Tainted: G W syzkaller #0 PREEMPT [ 1994.757063][ T5220] Tainted: [W]=WARN [ 1994.757128][ T5220] Hardware name: linux,dummy-virt (DT) [ 1994.757198][ T5220] Call trace: [ 1994.757257][ T5220] show_stack+0x18/0x24 (C) [ 1994.757439][ T5220] dump_stack_lvl+0x7c/0xb0 [ 1994.757550][ T5220] dump_stack+0x1c/0x28 [ 1994.757699][ T5220] should_fail_ex+0x6b4/0x6c4 [ 1994.757825][ T5220] should_fail+0x14/0x34 [ 1994.757929][ T5220] get_futex_key+0x198/0xf84 [ 1994.758034][ T5220] futex_wait_setup+0x64/0x55c [ 1994.758149][ T5220] __futex_wait+0x138/0x218 [ 1994.758250][ T5220] futex_wait+0xe4/0x2ac [ 1994.758355][ T5220] do_futex+0x1e8/0x280 [ 1994.758456][ T5220] __arm64_sys_futex+0x1e8/0x310 [ 1994.758556][ T5220] invoke_syscall+0x74/0x240 [ 1994.758668][ T5220] el0_svc_common.constprop.0+0xac/0x230 [ 1994.758783][ T5220] do_el0_svc+0x40/0x58 [ 1994.758886][ T5220] el0_svc+0x58/0x2a4 [ 1994.758998][ T5220] el0t_64_sync_handler+0xa0/0xe4 [ 1994.759110][ T5220] el0t_64_sync+0x198/0x19c [ 2045.823557][ T30] audit: type=1400 audit(2045.380:455): avc: denied { write } for pid=5242 comm="syz.2.495" name="usbmon1" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2045.877625][ T30] audit: type=1400 audit(2045.450:456): avc: denied { open } for pid=5242 comm="syz.2.495" path="/dev/usbmon1" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2051.530087][ T5259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5259 comm=syz.2.497 [ 2060.479570][ T5271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5271 comm=syz.2.502 [ 2082.712211][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2082.811289][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.671979][ T30] audit: type=1400 audit(2098.230:457): avc: denied { create } for pid=5302 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2098.729225][ T30] audit: type=1400 audit(2098.290:458): avc: denied { connect } for pid=5302 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2100.198788][ T30] audit: type=1400 audit(2099.770:459): avc: denied { bind } for pid=5304 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2100.281485][ T30] audit: type=1400 audit(2099.840:460): avc: denied { listen } for pid=5304 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2100.340412][ T30] audit: type=1400 audit(2099.900:461): avc: denied { accept } for pid=5304 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2104.290646][ T3844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.537397][ T30] audit: type=1400 audit(2104.060:462): avc: denied { read } for pid=5311 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2104.570376][ T30] audit: type=1400 audit(2104.130:463): avc: denied { open } for pid=5311 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2105.791390][ T3844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.861861][ T3844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.658176][ T3844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.397663][ T3844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2124.442982][ T3844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2124.504781][ T3844] bond0 (unregistering): Released all slaves [ 2125.674513][ T5323] syzkaller0: entered promiscuous mode [ 2125.691248][ T5323] syzkaller0: entered allmulticast mode [ 2125.852916][ T3844] hsr_slave_0: left promiscuous mode [ 2125.872957][ T3844] hsr_slave_1: left promiscuous mode [ 2125.954719][ T3844] veth1_macvtap: left promiscuous mode [ 2125.969433][ T3844] veth0_macvtap: left promiscuous mode [ 2125.972484][ T3844] veth1_vlan: left promiscuous mode [ 2125.982017][ T3844] veth0_vlan: left promiscuous mode [ 2147.778216][ T30] audit: type=1400 audit(2147.330:464): avc: denied { set_context_mgr } for pid=5345 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2148.087075][ T30] audit: type=1400 audit(2147.650:465): avc: denied { map } for pid=5345 comm="syz.2.522" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2148.242468][ T5347] binder: 5345:5347 tried to acquire reference to desc 0, got 1 instead [ 2148.253941][ T30] audit: type=1400 audit(2147.820:466): avc: denied { call } for pid=5345 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2148.612050][ T4093] binder: undelivered transaction 6, process died. [ 2154.597620][ T30] audit: type=1400 audit(2154.130:467): avc: denied { write } for pid=5352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2159.897259][ T30] audit: type=1400 audit(2159.460:468): avc: denied { write } for pid=5364 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2164.841332][ T3228] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2169.129049][ T5380] binder: tried to use weak ref as strong ref [ 2169.190516][ T5380] binder: 5379:5380 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2179.627232][ T5403] syz.2.531 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2179.630071][ T5403] CPU: 0 UID: 0 PID: 5403 Comm: syz.2.531 Tainted: G W syzkaller #0 PREEMPT [ 2179.630179][ T5403] Tainted: [W]=WARN [ 2179.630208][ T5403] Hardware name: linux,dummy-virt (DT) [ 2179.630242][ T5403] Call trace: [ 2179.630273][ T5403] show_stack+0x18/0x24 (C) [ 2179.630371][ T5403] dump_stack_lvl+0x7c/0xb0 [ 2179.630431][ T5403] dump_stack+0x1c/0x28 [ 2179.630484][ T5403] dump_header+0x104/0x498 [ 2179.630538][ T5403] oom_kill_process+0x49c/0x6ec [ 2179.630600][ T5403] out_of_memory+0x244/0x1064 [ 2179.630654][ T5403] mem_cgroup_out_of_memory+0x128/0x140 [ 2179.630711][ T5403] try_charge_memcg+0x640/0xd1c [ 2179.630767][ T5403] __memcg_slab_post_alloc_hook+0x394/0xdcc [ 2179.630824][ T5403] __kmalloc_noprof+0x5ac/0x74c [ 2179.630881][ T5403] fib_default_rule_add+0x54/0x388 [ 2179.630944][ T5403] fib6_rules_net_init+0x7c/0x100 [ 2179.631003][ T5403] ops_init+0x15c/0x434 [ 2179.631061][ T5403] setup_net+0x108/0x2c4 [ 2179.631132][ T5403] copy_net_ns+0x288/0x49c [ 2179.631187][ T5403] create_new_namespaces+0x2d4/0x7f4 [ 2179.631246][ T5403] unshare_nsproxy_namespaces+0x88/0x184 [ 2179.631301][ T5403] ksys_unshare+0x2ac/0x6e0 [ 2179.631360][ T5403] __arm64_sys_unshare+0x34/0x50 [ 2179.631416][ T5403] invoke_syscall+0x74/0x240 [ 2179.631472][ T5403] el0_svc_common.constprop.0+0xac/0x230 [ 2179.631526][ T5403] do_el0_svc+0x40/0x58 [ 2179.631582][ T5403] el0_svc+0x58/0x2a4 [ 2179.631639][ T5403] el0t_64_sync_handler+0xa0/0xe4 [ 2179.631691][ T5403] el0t_64_sync+0x198/0x19c [ 2179.676142][ T5403] memory: usage 96kB, limit 96kB, failcnt 115 [ 2179.679007][ T5403] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 2179.680146][ T5403] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 2179.707929][ T5403] Memory cgroup stats for /syz2/test: [ 2179.709141][ T5403] cache 0 [ 2179.709262][ T5403] rss 0 [ 2179.709348][ T5403] rss_huge 0 [ 2179.709433][ T5403] shmem 0 [ 2179.709517][ T5403] mapped_file 0 [ 2179.709615][ T5403] dirty 0 [ 2179.709707][ T5403] writeback 0 [ 2179.709805][ T5403] workingset_refault_anon 0 [ 2179.709909][ T5403] workingset_refault_file 0 [ 2179.710003][ T5403] swap 0 [ 2179.710099][ T5403] swapcached 16384 [ 2179.710193][ T5403] pgpgin 4 [ 2179.710279][ T5403] pgpgout 4 [ 2179.710412][ T5403] pgfault 12 [ 2179.710516][ T5403] pgmajfault 0 [ 2179.710621][ T5403] inactive_anon 0 [ 2179.710719][ T5403] active_anon 0 [ 2179.710810][ T5403] inactive_file 0 [ 2179.710901][ T5403] active_file 0 [ 2179.710986][ T5403] unevictable 0 [ 2179.711071][ T5403] hierarchical_memory_limit 98304 [ 2179.711166][ T5403] hierarchical_memsw_limit 9223372036854771712 [ 2179.711254][ T5403] total_cache 0 [ 2179.711338][ T5403] total_rss 0 [ 2179.711423][ T5403] total_rss_huge 0 [ 2179.711509][ T5403] total_shmem 0 [ 2179.711603][ T5403] total_mapped_file 0 [ 2179.711688][ T5403] total_dirty 0 [ 2179.711771][ T5403] total_writeback 0 [ 2179.711858][ T5403] total_workingset_refault_anon 0 [ 2179.711940][ T5403] total_workingset_refault_file 0 [ 2179.712023][ T5403] total_swap 0 [ 2179.712109][ T5403] total_swapcached 16384 [ 2179.712192][ T5403] total_pgpgin 4 [ 2179.712274][ T5403] total_pgpgout 4 [ 2179.712357][ T5403] total_pgfault 12 [ 2179.712440][ T5403] total_pgmajfault 0 [ 2179.712522][ T5403] total_inactive_anon 0 [ 2179.712666][ T5403] total_active_anon 0 [ 2179.712756][ T5403] total_inactive_file 0 [ 2179.712840][ T5403] total_active_file 0 [ 2179.712922][ T5403] total_unevictable 0 [ 2179.713004][ T5403] anon_cost 0 [ 2179.713098][ T5403] file_cost 0 [ 2179.713252][ T5403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.531,pid=5401,uid=0 [ 2179.716145][ T5403] Memory cgroup out of memory: Killed process 5401 (syz.2.531) total-vm:40656kB, anon-rss:1300kB, file-rss:1104kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2180.650049][ T30] audit: type=1400 audit(2180.220:469): avc: denied { write } for pid=5402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2180.933791][ T5311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2181.040978][ T5311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.140528][ T30] audit: type=1400 audit(2184.680:470): avc: denied { write } for pid=5410 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2187.979161][ T3228] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2192.520904][ T30] audit: type=1400 audit(2192.030:471): avc: denied { cmd } for pid=5421 comm="iou-wrk-5422" path="/dev/ublk-control" dev="devtmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 2210.494446][ T5430] fuse: Bad value for 'fd' [ 2230.477870][ T30] audit: type=1400 audit(2230.020:472): avc: denied { write } for pid=5435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2235.634683][ T5311] hsr_slave_0: entered promiscuous mode [ 2243.941032][ T5311] hsr_slave_1: entered promiscuous mode [ 2247.294439][ T5450] fuse: Bad value for 'fd' [ 2248.215733][ T30] audit: type=1400 audit(2247.760:473): avc: denied { write } for pid=5447 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2254.062420][ T3228] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2293.412221][ T30] audit: type=1400 audit(2292.960:474): avc: denied { create } for pid=5458 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2306.482797][ T5311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2306.687715][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2306.701753][ T5311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2306.929810][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2306.978642][ T5311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2307.181631][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2307.289612][ T5311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2307.762674][ T5311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2307.888050][ T30] audit: type=1400 audit(2307.440:475): avc: denied { write } for pid=5467 comm="syz.2.545" name="nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2308.117211][ T30] audit: type=1400 audit(2307.670:476): avc: denied { map } for pid=5467 comm="syz.2.545" path="/dev/nullb0" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2324.595775][ T30] audit: type=1400 audit(2324.130:477): avc: denied { write } for pid=5476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2331.426107][ T30] audit: type=1400 audit(2330.970:478): avc: denied { write } for pid=5488 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2335.698247][ T3228] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2337.502225][ T5499] loop8: detected capacity change from 0 to 16384 [ 2338.198601][ T5311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2343.860074][ T30] audit: type=1400 audit(2343.400:479): avc: denied { write } for pid=5500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2345.616806][ T30] audit: type=1400 audit(2345.180:480): avc: denied { setopt } for pid=5509 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2351.112331][ T30] audit: type=1400 audit(2350.640:481): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2363.845703][ T30] audit: type=1400 audit(2363.400:482): avc: denied { write } for pid=5522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2367.386801][ T30] audit: type=1400 audit(2366.950:483): avc: denied { write } for pid=5529 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2386.376289][ T30] audit: type=1400 audit(2385.930:484): avc: denied { create } for pid=5560 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2394.337387][ T30] audit: type=1400 audit(2393.900:485): avc: denied { write } for pid=5565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2399.906211][ T30] audit: type=1400 audit(2399.450:486): avc: denied { write } for pid=5571 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2406.669223][ T30] audit: type=1400 audit(2406.210:487): avc: denied { sqpoll } for pid=5583 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2413.846242][ T30] audit: type=1400 audit(2413.400:488): avc: denied { write } for pid=5594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2425.626341][ T30] audit: type=1400 audit(2425.160:489): avc: denied { write } for pid=5607 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2427.881649][ T5613] [ 2427.881956][ T5613] ====================================================== [ 2427.882137][ T5613] WARNING: possible circular locking dependency detected [ 2427.882351][ T5613] syzkaller #0 Tainted: G W [ 2427.882531][ T5613] ------------------------------------------------------ [ 2427.882980][ T5613] syz.2.564/5613 is trying to acquire lock: [ 2427.883376][ T5613] ffff000014b4f4e0 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x28c/0x4e0 [ 2427.884855][ T5613] [ 2427.884855][ T5613] but task is already holding lock: [ 2427.885210][ T5613] ffff000014b4efc0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x18/0x30 [ 2427.886115][ T5613] [ 2427.886115][ T5613] which lock already depends on the new lock. [ 2427.886115][ T5613] [ 2427.886542][ T5613] [ 2427.886542][ T5613] the existing dependency chain (in reverse order) is: [ 2427.886966][ T5613] [ 2427.886966][ T5613] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 2427.887768][ T5613] lock_acquire+0x3d0/0x44c [ 2427.888119][ T5613] blk_alloc_queue+0x4e0/0x640 [ 2427.888416][ T5613] blk_mq_alloc_queue+0x148/0x224 [ 2427.888749][ T5613] __blk_mq_alloc_disk+0x20/0x120 [ 2427.889042][ T5613] null_add_dev+0x9bc/0x17a8 [ 2427.889333][ T5613] null_init+0x248/0x2f4 [ 2427.889619][ T5613] do_one_initcall+0x134/0xb20 [ 2427.889936][ T5613] kernel_init_freeable+0x5ec/0x670 [ 2427.890146][ T5613] kernel_init+0x2c/0x14c [ 2427.890299][ T5613] ret_from_fork+0x10/0x20 [ 2427.890520][ T5613] [ 2427.890520][ T5613] -> #3 (fs_reclaim){+.+.}-{0:0}: [ 2427.890825][ T5613] lock_acquire+0x3d0/0x44c [ 2427.890980][ T5613] fs_reclaim_acquire+0x130/0x158 [ 2427.891141][ T5613] __kmalloc_cache_node_noprof+0x6c/0x634 [ 2427.891321][ T5613] __get_vm_area_node+0x118/0x2ec [ 2427.891483][ T5613] __vmalloc_node_range_noprof+0x198/0x1024 [ 2427.891672][ T5613] __vmalloc_node_noprof+0xe4/0x14c [ 2427.891875][ T5613] vmalloc_noprof+0x24/0x30 [ 2427.892022][ T5613] mtdblock_writesect+0x41c/0x5b8 [ 2427.892185][ T5613] mtd_queue_rq+0x744/0x1694 [ 2427.892342][ T5613] blk_mq_dispatch_rq_list+0x2e0/0x177c [ 2427.892515][ T5613] __blk_mq_sched_dispatch_requests+0x830/0xe60 [ 2427.892729][ T5613] blk_mq_sched_dispatch_requests+0x7c/0x114 [ 2427.892912][ T5613] blk_mq_run_work_fn+0xf0/0x278 [ 2427.893063][ T5613] process_one_work+0x830/0x1c00 [ 2427.893227][ T5613] worker_thread+0x42c/0xc90 [ 2427.893381][ T5613] kthread+0x2ec/0x384 [ 2427.893521][ T5613] ret_from_fork+0x10/0x20 [ 2427.893703][ T5613] [ 2427.893703][ T5613] -> #2 (&new->lock){+.+.}-{4:4}: [ 2427.893996][ T5613] lock_acquire+0x3d0/0x44c [ 2427.894157][ T5613] __mutex_lock+0x150/0x1530 [ 2427.894311][ T5613] mutex_lock_nested+0x24/0x30 [ 2427.894469][ T5613] mtd_queue_rq+0x2a4/0x1694 [ 2427.894633][ T5613] blk_mq_dispatch_rq_list+0x2e0/0x177c [ 2427.894809][ T5613] __blk_mq_sched_dispatch_requests+0x830/0xe60 [ 2427.894983][ T5613] blk_mq_sched_dispatch_requests+0x7c/0x114 [ 2427.895163][ T5613] blk_mq_run_work_fn+0xf0/0x278 [ 2427.895319][ T5613] process_one_work+0x830/0x1c00 [ 2427.895486][ T5613] worker_thread+0x42c/0xc90 [ 2427.895642][ T5613] kthread+0x2ec/0x384 [ 2427.895792][ T5613] ret_from_fork+0x10/0x20 [ 2427.895943][ T5613] [ 2427.895943][ T5613] -> #1 (set->srcu){.+.+}-{0:0}: [ 2427.896269][ T5613] lock_sync+0xf0/0x16c [ 2427.896422][ T5613] __synchronize_srcu+0xa8/0x280 [ 2427.896626][ T5613] synchronize_srcu+0x168/0x7d0 [ 2427.896796][ T5613] blk_mq_quiesce_queue+0xf4/0x160 [ 2427.896953][ T5613] elevator_switch+0x118/0x430 [ 2427.897113][ T5613] elevator_change+0x294/0x420 [ 2427.897274][ T5613] elevator_set_default+0x210/0x2b8 [ 2427.897443][ T5613] blk_register_queue+0x36c/0x500 [ 2427.897613][ T5613] __add_disk+0x510/0xb48 [ 2427.897768][ T5613] add_disk_fwnode+0x110/0x3e0 [ 2427.897928][ T5613] device_add_disk+0x14/0x20 [ 2427.898085][ T5613] nbd_dev_add+0x5f8/0x9b4 [ 2427.898236][ T5613] nbd_init+0x190/0x1b0 [ 2427.898398][ T5613] do_one_initcall+0x134/0xb20 [ 2427.898554][ T5613] kernel_init_freeable+0x5ec/0x670 [ 2427.898728][ T5613] kernel_init+0x2c/0x14c [ 2427.898878][ T5613] ret_from_fork+0x10/0x20 [ 2427.899033][ T5613] [ 2427.899033][ T5613] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 2427.899328][ T5613] check_prev_add+0x114/0xca0 [ 2427.899489][ T5613] __lock_acquire+0x13f4/0x1a5c [ 2427.899663][ T5613] lock_acquire+0x3d0/0x44c [ 2427.899814][ T5613] __mutex_lock+0x150/0x1530 [ 2427.899972][ T5613] mutex_lock_nested+0x24/0x30 [ 2427.900127][ T5613] queue_requests_store+0x28c/0x4e0 [ 2427.900294][ T5613] queue_attr_store+0x1f8/0x260 [ 2427.900449][ T5613] sysfs_kf_write+0xc4/0x10c [ 2427.900664][ T5613] kernfs_fop_write_iter+0x2a4/0x460 [ 2427.900829][ T5613] vfs_write+0x4c0/0xbac [ 2427.900988][ T5613] ksys_write+0xf0/0x1e0 [ 2427.901139][ T5613] __arm64_sys_write+0x70/0xa0 [ 2427.901303][ T5613] invoke_syscall+0x74/0x240 [ 2427.901467][ T5613] el0_svc_common.constprop.0+0xac/0x230 [ 2427.901652][ T5613] do_el0_svc+0x40/0x58 [ 2427.901810][ T5613] el0_svc+0x58/0x2a4 [ 2427.901957][ T5613] el0t_64_sync_handler+0xa0/0xe4 [ 2427.902131][ T5613] el0t_64_sync+0x198/0x19c [ 2427.902315][ T5613] [ 2427.902315][ T5613] other info that might help us debug this: [ 2427.902315][ T5613] [ 2427.902615][ T5613] Chain exists of: [ 2427.902615][ T5613] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 2427.902615][ T5613] [ 2427.903140][ T5613] Possible unsafe locking scenario: [ 2427.903140][ T5613] [ 2427.903326][ T5613] CPU0 CPU1 [ 2427.903482][ T5613] ---- ---- [ 2427.903652][ T5613] lock(&q->q_usage_counter(io)#51); [ 2427.903899][ T5613] lock(fs_reclaim); [ 2427.904124][ T5613] lock(&q->q_usage_counter(io)#51); [ 2427.904417][ T5613] lock(&q->elevator_lock); [ 2427.904662][ T5613] [ 2427.904662][ T5613] *** DEADLOCK *** [ 2427.904662][ T5613] [ 2427.904896][ T5613] locks held by syz.2.564/5613: 7, last CPU#0: [ 2427.905084][ T5613] #0: ffff000017ce7eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1e4/0x294 [ 2427.905489][ T5613] #1: ffff000020e12460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x680/0xbac [ 2427.905886][ T5613] #2: ffff0000188f8c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e4/0x460 [ 2427.906264][ T5613] #3: ffff000012a3a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x460 [ 2427.906668][ T5613] #4: ffff0000154e71f8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: queue_requests_store+0xe4/0x4e0 [ 2427.907055][ T5613] #5: ffff000014b4efc0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x18/0x30 [ 2427.907484][ T5613] #6: ffff000014b4eff8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x18/0x30 [ 2427.907945][ T5613] [ 2427.907945][ T5613] stack backtrace: [ 2427.908126][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz.2.564 Tainted: G W syzkaller #0 PREEMPT [ 2427.908387][ T5613] Tainted: [W]=WARN [ 2427.908500][ T5613] Hardware name: linux,dummy-virt (DT) [ 2427.908683][ T5613] Call trace: [ 2427.908800][ T5613] show_stack+0x18/0x24 (C) [ 2427.908968][ T5613] dump_stack_lvl+0x7c/0xb0 [ 2427.909125][ T5613] dump_stack+0x1c/0x28 [ 2427.909270][ T5613] print_circular_bug+0x23c/0x284 [ 2427.909430][ T5613] check_noncircular+0x174/0x194 [ 2427.909605][ T5613] check_prev_add+0x114/0xca0 [ 2427.909756][ T5613] __lock_acquire+0x13f4/0x1a5c [ 2427.909904][ T5613] lock_acquire+0x3d0/0x44c [ 2427.910048][ T5613] __mutex_lock+0x150/0x1530 [ 2427.910196][ T5613] mutex_lock_nested+0x24/0x30 [ 2427.910351][ T5613] queue_requests_store+0x28c/0x4e0 [ 2427.910514][ T5613] queue_attr_store+0x1f8/0x260 [ 2427.910673][ T5613] sysfs_kf_write+0xc4/0x10c [ 2427.910824][ T5613] kernfs_fop_write_iter+0x2a4/0x460 [ 2427.910985][ T5613] vfs_write+0x4c0/0xbac [ 2427.911139][ T5613] ksys_write+0xf0/0x1e0 [ 2427.911291][ T5613] __arm64_sys_write+0x70/0xa0 [ 2427.911443][ T5613] invoke_syscall+0x74/0x240 [ 2427.911597][ T5613] el0_svc_common.constprop.0+0xac/0x230 [ 2427.911773][ T5613] do_el0_svc+0x40/0x58 [ 2427.911927][ T5613] el0_svc+0x58/0x2a4 [ 2427.912072][ T5613] el0t_64_sync_handler+0xa0/0xe4 [ 2427.912237][ T5613] el0t_64_sync+0x198/0x19c [ 2427.942114][ T5311] veth0_vlan: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2428.358262][ T5311] veth1_vlan: entered promiscuous mode [ 2429.334885][ T4391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.594642][ T4391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.931721][ T4391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.202654][ T4391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.266742][ T30] audit: type=1400 audit(2429.820:490): avc: denied { write } for pid=5615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2431.505607][ T30] audit: type=1400 audit(2431.060:491): avc: denied { write } for pid=5619 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2432.859907][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2432.908571][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2432.937776][ T4391] bond0 (unregistering): Released all slaves [ 2433.129264][ T4391] hsr_slave_0: left promiscuous mode [ 2433.132379][ T4391] hsr_slave_1: left promiscuous mode [ 2433.178439][ T4391] veth1_macvtap: left promiscuous mode [ 2433.190439][ T4391] veth0_macvtap: left promiscuous mode [ 2433.191779][ T4391] veth1_vlan: left promiscuous mode [ 2433.194395][ T4391] veth0_vlan: left promiscuous mode [ 2441.785795][ T30] audit: type=1400 audit(2441.350:492): avc: denied { write } for pid=5626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.810879][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2442.851122][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2442.873312][ T30] audit: type=1400 audit(2442.440:493): avc: denied { write } for pid=5632 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.878264][ T4391] bond0 (unregistering): Released all slaves [ 2443.213861][ T4391] hsr_slave_0: left promiscuous mode [ 2443.237361][ T4391] hsr_slave_1: left promiscuous mode [ 2443.292819][ T4391] veth1_vlan: left promiscuous mode [ 2443.306805][ T4391] veth0_vlan: left promiscuous mode [ 2447.158426][ T3228] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2448.531802][ T30] audit: type=1400 audit(2448.100:494): avc: denied { write } for pid=5636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2448.961819][ T30] audit: type=1400 audit(2448.530:495): avc: denied { write } for pid=5639 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2449.261065][ T3228] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2450.041634][ T30] audit: type=1400 audit(2449.610:496): avc: denied { write } for pid=5643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2450.656702][ T30] audit: type=1400 audit(2450.210:497): avc: denied { write } for pid=5646 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2451.142948][ T3228] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2452.274875][ T30] audit: type=1400 audit(2451.840:498): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2452.819408][ T30] audit: type=1400 audit(2452.390:499): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2453.081814][ T3228] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2453.732992][ T30] audit: type=1400 audit(2453.300:500): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2454.103798][ T30] audit: type=1400 audit(2453.670:501): avc: denied { write } for pid=5660 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2454.664779][ T3228] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2456.171693][ T30] audit: type=1400 audit(2455.740:502): avc: denied { write } for pid=5664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2456.950180][ T30] audit: type=1400 audit(2456.520:503): avc: denied { write } for pid=5667 comm="rm" name="hook-state" dev="tmpfs" ino=932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2457.548475][ T3228] 8021q: adding VLAN 0 to HW filter on device eth18