last executing test programs: 12m40.63299848s ago: executing program 1 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 12m39.315335027s ago: executing program 1 (id=342): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 12m15.709346418s ago: executing program 1 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 12m12.35833496s ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000800)="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", 0x126}, {&(0x7f00000000c0)="15654d91fd691c85513e1dff9a607c8217479a71a5477af6dc523937c362c891afad759d937a08ca51d28419513cfb2df6efeaf3fc1b3b3a7c6403c4dcaead7eec60576bf60e65ef13a17fdb13fed40d65bd28b50a91ae2edc949328be69b2fac09c2cd5b8c36a0cc78ff862add091c2a40610e313fe192ecb054b57445696a4c6f9c2f8f201920480d6d5e8621d77a88d2087244fd50eee2d6ccfd03b713f3401890c1239064dfae7223cdbedf4edb3f38d590983d394", 0xb7}, {&(0x7f0000006a40)="21aac44f47fbf4f6496ce4e4b9a4d822b78eb9b455598c8b61d8495f74a4a25b52ff51750300f4c4ca6f376903868f6c4549a9614f3fe4b30498a27b658ee69fefa3edb52ed47b2ee8c004e5582c9bec82b153e8cf7f91e72d9054ffffbdbaf0fcd1c048ed3ee937b93ad633ad5a01d52d820466d46fbc4409535896a59dd1d94279d9c4df720e1871a57830a078e3c058ec6a5e0d2b233827600000000000000000ca00"/182, 0xb6}, {&(0x7f0000000180)="47b7ae525821a239fc7a10a2f198314f675756667db1e87b8453f3b2e6864abbac55304b04db64070368248b9b3d488fc59bc48e88b14f23a271edbd512b71e3d47f7f3885bb27e665e04225088a0f126d14ad611079f1fffffffffffffff94141486ed92c2044d31c44b77f94598161dc688a843a0b8fb4ed79cc3c5868cd25c4b1022527ef18f57c4badcf188e8e0f9b068464c66eebd146280afa02cf2a8bf5a08dabe729a88685a8c4e0b6b7157ae487c9e48618ecb59e1d4482ee80cbeaf965158d8fe068f8b6b717a6e3cdf43cb4ac3ea83cf81dc54cd8ac5d217600eb5b7b90fd85a70c1ab6d55ea72dd2dfd49ebce26f30f2fb1c76", 0xf9}, {&(0x7f0000000940)="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", 0x229}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="2400000000000000000000000700000001071336ac1414aaac1414aaac1e080100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14141d"], 0x48}}], 0x1, 0x0) 12m11.817666534s ago: executing program 1 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 12m11.322219818s ago: executing program 1 (id=357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty, 0x7fff}, 0x1c) write$binfmt_misc(r1, &(0x7f00000002c0), 0xfff7) 11m25.593612022s ago: executing program 32 (id=357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty, 0x7fff}, 0x1c) write$binfmt_misc(r1, &(0x7f00000002c0), 0xfff7) 26.588766171s ago: executing program 0 (id=942): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 26.197186952s ago: executing program 0 (id=943): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0) read$watch_queue(r1, &(0x7f0000000100)=""/222, 0xde) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000240)=""/98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x11) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xffffffffffffffff) 6.465609983s ago: executing program 0 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 5.906235249s ago: executing program 2 (id=948): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "af47debf02a0b90bc25e78a77b4ac75c"}, @eol, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 5.286333646s ago: executing program 2 (id=949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xc}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18) listen(r1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'tunl0\x00', 0x0}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4.707263741s ago: executing program 0 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0) 2.264971318s ago: executing program 2 (id=951): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)={0xc77, 0x1, [{0x7}]}) 1.876905999s ago: executing program 0 (id=952): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x83, 0x2}}, 0x14}}, 0x0) 1.495915109s ago: executing program 2 (id=953): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0a85322, &(0x7f0000001380)={0x80000001, 0xfffffffc, 0x0, 'queue1\x00'}) 1.182498218s ago: executing program 0 (id=954): gettid() prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.11643085s ago: executing program 2 (id=955): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/25, 0x19}, 0x7fffffff}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 2 (id=956): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18562' (ED25519) to the list of known hosts. [ 240.297945][ T30] audit: type=1400 audit(239.700:58): avc: denied { name_bind } for pid=3266 comm="sshd" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 241.031957][ T30] audit: type=1400 audit(240.430:59): avc: denied { execute } for pid=3268 comm="sh" name="syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 241.044726][ T30] audit: type=1400 audit(240.440:60): avc: denied { execute_no_trans } for pid=3268 comm="sh" path="/syz-executor" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 247.617618][ T30] audit: type=1400 audit(247.020:61): avc: denied { mounton } for pid=3268 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 247.633389][ T30] audit: type=1400 audit(247.030:62): avc: denied { mount } for pid=3268 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 247.682138][ T3268] cgroup: Unknown subsys name 'net' [ 247.716586][ T30] audit: type=1400 audit(247.120:63): avc: denied { unmount } for pid=3268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 248.128175][ T3268] cgroup: Unknown subsys name 'cpuset' [ 248.196378][ T3268] cgroup: Unknown subsys name 'rlimit' [ 248.635995][ T30] audit: type=1400 audit(248.040:64): avc: denied { setattr } for pid=3268 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.639926][ T30] audit: type=1400 audit(248.040:65): avc: denied { mounton } for pid=3268 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 248.645283][ T30] audit: type=1400 audit(248.050:66): avc: denied { mount } for pid=3268 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 249.480842][ T3270] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 249.492446][ T30] audit: type=1400 audit(248.890:67): avc: denied { relabelto } for pid=3270 comm="mkswap" name="swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 249.499670][ T30] audit: type=1400 audit(248.900:68): avc: denied { write } for pid=3270 comm="mkswap" path="/swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 249.659349][ T30] audit: type=1400 audit(249.060:69): avc: denied { read } for pid=3268 comm="syz-executor" name="swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 249.667718][ T30] audit: type=1400 audit(249.070:70): avc: denied { open } for pid=3268 comm="syz-executor" path="/swap-file" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 249.697620][ T3268] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 263.154268][ T30] audit: type=1400 audit(262.560:71): avc: denied { execmem } for pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 263.262964][ T30] audit: type=1400 audit(262.660:72): avc: denied { read } for pid=3273 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.264806][ T30] audit: type=1400 audit(262.670:73): avc: denied { open } for pid=3273 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.294285][ T30] audit: type=1400 audit(262.690:74): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 263.385845][ T30] audit: type=1400 audit(262.790:75): avc: denied { module_request } for pid=3273 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 263.822416][ T30] audit: type=1400 audit(263.220:76): avc: denied { sys_module } for pid=3273 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 271.926134][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.965638][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.354899][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.378855][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.028291][ T3273] hsr_slave_0: entered promiscuous mode [ 276.089844][ T3273] hsr_slave_1: entered promiscuous mode [ 276.669359][ T3274] hsr_slave_0: entered promiscuous mode [ 276.726943][ T3274] hsr_slave_1: entered promiscuous mode [ 276.793650][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.796130][ T3274] Cannot create hsr debugfs directory [ 278.950219][ T30] audit: type=1400 audit(278.350:77): avc: denied { create } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.962678][ T30] audit: type=1400 audit(278.360:78): avc: denied { write } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.965514][ T30] audit: type=1400 audit(278.370:79): avc: denied { read } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.025763][ T3273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.130396][ T3273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.207399][ T3273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.258431][ T3273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.807258][ T3274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.894235][ T3274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.938613][ T3274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.977022][ T3274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.528295][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.617423][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.608769][ T3273] veth0_vlan: entered promiscuous mode [ 301.765882][ T3273] veth1_vlan: entered promiscuous mode [ 302.104548][ T3274] veth0_vlan: entered promiscuous mode [ 302.180398][ T3273] veth0_macvtap: entered promiscuous mode [ 302.317459][ T3273] veth1_macvtap: entered promiscuous mode [ 302.352803][ T3274] veth1_vlan: entered promiscuous mode [ 302.879040][ T3274] veth0_macvtap: entered promiscuous mode [ 302.977774][ T3273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.979905][ T3273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.980641][ T3273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.983549][ T3273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.067363][ T3274] veth1_macvtap: entered promiscuous mode [ 303.915160][ T30] audit: type=1400 audit(303.310:80): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.986955][ T30] audit: type=1400 audit(303.380:81): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/syzkaller.iXWPHb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 304.102518][ T30] audit: type=1400 audit(303.480:82): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 304.187882][ T30] audit: type=1400 audit(303.590:83): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/syzkaller.iXWPHb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 304.254479][ T30] audit: type=1400 audit(303.640:84): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/syzkaller.iXWPHb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 304.417343][ T30] audit: type=1400 audit(303.820:85): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 304.473676][ T30] audit: type=1400 audit(303.870:86): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 304.535529][ T3274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.536642][ T3274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.537452][ T3274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.538188][ T3274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.632773][ T30] audit: type=1400 audit(304.030:87): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 304.712505][ T30] audit: type=1400 audit(304.100:88): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 304.721358][ T30] audit: type=1400 audit(304.120:89): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 305.328840][ T3273] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 308.484057][ T3421] @ÿ: renamed from veth0_vlan (while UP) [ 309.786572][ T3425] netlink: 'syz.0.5': attribute type 2 has an invalid length. [ 309.787791][ T3425] netlink: 'syz.0.5': attribute type 8 has an invalid length. [ 309.794974][ T3425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5'. [ 309.945397][ T3425] netlink: 'syz.0.5': attribute type 39 has an invalid length. [ 310.465143][ T3426] netlink: 'syz.0.5': attribute type 10 has an invalid length. [ 312.373067][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 312.373268][ T30] audit: type=1400 audit(311.760:98): avc: denied { prog_run } for pid=3431 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 315.186960][ T30] audit: type=1400 audit(314.590:99): avc: denied { create } for pid=3435 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.239467][ T30] audit: type=1400 audit(314.640:100): avc: denied { write } for pid=3435 comm="syz.1.10" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.655606][ T30] audit: type=1400 audit(315.040:101): avc: denied { create } for pid=3439 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.680617][ T30] audit: type=1400 audit(315.080:102): avc: denied { write } for pid=3439 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 316.489632][ T30] audit: type=1400 audit(315.890:103): avc: denied { create } for pid=3443 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.924673][ T30] audit: type=1400 audit(317.330:104): avc: denied { create } for pid=3448 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.005788][ T30] audit: type=1400 audit(317.410:105): avc: denied { setopt } for pid=3448 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.035210][ T30] audit: type=1400 audit(317.420:106): avc: denied { bind } for pid=3448 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.048112][ T30] audit: type=1400 audit(317.450:107): avc: denied { name_bind } for pid=3448 comm="syz.0.15" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 318.065312][ T30] audit: type=1400 audit(317.470:108): avc: denied { node_bind } for pid=3448 comm="syz.0.15" saddr=4.0.0.0 src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 318.287111][ T30] audit: type=1400 audit(317.680:109): avc: denied { create } for pid=3450 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 318.907639][ T3455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16'. [ 320.159919][ T3459] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 320.160601][ T3459] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19'. [ 324.449434][ T30] audit: type=1400 audit(323.820:110): avc: denied { setopt } for pid=3469 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.655482][ T30] audit: type=1400 audit(324.060:111): avc: denied { create } for pid=3471 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.735355][ T30] audit: type=1400 audit(324.140:112): avc: denied { write } for pid=3471 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.352538][ T30] audit: type=1400 audit(324.750:113): avc: denied { relabelfrom } for pid=3475 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 325.353560][ T30] audit: type=1400 audit(324.760:114): avc: denied { relabelto } for pid=3475 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 325.762564][ T3476] syzkaller0: entered promiscuous mode [ 325.766826][ T3476] syzkaller0: entered allmulticast mode [ 327.680592][ T30] audit: type=1400 audit(327.080:115): avc: denied { create } for pid=3481 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.733660][ T30] audit: type=1400 audit(327.130:116): avc: denied { setopt } for pid=3481 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.565418][ T30] audit: type=1400 audit(329.970:117): avc: denied { write } for pid=3489 comm="syz.1.34" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 330.569326][ T30] audit: type=1400 audit(329.970:118): avc: denied { connect } for pid=3489 comm="syz.1.34" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 330.613828][ T30] audit: type=1400 audit(330.010:119): avc: denied { name_connect } for pid=3489 comm="syz.1.34" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 331.063141][ T30] audit: type=1400 audit(330.460:120): avc: denied { read } for pid=3489 comm="syz.1.34" laddr=172.20.20.170 lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.864327][ T3511] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 350.038128][ T30] audit: type=1400 audit(349.420:121): avc: denied { create } for pid=3515 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 350.223744][ T3516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40'. [ 350.225586][ T3516] bond_slave_0: entered allmulticast mode [ 350.228965][ T3516] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 350.229820][ T3516] netlink: 1 bytes leftover after parsing attributes in process `syz.0.40'. [ 350.882463][ T30] audit: type=1400 audit(350.280:122): avc: denied { ioctl } for pid=3519 comm="syz.0.42" path="socket:[4300]" dev="sockfs" ino=4300 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 353.069109][ T3526] netlink: 184 bytes leftover after parsing attributes in process `syz.0.45'. [ 354.169900][ T3532] netlink: 'syz.1.48': attribute type 29 has an invalid length. [ 354.184398][ T3532] netlink: 'syz.1.48': attribute type 29 has an invalid length. [ 354.649717][ T3532] sctp: [Deprecated]: syz.1.48 (pid 3532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.649717][ T3532] Use struct sctp_sack_info instead [ 357.712673][ T3538] netlink: 'syz.0.50': attribute type 4 has an invalid length. [ 358.575016][ T30] audit: type=1400 audit(357.950:123): avc: denied { name_connect } for pid=3539 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 358.730701][ T3540] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 359.054426][ T3542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3542 comm=syz.1.52 [ 360.023067][ T3546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3546 comm=syz.1.54 [ 360.633980][ T30] audit: type=1400 audit(359.960:124): avc: denied { name_bind } for pid=3547 comm="syz.0.55" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 360.636450][ T30] audit: type=1400 audit(359.960:125): avc: denied { node_bind } for pid=3547 comm="syz.0.55" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 362.186811][ T3555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3555 comm=syz.0.58 [ 362.455346][ T30] audit: type=1400 audit(361.850:126): avc: denied { ioctl } for pid=3551 comm="syz.1.57" path="socket:[4367]" dev="sockfs" ino=4367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.170536][ T3565] tmpfs: Bad value for 'mpol' [ 365.188361][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 365.790134][ T30] audit: type=1400 audit(365.190:127): avc: denied { create } for pid=3569 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 365.945670][ T3572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 365.947590][ T3572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.62'. [ 365.948985][ T3572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 365.983808][ T3572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 369.142845][ T30] audit: type=1400 audit(368.540:128): avc: denied { ioctl } for pid=3576 comm="syz.0.63" path="socket:[3970]" dev="sockfs" ino=3970 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 371.769700][ T3556] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.776665][ T3556] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.777733][ T3556] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.778603][ T3556] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.877880][ T3580] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 372.917492][ T3580] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 374.097220][ T3588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 374.374249][ T30] audit: type=1400 audit(373.540:129): avc: denied { getopt } for pid=3586 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.806874][ T30] audit: type=1400 audit(374.210:130): avc: denied { read } for pid=3591 comm="syz.0.67" name="card1" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 374.808805][ T30] audit: type=1400 audit(374.210:131): avc: denied { open } for pid=3591 comm="syz.0.67" path="/dev/dri/card1" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 374.859909][ T30] audit: type=1400 audit(374.260:132): avc: denied { ioctl } for pid=3591 comm="syz.0.67" path="/dev/dri/card1" dev="devtmpfs" ino=618 ioctlcmd=0x64d1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 378.187547][ T3607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3607 comm=syz.1.74 [ 379.065252][ T30] audit: type=1400 audit(378.470:133): avc: denied { create } for pid=3608 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.135582][ T30] audit: type=1400 audit(378.540:134): avc: denied { bind } for pid=3608 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.178053][ T30] audit: type=1400 audit(378.580:135): avc: denied { connect } for pid=3608 comm="syz.1.75" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.222914][ T30] audit: type=1400 audit(378.610:136): avc: denied { setopt } for pid=3608 comm="syz.1.75" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.897800][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 379.899152][ T3612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.76'. [ 383.840603][ T3632] tmpfs: Bad value for 'mpol' [ 383.916274][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.1.86 [ 387.244356][ T30] audit: type=1400 audit(386.650:137): avc: denied { read write } for pid=3646 comm="syz.1.93" name="virtual_nci" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.250116][ T30] audit: type=1400 audit(386.650:138): avc: denied { open } for pid=3646 comm="syz.1.93" path="/dev/virtual_nci" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.363197][ T3651] netlink: 'syz.0.92': attribute type 29 has an invalid length. [ 387.460404][ T3651] netlink: 'syz.0.92': attribute type 29 has an invalid length. [ 388.626913][ T3655] batadv_slave_0: entered promiscuous mode [ 390.568052][ T3666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3666 comm=syz.1.97 [ 391.885459][ T30] audit: type=1400 audit(391.290:140): avc: denied { write } for pid=3673 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 391.887379][ T30] audit: type=1400 audit(391.290:141): avc: denied { nlmsg_read } for pid=3673 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 392.005305][ T30] audit: type=1400 audit(391.230:139): avc: denied { sqpoll } for pid=3671 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 392.146453][ T30] audit: type=1400 audit(391.540:142): avc: denied { create } for pid=3671 comm="syz.1.100" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 392.208981][ T30] audit: type=1400 audit(391.600:143): avc: denied { map } for pid=3671 comm="syz.1.100" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 392.231998][ T30] audit: type=1400 audit(391.620:144): avc: denied { read write } for pid=3671 comm="syz.1.100" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 392.419645][ T30] audit: type=1326 audit(391.780:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.477885][ T30] audit: type=1326 audit(391.820:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.505106][ T30] audit: type=1326 audit(391.890:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.514787][ T30] audit: type=1326 audit(391.910:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.546659][ T30] audit: type=1326 audit(391.930:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.548515][ T30] audit: type=1326 audit(391.950:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.563189][ T30] audit: type=1326 audit(391.970:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.578217][ T30] audit: type=1326 audit(391.970:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.583076][ T30] audit: type=1326 audit(391.980:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 392.600799][ T30] audit: type=1326 audit(392.000:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.0.102" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 399.042547][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 399.042768][ T30] audit: type=1400 audit(398.440:158): avc: denied { create } for pid=3690 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 399.055710][ T30] audit: type=1400 audit(398.460:159): avc: denied { write } for pid=3690 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.212691][ T30] audit: type=1400 audit(399.610:160): avc: denied { create } for pid=3692 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 400.306695][ T30] audit: type=1400 audit(399.710:161): avc: denied { write } for pid=3692 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 400.309024][ T30] audit: type=1400 audit(399.710:162): avc: denied { read } for pid=3692 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 405.644738][ T30] audit: type=1400 audit(405.020:163): avc: denied { read } for pid=3696 comm="syz.0.110" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 405.666972][ T30] audit: type=1400 audit(405.020:164): avc: denied { open } for pid=3696 comm="syz.0.110" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 406.719458][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.732812][ T30] audit: type=1400 audit(406.100:165): avc: denied { ioctl } for pid=3699 comm="syz.1.112" path="/dev/raw-gadget" dev="devtmpfs" ino=701 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.763277][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.815078][ T3710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.825265][ T3710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.476297][ T30] audit: type=1400 audit(409.880:166): avc: denied { write } for pid=3711 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 410.515567][ T3712] netlink: 68 bytes leftover after parsing attributes in process `syz.1.117'. [ 410.518299][ T3712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 410.519971][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 417.095885][ T30] audit: type=1400 audit(416.480:167): avc: denied { read append } for pid=3720 comm="syz.1.120" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 417.119850][ T30] audit: type=1400 audit(416.520:168): avc: denied { open } for pid=3720 comm="syz.1.120" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 417.217955][ T30] audit: type=1400 audit(416.620:169): avc: denied { ioctl } for pid=3720 comm="syz.1.120" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 435.794062][ T3739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.124'. [ 440.917264][ T3747] netlink: 72 bytes leftover after parsing attributes in process `syz.1.128'. [ 440.918350][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 440.919209][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 443.594488][ T3751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.684735][ T3751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.353219][ T30] audit: type=1326 audit(449.750:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.363074][ T30] audit: type=1326 audit(449.760:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.375577][ T30] audit: type=1326 audit(449.770:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.377353][ T30] audit: type=1326 audit(449.780:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.452695][ T30] audit: type=1326 audit(449.830:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.460053][ T30] audit: type=1326 audit(449.860:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.496232][ T30] audit: type=1326 audit(449.900:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.506711][ T30] audit: type=1326 audit(449.900:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.519322][ T30] audit: type=1326 audit(449.920:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 450.535566][ T30] audit: type=1326 audit(449.940:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.142" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 456.498140][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 456.498332][ T30] audit: type=1400 audit(455.900:190): avc: denied { getattr } for pid=3794 comm="syz.1.149" path="socket:[5310]" dev="sockfs" ino=5310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.529885][ T30] audit: type=1400 audit(455.930:191): avc: denied { read } for pid=3079 comm="syslogd" name="log" dev="vda" ino=1726 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 457.403944][ T30] audit: type=1400 audit(456.810:192): avc: denied { read } for pid=3796 comm="syz.1.150" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 457.414303][ T30] audit: type=1400 audit(456.810:193): avc: denied { open } for pid=3796 comm="syz.1.150" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 457.415951][ T30] audit: type=1400 audit(456.820:194): avc: denied { ioctl } for pid=3796 comm="syz.1.150" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 457.417221][ T3797] binder: 3796:3797 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 457.419207][ T3797] binder: 3796:3797 unknown command 0 [ 457.420163][ T3797] binder: 3796:3797 ioctl c0306201 20000240 returned -22 [ 462.039778][ C1] hrtimer: interrupt took 56449232 ns [ 462.117231][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 477.484001][ T30] audit: type=1400 audit(476.860:195): avc: denied { ioctl } for pid=3834 comm="syz.1.165" path="socket:[5364]" dev="sockfs" ino=5364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 484.769526][ T30] audit: type=1400 audit(482.470:196): avc: denied { read write } for pid=3838 comm="syz.1.167" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 484.993511][ T30] audit: type=1400 audit(482.490:197): avc: denied { open } for pid=3838 comm="syz.1.167" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 493.132179][ T30] audit: type=1400 audit(492.380:198): avc: denied { getattr } for pid=3845 comm="syz.0.169" name="/" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 494.115206][ T30] audit: type=1326 audit(493.470:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.168" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 494.117588][ T30] audit: type=1326 audit(493.470:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.168" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 494.119137][ T30] audit: type=1326 audit(493.490:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.168" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 494.136241][ T30] audit: type=1326 audit(493.490:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.168" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 494.138054][ T30] audit: type=1326 audit(493.510:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.168" exe="/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 494.266994][ T30] audit: type=1326 audit(493.510:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.168" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 494.275339][ T30] audit: type=1326 audit(493.670:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.1.168" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 494.588531][ T30] audit: type=1400 audit(493.970:206): avc: denied { mounton } for pid=3854 comm="syz.0.172" path="/88/file0" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 495.765084][ T30] audit: type=1400 audit(495.110:207): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 511.136651][ T30] audit: type=1400 audit(510.460:208): avc: denied { ioctl } for pid=3875 comm="syz.1.179" path="socket:[5436]" dev="sockfs" ino=5436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 513.119143][ T30] audit: type=1400 audit(512.520:209): avc: denied { read } for pid=3888 comm="syz.1.180" name="uinput" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 513.126515][ T30] audit: type=1400 audit(512.520:210): avc: denied { open } for pid=3888 comm="syz.1.180" path="/dev/uinput" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 516.928662][ T3909] batadv_slave_1: entered promiscuous mode [ 516.957378][ T3909] batadv_slave_1: left promiscuous mode [ 517.717804][ T30] audit: type=1400 audit(517.120:211): avc: denied { create } for pid=3913 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.734538][ T30] audit: type=1400 audit(517.140:212): avc: denied { bind } for pid=3913 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.741670][ T30] audit: type=1400 audit(517.140:213): avc: denied { setopt } for pid=3913 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.774656][ T30] audit: type=1400 audit(517.150:214): avc: denied { accept } for pid=3913 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.776291][ T30] audit: type=1400 audit(517.150:215): avc: denied { read } for pid=3913 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 518.298826][ T30] audit: type=1400 audit(517.700:216): avc: denied { write } for pid=3913 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 519.012566][ T30] audit: type=1400 audit(518.410:217): avc: denied { ioctl } for pid=3921 comm="syz.1.190" path="/dev/input/event0" dev="devtmpfs" ino=747 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 519.297603][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 519.924911][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 519.997404][ T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 519.998811][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.999270][ T9] usb 1-1: config 0 has no interface number 0 [ 520.752774][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 520.753351][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.753740][ T9] usb 1-1: Product: syz [ 520.754023][ T9] usb 1-1: Manufacturer: syz [ 520.754316][ T9] usb 1-1: SerialNumber: syz [ 520.903929][ T9] usb 1-1: config 0 descriptor?? [ 522.115713][ T9] usb 1-1: USB disconnect, device number 2 [ 525.089149][ T30] audit: type=1400 audit(524.490:218): avc: denied { set_context_mgr } for pid=3932 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 525.103908][ T30] audit: type=1400 audit(524.510:219): avc: denied { write } for pid=3932 comm="syz.0.195" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 525.119499][ T3933] binder: 3932:3933 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 525.620442][ T30] audit: type=1326 audit(525.020:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 525.627462][ T30] audit: type=1326 audit(525.030:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 525.637429][ T30] audit: type=1326 audit(525.030:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 525.639255][ T30] audit: type=1326 audit(525.030:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 525.647090][ T30] audit: type=1326 audit(525.050:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 525.654252][ T30] audit: type=1326 audit(525.050:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 525.662331][ T30] audit: type=1326 audit(525.060:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 525.663363][ T30] audit: type=1326 audit(525.060:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.197" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x7ffc0000 [ 529.638137][ T3952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 530.378814][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 530.378946][ T30] audit: type=1400 audit(529.760:249): avc: granted { setsecparam } for pid=3954 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 530.705516][ T30] audit: type=1400 audit(530.110:250): avc: denied { bind } for pid=3956 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.717660][ T30] audit: type=1400 audit(530.120:251): avc: denied { append } for pid=3079 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.812454][ T30] audit: type=1400 audit(530.130:252): avc: denied { open } for pid=3079 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.814005][ T30] audit: type=1400 audit(530.130:253): avc: denied { getattr } for pid=3079 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 537.986036][ T3975] binder: 3974:3975 ioctl 400c620e 20000040 returned -22 [ 538.510085][ T3977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 542.573956][ T30] audit: type=1400 audit(541.980:254): avc: denied { map } for pid=3989 comm="syz.0.215" path="socket:[5013]" dev="sockfs" ino=5013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 542.577188][ T30] audit: type=1400 audit(541.980:255): avc: denied { read write } for pid=3989 comm="syz.0.215" path="socket:[5013]" dev="sockfs" ino=5013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 542.943991][ T30] audit: type=1400 audit(542.310:256): avc: denied { ioctl } for pid=3991 comm="syz.1.216" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5572 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 543.287344][ T30] audit: type=1400 audit(542.690:257): avc: denied { execute } for pid=3995 comm="syz.1.218" path="/102/cpuacct.usage_all" dev="tmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 544.116477][ T30] audit: type=1400 audit(543.520:258): avc: denied { write } for pid=3997 comm="syz.1.220" name="igmp" dev="proc" ino=4026532738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 545.262881][ T30] audit: type=1400 audit(544.650:259): avc: denied { setcheckreqprot } for pid=4005 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 549.251310][ T30] audit: type=1400 audit(548.650:260): avc: denied { checkpoint_restore } for pid=4025 comm="syz.0.229" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 549.339332][ T30] audit: type=1400 audit(548.730:261): avc: denied { mount } for pid=4025 comm="syz.0.229" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 549.597420][ T30] audit: type=1400 audit(549.000:262): avc: denied { read } for pid=4028 comm="syz.1.230" name="rtc0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 549.599666][ T30] audit: type=1400 audit(549.000:263): avc: denied { open } for pid=4028 comm="syz.1.230" path="/dev/rtc0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 549.656446][ T30] audit: type=1400 audit(549.060:264): avc: denied { ioctl } for pid=4028 comm="syz.1.230" path="/dev/rtc0" dev="devtmpfs" ino=707 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 577.897317][ T4059] binder: 4058:4059 ioctl c018620c 20000040 returned -1 [ 579.166866][ T4061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.236102][ T4061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.935149][ T4067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.025344][ T30] audit: type=1400 audit(583.420:265): avc: denied { read } for pid=4074 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 584.755830][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 586.361905][ T30] audit: type=1400 audit(585.580:266): avc: denied { map } for pid=4083 comm="syz.0.250" path="socket:[5652]" dev="sockfs" ino=5652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 587.082863][ T30] audit: type=1326 audit(586.470:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.1.254" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 587.088434][ T30] audit: type=1326 audit(586.490:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.1.254" exe="/syz-executor" sig=0 arch=c00000b7 syscall=231 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 587.109935][ T30] audit: type=1326 audit(586.510:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.1.254" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 588.680320][ T4099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.704946][ T4099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.943408][ T30] audit: type=1326 audit(620.290:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 620.984895][ T30] audit: type=1326 audit(620.300:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c00000b7 syscall=440 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 620.986540][ T30] audit: type=1326 audit(620.300:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 620.987705][ T30] audit: type=1326 audit(620.310:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b4a2a8 code=0x7ffc0000 [ 621.672450][ T4127] netlink: 'syz.1.267': attribute type 5 has an invalid length. [ 629.514257][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 629.555118][ T4139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 667.977899][ T30] audit: type=1400 audit(667.370:274): avc: denied { bind } for pid=4169 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 668.055815][ T30] audit: type=1400 audit(667.460:275): avc: denied { setopt } for pid=4169 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 668.733444][ T30] audit: type=1326 audit(668.120:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.0.283" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9554a2a8 code=0x0 [ 674.256498][ T30] audit: type=1400 audit(673.660:277): avc: denied { nlmsg_write } for pid=4193 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 676.423199][ T30] audit: type=1400 audit(675.820:278): avc: denied { create } for pid=4197 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 676.477846][ T30] audit: type=1400 audit(675.870:279): avc: denied { ioctl } for pid=4197 comm="syz.0.293" path="socket:[6407]" dev="sockfs" ino=6407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 676.528270][ T30] audit: type=1400 audit(675.890:280): avc: denied { connect } for pid=4197 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 676.656929][ T30] audit: type=1400 audit(676.050:281): avc: denied { write } for pid=4197 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 682.524905][ T4205] nbd: socks must be embedded in a SOCK_ITEM attr [ 695.842330][ T30] audit: type=1400 audit(695.190:282): avc: denied { write } for pid=4223 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 695.843370][ T30] audit: type=1400 audit(695.190:283): avc: denied { nlmsg_write } for pid=4223 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 698.439739][ T30] audit: type=1400 audit(697.840:284): avc: denied { mounton } for pid=4231 comm="syz.1.304" path="/147/file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 701.775292][ T4246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.779330][ T4246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.959523][ T30] audit: type=1400 audit(701.360:285): avc: denied { create } for pid=4251 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 701.970530][ T30] audit: type=1400 audit(701.370:286): avc: denied { bind } for pid=4251 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 701.989709][ T30] audit: type=1400 audit(701.390:287): avc: denied { connect } for pid=4251 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 705.925729][ T30] audit: type=1400 audit(705.180:288): avc: denied { create } for pid=4253 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 708.570097][ T4264] nbd: couldn't find a device at index 0 [ 722.762199][ T4300] nbd: socks must be embedded in a SOCK_ITEM attr [ 781.979615][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 783.044051][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 783.064584][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 783.065921][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 783.067344][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 783.068379][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.069677][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 783.072534][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.571353][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 783.572549][ T9] usbtmc 1-1:16.0: can't read capabilities [ 783.843996][ T3353] usb 1-1: USB disconnect, device number 3 [ 800.770139][ T4407] xt_hashlimit: size too large, truncated to 1048576 [ 809.376136][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 836.572080][ T30] audit: type=1400 audit(835.970:289): avc: denied { write } for pid=4468 comm="syz.0.382" name="uinput" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 836.690488][ T4469] input: syz0 as /devices/virtual/input/input1 [ 841.084103][ T4472] input: syz0 as /devices/virtual/input/input2 [ 850.465637][ T30] audit: type=1400 audit(849.860:290): avc: denied { write } for pid=4481 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 875.246413][ T4478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.286291][ T4478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.828799][ T4478] hsr_slave_0: entered promiscuous mode [ 903.874899][ T4478] hsr_slave_1: entered promiscuous mode [ 903.923738][ T4478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.924947][ T4478] Cannot create hsr debugfs directory [ 905.279698][ T30] audit: type=1400 audit(904.670:291): avc: denied { read } for pid=3124 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 907.665669][ T4543] input: syz0 as /devices/virtual/input/input3 [ 909.944552][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.104928][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.167579][ T55] bond0 (unregistering): Released all slaves [ 910.825040][ T55] hsr_slave_0: left promiscuous mode [ 910.895711][ T55] hsr_slave_1: left promiscuous mode [ 920.755301][ T4566] fuse: Bad value for 'fd' [ 921.644520][ T3411] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 921.953291][ T3411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.954563][ T3411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.955482][ T3411] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 921.956480][ T3411] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 921.957194][ T3411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.024643][ T3411] usb 1-1: config 0 descriptor?? [ 922.624570][ T3411] hid-generic 0003:047F:FFFF.0001: unknown main item tag 0xd [ 922.626082][ T3411] hid-generic 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 922.626931][ T3411] hid-generic 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 922.627411][ T3411] hid-generic 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 922.627927][ T3411] hid-generic 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 922.628442][ T3411] hid-generic 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 922.727269][ T3411] hid-generic 0003:047F:FFFF.0001: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 924.008755][ T30] audit: type=1400 audit(923.410:292): avc: denied { create } for pid=4478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 924.034092][ T30] audit: type=1400 audit(923.420:293): avc: denied { write } for pid=4478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 924.035195][ T4478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 924.035421][ T30] audit: type=1400 audit(923.420:294): avc: denied { read } for pid=4478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 924.085290][ T4478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 924.134793][ T4478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 924.243576][ T4478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 927.617310][ T4478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.096297][ T3411] usb 1-1: USB disconnect, device number 4 [ 949.385886][ T4647] fuse: Bad value for 'fd' [ 949.875020][ T4478] veth0_vlan: entered promiscuous mode [ 950.137893][ T4478] veth1_vlan: entered promiscuous mode [ 950.893968][ T4478] veth0_macvtap: entered promiscuous mode [ 950.980070][ T4478] veth1_macvtap: entered promiscuous mode [ 951.384585][ T4478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.385267][ T4478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.385804][ T4478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.386369][ T4478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.901989][ T30] audit: type=1400 audit(951.300:295): avc: denied { mounton } for pid=4478 comm="syz-executor" path="/syzkaller.Cgz9vT/syz-tmp" dev="vda" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 951.965793][ T30] audit: type=1400 audit(951.370:296): avc: denied { mount } for pid=4478 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 952.162897][ T30] audit: type=1400 audit(951.530:297): avc: denied { mounton } for pid=4478 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 953.318769][ T4657] fuse: Bad value for 'fd' [ 961.263953][ T4655] input: syz0 as /devices/virtual/input/input4 [ 976.253271][ T30] audit: type=1400 audit(975.490:298): avc: denied { ioctl } for pid=4700 comm="syz.0.415" path="socket:[8427]" dev="sockfs" ino=8427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 977.802094][ T30] audit: type=1400 audit(977.190:299): avc: denied { name_bind } for pid=4712 comm="syz.2.418" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 977.813183][ T4713] netlink: 'syz.2.418': attribute type 4 has an invalid length. [ 978.907951][ T4718] netlink: 'syz.2.419': attribute type 2 has an invalid length. [ 980.268050][ T30] audit: type=1400 audit(979.670:300): avc: denied { map } for pid=4724 comm="syz.2.424" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 980.304530][ T4727] binder: 4724:4727 tried to acquire reference to desc 0, got 1 instead [ 980.309812][ T30] audit: type=1400 audit(979.710:301): avc: denied { call } for pid=4724 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 980.386764][ T4591] binder: undelivered TRANSACTION_COMPLETE [ 980.389192][ T4591] binder: undelivered TRANSACTION_COMPLETE [ 980.572462][ T3411] binder: undelivered transaction 8, process died. [ 980.575839][ T3411] binder: undelivered transaction 7, process died. [ 986.646544][ T4739] fuse: Bad value for 'fd' [ 988.598920][ T30] audit: type=1400 audit(988.000:302): avc: denied { getopt } for pid=4746 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 989.763842][ T4751] fuse: Bad value for 'fd' [ 992.374202][ T4767] fuse: Bad value for 'fd' [ 997.907583][ T4788] input: syz1 as /devices/virtual/input/input5 [ 1003.626882][ T4805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.756917][ T4805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.546137][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 1008.536654][ T4820] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 1008.538600][ T4820] netlink: 'syz.0.462': attribute type 2 has an invalid length. [ 1008.539379][ T4820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.462'. [ 1009.128569][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 1013.888522][ T4841] capability: warning: `syz.2.470' uses deprecated v2 capabilities in a way that may be insecure [ 1017.968752][ T4847] fuse: Unknown parameter 'grou00000000000000000000' [ 1026.026447][ T4865] fuse: Unknown parameter 'grou00000000000000000000' [ 1026.812173][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 1027.043161][ T30] audit: type=1400 audit(1026.430:303): avc: denied { setopt } for pid=4868 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1027.686357][ T30] audit: type=1400 audit(1027.090:304): avc: denied { ioctl } for pid=4871 comm="syz.2.482" path="socket:[7973]" dev="sockfs" ino=7973 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1030.725886][ T4878] fuse: Unknown parameter 'grou00000000000000000000' [ 1033.856975][ T4887] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 1034.884221][ T4358] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1035.226735][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1035.228145][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.229191][ T4358] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1035.285052][ T4358] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1035.286415][ T4358] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1035.287247][ T4358] usb 1-1: Manufacturer: syz [ 1035.479466][ T4358] usb 1-1: config 0 descriptor?? [ 1035.970256][ T4894] fuse: Unknown parameter 'group_i00000000000000000000' [ 1036.223896][ T4358] hid-generic 0003:056A:0045.0002: ignoring exceeding usage max [ 1036.287036][ T4358] hid-generic 0003:056A:0045.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1036.485941][ T4358] usb 1-1: USB disconnect, device number 5 [ 1037.275620][ T30] audit: type=1400 audit(1036.490:305): avc: denied { bind } for pid=4895 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1038.684465][ T4904] fuse: Unknown parameter 'group_i00000000000000000000' [ 1043.549137][ T4918] fuse: Unknown parameter 'group_i00000000000000000000' [ 1046.387031][ T4925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.389826][ T4925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.316746][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.325217][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.993229][ T4591] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1057.203668][ T4591] usb 1-1: Using ep0 maxpacket: 32 [ 1057.341991][ T4591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.343489][ T4591] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1057.344279][ T4591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.399601][ T4591] usb 1-1: config 0 descriptor?? [ 1057.694783][ T4591] usbhid 1-1:0.0: can't add hid device: -71 [ 1057.699161][ T4591] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1057.793305][ T4591] usb 1-1: USB disconnect, device number 6 [ 1059.313956][ T30] audit: type=1400 audit(1058.660:306): avc: denied { module_load } for pid=4968 comm="syz.2.522" path="/sys/power/wakeup_count" dev="sysfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1060.184535][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.193897][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.048349][ T4984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.053832][ T4984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.775193][ T4992] fuse: Bad value for 'user_id' [ 1063.776344][ T4992] fuse: Bad value for 'user_id' [ 1065.885140][ T30] audit: type=1400 audit(1065.280:307): avc: denied { write } for pid=5001 comm="syz.0.538" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1065.965080][ T5004] fuse: Bad value for 'fd' [ 1066.652637][ T5010] devpts: called with bogus options [ 1067.592728][ T5017] fuse: Bad value for 'fd' [ 1069.019318][ T5026] fuse: Bad value for 'fd' [ 1071.917032][ T5040] fuse: Bad value for 'fd' [ 1074.706940][ T5050] fuse: Bad value for 'fd' [ 1078.317805][ T5063] fuse: Bad value for 'fd' [ 1079.804201][ T30] audit: type=1400 audit(1079.030:308): avc: denied { watch watch_reads } for pid=5064 comm="syz.0.568" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1083.083786][ T4591] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1083.374374][ T4591] usb 1-1: Using ep0 maxpacket: 8 [ 1083.452713][ T4591] usb 1-1: config index 0 descriptor too short (expected 2560, got 80) [ 1083.453640][ T4591] usb 1-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 1083.454448][ T4591] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1083.455255][ T4591] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.455901][ T4591] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 1083.560256][ T4591] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1083.567253][ T4591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.568233][ T4591] usb 1-1: Product: syz [ 1083.568734][ T4591] usb 1-1: Manufacturer: syz [ 1083.569254][ T4591] usb 1-1: SerialNumber: syz [ 1083.938145][ T4591] usb 1-1: USB disconnect, device number 7 [ 1087.115875][ T30] audit: type=1400 audit(1086.520:309): avc: denied { bind } for pid=5087 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1087.117768][ T30] audit: type=1400 audit(1086.520:310): avc: denied { name_bind } for pid=5087 comm="syz.0.576" src=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1087.119299][ T30] audit: type=1400 audit(1086.520:311): avc: denied { node_bind } for pid=5087 comm="syz.0.576" src=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1087.595066][ T5093] fuse: Invalid rootmode [ 1090.774221][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.787388][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.118331][ T5103] fuse: Bad value for 'rootmode' [ 1096.414791][ T30] audit: type=1400 audit(1095.810:312): avc: denied { nlmsg_read } for pid=5117 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1096.844012][ T5121] fuse: Unknown parameter 'grou00000000000000000000' [ 1097.717216][ T4601] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1097.934373][ T4601] usb 1-1: Using ep0 maxpacket: 16 [ 1098.135998][ T4601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.257388][ T4601] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1098.258494][ T4601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.259303][ T4601] usb 1-1: Product: syz [ 1098.259952][ T4601] usb 1-1: Manufacturer: syz [ 1098.260595][ T4601] usb 1-1: SerialNumber: syz [ 1098.307150][ T4601] usb 1-1: config 0 descriptor?? [ 1109.437789][ T4601] usb 1-1: USB disconnect, device number 8 [ 1113.817451][ T5139] fuse: Unknown parameter 'grou00000000000000000000' [ 1113.884985][ T30] audit: type=1400 audit(1113.280:313): avc: denied { remove_name } for pid=3079 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.889636][ T30] audit: type=1400 audit(1113.290:314): avc: denied { rename } for pid=3079 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1114.003177][ T30] audit: type=1400 audit(1113.400:315): avc: denied { create } for pid=3079 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1115.228667][ T30] audit: type=1400 audit(1114.630:316): avc: denied { create } for pid=5146 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1115.305058][ T30] audit: type=1400 audit(1114.710:317): avc: denied { sys_admin } for pid=5146 comm="syz.2.599" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1115.853944][ T5151] fuse: Unknown parameter 'group_i00000000000000000000' [ 1120.757214][ T30] audit: type=1400 audit(1120.130:318): avc: denied { read } for pid=5154 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1126.599056][ T5166] fuse: Unknown parameter 'user_i00000000000000000000' [ 1127.294223][ T5168] fuse: Unknown parameter 'group_i00000000000000000000' [ 1130.905981][ T4591] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1131.193308][ T4591] usb 1-1: Using ep0 maxpacket: 8 [ 1131.332177][ T4591] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1131.332752][ T4591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.426160][ T4591] usb 1-1: config 0 descriptor?? [ 1132.048603][ T5183] fuse: Unknown parameter 'user_i00000000000000000000' [ 1132.308241][ T4591] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1132.316272][ T4591] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1132.397249][ T4591] usb 1-1: USB disconnect, device number 9 [ 1132.898323][ T5186] fuse: Unknown parameter 'group_i00000000000000000000' [ 1138.540096][ T5196] x_tables: duplicate underflow at hook 1 [ 1140.248208][ T5199] fuse: Unknown parameter 'user_id00000000000000000000' [ 1140.828773][ T5201] fuse: Unknown parameter 'group_id00000000000000000000' [ 1143.585186][ T5209] fuse: Unknown parameter 'user_id00000000000000000000' [ 1143.985458][ T5211] fuse: Unknown parameter 'group_id00000000000000000000' [ 1145.648877][ T30] audit: type=1400 audit(1145.050:319): avc: denied { setopt } for pid=5214 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1149.215214][ T5222] fuse: Unknown parameter 'user_id00000000000000000000' [ 1151.580188][ T5231] fuse: Bad value for 'user_id' [ 1151.584194][ T5231] fuse: Bad value for 'user_id' [ 1152.602791][ T5235] fuse: Bad value for 'fd' [ 1154.538089][ T5244] fuse: Bad value for 'user_id' [ 1154.538961][ T5244] fuse: Bad value for 'user_id' [ 1154.655448][ T5245] fuse: Bad value for 'fd' [ 1155.439257][ T30] audit: type=1400 audit(1154.810:320): avc: denied { mount } for pid=5246 comm="syz.0.641" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1155.839402][ T30] audit: type=1400 audit(1155.240:321): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1156.357402][ T5254] fuse: Bad value for 'user_id' [ 1156.358352][ T5254] fuse: Bad value for 'user_id' [ 1157.156647][ T5259] fuse: Bad value for 'fd' [ 1158.069731][ T5265] fuse: Bad value for 'fd' [ 1158.876220][ T5271] fuse: Unknown parameter '0x0000000000000003' [ 1159.908059][ T5277] fuse: Bad value for 'fd' [ 1160.644958][ T30] audit: type=1400 audit(1160.050:322): avc: denied { read } for pid=5280 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1161.209398][ T5283] fuse: Unknown parameter '0x0000000000000003' [ 1164.126500][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.133385][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.463123][ T5297] fuse: Unknown parameter '0x0000000000000003' [ 1166.424180][ T30] audit: type=1400 audit(1165.820:323): avc: denied { read } for pid=5298 comm="syz.0.665" name="loop-control" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1166.426261][ T30] audit: type=1400 audit(1165.820:324): avc: denied { open } for pid=5298 comm="syz.0.665" path="/dev/loop-control" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1169.483124][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.487580][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.487203][ T5313] fuse: Unknown parameter '0x0000000000000003' [ 1181.737564][ T5330] fuse: Unknown parameter '0x0000000000000003' [ 1184.458087][ T5338] fuse: Unknown parameter '0x0000000000000003' [ 1185.843088][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1185.945966][ T5352] fuse: Unknown parameter 'fd0x0000000000000003' [ 1186.441624][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.443251][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1186.444160][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1186.480521][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1186.486194][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1186.487016][ T8] usb 1-1: SerialNumber: syz [ 1186.550069][ T5349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1186.802505][ T8] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1186.918025][ T8] usb 1-1: USB disconnect, device number 10 [ 1187.899431][ T5361] fuse: Invalid rootmode [ 1189.492035][ T5367] fuse: Unknown parameter 'fd0x0000000000000003' [ 1190.376761][ T5371] fuse: Bad value for 'rootmode' [ 1195.195569][ T4358] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1195.422469][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1195.423206][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.423601][ T4358] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.467937][ T4358] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1195.468519][ T4358] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1195.468954][ T4358] usb 1-1: Manufacturer: syz [ 1195.518192][ T4358] usb 1-1: config 0 descriptor?? [ 1195.570206][ T5401] fuse: Bad value for 'rootmode' [ 1196.097438][ T4358] hid-generic 0003:056A:0045.0003: ignoring exceeding usage max [ 1196.145785][ T4358] hid-generic 0003:056A:0045.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1196.713508][ T8] usb 1-1: USB disconnect, device number 11 [ 1197.506494][ T5412] fuse: Unknown parameter 'use00000000000000000000' [ 1197.866048][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.711'. [ 1197.867225][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 1198.433585][ T5420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.713'. [ 1198.814506][ T5424] fuse: Unknown parameter 'use00000000000000000000' [ 1199.913050][ T4358] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1200.044409][ T5436] fuse: Unknown parameter 'use00000000000000000000' [ 1200.345196][ T4358] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1200.345824][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.362826][ T4358] usb 1-1: config 0 descriptor?? [ 1200.407818][ T4358] cp210x 1-1:0.0: cp210x converter detected [ 1200.849428][ T4358] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1200.856350][ T4358] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1200.857380][ T4358] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1200.987525][ T4358] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1201.212977][ T4358] usb 1-1: USB disconnect, device number 12 [ 1201.497049][ T4358] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1201.507791][ T4358] cp210x 1-1:0.0: device disconnected [ 1202.134207][ T4358] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1202.433232][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.434295][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.435186][ T4358] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 1202.435857][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.534024][ T4358] usb 1-1: config 0 descriptor?? [ 1203.207050][ T4358] hid (null): invalid report_size 1278285133 [ 1203.229705][ T4358] hid-generic 0003:18D1:5030.0004: invalid report_size 1278285133 [ 1203.232814][ T4358] hid-generic 0003:18D1:5030.0004: item 0 4 1 7 parsing failed [ 1203.239497][ T4358] hid-generic 0003:18D1:5030.0004: probe with driver hid-generic failed with error -22 [ 1203.414939][ T8] usb 1-1: USB disconnect, device number 13 [ 1204.543369][ T5448] fuse: Unknown parameter 'user_i00000000000000000000' [ 1205.273310][ T30] audit: type=1400 audit(1204.660:325): avc: denied { nlmsg_tty_audit } for pid=5449 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1207.288887][ T5460] fuse: Unknown parameter 'user_i00000000000000000000' [ 1208.579825][ T30] audit: type=1400 audit(1207.980:326): avc: denied { getopt } for pid=5462 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1209.796621][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.799659][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.007279][ T5474] fuse: Unknown parameter 'user_i00000000000000000000' [ 1223.654834][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'. [ 1223.656421][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 1223.657271][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 1224.484334][ T5517] fuse: Bad value for 'fd' [ 1224.830345][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.840147][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.976400][ T30] audit: type=1400 audit(1227.380:327): avc: denied { ioctl } for pid=5513 comm="syz.0.753" path="/dev/fuse" dev="devtmpfs" ino=92 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1230.093487][ T5531] fuse: Bad value for 'fd' [ 1242.164370][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1242.543083][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1242.572497][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.573541][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.574220][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1242.575105][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1242.575829][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.647768][ T8] usb 1-1: config 0 descriptor?? [ 1243.417089][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.417860][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.418726][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.419584][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.420417][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.423626][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.424735][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.425936][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.426879][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.427800][ T8] hid-generic 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1243.524145][ T8] hid-generic 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1243.854747][ T8] usb 1-1: USB disconnect, device number 14 [ 1261.235255][ T30] audit: type=1400 audit(1260.630:328): avc: denied { read } for pid=5553 comm="syz.0.765" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1263.687457][ T30] audit: type=1400 audit(1263.090:329): avc: denied { setopt } for pid=5565 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1270.214609][ T5595] binder: 5594:5595 ioctl c0306201 0 returned -14 [ 1270.240156][ T5595] binder: 5594:5595 ioctl ae41 0 returned -22 [ 1271.344478][ T30] audit: type=1400 audit(1270.700:330): avc: denied { watch } for pid=5598 comm="syz.2.785" path="/207" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1271.345406][ T30] audit: type=1400 audit(1270.700:331): avc: denied { watch_sb watch_reads } for pid=5598 comm="syz.2.785" path="/207" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1271.824551][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 1273.327186][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1273.588262][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1273.620262][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.622223][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.623002][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1273.626731][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.679171][ T8] usb 1-1: config 0 descriptor?? [ 1273.713143][ T8] hub 1-1:0.0: USB hub found [ 1273.915504][ T8] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1274.364105][ T5617] binder: 5616:5617 ioctl 4018620d 0 returned -22 [ 1274.518322][ T8] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 1274.522306][ T8] hid-generic 0003:046D:C31C.0006: probe with driver hid-generic failed with error -22 [ 1274.586720][ T8] usb 1-1: USB disconnect, device number 15 [ 1284.470505][ T5655] fuse: Unknown parameter '0x0000000000000003' [ 1285.132573][ T5657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.138352][ T5657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.132866][ T5672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.137431][ T5672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.538030][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 1302.450397][ T30] audit: type=1400 audit(1301.850:332): avc: denied { setopt } for pid=5682 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1302.454785][ T30] audit: type=1400 audit(1301.860:333): avc: denied { bind } for pid=5682 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1302.459782][ T30] audit: type=1400 audit(1301.860:334): avc: denied { listen } for pid=5682 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1302.486611][ T30] audit: type=1400 audit(1301.890:335): avc: denied { write } for pid=5682 comm="syz.2.818" path="socket:[11053]" dev="sockfs" ino=11053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1302.999282][ T30] audit: type=1400 audit(1302.400:336): avc: denied { getopt } for pid=5694 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1304.414767][ T30] audit: type=1400 audit(1303.820:337): avc: denied { bind } for pid=5698 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1309.316767][ T5706] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1346.535741][ T30] audit: type=1400 audit(1345.540:338): avc: denied { create } for pid=5758 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1346.537477][ T30] audit: type=1400 audit(1345.550:339): avc: denied { connect } for pid=5758 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1346.538752][ T30] audit: type=1400 audit(1345.560:340): avc: denied { bind } for pid=5758 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1346.539959][ T30] audit: type=1400 audit(1345.590:341): avc: denied { write } for pid=5758 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1363.632671][ T5786] binder: 5775:5786 ioctl 4018620d 0 returned -22 [ 1363.699840][ T5786] binder: 5775:5786 ioctl c0306201 0 returned -14 [ 1363.800287][ T5786] binder: 5775:5786 ioctl c0306201 0 returned -14 [ 1363.842555][ T5786] binder: 5775:5786 ioctl c0306201 0 returned -14 [ 1374.173880][ T30] audit: type=1400 audit(1373.510:342): avc: denied { connect } for pid=5799 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1395.876195][ T30] audit: type=1400 audit(1395.270:343): avc: denied { create } for pid=5838 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1395.966615][ T30] audit: type=1400 audit(1395.370:344): avc: denied { write } for pid=5838 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1396.014060][ T5840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.869'. [ 1422.461932][ T30] audit: type=1400 audit(1421.780:345): avc: denied { read } for pid=5888 comm="syz.0.886" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1422.463962][ T30] audit: type=1400 audit(1421.790:346): avc: denied { open } for pid=5888 comm="syz.0.886" path="net:[4026532631]" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1423.608108][ T30] audit: type=1400 audit(1423.010:347): avc: denied { create } for pid=5894 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1424.524771][ T5896] Zero length message leads to an empty skb [ 1468.512347][ T30] audit: type=1400 audit(1467.900:348): avc: denied { view } for pid=5965 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1473.664877][ T30] audit: type=1400 audit(1473.070:349): avc: denied { create } for pid=5973 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1475.120538][ T30] audit: type=1400 audit(1474.520:350): avc: denied { read } for pid=5980 comm="syz.2.918" name="usbmon0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1475.180267][ T30] audit: type=1400 audit(1474.530:351): avc: denied { open } for pid=5980 comm="syz.2.918" path="/dev/usbmon0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1475.209139][ T30] audit: type=1400 audit(1474.610:352): avc: denied { ioctl } for pid=5980 comm="syz.2.918" path="/dev/usbmon0" dev="devtmpfs" ino=695 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1486.633444][ T30] audit: type=1400 audit(1486.040:353): avc: denied { read } for pid=6004 comm="syz.0.927" name="nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1486.635426][ T30] audit: type=1400 audit(1486.040:354): avc: denied { open } for pid=6004 comm="syz.0.927" path="/dev/nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1490.233737][ T30] audit: type=1400 audit(1489.610:355): avc: denied { write } for pid=6004 comm="syz.0.927" name="nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1492.296466][ T30] audit: type=1400 audit(1491.700:356): avc: denied { read write } for pid=6014 comm="syz.2.930" name="vhost-net" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1492.298960][ T30] audit: type=1400 audit(1491.700:357): avc: denied { open } for pid=6014 comm="syz.2.930" path="/dev/vhost-net" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1492.315264][ T30] audit: type=1400 audit(1491.720:358): avc: denied { ioctl } for pid=6014 comm="syz.2.930" path="/dev/vhost-net" dev="devtmpfs" ino=713 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1493.212360][ T6022] ip6gre1: entered allmulticast mode [ 1504.777545][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 1505.160052][ T6045] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.942'. [ 1505.178270][ T6045] nbd: must specify an index to disconnect [ 1523.153764][ T30] audit: type=1400 audit(1522.460:359): avc: denied { name_bind } for pid=6057 comm="syz.2.946" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1523.155703][ T30] audit: type=1400 audit(1522.490:360): avc: denied { name_connect } for pid=6057 comm="syz.2.946" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1530.589829][ T30] audit: type=1400 audit(1529.990:361): avc: denied { name_bind } for pid=6083 comm="syz.2.955" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1535.624193][ T6092] ------------[ cut here ]------------ [ 1535.626704][ T6092] UBSAN: array-index-out-of-bounds in kernel/bpf/core.c:2380:29 [ 1535.630138][ T6092] index 16 is out of range for type ' *[16]' [ 1535.636300][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.0.954 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 1535.637454][ T6092] Hardware name: linux,dummy-virt (DT) [ 1535.638577][ T6092] Call trace: [ 1535.639457][ T6092] show_stack+0x18/0x24 (C) [ 1535.642113][ T6092] dump_stack_lvl+0xdc/0xf4 [ 1535.642813][ T6092] dump_stack+0x1c/0x28 [ 1535.643364][ T6092] __ubsan_handle_out_of_bounds+0xb0/0xe8 [ 1535.644155][ T6092] bpf_prog_select_runtime+0x54c/0x578 [ 1535.644712][ T6092] bpf_prog_load+0xe34/0x1c60 [ 1535.645200][ T6092] __sys_bpf+0x1140/0x306c [ 1535.645754][ T6092] __arm64_sys_bpf+0x70/0xa4 [ 1535.646291][ T6092] invoke_syscall+0x6c/0x258 [ 1535.646891][ T6092] el0_svc_common.constprop.0+0xac/0x230 [ 1535.647500][ T6092] do_el0_svc+0x40/0x58 [ 1535.648051][ T6092] el0_svc+0x50/0x180 [ 1535.648608][ T6092] el0t_64_sync_handler+0x10c/0x138 [ 1535.649209][ T6092] el0t_64_sync+0x198/0x19c [ 1535.658339][ T6092] ---[ end trace ]--- [ 1535.665873][ T6092] ================================================================== [ 1535.667211][ T6092] BUG: KASAN: global-out-of-bounds in bpf_prog_select_runtime+0x554/0x578 [ 1535.667995][ T6092] Read of size 8 at addr ffff80008536eec0 by task syz.0.954/6092 [ 1535.668822][ T6092] [ 1535.669397][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.0.954 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 1535.670079][ T6092] Hardware name: linux,dummy-virt (DT) [ 1535.670557][ T6092] Call trace: [ 1535.671515][ T6092] show_stack+0x18/0x24 (C) [ 1535.672176][ T6092] dump_stack_lvl+0xa4/0xf4 [ 1535.672584][ T6092] print_report+0xf4/0x5a4 [ 1535.673096][ T6092] kasan_report+0xc8/0x108 [ 1535.673531][ T6092] __asan_report_load8_noabort+0x20/0x2c [ 1535.674022][ T6092] bpf_prog_select_runtime+0x554/0x578 [ 1535.674444][ T6092] bpf_prog_load+0xe34/0x1c60 [ 1535.674854][ T6092] __sys_bpf+0x1140/0x306c [ 1535.675190][ T6092] __arm64_sys_bpf+0x70/0xa4 [ 1535.675528][ T6092] invoke_syscall+0x6c/0x258 [ 1535.675865][ T6092] el0_svc_common.constprop.0+0xac/0x230 [ 1535.676261][ T6092] do_el0_svc+0x40/0x58 [ 1535.676618][ T6092] el0_svc+0x50/0x180 [ 1535.677006][ T6092] el0t_64_sync_handler+0x10c/0x138 [ 1535.677438][ T6092] el0t_64_sync+0x198/0x19c [ 1535.677943][ T6092] [ 1535.678313][ T6092] The buggy address belongs to the variable: [ 1535.678860][ T6092] interpreters+0x80/0xee0 [ 1535.679303][ T6092] [ 1535.679802][ T6092] The buggy address belongs to the virtual mapping at [ 1535.679802][ T6092] [ffff8000852a0000, ffff800086a10000) created by: [ 1535.679802][ T6092] paging_init+0x384/0x564 [ 1535.680938][ T6092] [ 1535.681360][ T6092] The buggy address belongs to the physical page: [ 1535.682331][ T6092] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4556e [ 1535.683194][ T6092] flags: 0x1ffc00000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 1535.685235][ T6092] raw: 01ffc00000002000 fffffdffc0155b88 fffffdffc0155b88 0000000000000000 [ 1535.685791][ T6092] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1535.686469][ T6092] page dumped because: kasan: bad access detected [ 1535.686984][ T6092] [ 1535.687318][ T6092] Memory state around the buggy address: [ 1535.688163][ T6092] ffff80008536ed80: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 1535.688870][ T6092] ffff80008536ee00: 00 00 00 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 1535.689443][ T6092] >ffff80008536ee80: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 03 f9 [ 1535.689994][ T6092] ^ [ 1535.690519][ T6092] ffff80008536ef00: f9 f9 f9 f9 00 00 00 00 00 00 06 f9 f9 f9 f9 f9 [ 1535.691617][ T6092] ffff80008536ef80: 00 00 02 f9 f9 f9 f9 f9 00 00 07 f9 f9 f9 f9 f9 [ 1535.692811][ T6092] ================================================================== [ 1535.699217][ T6092] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) VM DIAGNOSIS: 13:12:30 Registers: info registers vcpu 0 CPU#0 PC=ffff80008526394c X00=ffff800085263948 X01=0000000000000000 X02=0000000000000000 X03=1fffe000024cdb59 X04=0000000000003eb5 X05=1fffe000024cdcbb X06=ffff00001266e5b8 X07=000000000000009a X08=1fffe000024cdca7 X09=000000000b36497f X10=729071c03fba09a5 X11=ffff800086cdfc34 X12=0000000000000000 X13=ffff00001266e540 X14=1ffff000110ce4fe X15=1fffe000024cdca4 X16=0000000000000000 X17=54117bbeb8946831 X18=00000000b36497f0 X19=ffff800086f1b6b0 X20=ffff00001266dac0 X21=0000000000000003 X22=0000000000000028 X23=dfff800000000000 X24=ffff800086f1b680 X25=0000000000000000 X26=0000000000000004 X27=ffff800086f1b6b0 X28=dfff800000000000 X29=ffff800080006c00 X30=ffff80008041bd3c SP=ffff800080006c00 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0100000000000000:0100000000000000 Q01=0000000100000000:0000000000000000 Q02=0000000000000001:0000000000000000 Q03=00d000a800000000:0000000000000000 Q04=0000000000000000:0000000000000002 Q05=0000000000000001:0000000000000002 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffd32ac9f0:0000ffffd32ac9f0 Q17=ffffff80ffffffd0:0000ffffd32ac9c0 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800083bddfbc X00=000000000007c76b X01=ffff000069fb0e00 X02=ffff800083bddfbc X03=0000000000000003 X04=1fffe0000d3f61c6 X05=ffff80008cb87100 X06=ffff700011970e20 X07=0000000000000001 X08=ffff80008cb87103 X09=dfff800000000000 X10=ffff700011970e20 X11=1ffff00011970e20 X12=ffff700011970e21 X13=ffff000014f76540 X14=1ffff000110ce4fc X15=1fffe000029eeca4 X16=0000000000000000 X17=ffff7fffe3313000 X18=00000000ffffffff X19=ffff000069fb0e00 X20=000000000007c76b X21=0000000000000000 X22=000000000000001b X23=0000000000000004 X24=dfff800000000000 X25=ffff000069f9b2d4 X26=ffff000069f9b280 X27=1fffe0000d3f36cd X28=1fffe0000d3f369d X29=ffff80008ce97da0 X30=ffff8000804156e8 SP=ffff80008ce97da0 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000ffffd8c3f4f0:1d9979e8d6426500 Q02=0000ffff956ce000:ffffff80ffffffd8 Q03=0000ffffd8c3f580:0000ffffd8c3f580 Q04=0000ffffd8c3f580:0000ffffd8c3f538 Q05=0000ffffd8c3f550:0000ffffd8c3f580 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffd8c3f790:0000ffffd8c3f790 Q17=ffffff80ffffffd0:0000ffffd8c3f760 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000