last executing test programs: 6.921392971s ago: executing program 0 (id=91): unshare(0x8000480) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) 6.619495758s ago: executing program 0 (id=92): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x2, {0x0, 0xff}, 0xfe}, 0x18) 6.309051835s ago: executing program 0 (id=93): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x22020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc1917, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e0c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8003, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xffffffd9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x40000003, 0x3, 0x9, 0x0, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x2, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x6, 0x5, 0x0, 0x1ef, 0x1, 0x40008, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x9, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697c, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x5, 0x7ff, 0xfffffff9, 0x0, 0x1, 0x2, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x8, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x10003, 0x7f, 0x100, 0x9602, 0x0, 0x2, 0x4, 0x7, 0x2, 0x10080, 0x5, 0x3, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$vhost_vsock(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.818765773s ago: executing program 0 (id=94): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x400001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 517.637851ms ago: executing program 1 (id=99): r0 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="280000008100000001960400", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="240000000100000001"], 0x4c, 0x20004000}}], 0x1, 0x0) 388.934838ms ago: executing program 1 (id=100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 388.641918ms ago: executing program 1 (id=101): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x300, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 328.590581ms ago: executing program 0 (id=102): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '\xaa\xaa#\xd1\xb5\xd6y\xe2k0I\x1f|6\xc8\xaa\xaa\xaa'}, {0x20, '\x00'}, {0x20, '\x00g\x00\x8f\xd0|\n\xbf\xd86\xb2\xd1\x84\x7f\xfd\xf2\x9d\xa8\xc65\x81KF3-]\x91\bS,\xcb\xf8^=\xb5\x9a\xa9\xb2\xd7\x98r\xc3M*\xc92~\xfa\x8e\xd0l\xd8~R\x1b\xf1,\x822p(\xd77\xca\x16I\\y!\x03\xe0\xe3\x871bN\xec\xd2P8\xc1\xfa\b\xd5i2\xfd.}2=\x87\x19\xae\xfb\x8d\xae\xef0\x91\x1f)\x8aw\xa9\x16\x82'}], 0xa, "b5a4be350e7611b133a163b4ab1b0400000000000000000000000000000080ca925f71fcd3da0ed66c23ef689b28ee5c370a4b0eae91c3f16ee47acd81e02bbef5d3e59a0c1408636e6fd52ba9d446590747008418fd7319b2d74459b026c32ff8293eb0f59fa7b69ee06054e4b756cd85e7cf4c3af63461d53f4c9c938bcba0af249f05e185a4e8275ff49723b94e129caded69015fb912ff9cb0cf7bae0c4e8dd11dab9a2704c69e02aa5abc5229c574e4a9f532a2da381fd22d31cac62152b18f94218226342229c100ea8864598b57f9a151c13712197987660444b31f76cdb07cbe9c6d93"}, 0x17e) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 328.249691ms ago: executing program 0 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept4(r1, 0x0, 0x0, 0x80000) 198.833909ms ago: executing program 1 (id=104): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x8, 0x6000, @fd, 0x7, 0x0, 0x0, 0x5}) io_uring_enter(r0, 0x5fbe, 0x1, 0x6d, 0x0, 0x0) 148.856392ms ago: executing program 1 (id=105): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0xf1ff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x2, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x3dc], [0x3, 0x4]}}}}]}, 0x88}}, 0x20000000) 0s ago: executing program 1 (id=106): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x498, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) kernel console output (not intermixed with test programs): syzkaller login: [ 37.867993][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 37.868269][ T31] audit: type=1400 audit(37.810:58): avc: denied { read write } for pid=3090 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.871763][ T31] audit: type=1400 audit(37.810:59): avc: denied { open } for pid=3090 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:10649' (ED25519) to the list of known hosts. [ 46.352463][ T31] audit: type=1400 audit(46.280:60): avc: denied { name_bind } for pid=3093 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.294675][ T31] audit: type=1400 audit(47.240:61): avc: denied { execute } for pid=3094 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.309603][ T31] audit: type=1400 audit(47.250:62): avc: denied { execute_no_trans } for pid=3094 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.686929][ T31] audit: type=1400 audit(50.630:63): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.694237][ T31] audit: type=1400 audit(50.640:64): avc: denied { mount } for pid=3094 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.704121][ T3094] cgroup: Unknown subsys name 'net' [ 50.708503][ T31] audit: type=1400 audit(50.650:65): avc: denied { unmount } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.862008][ T3094] cgroup: Unknown subsys name 'cpuset' [ 50.867427][ T3094] cgroup: Unknown subsys name 'hugetlb' [ 50.868457][ T3094] cgroup: Unknown subsys name 'rlimit' [ 51.141380][ T31] audit: type=1400 audit(51.080:66): avc: denied { setattr } for pid=3094 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.145071][ T31] audit: type=1400 audit(51.090:67): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.146094][ T31] audit: type=1400 audit(51.090:68): avc: denied { mount } for pid=3094 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.265912][ T3096] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 51.268719][ T31] audit: type=1400 audit(51.210:69): avc: denied { relabelto } for pid=3096 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 55.604682][ T3094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.820721][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 56.821071][ T31] audit: type=1400 audit(56.760:73): avc: denied { execmem } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.885781][ T31] audit: type=1400 audit(56.830:74): avc: denied { read } for pid=3100 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.886179][ T31] audit: type=1400 audit(56.830:75): avc: denied { open } for pid=3100 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.891735][ T31] audit: type=1400 audit(56.830:76): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.908896][ T31] audit: type=1400 audit(56.850:77): avc: denied { module_request } for pid=3100 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.909131][ T31] audit: type=1400 audit(56.850:78): avc: denied { module_request } for pid=3099 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.950498][ T31] audit: type=1400 audit(56.890:79): avc: denied { sys_module } for pid=3100 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.284739][ T31] audit: type=1400 audit(57.230:80): avc: denied { ioctl } for pid=3100 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.986469][ T3099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.990873][ T3100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.994310][ T3099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.010555][ T3100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.418348][ T3099] hsr_slave_0: entered promiscuous mode [ 58.420426][ T3099] hsr_slave_1: entered promiscuous mode [ 58.475575][ T3100] hsr_slave_0: entered promiscuous mode [ 58.476516][ T3100] hsr_slave_1: entered promiscuous mode [ 58.477243][ T3100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.477427][ T3100] Cannot create hsr debugfs directory [ 58.659687][ T31] audit: type=1400 audit(58.600:81): avc: denied { create } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.661018][ T31] audit: type=1400 audit(58.600:82): avc: denied { write } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.669070][ T3099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.689320][ T3099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.696887][ T3099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.704369][ T3100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.707043][ T3099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.710476][ T3100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.726023][ T3100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.731923][ T3100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.053628][ T3100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.106558][ T3099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.592057][ T3100] veth0_vlan: entered promiscuous mode [ 60.608290][ T3099] veth0_vlan: entered promiscuous mode [ 60.616327][ T3100] veth1_vlan: entered promiscuous mode [ 60.621610][ T3099] veth1_vlan: entered promiscuous mode [ 60.657340][ T3100] veth0_macvtap: entered promiscuous mode [ 60.658663][ T3099] veth0_macvtap: entered promiscuous mode [ 60.664104][ T3099] veth1_macvtap: entered promiscuous mode [ 60.666724][ T3100] veth1_macvtap: entered promiscuous mode [ 60.701572][ T3099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.703424][ T3099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.704060][ T3099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.705383][ T3099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.740489][ T3100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.740729][ T3100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.740907][ T3100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.741032][ T3100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.855130][ T3099] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.073234][ T3779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.223345][ T3779] usb 1-1: Using ep0 maxpacket: 8 [ 62.230483][ T3779] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 62.230982][ T3779] usb 1-1: config 2 has no interface number 0 [ 62.231363][ T3779] usb 1-1: config 2 interface 31 has no altsetting 0 [ 62.244369][ T3779] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 62.245543][ T3779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.246519][ T3779] usb 1-1: Product: syz [ 62.247312][ T3779] usb 1-1: Manufacturer: syz [ 62.248078][ T3779] usb 1-1: SerialNumber: syz [ 62.265078][ T3779] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 62.289790][ C1] vcan0: j1939_tp_rxtimer: 0x85581000: rx timeout, send abort [ 62.292493][ C1] vcan0: j1939_xtp_rx_abort_one: 0x85581000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.298495][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 62.299144][ T31] audit: type=1400 audit(62.240:113): avc: denied { read } for pid=2908 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.300318][ T31] audit: type=1400 audit(62.240:114): avc: denied { search } for pid=2908 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.304757][ T31] audit: type=1400 audit(62.250:115): avc: denied { write } for pid=2908 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.304981][ T31] audit: type=1400 audit(62.250:116): avc: denied { add_name } for pid=2908 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.305111][ T31] audit: type=1400 audit(62.250:117): avc: denied { create } for pid=2908 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.305246][ T31] audit: type=1400 audit(62.250:118): avc: denied { append open } for pid=2908 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.311216][ T31] audit: type=1400 audit(62.250:119): avc: denied { getattr } for pid=2908 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.461689][ T109] usb 1-1: USB disconnect, device number 2 [ 62.841576][ T31] audit: type=1400 audit(62.780:120): avc: denied { create } for pid=3821 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.853462][ T31] audit: type=1400 audit(62.790:121): avc: denied { write } for pid=3821 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.101788][ T31] audit: type=1400 audit(63.040:122): avc: denied { create } for pid=3829 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.104750][ T3830] syzkaller1: entered promiscuous mode [ 63.105580][ T3830] syzkaller1: entered allmulticast mode [ 63.950038][ C0] vcan0: j1939_tp_rxtimer: 0x85542700: rx timeout, send abort [ 63.951245][ C0] vcan0: j1939_xtp_rx_abort_one: 0x85542700: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.475070][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 67.477869][ T31] audit: type=1400 audit(67.420:129): avc: denied { connect } for pid=3881 comm="syz.0.35" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.481010][ T31] audit: type=1400 audit(67.420:130): avc: denied { write } for pid=3881 comm="syz.0.35" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.531291][ C0] vcan0: j1939_tp_rxtimer: 0x85542900: rx timeout, send abort [ 67.533248][ C0] vcan0: j1939_xtp_rx_abort_one: 0x85542900: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 68.212774][ T31] audit: type=1400 audit(68.150:131): avc: denied { create } for pid=3890 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.218156][ T31] audit: type=1400 audit(68.160:132): avc: denied { setopt } for pid=3890 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.297492][ T31] audit: type=1400 audit(68.240:133): avc: denied { create } for pid=3893 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.312695][ T31] audit: type=1400 audit(68.250:134): avc: denied { write } for pid=3893 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.313055][ T31] audit: type=1400 audit(68.250:135): avc: denied { connect } for pid=3893 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.313235][ T31] audit: type=1400 audit(68.250:136): avc: denied { name_connect } for pid=3893 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 68.353265][ T31] audit: type=1400 audit(68.300:137): avc: denied { shutdown } for pid=3893 comm="syz.1.41" lport=35731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.410352][ T31] audit: type=1400 audit(68.350:138): avc: denied { setopt } for pid=3893 comm="syz.1.41" lport=35731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.481239][ T3895] syz.1.41 uses obsolete (PF_INET,SOCK_PACKET) [ 69.574911][ C0] vcan0: j1939_tp_rxtimer: 0x85542900: rx timeout, send abort [ 69.575714][ C0] vcan0: j1939_xtp_rx_abort_one: 0x85542900: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 70.162414][ C1] hrtimer: interrupt took 10008096 ns [ 70.942835][ T1786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.132758][ T1786] usb 1-1: Using ep0 maxpacket: 32 [ 71.184584][ T1786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.185020][ T1786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.185513][ T1786] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.185765][ T1786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.194164][ T1786] usb 1-1: config 0 descriptor?? [ 71.203776][ T1786] hub 1-1:0.0: USB hub found [ 71.406470][ T1786] hub 1-1:0.0: 1 port detected [ 72.038923][ T1049] hub 1-1:0.0: activate --> -90 [ 72.297333][ T1786] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 72.299640][ T94] usb 1-1: USB disconnect, device number 3 [ 72.300059][ T1786] usb 1-1: Failed to suspend device, error -19 [ 73.019783][ C0] vcan0: j1939_tp_rxtimer: 0x85542a00: rx timeout, send abort [ 73.024179][ C0] vcan0: j1939_xtp_rx_abort_one: 0x85542a00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.808868][ T3940] syzkaller1: entered promiscuous mode [ 74.809330][ T3940] syzkaller1: entered allmulticast mode [ 75.079712][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 75.080623][ T31] audit: type=1326 audit(75.020:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.0.47" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7fc00000 [ 75.822937][ T3955] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 75.881032][ T31] audit: type=1400 audit(75.820:146): avc: denied { perfmon } for pid=3954 comm="syz.0.57" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.125946][ T3960] process 'syz.0.59' launched './file0' with NULL argv: empty string added [ 76.128652][ T31] audit: type=1400 audit(76.070:147): avc: denied { execute } for pid=3959 comm="syz.0.59" name="file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.128947][ T31] audit: type=1400 audit(76.070:148): avc: denied { execute_no_trans } for pid=3959 comm="syz.0.59" path="/25/file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.378301][ T31] audit: type=1400 audit(76.320:149): avc: denied { getopt } for pid=3963 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.128013][ T3779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.320361][ T3779] usb 2-1: Using ep0 maxpacket: 8 [ 77.330605][ T3779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 77.359403][ T3779] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 77.360255][ T3779] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 77.360316][ T3779] usb 2-1: Product: syz [ 77.360392][ T3779] usb 2-1: Manufacturer: syz [ 77.360431][ T3779] usb 2-1: SerialNumber: syz [ 77.428230][ T3779] usb 2-1: config 0 descriptor?? [ 80.124161][ T3985] [U]  [ 80.126941][ T3985] [U] K{ [ 80.130939][ T3985] [U] T 1ŠFFˊ`GJǘGO/MC [ 80.137223][ T3985] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 80.143776][ T3985] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 80.149175][ T3985] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 80.168112][ T3985] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 80.175172][ T3985] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 80.178412][ T3985] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 80.189172][ T3985] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 80.218046][ T3985] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 80.221452][ T3985] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 80.224661][ T3985] [U] 22Ʃ۩X?0;3U [ 80.234390][ T3985] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 80.243458][ T3985] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 80.246396][ T3985] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 80.250914][ T3985] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 80.254714][ T3985] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 80.257267][ T3985] [U] EC [ 80.260510][ T3985] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 81.575999][ T3982] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 83.962662][ T109] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 84.129313][ T109] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.130176][ T109] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.132502][ T109] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.133294][ T109] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.134488][ T109] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 84.135181][ T109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.138460][ T109] usb 1-1: config 0 descriptor?? [ 84.558235][ T109] hid-generic 0003:17EF:60B5.0001: item fetching failed at offset 10/11 [ 84.560654][ T109] hid-generic 0003:17EF:60B5.0001: probe with driver hid-generic failed with error -22 [ 84.757004][ T47] usb 1-1: USB disconnect, device number 4 [ 84.836846][ T31] audit: type=1400 audit(84.780:150): avc: denied { bind } for pid=4007 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.837418][ T31] audit: type=1400 audit(84.780:151): avc: denied { node_bind } for pid=4007 comm="syz.0.70" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 85.047640][ T31] audit: type=1400 audit(84.990:152): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.424029][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.572892][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 85.586782][ T47] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 85.587066][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.587230][ T47] usb 1-1: Product: syz [ 85.587401][ T47] usb 1-1: Manufacturer: syz [ 85.587531][ T47] usb 1-1: SerialNumber: syz [ 85.594395][ T47] usb 1-1: config 0 descriptor?? [ 85.808320][ T31] audit: type=1400 audit(85.750:153): avc: denied { append } for pid=4018 comm="syz.0.74" name="i2c-1" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.831590][ T94] usb 1-1: USB disconnect, device number 5 [ 87.695844][ T31] audit: type=1400 audit(87.640:154): avc: denied { name_bind } for pid=4036 comm="syz.0.77" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.940069][ T4045] netlink: 'syz.0.80': attribute type 3 has an invalid length. [ 88.092008][ T31] audit: type=1400 audit(88.030:155): avc: denied { bind } for pid=4050 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.101076][ T31] audit: type=1400 audit(88.040:156): avc: denied { setopt } for pid=4050 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.113380][ T31] audit: type=1400 audit(88.060:157): avc: denied { create } for pid=4050 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.136778][ T4051] bond0: (slave bond_slave_0): Releasing backup interface [ 88.144884][ T4051] bond0: (slave bond_slave_1): Releasing backup interface [ 89.760095][ T31] audit: type=1400 audit(89.700:158): avc: denied { setopt } for pid=4067 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.183118][ T4078] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.363734][ T109] usb 2-1: USB disconnect, device number 2 [ 92.022513][ T1786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.172636][ T1786] usb 2-1: Using ep0 maxpacket: 16 [ 92.177593][ T1786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.177853][ T1786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.207059][ T1786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.207501][ T1786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.207590][ T1786] usb 2-1: Product: syz [ 92.207652][ T1786] usb 2-1: Manufacturer: syz [ 92.207757][ T1786] usb 2-1: SerialNumber: syz [ 92.308968][ T31] audit: type=1400 audit(92.250:159): avc: denied { ioctl } for pid=4077 comm="syz.0.94" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3428 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.444279][ T1786] usb 2-1: 0:2 : does not exist [ 92.459704][ T1786] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 92.514845][ T1786] usb 2-1: USB disconnect, device number 3 [ 92.659628][ T31] audit: type=1400 audit(92.600:160): avc: denied { setopt } for pid=4110 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.917334][ C1] vcan0: j1939_tp_rxtimer: 0x85547d00: rx timeout, send abort [ 93.417862][ C1] vcan0: j1939_tp_rxtimer: 0x85547d00: abort rx timeout. Force session deactivation [ 93.418300][ C1] vcan0: j1939_tp_rxtimer: 0x85547f00: rx timeout, send abort [ 93.918858][ C1] vcan0: j1939_tp_rxtimer: 0x85547f00: abort rx timeout. Force session deactivation [ 96.318968][ T31] audit: type=1400 audit(96.260:161): avc: denied { create } for pid=4116 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 96.660939][ T31] audit: type=1400 audit(96.600:162): avc: denied { ioctl } for pid=4132 comm="syz.1.105" path="socket:[2625]" dev="sockfs" ino=2625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.887475][ T4137] ------------[ cut here ]------------ [ 96.887925][ T4137] WARNING: CPU: 0 PID: 4137 at mm/highmem.c:622 kunmap_local_indexed+0x210/0x228 [ 96.890255][ T4137] Modules linked in: [ 96.891823][ T4137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.893035][ T4137] CPU: 0 UID: 0 PID: 4137 Comm: syz.1.106 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 96.893787][ T4137] Hardware name: ARM-Versatile Express [ 96.894352][ T4137] Call trace: [ 96.894651][ T4137] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 96.895200][ T4137] r7:00000000 r6:828227fc r5:00000000 r4:82257d54 [ 96.895590][ T4137] [<80201ac8>] (show_stack) from [<80220020>] (dump_stack_lvl+0x54/0x7c) [ 96.895999][ T4137] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 96.896222][ T4137] r5:00000000 r4:82a70d4c [ 96.896366][ T4137] [<80220048>] (dump_stack) from [<802025f8>] (panic+0x120/0x374) [ 96.896534][ T4137] [<802024d8>] (panic) from [<802619e8>] (get_taint+0x0/0x1c) [ 96.896723][ T4137] r3:8280c604 r2:00000001 r1:8223e91c r0:8224641c [ 96.896870][ T4137] r7:804c6218 [ 96.896959][ T4137] [<80261974>] (check_panic_on_warn) from [<80261b4c>] (__warn+0x80/0x188) [ 96.897160][ T4137] [<80261acc>] (__warn) from [<80261dcc>] (warn_slowpath_fmt+0x178/0x1f4) [ 96.897382][ T4137] r8:00000009 r7:82271830 r6:dffa9d1c r5:83a7b000 r4:00000000 [ 96.897556][ T4137] [<80261c58>] (warn_slowpath_fmt) from [<804c6218>] (kunmap_local_indexed+0x210/0x228) [ 96.897804][ T4137] r10:00000000 r9:deb9e734 r8:deb6a5cc r7:00a00000 r6:00000003 r5:83a7b000 [ 96.897996][ T4137] r4:ffefd000 [ 96.898089][ T4137] [<804c6008>] (kunmap_local_indexed) from [<8053fed4>] (move_pages+0xb60/0x18d4) [ 96.898327][ T4137] r7:00a00000 r6:00000000 r5:84682bec r4:84453c00 [ 96.898476][ T4137] [<8053f374>] (move_pages) from [<805c197c>] (userfaultfd_ioctl+0xff8/0x21c4) [ 96.898688][ T4137] r10:84453c00 r9:dffa9e98 r8:21000000 r7:00000001 r6:00000000 r5:20000040 [ 96.898876][ T4137] r4:8564c080 [ 96.898966][ T4137] [<805c0984>] (userfaultfd_ioctl) from [<8056b458>] (sys_ioctl+0x138/0xd84) [ 96.899210][ T4137] r10:83a7b000 r9:00000005 r8:854970c0 r7:20000040 r6:854970c1 r5:00000000 [ 96.899450][ T4137] r4:c028aa05 [ 96.899550][ T4137] [<8056b320>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 96.899803][ T4137] Exception stack(0xdffa9fa8 to 0xdffa9ff0) [ 96.900053][ T4137] 9fa0: 00000000 00000000 00000005 c028aa05 20000040 00000000 [ 96.900284][ T4137] 9fc0: 00000000 00000000 002e6300 00000036 002d0000 00000000 00006364 76b5b0bc [ 96.900479][ T4137] 9fe0: 76b5aec0 76b5aeb0 0001939c 00131f30 [ 96.900654][ T4137] r10:00000036 r9:83a7b000 r8:8020029c r7:00000036 r6:002e6300 r5:00000000 [ 96.900858][ T4137] r4:00000000 [ 96.903378][ T4137] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:53:40 Registers: info registers vcpu 0 CPU#0 R00=84440c40 R01=0000003a R02=eb38d000 R03=eb38d018 R04=82ab4106 R05=84440c40 R06=80a62928 R07=82ab4157 R08=8282a2b8 R09=00000000 R10=000003ff R11=dffa9a04 R12=00000002 R13=dffa99f8 R14=8295b2ec R15=80a62938 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=824042ec R02=00000000 R03=00000001 R04=848a0000 R05=84c26a00 R06=00000002 R07=00000000 R08=84ae36c0 R09=841b6000 R10=00000125 R11=df981f6c R12=df981f10 R13=df981f50 R14=8026b438 R15=81757df8 PSR=80010013 N--- A S svc32 s00=0201c708 s01=08000680 d00=080006800201c708 s02=86080000 s03=07800304 d01=0780030486080000 s04=08000008 s05=ffff0200 d02=ffff020008000008 s06=0003ffff s07=80030008 d03=800300080003ffff s08=00080008 s09=00088803 d04=0008880300080008 s10=04808204 s11=00098003 d05=0009800304808204 s12=0b801008 s13=08000a01 d06=08000a010b801008 s14=88080001 s15=30080002 d07=3008000288080001 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=ea04b008 s33=020c013c d16=020c013cea04b008 s34=80080000 s35=080001c0 d17=080001c080080000 s36=2408000a s37=000c0806 d18=000c08062408000a s38=08000100 s39=00000300 d19=0000030008000100 s40=02032002 s41=03240200 d20=0324020002032002 s42=00040004 s43=08000803 d21=0800080300040004 s44=00100301 s45=18030008 d22=1803000800100301 s46=ffffff02 s47=200303ff d23=200303ffffffff02 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=4f6cdf38 s53=5594aa5a d26=5594aa5a4f6cdf38 s54=a0ba4905 s55=9b6996e2 d27=9b6996e2a0ba4905 s56=13da5d07 s57=0196dab1 d28=0196dab113da5d07 s58=f40ae9f7 s59=b66bf11e d29=b66bf11ef40ae9f7 s60=257a5102 s61=b0850fa1 d30=b0850fa1257a5102 s62=97023ecb s63=c26664dd d31=c26664dd97023ecb FPSCR: 00000000